From 8bb32a42b90a51c6afb6bc98146cd5b735a62a1d Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeffemmett@gmail.com>
Date: Tue, 31 Mar 2026 20:26:45 -0700
Subject: [PATCH] Fix y-websocket v2 server startup in hardened container

Use node directly instead of npx which fails with
"Permission denied" when cap_drop: ALL is set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 813b1c8..7ccc783 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -57,7 +57,7 @@ services:
       - -c
       - |
         npm install @y/websocket-server > /dev/null 2>&1
-        npx y-websocket
+        node node_modules/@y/websocket-server/src/server.js
     environment:
       - HOST=0.0.0.0
       - PORT=1234