airano-ir
43fd2201a0
Settings fixes: - MAX_SITES_PER_USER, USER_RATE_LIMIT_PER_MIN/HR now read from DB settings table (DB > ENV > default), so dashboard/settings changes apply without restart. Sync cache refreshed on every save or delete. - /api/me reports the live DB value for max_sites_per_user. Admin improvements: - Admin users bypass per-user rate limiting entirely (role=admin or ADMIN_EMAILS). - Admin Overview now shows platform stats: registered users, new users (7d), total user sites, available tools. Plugin cleanup: - Appwrite and Directus plugins removed from the active registry (8 plugins now: WordPress, WooCommerce, WordPress Specialist, Gitea, n8n, Supabase, OpenPanel, Coolify). Plugin code is retained for future re-enabling. - Settings page plugin visibility list updated to match. Mobile onboarding: - Stepper steps on narrow viewports stack vertically with correct full border and rounded corners on each step. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
90 lines
2.8 KiB
Docker
90 lines
2.8 KiB
Docker
# ===================================
|
|
# MCP Hub — Dockerfile
|
|
# ===================================
|
|
# Multi-stage build for optimized image size
|
|
# Production-ready with security best practices
|
|
# ===================================
|
|
|
|
# Stage 0: Frontend build (Track G — Vite + React SPA → core/templates/static/dist)
|
|
FROM node:20-alpine AS frontend
|
|
WORKDIR /web
|
|
COPY web/package.json web/package-lock.json* ./
|
|
RUN npm ci --no-audit --no-fund || npm install --no-audit --no-fund
|
|
COPY web/ ./
|
|
COPY core/templates/static/logo.svg ./public/logo.svg
|
|
RUN npm run build
|
|
|
|
|
|
# Stage 1: Build stage
|
|
FROM python:3.12-alpine AS builder
|
|
|
|
# Install build dependencies
|
|
RUN apk add --no-cache \
|
|
gcc \
|
|
musl-dev \
|
|
libffi-dev \
|
|
openssl-dev
|
|
|
|
# Create build directory
|
|
WORKDIR /build
|
|
|
|
# Copy requirements and install Python dependencies
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir --user -r requirements.txt
|
|
|
|
|
|
# Stage 2: Production stage
|
|
FROM python:3.12-alpine AS production
|
|
|
|
# CRITICAL: Install wget for health checks + docker-cli for WP-CLI tools
|
|
# libmagic is required by python-magic (F.5a media upload MIME sniffing)
|
|
RUN apk add --no-cache wget curl docker-cli libmagic
|
|
|
|
# Create non-root user for security and grant Docker socket access
|
|
# Docker group (GID 999) allows access to /var/run/docker.sock
|
|
RUN addgroup -g 1001 appgroup && \
|
|
adduser -u 1001 -G appgroup -s /bin/sh -D appuser && \
|
|
addgroup -g 999 docker 2>/dev/null || true && \
|
|
adduser appuser docker 2>/dev/null || true
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy Python packages from builder
|
|
COPY --from=builder /root/.local /home/appuser/.local
|
|
|
|
# Copy application code
|
|
COPY --chown=appuser:appgroup . .
|
|
|
|
# Overlay the SPA build output (from stage 0) into the templates static dir.
|
|
# Vite already targets core/templates/static/dist when run locally; in Docker
|
|
# we build inside the frontend stage and copy the result here.
|
|
COPY --from=frontend --chown=appuser:appgroup /core/templates/static/dist /app/core/templates/static/dist
|
|
|
|
# Create data directories for API keys and logs with correct ownership
|
|
# This must be done before switching to non-root user
|
|
RUN mkdir -p /app/data /app/logs && \
|
|
chown -R appuser:appgroup /app/data /app/logs && \
|
|
chmod 755 /app/data /app/logs
|
|
|
|
# Make server.py executable
|
|
RUN chmod +x server.py
|
|
|
|
# Switch to non-root user
|
|
USER appuser
|
|
|
|
# Add local packages to PATH
|
|
ENV PATH=/home/appuser/.local/bin:$PATH
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# CRITICAL: EXPOSE port for Coolify
|
|
EXPOSE 8000
|
|
|
|
# CRITICAL: Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:8000/health || exit 1
|
|
|
|
# CRITICAL: Listen on 0.0.0.0 (not localhost!)
|
|
# Run server with streamable-http transport on port 8000
|
|
CMD ["python", "server.py", "--transport", "streamable-http", "--port", "8000", "--host", "0.0.0.0"]
|