# CloakBrowser Manager image — thin wrapper around the upstream
# cloakhq/cloakbrowser-manager image. Provides a noVNC + REST profile
# manager (Multilogin / GoLogin / AdsPower alternative) on port 8080.
#
# AUTH_TOKEN: set to enable bearer-token auth on the API and a login
# screen on the web UI. Leave unset for trusted local use only.
#
# Build:   docker build -f Dockerfile.manager -t suaveplan-cloakbrowser-manager .
ARG MANAGER_TAG=latest
FROM cloakhq/cloakbrowser-manager:${MANAGER_TAG}

# Profiles persist under /data; expose so docker-compose can mount a
# named volume.
VOLUME ["/data"]

EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
    CMD curl -fsS http://localhost:8080/api/status || exit 1