Create Dockerfile

Dockerfile

@@ -0,0 +1,79 @@
+# ==========================================
+# 阶段 1: 构建前端 WebUI
+# ==========================================
+FROM node:24 AS webui-builder
+WORKDIR /app/webui
+COPY webui/package.json webui/package-lock.json ./
+RUN npm ci
+COPY webui ./
+RUN npm run build
+
+# ==========================================
+# 阶段 2: 构建 Go 后端
+# ==========================================
+FROM golang:1.26 AS go-builder
+WORKDIR /app
+ARG TARGETOS
+ARG TARGETARCH
+ARG BUILD_VERSION
+COPY go.mod go.sum* ./
+RUN go mod download
+COPY . .
+RUN set -eux; \
+    GOOS="${TARGETOS:-$(go env GOOS)}"; \
+    GOARCH="${TARGETARCH:-$(go env GOARCH)}"; \
+    BUILD_VERSION_RESOLVED="${BUILD_VERSION:-}"; \
+    if [ -z "${BUILD_VERSION_RESOLVED}" ] && [ -f VERSION ]; then BUILD_VERSION_RESOLVED="$(cat VERSION | tr -d "[:space:]")"; fi; \
+    CGO_ENABLED=0 GOOS="${GOOS}" GOARCH="${GOARCH}" go build -ldflags="-s -w -X ds2api/internal/version.BuildVersion=${BUILD_VERSION_RESOLVED}" -o /out/ds2api ./cmd
+
+# ==========================================
+# 阶段 3: 准备 Busybox 工具
+# ==========================================
+FROM busybox:1.36.1-musl AS busybox-tools
+
+# ==========================================
+# 阶段 4: 运行时基础镜像 (HF 适配核心区)
+# ==========================================
+FROM debian:bookworm-slim AS runtime-base
+WORKDIR /app
+
+# 安装必要的 SSL 证书（连接外部 API 必需）
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=busybox-tools /bin/busybox /usr/local/bin/busybox
+
+# ---------------------------------------------------------
+# [HF 必选项] 1. 创建 UID 为 1000 的非 root 用户并赋予工作目录权限
+# ---------------------------------------------------------
+RUN useradd -m -u 1000 user \
+    && chown -R user:user /app
+
+# ---------------------------------------------------------
+# [HF 必选项] 2. 强制指定监听端口为 7860
+# ---------------------------------------------------------
+ENV DS2API_HOST_PORT=7860
+EXPOSE 7860
+
+# ==========================================
+# 阶段 5: 从源码组装并运行最终镜像
+# ==========================================
+FROM runtime-base AS final
+
+# ---------------------------------------------------------
+# [HF 必选项] 3. 切换到非 root 用户运行
+# ---------------------------------------------------------
+USER user
+
+# 复制后端二进制文件（注意 --chown 赋权）
+COPY --from=go-builder --chown=user:user /out/ds2api /usr/local/bin/ds2api
+
+# 复制配置文件模板
+COPY --from=go-builder --chown=user:user /app/config.example.json /app/config.example.json
+
+# 复制前端编译产物（管理后台静态资源）
+COPY --from=webui-builder --chown=user:user /app/static/admin /app/static/admin
+
+# 启动命令
+CMD ["/usr/local/bin/ds2api"]