sidecar network host

src/servers/api/terminal/websocket.ts

@@ -1,9 +1,9 @@
 import type { ServerWebSocket } from 'bun';
 import { existsSync, mkdirSync, statSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
+
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { getHomeDir, getGlobalSkillsDir, getGlobalToolsDir, getGlobalExtensionsDir, getUserSkillsDir, getUserToolsDir, DATA_PATH } from '@@/data-path';
+import { getHomeDir, getGlobalSkillsDir, getGlobalToolsDir, getGlobalExtensionsDir, getUserSkillsDir, getUserToolsDir, DATA_PATH, SERVER_CONFIG_DIR } from '@@/data-path';
 import { syncUserPiConfig } from '@@/api/server-settings/sync-user-pi-config';
 import { getUsers } from 'officerdb';
 
@@ -138,7 +138,7 @@ const startDockerSidecar = (port: number, homeDir: string, userId: number, usern
   }
 
   const containerHome = `/home/${username}`;
-  const googleConfigHost = join(homedir(), '.config', 'officer.dev', 'google-oauth.json');
+  const googleConfigHost = join(SERVER_CONFIG_DIR, 'google-oauth.json');
   const googleMounts: string[] = existsSync(googleConfigHost)
     ? ['-v', `${googleConfigHost}:/officer/google-oauth.json:ro`]
     : [];
@@ -152,12 +152,11 @@ const startDockerSidecar = (port: number, homeDir: string, userId: number, usern
       dockerId,
       '--restart',
       'unless-stopped',
-      '-p',
-      `127.0.0.1:${port}:${port}`,
+      '--network', 'host',
       '-e',
       `TERMINAL_PTY_PORT=${port}`,
       '-e',
-      'TERMINAL_PTY_HOST=0.0.0.0',
+      'TERMINAL_PTY_HOST=127.0.0.1',
       '-e',
       `TERMINAL_USER=${username}`,
       '-e',