docker-claude/claude/Dockerfile

FROM node:20-alpine

# Install runtime dependencies
RUN apk add --no-cache \
        git \
        curl \
        ca-certificates \
        bash \
        ttyd

# Entrypoint used by the webui service (ttyd wrapping claude)
COPY --chmod=755 webui-entrypoint.sh /usr/local/bin/webui-entrypoint.sh

# Create non-root user
RUN addgroup -g 1000 claude \
    && adduser -u 1000 -G claude -s /bin/bash -D claude

# Install Claude Code globally (runs as root for npm -g, then drops)
RUN npm install -g @anthropic-ai/claude-code

# Workspace directory owned by claude user
RUN mkdir -p /workspace && chown claude:claude /workspace

USER claude
WORKDIR /workspace

# Proxy traffic through sidecar — override at runtime if needed
ENV HTTP_PROXY=http://proxy:3128
ENV HTTPS_PROXY=http://proxy:3128
ENV ALL_PROXY=http://proxy:3128
ENV NO_PROXY=localhost,127.0.0.1

ENTRYPOINT ["claude"]
refactor(docker): migrate both images to Alpine Replace node:20-slim/ubuntu:22.04 with node:20-alpine/alpine:3.21. Switch package management from apt to apk (--no-cache, no cleanup layer). Use Alpine addgroup/adduser in claude/Dockerfile. Update proxy to use squid user (Alpine convention) and /var/cache/squid cache path. Fix proxy/Dockerfile COPY path now that context is proxy/. Move webui-entrypoint.sh into claude/ to match its build context. Fix docker-compose.yml webui context to claude/, update proxy tmpfs path. 2026-04-14 22:40:57 +02:00			`FROM node:20-alpine`
initial 2026-04-14 20:11:24 +02:00
refactor(docker): migrate both images to Alpine Replace node:20-slim/ubuntu:22.04 with node:20-alpine/alpine:3.21. Switch package management from apt to apk (--no-cache, no cleanup layer). Use Alpine addgroup/adduser in claude/Dockerfile. Update proxy to use squid user (Alpine convention) and /var/cache/squid cache path. Fix proxy/Dockerfile COPY path now that context is proxy/. Move webui-entrypoint.sh into claude/ to match its build context. Fix docker-compose.yml webui context to claude/, update proxy tmpfs path. 2026-04-14 22:40:57 +02:00			`# Install runtime dependencies`
			`RUN apk add --no-cache \`
initial 2026-04-14 20:11:24 +02:00			`git \`
			`curl \`
			`ca-certificates \`
			`bash \`
refactor(docker): migrate both images to Alpine Replace node:20-slim/ubuntu:22.04 with node:20-alpine/alpine:3.21. Switch package management from apt to apk (--no-cache, no cleanup layer). Use Alpine addgroup/adduser in claude/Dockerfile. Update proxy to use squid user (Alpine convention) and /var/cache/squid cache path. Fix proxy/Dockerfile COPY path now that context is proxy/. Move webui-entrypoint.sh into claude/ to match its build context. Fix docker-compose.yml webui context to claude/, update proxy tmpfs path. 2026-04-14 22:40:57 +02:00			`ttyd`
initial 2026-04-14 20:11:24 +02:00
feat(webui): add browser terminal interface via ttyd Adds a webui service to docker-compose that wraps Claude Code in ttyd, serving a browser-accessible terminal on port 7681. The webui reuses Dockerfile.claude (ttyd added to apt deps) with a dedicated entrypoint script that enforces WEBUI_PASSWORD before starting. Network isolation is identical to the CLI container: claude-internal only, all egress via the proxy allowlist. claude.sh gains web and web-stop commands. 2026-04-14 22:25:38 +02:00			`# Entrypoint used by the webui service (ttyd wrapping claude)`
			`COPY --chmod=755 webui-entrypoint.sh /usr/local/bin/webui-entrypoint.sh`

initial 2026-04-14 20:11:24 +02:00			`# Create non-root user`
refactor(docker): migrate both images to Alpine Replace node:20-slim/ubuntu:22.04 with node:20-alpine/alpine:3.21. Switch package management from apt to apk (--no-cache, no cleanup layer). Use Alpine addgroup/adduser in claude/Dockerfile. Update proxy to use squid user (Alpine convention) and /var/cache/squid cache path. Fix proxy/Dockerfile COPY path now that context is proxy/. Move webui-entrypoint.sh into claude/ to match its build context. Fix docker-compose.yml webui context to claude/, update proxy tmpfs path. 2026-04-14 22:40:57 +02:00			`RUN addgroup -g 1000 claude \`
			`&& adduser -u 1000 -G claude -s /bin/bash -D claude`
initial 2026-04-14 20:11:24 +02:00
			`# Install Claude Code globally (runs as root for npm -g, then drops)`
			`RUN npm install -g @anthropic-ai/claude-code`

			`# Workspace directory owned by claude user`
			`RUN mkdir -p /workspace && chown claude:claude /workspace`

			`USER claude`
			`WORKDIR /workspace`

			`# Proxy traffic through sidecar — override at runtime if needed`
			`ENV HTTP_PROXY=http://proxy:3128`
			`ENV HTTPS_PROXY=http://proxy:3128`
			`ENV ALL_PROXY=http://proxy:3128`
			`ENV NO_PROXY=localhost,127.0.0.1`

			`ENTRYPOINT ["claude"]`