fix(backend): add ffmpeg to backend image for pocket-tts voice sample generation

handlePresignVoiceSample generates voice samples on demand via pocket-tts, which requires WAV→MP3 transcoding via ffmpeg. The backend was using distroless/static (no ffmpeg) so all pocket-tts preview requests returned 500. Switch backend stage to Alpine + ffmpeg, matching the runner image.
2026-03-28 21:24:59 +05:00
1 changed files with 6 additions and 1 deletions
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -30,9 +30,14 @@ RUN --mount=type=cache,target=/root/go/pkg/mod \
      -o /out/healthcheck ./cmd/healthcheck

 # ── backend service ──────────────────────────────────────────────────────────
-FROM gcr.io/distroless/static:nonroot AS backend
+# Uses Alpine (not distroless) so ffmpeg is available for on-demand voice
+# sample generation via pocket-tts (WAV→MP3 transcoding).
+FROM alpine:3.21 AS backend
+RUN apk add --no-cache ffmpeg ca-certificates && \
+    addgroup -S appgroup && adduser -S appuser -G appgroup
 COPY --from=builder /out/healthcheck /healthcheck
 COPY --from=builder /out/backend /backend
+USER appuser
 ENTRYPOINT ["/backend"]

 # ── runner service ───────────────────────────────────────────────────────────