From 121ad4e9f05619488681f14d11376528d51a33b3 Mon Sep 17 00:00:00 2001
From: Chris Nesbitt-Smith <chris@cns.me.uk>
Date: Fri, 23 Oct 2026 15:28:56 +0100
Subject: [PATCH] Enable OpenSSL legacy provider so Pandora (Blowfish) doesn't
 crash the server

anesidora decrypts Pandora's sync time with bf-ecb, which OpenSSL 3
disables. The throw is uncaught, so the process dies and clients get an
empty reply. Refs #451
---
 Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index a9817a654c..41bdd844f6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,6 +12,8 @@ RUN apk add --no-cache curl && \
 
 EXPOSE 5005
 
+ENV NODE_OPTIONS=--openssl-legacy-provider
+
 USER node
 
 HEALTHCHECK --interval=1m --timeout=2s \