Update Dockerfile

Dockerfile

@@ -1,6 +1,7 @@
 FROM node:22-alpine
 
-RUN apk add --no-cache sqlite
+# sqlite: 一致性备份用；rclone: 连接 Google Drive
+RUN apk add --no-cache sqlite rclone
 
 WORKDIR /app
 RUN npm install -g omniroute
@@ -11,7 +12,7 @@ ENV NODE_ENV=production
 
 EXPOSE 7860
 
-# 下载 + 反向代理服务（监听 7860）
+# ───────── 下载 + 反向代理服务（监听 7860）─────────
 RUN cat > /app/download_server.js << 'EOF'
 const http = require('http');
 const fs   = require('fs');
@@ -34,7 +35,6 @@ const server = http.createServer((req, res) => {
   const url   = new URL(req.url, `http://localhost:${PORT}`);
   const route = url.pathname;
 
-  // ── 列出可下载文件 ──
   if (route === '/list') {
     const result = {};
     for (const dir of ALLOWED_DIRS) {
@@ -50,7 +50,6 @@ const server = http.createServer((req, res) => {
     return;
   }
 
-  // ── 下载文件（无 token）──
   if (route === '/download') {
     const filename = url.searchParams.get('file') || '';
     const fullPath = safeResolvePath(filename);
@@ -70,7 +69,7 @@ const server = http.createServer((req, res) => {
     return;
   }
 
-  // ── 其余请求反向代理给 omniroute (8860) ──
+  // 其余请求反向代理给 omniroute (8860)
   const proxyReq = http.request(
     { hostname: '127.0.0.1', port: UPSTREAM_PORT, path: req.url, method: req.method, headers: req.headers },
     proxyRes => { res.writeHead(proxyRes.statusCode, proxyRes.headers); proxyRes.pipe(res); }
@@ -87,38 +86,67 @@ server.listen(PORT, '0.0.0.0', () => {
 });
 EOF
 
-# 启动脚本
+# ───────── 启动脚本 ─────────
 RUN cat > /app/entrypoint.sh << 'EOF'
 #!/bin/sh
 set -u
 
-mkdir -p /root/.omniroute /data
+mkdir -p /root/.omniroute /data /root/.config/rclone
 
-# ── 开机从 /data 恢复 ──
-if [ -f /data/omni_storage.sqlite ]; then
-  cp /data/omni_storage.sqlite /root/.omniroute/storage.sqlite && echo "✅ 恢复 storage.sqlite"
+# ── 写入 rclone 配置（来自 HF Secret: RCLONE_CONF）──
+if [ -n "${RCLONE_CONF:-}" ]; then
+  printf '%s\n' "$RCLONE_CONF" > /root/.config/rclone/rclone.conf
+  echo "✅ 已写入 rclone 配置"
 else
-  echo "⚠️  /data/omni_storage.sqlite 不存在，跳过恢复"
+  echo "⚠️ 未设置 RCLONE_CONF，Google Drive 备份将不可用"
 fi
-if [ -f /data/omni_settings.json ]; then
-  cp /data/omni_settings.json /root/.omniroute/settings.json && echo "✅ 恢复 settings.json"
+
+# ── 固定加密 key（来自 HF Secret: STORAGE_ENCRYPTION_KEY）──
+# 不固定的话，重启会生成新 key，导致恢复的旧库无法解密！
+if [ -n "${STORAGE_ENCRYPTION_KEY:-}" ]; then
+  echo "STORAGE_ENCRYPTION_KEY=$STORAGE_ENCRYPTION_KEY" > /root/.omniroute/.env
+  echo "✅ 已写入固定 STORAGE_ENCRYPTION_KEY"
 else
-  echo "⚠️  /data/omni_settings.json 不存在，跳过恢复"
+  echo "⚠️ 未设置 STORAGE_ENCRYPTION_KEY，重启后恢复的库可能解不开！"
+fi
+
+# Google Drive 备份目录：远程名 om，文件夹 om-backup
+GD_REMOTE="om:om-backup"
+
+# ── 开机：从 Google Drive 拉取备份覆盖恢复 ──
+if [ -n "${RCLONE_CONF:-}" ]; then
+  if rclone copyto "$GD_REMOTE/omni_storage.sqlite" /root/.omniroute/storage.sqlite --no-traverse 2>/dev/null; then
+    echo "✅ 从 GDrive 恢复 storage.sqlite"
+    # 恢复后清掉残留 WAL，避免脏数据覆盖
+    rm -f /root/.omniroute/storage.sqlite-wal /root/.omniroute/storage.sqlite-shm
+  else
+    echo "⚠️ GDrive 无 storage 备份，跳过恢复"
+  fi
+  if rclone copyto "$GD_REMOTE/omni_settings.json" /root/.omniroute/settings.json --no-traverse 2>/dev/null; then
+    echo "✅ 从 GDrive 恢复 settings.json"
+  else
+    echo "⚠️ GDrive 无 settings 备份，跳过恢复"
+  fi
 fi
 
-# ── 每 60 秒备份到 /data ──
+# ── 每 60 秒：一致性快照 + 覆盖上传到 Google Drive ──
 (while true; do
   sleep 60
   if [ -f /root/.omniroute/storage.sqlite ]; then
-    if sqlite3 /root/.omniroute/storage.sqlite ".backup '/data/omni_storage.sqlite.tmp'" 2>/dev/null; then
-      mv -f /data/omni_storage.sqlite.tmp /data/omni_storage.sqlite
-      echo "💾 [backup] storage.sqlite"
+    if sqlite3 /root/.omniroute/storage.sqlite ".backup '/data/omni_storage.sqlite'" 2>/dev/null; then
+      if [ -n "${RCLONE_CONF:-}" ]; then
+        rclone copyto /data/omni_storage.sqlite "$GD_REMOTE/omni_storage.sqlite" 2>/dev/null \
+          && echo "💾 [backup] storage.sqlite → GDrive(覆盖)" \
+          || echo "⚠️ [backup] GDrive 上传失败"
+      fi
     fi
   fi
   if [ -f /root/.omniroute/settings.json ]; then
-    cp /root/.omniroute/settings.json /data/omni_settings.json.tmp &&
-      mv -f /data/omni_settings.json.tmp /data/omni_settings.json &&
-      echo "💾 [backup] settings.json"
+    cp /root/.omniroute/settings.json /data/omni_settings.json
+    if [ -n "${RCLONE_CONF:-}" ]; then
+      rclone copyto /data/omni_settings.json "$GD_REMOTE/omni_settings.json" 2>/dev/null \
+        && echo "💾 [backup] settings.json → GDrive(覆盖)"
+    fi
   fi
 done) &