From d3c919385f1cc74d683dfd6e32d5c7e0508d7147 Mon Sep 17 00:00:00 2001
From: Yaojia Wang <yaojia.wang@colacoder.com>
Date: Thu, 19 Mar 2026 00:38:45 +0100
Subject: [PATCH] fix: add libnss3 and upgrade curl_cffi to fix TLS/SSL errors

curl_cffi uses BoringSSL internally and needs libnss3 on Debian.
Also upgrade curl_cffi to latest version for compatibility.
---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 59296f6..51532c5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,13 +3,14 @@ FROM python:3.12-slim AS base
 WORKDIR /app
 
 RUN apt-get update && \
-    apt-get install -y --no-install-recommends gcc g++ ca-certificates libssl-dev curl && \
+    apt-get install -y --no-install-recommends gcc g++ ca-certificates libssl-dev curl libnss3 && \
     rm -rf /var/lib/apt/lists/*
 
 COPY pyproject.toml ./
 
 RUN pip install --no-cache-dir . && \
     pip install --no-cache-dir openbb-quantitative openbb-econometrics openbb-technical && \
+    pip install --no-cache-dir --upgrade curl_cffi && \
     apt-get purge -y gcc g++ && \
     apt-get autoremove -y