FROM node:26-slim

# Install system utilities
RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    jq \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# Install OpenClaw globally
RUN npm install -g openclaw@2026.9.2

# Setup user matching Synology NAS convention (UID 1026, GID 100)
RUN useradd -u 1026 -g 100 -m -s /bin/bash openclaw || true

RUN mkdir -p /home/openclaw/.openclaw /home/openclaw/.openclaw/workspace \
    && chown -R 1026:100 /home/openclaw

ENV HOME=/home/openclaw
ENV OPENCLAW_GATEWAY_BIND=lan
WORKDIR /home/openclaw

USER 1026:100

EXPOSE 18789

CMD ["openclaw", "gateway", "run", "--port", "18789", "--bind", "lan"]