# The rendered-fetch sidecar (dfp-browser): Playwright's bundled Chromium behind a tiny
# HTTP server that the app container alone can reach. The image pins the Playwright
# release to the browser builds it ships with; both move together or not at all.
FROM mcr.microsoft.com/playwright/python:v1.49.0-noble
RUN pip install --no-cache-dir --break-system-packages playwright==1.49.0
WORKDIR /srv/browser
COPY server.py ./
USER pwuser
EXPOSE 8080
CMD ["python3", "server.py"]