update

Dockerfile

@@ -7,9 +7,6 @@ RUN apt-get update && apt-get install -y git curl cron && rm -rf /var/lib/apt/li
 # ----------  3. 跳过用户创建，使用 root 用户 ----------
 # 直接使用 root 用户运行所有服务
 
-# ---------- 4. 设置环境变量 ----------
-ENV EXPECTED_STARTUP_PASSWORD=startup_secret_123
-
 # ----------  5. 全局安装 opencode-ai ----------
 #    安装完先验证二进制是否存在，若不存在就手动解压
 RUN npm install -g opencode-ai@latest && \
@@ -27,18 +24,12 @@ RUN if [ -f package.json ]; then npm ci --only=production; fi
 # ---------- 8. 启动脚本 ----------
 RUN mkdir -p /usr/local/bin
 RUN printf '#!/bin/sh\n\
-echo "Starting FastAPI Web Server ..."\n\
-# 检查启动密码\n\
-if [ "$STARTUP_PASSWORD" != "$EXPECTED_STARTUP_PASSWORD" ]; then\n\
-    echo "Error: Invalid startup password"\n\
-    exit 1\n\
-fi\n\
-echo "Password verified, starting services..."\n\
+echo "Starting OpenCode AI Web Server ..."\n\
 # 启动 cron 服务\n\
 cron && \
 echo "Cron started successfully"\n\
-# 启动 FastAPI 服务\n\
-exec python /app/main.py\n' > /usr/local/bin/start.sh && \
+# 启动 opencode 服务\n\
+exec /usr/local/bin/opencode serve --hostname 0.0.0.0 --port 7860\n' > /usr/local/bin/start.sh && \
     chmod +x /usr/local/bin/start.sh
 
 # ---------- 9. 端口与健康检查 ----------

main.py

@@ -0,0 +1,34 @@
+from fastapi import FastAPI, HTTPException, Depends
+from fastapi.responses import JSONResponse
+import os
+
+app = FastAPI(title="OpenCode API")
+
+# 从环境变量获取预期的 token
+EXPECTED_TOKEN = os.getenv("ACCESS_TOKEN", "default_token")
+
+# Token 认证依赖
+def verify_token(access_token: str):
+    if access_token != EXPECTED_TOKEN:
+        raise HTTPException(status_code=401, detail="Invalid access token")
+    return access_token
+
+@app.get("/")
+async def root():
+    return {"message": "OpenCode API is running"}
+
+@app.get("/health")
+async def health_check():
+    return {"status": "healthy"}
+
+@app.get("/{access_token}/api/data")
+async def get_data(access_token: str = Depends(verify_token)):
+    return {"data": "This is protected data"}
+
+@app.get("/{access_token}/api/info")
+async def get_info(access_token: str = Depends(verify_token)):
+    return {"info": "Protected information", "token": access_token}
+
+@app.get("/{access_token}/")
+async def protected_root(access_token: str = Depends(verify_token)):
+    return {"message": "Welcome to protected area"}