From 51a479c61edc5c285d363222b413514be3068905 Mon Sep 17 00:00:00 2001
From: Kai Chappell <git@kschappell.com>
Date: Thu, 29 Jan 2026 22:24:02 +0000
Subject: [PATCH] fix(docker): use host nginx, fix libgdk-pixbuf package name

- Update libgdk-pixbuf2.0-0 to libgdk-pixbuf-2.0-0 for Debian Trixie
- Remove bundled nginx container in favor of host nginx
- Use host networking for cloudflared to reach host nginx
- Expose streamlit on localhost:8080 for host nginx proxy
---
 Dockerfile                |  2 +-
 deploy/docker-compose.yml | 22 ++++------------------
 2 files changed, 5 insertions(+), 19 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 965c1e5..9dbb324 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@ WORKDIR /app
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libpango-1.0-0 \
     libpangocairo-1.0-0 \
-    libgdk-pixbuf2.0-0 \
+    libgdk-pixbuf-2.0-0 \
     libffi-dev \
     shared-mime-info \
     && rm -rf /var/lib/apt/lists/*
diff --git a/deploy/docker-compose.yml b/deploy/docker-compose.yml
index 47c36bc..0800888 100644
--- a/deploy/docker-compose.yml
+++ b/deploy/docker-compose.yml
@@ -7,37 +7,23 @@ services:
     restart: unless-stopped
     environment:
       - IDLE_PAUSE_SECONDS=${IDLE_PAUSE_SECONDS:-30}  # Pause physics after 30s idle
-    expose:
-      - "8080"
+    ports:
+      - "127.0.0.1:8080:8080"
     volumes:
       - ./data:/app/data
     networks:
       - dvt-ate
 
-  nginx:
-    image: nginx:alpine
-    container_name: py-dvt-ate-nginx
-    restart: unless-stopped
-    volumes:
-      - ./nginx.conf:/etc/nginx/nginx.conf:ro
-    expose:
-      - "80"
-    depends_on:
-      - streamlit
-    networks:
-      - dvt-ate
-
   cloudflared:
     image: cloudflare/cloudflared:latest
     container_name: py-dvt-ate-tunnel
     restart: unless-stopped
+    network_mode: host
     command: tunnel run
     environment:
       - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
     depends_on:
-      - nginx
-    networks:
-      - dvt-ate
+      - streamlit
 
 networks:
   dvt-ate: