fix: Add Chrome to image and configure ChromicPDF

Dockerfile

@@ -73,9 +73,14 @@ FROM ${RUNNER_IMAGE}
 
 RUN apt-get update -y && \
   apt-get install -y libstdc++6 openssl libncurses5 locales ca-certificates \
-  curl unzip ffmpeg libasound2-dev portaudio19-dev \
+  curl unzip ffmpeg libasound2-dev portaudio19-dev fonts-liberation libatk-bridge2.0-0 libatk1.0-0 \
+  libatspi2.0-0 libcups2 libgtk-3-0 libnspr4 libnss3 libu2f-udev libxcomposite1 wget xdg-utils \
   && apt-get clean && rm -f /var/lib/apt/lists/*_*
 
+RUN curl -LO https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
+RUN apt-get install -y ./google-chrome-stable_current_amd64.deb \
+  && apt-get clean && rm -f ./google-chrome-stable_current_amd64.deb
+
 # Set the locale
 RUN sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && locale-gen
 

lib/medicode/application.ex

@@ -29,7 +29,7 @@ defmodule Medicode.Application do
         Medicode.ClassificationSupervisor,
         strategy: :one_for_one, max_restarts: 1
       },
-      ChromicPDF,
+      {ChromicPDF, chromic_pdf_opts()},
       # Start a worker by calling: Medicode.Worker.start_link(arg)
       # {Medicode.Worker, arg},
       # Start to serve requests, typically the last entry
@@ -61,4 +61,18 @@ defmodule Medicode.Application do
   defp text_embedding_spec do
     Vectors.child_spec(Medicode.TextEmbeddingServing)
   end
+
+  defp chromic_pdf_opts do
+    # NOTE: Security implications of using Chrome:
+    # https://github.com/bitcrowd/chromic_pdf/blob/2c13cd2690204e6a30d817e72a3d1ef13e8a2441/lib/chromic_pdf.ex#L71
+    #
+    # `chrome_executable` recommendation found here:
+    # https://community.fly.io/t/cant-install-chrome-chromium-via-dockerfile-or-ssh/5303/6
+    [
+      disable_scripts: true,
+      offline: true,
+      no_sandbox: true,
+      chrome_executable: "/usr/bin/google-chrome"
+    ]
+  end
 end