Deploy Docker Space with neutral runtime binary name

Dockerfile

@@ -0,0 +1,87 @@
+FROM alpine:3.21 AS fetcher
+
+RUN apk add --no-cache git
+
+WORKDIR /src
+RUN git clone --depth=1 https://github.com/Wei-Shaw/sub2api.git .
+
+FROM node:24-alpine AS frontend-builder
+
+WORKDIR /app/frontend
+RUN corepack enable && corepack prepare pnpm@latest --activate
+COPY --from=fetcher /src/frontend/package.json /src/frontend/pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
+COPY --from=fetcher /src/frontend/ ./
+RUN pnpm run build
+
+FROM golang:1.26.2-alpine AS backend-builder
+
+ARG VERSION=
+ARG COMMIT=huggingface
+ARG DATE
+ARG GOPROXY=https://proxy.golang.org,direct
+ARG GOSUMDB=sum.golang.org
+
+ENV GOPROXY=${GOPROXY}
+ENV GOSUMDB=${GOSUMDB}
+
+RUN apk add --no-cache git ca-certificates tzdata
+
+WORKDIR /app/backend
+COPY --from=fetcher /src/backend/go.mod /src/backend/go.sum ./
+RUN go mod download
+COPY --from=fetcher /src/backend/ ./
+COPY --from=frontend-builder /app/backend/internal/web/dist ./internal/web/dist
+
+RUN VERSION_VALUE="${VERSION}" && \
+    if [ -z "${VERSION_VALUE}" ]; then VERSION_VALUE="$(tr -d '\r\n' < ./cmd/server/VERSION)"; fi && \
+    DATE_VALUE="${DATE:-$(date -u +%Y-%m-%dT%H:%M:%SZ)}" && \
+    CGO_ENABLED=0 GOOS=linux go build \
+    -tags embed \
+    -ldflags="-s -w -X main.Version=${VERSION_VALUE} -X main.Commit=${COMMIT} -X main.Date=${DATE_VALUE} -X main.BuildType=release" \
+    -trimpath \
+    -o /out/server \
+    ./cmd/server
+
+FROM postgres:18-alpine AS pg-client
+
+FROM alpine:3.21
+
+RUN apk add --no-cache \
+    ca-certificates \
+    tzdata \
+    su-exec \
+    libpq \
+    zstd-libs \
+    lz4-libs \
+    krb5-libs \
+    libldap \
+    libedit \
+    && rm -rf /var/cache/apk/*
+
+COPY --from=pg-client /usr/local/bin/pg_dump /usr/local/bin/pg_dump
+COPY --from=pg-client /usr/local/bin/psql /usr/local/bin/psql
+COPY --from=pg-client /usr/local/lib/libpq.so.5* /usr/local/lib/
+
+RUN addgroup -g 1000 app && \
+    adduser -u 1000 -G app -s /bin/sh -D app
+
+WORKDIR /app
+
+COPY --from=backend-builder --chown=app:app /out/server /app/server
+COPY --from=backend-builder --chown=app:app /app/backend/resources /app/resources
+COPY --chown=app:app docker-entrypoint.sh /app/docker-entrypoint.sh
+
+RUN mkdir -p /app/data && chown app:app /app/data && chmod +x /app/docker-entrypoint.sh
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
+    CMD wget -q -T 5 -O /dev/null http://localhost:${SERVER_PORT:-8080}/health || exit 1
+
+ENV SERVER_HOST=0.0.0.0
+ENV SERVER_PORT=8080
+ENV AUTO_SETUP=true
+
+ENTRYPOINT ["/app/docker-entrypoint.sh"]
+CMD ["/app/server"]

README.md

@@ -1,10 +1,17 @@
 ---
-title: Toapi
-emoji: 🏆
-colorFrom: purple
-colorTo: blue
+title: 2api
+emoji: 🚀
+colorFrom: blue
+colorTo: indigo
 sdk: docker
+app_port: 8080
 pinned: false
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# 2api
+
+This Space builds from the upstream GitHub repository at runtime.
+
+Upstream repository:
+
+- https://github.com/Wei-Shaw/sub2api

docker-entrypoint.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+set -e
+
+# Fix data directory permissions when running as root.
+# Docker named volumes / host bind-mounts may be owned by root,
+# preventing the non-root app user from writing files.
+if [ "$(id -u)" = "0" ]; then
+    mkdir -p /app/data
+    # Use || true to avoid failure on read-only mounted files (e.g. config.yaml:ro)
+    chown -R app:app /app/data 2>/dev/null || true
+    # Re-invoke this script as the non-root user so the main process runs unprivileged.
+    exec su-exec app "$0" "$@"
+fi
+
+# Compatibility: if the first arg looks like a flag (e.g. --help),
+# prepend the default binary so it behaves like the default CMD form.
+if [ "${1#-}" != "$1" ]; then
+    set -- /app/server "$@"
+fi
+
+exec "$@"