Merge branch 'puppeteer' of git.mycard.moe:3rdeye/koishi-bootstrap into puppeteer

Dockerfile

 FROM node:18-bullseye-slim as base
 LABEL Author="Nanahira <nanahira@momobako.com>"
 
-RUN apt update && apt -y install python3 build-essential && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+RUN apt update && \
+    apt -y install python3 build-essential chromium libnss3 libfreetype6-dev libharfbuzz-bin libharfbuzz-dev ca-certificates fonts-freefont-otf fonts-freefont-ttf fonts-noto-cjk fonts-noto-cjk-extra && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /var/log/*
+RUN useradd -d /app -m -s /bin/bash koishi
+USER koishi
 WORKDIR /app
-COPY ./package*.json ./
+COPY --chown=koishi:koishi ./package*.json ./
 
 FROM base as builder
 RUN npm ci && npm cache clean --force
@@ -14,7 +18,7 @@ FROM base
 ENV NODE_ENV production
 RUN npm ci && npm cache clean --force
 COPY --from=builder /app/dist ./dist
-COPY ./docker ./docker
+COPY --chown=koishi:koishi ./docker ./docker
 
 ENTRYPOINT [ "./docker/entrypoint.sh" ]
 CMD [ "npm", "start" ]