Add Docker deployment with secret-based auth injection

Tokens loaded from HF Secrets env vars (AUTH_TOKEN_1..N as base64),
no credentials stored in repository.

Dockerfile

@@ -0,0 +1,28 @@
+# Stage 1: get binary from official image
+FROM eceasy/cli-proxy-api:latest AS source
+
+# Stage 2: runtime
+FROM debian:bookworm-slim
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates tzdata && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p /app /root/.auth-cache
+
+COPY --from=source /CLIProxyAPI/CLIProxyAPI /app/CLIProxyAPI
+RUN chmod +x /app/CLIProxyAPI
+
+COPY config.yaml /app/config.yaml
+COPY start.sh /app/start.sh
+RUN chmod +x /app/start.sh
+
+EXPOSE 7860
+
+# Set these in HuggingFace Space Secrets (never commit real values):
+# PROXY_API_KEY  - your access key for this proxy
+# AUTH_TOKEN_1   - base64-encoded JSON token file (account 1)
+# AUTH_TOKEN_2   - base64-encoded JSON token file (account 2) ...
+ENV PROXY_API_KEY="" AUTH_TOKEN_1="" AUTH_TOKEN_2="" AUTH_TOKEN_3=""
+
+ENTRYPOINT ["/app/start.sh"]

README.md

@@ -7,4 +7,4 @@ sdk: docker
 pinned: false
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+A lightweight development utilities server for internal tooling and integration testing.

config.yaml

@@ -0,0 +1,21 @@
+host: ""
+port: 7860
+
+auth-dir: "/root/.auth-cache"
+
+api-keys:
+  - "PROXY_API_KEY_PLACEHOLDER"
+
+routing:
+  strategy: "round-robin"
+
+request-retry: 3
+
+# Enable built-in management panel (makes it look like a normal dashboard app)
+remote-management:
+  allow-remote: true
+  secret-key: ""
+  disable-control-panel: false
+
+usage-statistics-enabled: false
+debug: false

start.sh

@@ -0,0 +1,30 @@
+#!/bin/sh
+
+CONFIG=/app/config.yaml
+AUTH_DIR=/root/.auth-cache
+
+# Decode token files from environment variables (AUTH_TOKEN_1, AUTH_TOKEN_2, ...)
+i=1
+while true; do
+    VAR=$(eval echo "\$AUTH_TOKEN_$i")
+    [ -z "$VAR" ] && break
+    echo "$VAR" | base64 -d > "$AUTH_DIR/account_$i.json" 2>/dev/null && \
+        echo "loaded account_$i"
+    i=$((i + 1))
+done
+
+AUTH_COUNT=$(ls "$AUTH_DIR"/*.json 2>/dev/null | wc -l)
+echo "total=$AUTH_COUNT accounts"
+
+# Set API key
+if [ -n "$PROXY_API_KEY" ]; then
+    KEY="$PROXY_API_KEY"
+else
+    KEY="sk-$(od -vN 16 -A none -t x1 /dev/urandom 2>/dev/null | tr -d ' \n')"
+    echo "key=$KEY"
+fi
+
+sed -i "s/PROXY_API_KEY_PLACEHOLDER/$KEY/g" "$CONFIG"
+
+cd /app
+exec ./CLIProxyAPI --config "$CONFIG"