fix: read-only filesystem + remove pgstore-dsn from config

Dockerfile

@@ -18,4 +18,4 @@ RUN chmod +x /app/cleanup_tokens.sh /app/entrypoint.sh
 ENV TZ=Asia/Shanghai
 EXPOSE 7860
 
-CMD ["./cli-proxy-api", "--config", "/app/config.yaml"]
+CMD ["/app/entrypoint.sh"]

config.yaml

@@ -10,4 +10,4 @@ remote-management:
   secret-key: "${MANAGEMENT_PASSWORD}"
 
 commercial-mode: true
-debug: true
+debug: false

entrypoint.sh

@@ -4,20 +4,21 @@
 #
 # Environment variables:
 #   CLEANUP_CRON_SCHEDULE  - Cron schedule for token cleanup (default: "0 */6 * * *", every 6h)
+#                            Examples:
+#                              "0 */1 * * *"  every hour
+#                              "0 */6 * * *"  every 6 hours (default)
+#                              "0 2 * * *"    daily at 2:00 AM
 #   CLEANUP_STARTUP_DELAY  - Seconds to wait after service is ready before first cleanup (default: 10)
 #
 
-echo "[entrypoint] Starting up at $(date)" >&2
+set -e
+
 echo "[entrypoint] Starting up at $(date)"
-echo "[entrypoint] User: $(id)" >&2
-echo "[entrypoint] Filesystem writable test: /etc=$(touch /etc/.test 2>&1 && echo 'writable' && rm -f /etc/.test || echo 'read-only')" >&2
-echo "[entrypoint] /tmp writable: $(touch /tmp/.test 2>&1 && echo 'yes' && rm -f /tmp/.test || echo 'no')" >&2
 
 CLEANUP_CRON_SCHEDULE="${CLEANUP_CRON_SCHEDULE:-0 */6 * * *}"
 CLEANUP_STARTUP_DELAY="${CLEANUP_STARTUP_DELAY:-10}"
 
 mkdir -p /tmp/logs /tmp/crontabs
-echo "[entrypoint] Created /tmp/logs and /tmp/crontabs" >&2
 
 # Write crontab to /tmp (HuggingFace root filesystem is read-only)
 cat > /tmp/crontabs/root << EOF
@@ -26,18 +27,13 @@ ${CLEANUP_CRON_SCHEDULE} /app/cleanup_tokens.sh >> /tmp/logs/cleanup.log 2>&1
 EOF
 
 echo "[entrypoint] Cleanup schedule: ${CLEANUP_CRON_SCHEDULE}"
-echo "[entrypoint] Cleanup schedule written to /tmp/crontabs/root" >&2
 
 # Start crond (busybox) with custom crontab directory
-if crond -c /tmp/crontabs -l 8 -L /tmp/logs/crond.log 2>/tmp/logs/crond_start_err.log; then
-    echo "[entrypoint] crond started successfully" >&2
-else
-    echo "[entrypoint] WARNING: crond failed to start (exit=$?), continuing without scheduled cleanup" >&2
-    cat /tmp/logs/crond_start_err.log >&2 2>/dev/null
-fi
+crond -c /tmp/crontabs -l 8 -L /tmp/logs/crond.log
 echo "[entrypoint] crond started"
 
 # Wait for the API to be ready, then run the initial cleanup in background.
+# This runs in a subshell so it doesn't block the main service from starting.
 (
     echo "[entrypoint] Waiting for API to be ready (polling localhost:7860)..."
     MAX_WAIT=120
@@ -56,8 +52,5 @@ echo "[entrypoint] crond started"
     /app/cleanup_tokens.sh >> /tmp/logs/cleanup.log 2>&1
 ) &
 
-echo "[entrypoint] About to exec cli-proxy-api..." >&2
-echo "[entrypoint] Binary exists: $(ls -la /app/cli-proxy-api 2>&1)" >&2
-echo "[entrypoint] Config exists: $(ls -la /app/config.yaml 2>&1)" >&2
 echo "[entrypoint] Launching cli-proxy-api..."
 exec /app/cli-proxy-api --config /app/config.yaml "$@"