Update Dockerfile

Dockerfile

@@ -1 +1,69 @@
-FROM node:24-alpine# Set user to root for installationUSER root# Arguments that can be passed at build timeARG N8N_PATH=/usr/local/lib/node_modules/n8nARG BASE_PATH=/root/.n8nARG DATABASE_PATH=$BASE_PATH/databaseARG CONFIG_PATH=$BASE_PATH/configARG WORKFLOWS_PATH=$BASE_PATH/workflowsARG LOGS_PATH=$BASE_PATH/logsARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONSARG N8N_RUNNERS_ENABLED=trueARG allowVulnerableTags=trueARG N8N_HOST=$N8N_HOSTARG N8N_PORT=$N8N_PORTARG N8N_PROTOCOL=httpsARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URLARG WEBHOOK_URL=$WEBHOOK_URLARG GENERIC_TIMEZONE=$GENERIC_TIMEZONEARG TZ=$TZARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEYARG DB_TYPE=$DB_TYPEARG DB_POSTGRESDB_SCHEMA=$DB_POSTGRESDB_SCHEMAARG DB_POSTGRESDB_HOST=$DB_POSTGRESDB_HOSTARG DB_POSTGRESDB_DATABASE=$DB_POSTGRESDB_DATABASEARG DB_POSTGRESDB_PORT=$DB_POSTGRESDB_PORTARG DB_POSTGRESDB_USER=$DB_POSTGRESDB_USERARG DB_POSTGRESDB_PASSWORD=$DB_POSTGRESDB_PASSWORDARG NODE_FUNCTION_ALLOW_BUILTIN=*ARG NODE_FUNCTION_ALLOW_EXTERNAL=*# Install system dependenciesRUN apk add --no-cache \ git \ python3 \ py3-pip \ make \ g++ \ build-base \ cairo-dev \ pango-dev \ chromium \ postgresql-client \ yt-dlp# Set environment variablesENV PUPPETEER_SKIP_DOWNLOAD=trueENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser# Install n8n globallyRUN npm install -g n8n@2.14.2# Create necessary directories (<<<<< this is the line that was modified)RUN mkdir -p $BASE_PATH \ && chmod -R 777 $BASE_PATH# Set working directoryWORKDIR /data# Start n8nCMD ["n8n", "start"] 
+FROM node:24-alpine
+
+# Set user to root for installation
+USER root
+
+# Arguments that can be passed at build time
+ARG N8N_PATH=/usr/local/lib/node_modules/n8n
+ARG BASE_PATH=/root/.n8n
+ARG DATABASE_PATH=$BASE_PATH/database
+ARG CONFIG_PATH=$BASE_PATH/config
+ARG WORKFLOWS_PATH=$BASE_PATH/workflows
+ARG LOGS_PATH=$BASE_PATH/logs
+
+ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
+ARG N8N_RUNNERS_ENABLED=true
+ARG allowVulnerableTags=true
+
+ARG N8N_HOST=$N8N_HOST
+ARG N8N_PORT=$N8N_PORT
+ARG N8N_PROTOCOL=https
+ARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URL
+ARG WEBHOOK_URL=$WEBHOOK_URL
+ARG GENERIC_TIMEZONE=$GENERIC_TIMEZONE
+ARG TZ=$TZ
+ARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEY
+
+ARG DB_TYPE=$DB_TYPE
+ARG DB_POSTGRESDB_SCHEMA=$DB_POSTGRESDB_SCHEMA
+ARG DB_POSTGRESDB_HOST=$DB_POSTGRESDB_HOST
+ARG DB_POSTGRESDB_DATABASE=$DB_POSTGRESDB_DATABASE
+ARG DB_POSTGRESDB_PORT=$DB_POSTGRESDB_PORT
+ARG DB_POSTGRESDB_USER=$DB_POSTGRESDB_USER
+ARG DB_POSTGRESDB_PASSWORD=$DB_POSTGRESDB_PASSWORD
+
+ARG NODE_FUNCTION_ALLOW_BUILTIN=*
+ARG NODE_FUNCTION_ALLOW_EXTERNAL=*
+
+# Install system dependencies
+RUN apk add --no-cache \
+  git \
+  python3 \
+  py3-pip \
+  make \
+  g++ \
+  build-base \
+  cairo-dev \
+  pango-dev \
+  chromium \
+  postgresql-client \
+  yt-dlp
+
+# Set environment variables
+ENV PUPPETEER_SKIP_DOWNLOAD=true
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+
+# Install n8n globally
+RUN npm install -g n8n@2.14.2
+
+# Create necessary directories
+RUN mkdir -p "$BASE_PATH" && chmod -R 777 "$BASE_PATH"
+
+# Set working directory
+WORKDIR /data
+
+# Start n8n
+CMD ["n8n", "start"]
+```
+
+如果你愿意，我也可以顺手帮你把这个 Dockerfile 改成更规范/更安全的版本（不使用 777、避免 root 运行、把需要运行时生效的变量用 ENV/compose 传递）。你现在主要是“能 build 不报错”，还是要“生产可用更安全”？