Dockerfile.codeserver

# Dockerfile.codeserver
# Build code-server from official .deb releases
# Source: https://github.com/coder/code-server
# Releases: https://github.com/coder/code-server/releases

# syntax=docker/dockerfile:1.7
ARG BASE=debian:13

FROM ${BASE}

ARG CODESERVER_VERSION=4.123.0
ARG TARGETARCH

ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    dumb-init \
    git \
    git-lfs \
    htop \
    locales \
    lsb-release \
    nano \
    openssh-client \
    procps \
    sudo \
    vim-tiny \
    wget \
    zsh \
    && git lfs install \
    && rm -rf /var/lib/apt/lists/*

# Locale setup
RUN sed -i "s/# en_US.UTF-8/en_US.UTF-8/" /etc/locale.gen \
    && locale-gen
ENV LANG=en_US.UTF-8

# Create coder user
RUN if grep -q 1000 /etc/passwd; then \
      userdel -r "$(id -un 1000)"; \
    fi \
    && adduser --gecos '' --disabled-password coder \
    && mkdir -p /etc/sudoers.d \
    && echo "coder ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/nopasswd \
    && chmod 0440 /etc/sudoers.d/nopasswd \
    && mkdir -p /var/log/codeserver-ai \
    && chown coder:coder /var/log/codeserver-ai

# Install fixuid
RUN ARCH="$(dpkg --print-architecture)" \
    && curl -fsSL "https://github.com/boxboat/fixuid/releases/download/v0.6.0/fixuid-0.6.0-linux-$ARCH.tar.gz" \
    | tar -C /usr/local/bin -xzf - \
    && chown root:root /usr/local/bin/fixuid \
    && chmod 4755 /usr/local/bin/fixuid \
    && mkdir -p /etc/fixuid \
    && printf "user: coder\ngroup: coder\n" > /etc/fixuid/config.yml

# Download and install code-server .deb from GitHub releases
RUN DEB_ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" \
    && curl -fsSL \
      "https://github.com/coder/code-server/releases/download/v${CODESERVER_VERSION}/code-server_${CODESERVER_VERSION}_${DEB_ARCH}.deb" \
      -o /tmp/code-server.deb \
    && PACKAGE_ARCH="$(dpkg-deb -f /tmp/code-server.deb Architecture)" \
    && SYSTEM_ARCH="$(dpkg --print-architecture)" \
    && if [ "$PACKAGE_ARCH" != "$SYSTEM_ARCH" ]; then \
         echo "code-server package architecture mismatch: package=$PACKAGE_ARCH system=$SYSTEM_ARCH" >&2; \
         exit 1; \
       fi \
    && dpkg -i /tmp/code-server.deb \
    && rm /tmp/code-server.deb

# Install AWS CLI and PostgreSQL client for backup/restore
RUN apt-get update && apt-get install -y --no-install-recommends \
    groff \
    less \
    postgresql-client \
    python3-pip \
    && pip3 install --break-system-packages --root-user-action=ignore awscli \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Install Node.js LTS and OpenCode CLI for terminal usage
RUN curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \
    && apt-get install -y --no-install-recommends nodejs \
    && npm install -g opencode-ai@latest \
    && npm cache clean --force \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Inject mobile CSS into code-server HTML
COPY config/code-server/custom/mobile.css /tmp/code-server-mobile.css
RUN node - <<'NODE'
const fs = require('fs');
const path = require('path');

const css = fs.readFileSync('/tmp/code-server-mobile.css', 'utf8');
const style = `<style id="codeserver-mobile-responsive">\n${css}\n</style>`;
const files = [];

function walk(dir) {
  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
    const fullPath = path.join(dir, entry.name);
    if (entry.isDirectory()) {
      walk(fullPath);
    } else if (entry.isFile() && entry.name.endsWith('.html')) {
      files.push(fullPath);
    }
  }
}

walk('/usr/lib/code-server');

let patched = 0;
for (const file of files) {
  const html = fs.readFileSync(file, 'utf8');
  if (html.includes('</head>') && !html.includes('codeserver-mobile-responsive')) {
    fs.writeFileSync(file, html.replace('</head>', `${style}</head>`));
    patched += 1;
  }
}

if (patched === 0) {
  throw new Error('No code-server HTML files found');
}
NODE

# Copy custom scripts and config
COPY scripts/ /scripts/
RUN chmod +x /scripts/*.sh

COPY config/code-server/config.yaml /home/coder/.config/code-server/config.yaml
COPY config/code-server/settings.json /home/coder/.config/code-server/User/settings.json
COPY config/code-server/keybindings.json /home/coder/.config/code-server/User/keybindings.json

RUN mkdir -p /workspace/.memory /var/log/codeserver-ai \
    && chown -R coder:coder /home/coder/.config /workspace /var/log/codeserver-ai

EXPOSE 8443

HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
  CMD curl -f http://localhost:8443 || exit 1

USER coder
ENV USER=coder
WORKDIR /home/coder

ENTRYPOINT ["/scripts/init.sh"]