From c470ca46e45bcf22646ce28d9554c4e2b8e2a7d9 Mon Sep 17 00:00:00 2001
From: Martin Wimpress <martin@wimpress.org>
Date: Tue, 26 Aug 2025 23:25:22 +0100
Subject: [PATCH] refactor(dockerfile): switch from custom ffmpeg to
 jellyfin-ffmpeg

- Replace custom ffmpeg image with alpine base and jellyfin-ffmpeg package
- Add symlinks for ffmpeg and ffprobe to standard locations
- Set USER directive to run as nobody for improved security
---
 Containerfile | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/Containerfile b/Containerfile
index 13d8c86..a2c2a94 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,5 +1,18 @@
-FROM ghcr.io/jrottenberg/ffmpeg:7-alpine
-RUN apk add --no-cache --update bash coreutils gawk grep sed
+FROM alpine:latest
+
+RUN apk add --no-cache --update \
+    bash \
+    coreutils \
+    jellyfin-ffmpeg \
+    gawk \
+    grep \
+    sed
+
+RUN ln -sf /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/local/bin/ffmpeg && \
+    ln -sf /usr/lib/jellyfin-ffmpeg/ffprobe /usr/local/bin/ffprobe
+
 COPY --chown=nobody:nobody --chmod=755 stream-sprout /usr/bin/stream-sprout
+
 EXPOSE 1935
+USER nobody
 ENTRYPOINT [ "stream-sprout" ]