Update Dockerfile

Dockerfile

@@ -5,7 +5,7 @@ ENTRYPOINT []
 
 USER root
 
-# 2. 安装 Python3 (保活) 和 curl (下载配置)
+# 2. 安装 Python3 和 curl
 RUN (apk add --no-cache python3 curl || (apt-get update && apt-get install -y python3 curl))
 
 WORKDIR /app
@@ -13,34 +13,37 @@ WORKDIR /app
 # 3. 权限设置
 RUN mkdir -p /app/downloads && chmod 777 /app/downloads
 
-# 4. 编写全能启动脚本
+# 4. 创建隔离的 Web 目录 (关键修复)
+RUN mkdir -p /app/public && \
+    echo "SaveAny Bot is Protected & Running" > /app/public/index.html
+
+# 5. 编写启动脚本
 RUN echo '#!/bin/sh' > /app/start.sh && \
-    echo 'echo "--- 🚀 Starting SaveAny Bot Wrapper ---"' >> /app/start.sh && \
+    echo 'echo "--- 🔒 Starting Secure Wrapper ---"' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    # --- 步骤A: 强制下载配置文件 ---
-    echo 'echo "1. Downloading Config from URL..."' >> /app/start.sh && \
+    # --- 步骤A: 下载配置文件 (存放在 /app/config.toml) ---
+    echo 'echo "1. Downloading Config..."' >> /app/start.sh && \
     echo 'if [ -n "$CONFIG_URL" ]; then' >> /app/start.sh && \
-    # 使用 curl 下载并覆盖 config.toml (-L 这里的 L 是为了跟随重定向)
-    echo '  curl -L -o /app/config.toml "$CONFIG_URL"' >> /app/start.sh && \
+    echo '  curl -L -s -o /app/config.toml "$CONFIG_URL"' >> /app/start.sh && \
     echo '  if [ $? -eq 0 ]; then' >> /app/start.sh && \
-    echo '    echo "✅ Config downloaded successfully!"' >> /app/start.sh && \
-    # 打印文件前几行检查内容 (不打印全部以防泄露)
-    echo '    echo "Checking file header:"' >> /app/start.sh && \
-    echo '    head -n 5 /app/config.toml' >> /app/start.sh && \
+    echo '    echo "✅ Config downloaded."' >> /app/start.sh && \
     echo '  else' >> /app/start.sh && \
-    echo '    echo "❌ Failed to download config!"' >> /app/start.sh && \
+    echo '    echo "❌ Download failed!"' >> /app/start.sh && \
     echo '  fi' >> /app/start.sh && \
     echo 'else' >> /app/start.sh && \
-    echo '  echo "⚠️ CONFIG_URL is not set!"' >> /app/start.sh && \
+    echo '  echo "⚠️ CONFIG_URL not set."' >> /app/start.sh && \
     echo 'fi' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    # --- 步骤B: 启动保活 Web Server ---
-    echo 'echo "2. Starting Fake Web Server on 7860..."' >> /app/start.sh && \
+    # --- 步骤B: 启动 Web Server (限制在 /app/public 目录) ---
+    echo 'echo "2. Starting Isolated Web Server..."' >> /app/start.sh && \
+    # 进入 public 目录启动 web server，这样它就看不见上一级的 config.toml 了
+    echo 'cd /app/public' >> /app/start.sh && \
     echo 'nohup python3 -m http.server 7860 > /dev/null 2>&1 &' >> /app/start.sh && \
+    echo 'cd /app' >> /app/start.sh && \ # 切回 /app 准备启动 bot
     echo 'sleep 2' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
     # --- 步骤C: 启动 Bot ---
-    echo 'echo "3. Starting Bot binary..."' >> /app/start.sh && \
+    echo 'echo "3. Starting Bot..."' >> /app/start.sh && \
     echo './saveany-bot' >> /app/start.sh && \
     chmod +x /app/start.sh