Upload 3 files

Dockerfile

@@ -0,0 +1,51 @@
+# Base image
+FROM ghcr.io/yu2051/jiuguan002:latest
+
+# Switch to root user to install tools and prepare the filesystem
+USER root
+
+# 1. Install 'gettext' and 'git'.
+RUN apk add --no-cache gettext git
+
+# 2. Create the data directory.
+RUN mkdir -p /home/node/app/data
+
+# 3. Copy the configuration template and the entrypoint script.
+COPY config.template.yaml /home/node/app/config.template.yaml
+COPY entrypoint.sh /home/node/app/entrypoint.sh
+
+# --- Install the cloud-saves plugin EXACTLY as per the tutorial ---
+# a. Define the target plugins directory specified by the tutorial.
+ARG PLUGINS_DIR=/home/node/app/plugins
+
+# b. Create the plugins directory.
+RUN mkdir -p ${PLUGINS_DIR}
+
+# c. Switch the working directory to the plugins folder.
+WORKDIR ${PLUGINS_DIR}
+
+# d. Run 'git clone' from within the plugins directory.
+# This will create the 'cloud-saves' sub-directory automatically.
+RUN git clone https://github.com/fuwei99/cloud-saves
+
+# e. Switch the working directory into the newly created plugin folder.
+WORKDIR ${PLUGINS_DIR}/cloud-saves
+
+# f. Run 'npm install' to install dependencies.
+RUN npm install
+
+# g. Reset the working directory back to the application root.
+WORKDIR /home/node/app
+# --- End of plugin installation ---
+
+# 4. Set ownership for the ENTIRE application directory to the 'node' user.
+RUN chown -R node:node /home/node/app
+
+# 5. Make the entrypoint script executable.
+RUN chmod +x /home/node/app/entrypoint.sh
+
+# 6. Switch to the final, non-privileged user.
+USER node
+
+# 7. Set the entrypoint to our script.
+ENTRYPOINT ["/home/node/app/entrypoint.sh"]

config.template.yaml

@@ -0,0 +1,99 @@
+dataRoot: ./data
+listen: true
+listenAddress:
+  ipv4: 0.0.0.0
+  ipv6: '[::]'
+protocol:
+    ipv4: true
+    ipv6: false
+dnsPreferIPv6: false
+autorunHostname: "auto"
+port: 8000
+autorunPortOverride: -1
+ssl:
+  enabled: false
+  certPath: "./certs/cert.pem"
+  keyPath: "./certs/privkey.pem"
+whitelistMode: true # 模板里保持true或false不重要，脚本会强制修改
+enableForwardedWhitelist: false
+whitelist:
+  - ::1
+  - 127.0.0.1
+whitelistDockerHosts: true
+basicAuthMode: true
+basicAuthUser:
+  username: "${BASIC_AUTH_USER}" # 从 Secret 读取用户名
+  password: "${BASIC_AUTH_PASS}" # 从 Secret 读取密码
+enableCorsProxy: false
+requestProxy:
+  enabled: false
+  url: "socks5://username:password@example.com:1080"
+  bypass:
+    - localhost
+    - 127.0.0.1
+enableUserAccounts: false
+enableDiscreetLogin: false
+autheliaAuth: false
+perUserBasicAuth: false
+sessionTimeout: -1
+disableCsrfProtection: false
+securityOverride: false
+logging:
+  enableAccessLog: true
+  minLogLevel: 0
+rateLimiting:
+  preferRealIpHeader: false
+autorun: false
+avoidLocalhost: false
+backups:
+  common:
+    numberOfBackups: 50
+  chat:
+    enabled: true
+    checkIntegrity: true
+    maxTotalBackups: -1
+    throttleInterval: 10000
+thumbnails:
+  enabled: true
+  format: "jpg"
+  quality: 95
+  dimensions: { 'bg': [160, 90], 'avatar': [96, 144] }
+performance:
+  lazyLoadCharacters: false
+  memoryCacheCapacity: '100mb'
+  useDiskCache: true
+allowKeysExposure: true
+skipContentCheck: false
+whitelistImportDomains:
+  - localhost
+  - cdn.discordapp.com
+  - files.catbox.moe
+  - raw.githubusercontent.com
+requestOverrides: []
+extensions:
+  enabled: true
+  autoUpdate: false
+  models:
+    autoDownload: true
+    classification: Cohee/distilbert-base-uncased-go-emotions-onnx
+    captioning: Xenova/vit-gpt2-image-captioning
+    embedding: Cohee/jina-embeddings-v2-base-en
+    speechToText: Xenova/whisper-small
+    textToSpeech: Xenova/speecht5_tts
+enableDownloadableTokenizers: true
+promptPlaceholder: "[Start a new chat]"
+openai:
+  randomizeUserId: false
+  captionSystemPrompt: ""
+deepl:
+  formality: default
+mistral:
+  enablePrefix: false
+ollama:
+  keepAlive: -1
+  batchSize: -1
+claude:
+  enableSystemPromptCache: false
+  cachingAtDepth: -1
+enableServerPlugins: true
+enableServerPluginsAutoUpdate: false

entrypoint.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+# This script runs inside the container when it starts.
+set -e
+
+# 1. Generate the initial config.yaml from the template and environment variables (Secrets).
+envsubst < /home/node/app/config.template.yaml > /home/node/app/config.yaml
+
+# 2. Forcibly set all necessary plugin-related configurations.
+sed -i 's/^ *whitelistMode:.*$/whitelistMode: false/' /home/node/app/config.yaml
+sed -i 's/^ *enableServerPlugins:.*$/enableServerPlugins: true/' /home/node/app/config.yaml
+sed -i 's/^ *enableServerPluginsAutoUpdate:.*$/enableServerPluginsAutoUpdate: false/' /home/node/app/config.yaml
+sed -i 's/^ *extensions\.enabled:.*$/extensions.enabled: true/' /home/node/app/config.yaml
+
+# 3. Start the main application.
+exec node server.js