Upload 3 files

Dockerfile

@@ -0,0 +1,25 @@
+FROM debian:bookworm-slim
+
+WORKDIR /app
+
+RUN apt-get update && \
+    apt-get install -y wget ca-certificates curl jq gettext-base && \
+    rm -rf /var/lib/apt/lists/*
+
+# Download latest sub2api binary for Linux amd64
+RUN LATEST_URL=$(curl -s https://api.github.com/repos/Wei-Shaw/sub2api/releases/latest | \
+        jq -r '.assets[] | select(.name | test("linux.*amd64")) | .browser_download_url' | head -1) && \
+    echo "Downloading: $LATEST_URL" && \
+    wget -q "$LATEST_URL" -O sub2api && \
+    chmod +x /app/sub2api
+
+# Copy config template
+COPY config.yaml /app/config.template.yaml
+
+# Startup script: substitute env vars then launch
+RUN printf '#!/bin/bash\nenvsubst < /app/config.template.yaml > /app/config.yaml\nexec /app/sub2api\n' > /app/start.sh && \
+    chmod +x /app/start.sh
+
+EXPOSE 7860
+
+CMD ["/app/start.sh"]

README.md

@@ -1,10 +1,8 @@
----
-title: Sub2api
-emoji: 😻
-colorFrom: green
-colorTo: gray
-sdk: docker
-pinned: false
----
-
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+---
+title: Sub2API
+emoji: 🚀
+colorFrom: blue
+colorTo: indigo
+sdk: docker
+pinned: false
+---

config.yaml

@@ -0,0 +1,56 @@
+server:
+  host: "0.0.0.0"
+  port: 7860
+  mode: "release"
+
+database:
+  host: "${DATABASE_HOST}"
+  # Use Supabase PgBouncer port (6543) to reduce connection usage
+  # Direct connection port is 5432, but PgBouncer is recommended for free tier
+  port: 6543
+  user: "${DATABASE_USER}"
+  password: "${DATABASE_PASSWORD}"
+  dbname: "${DATABASE_NAME}"
+  sslmode: "require"
+  # PgBouncer transaction mode: keep pool small
+  max_open_conns: 20
+  max_idle_conns: 5
+  conn_max_lifetime_minutes: 10
+  conn_max_idle_time_minutes: 3
+
+redis:
+  host: "${REDIS_HOST}"
+  port: 6379
+  password: "${REDIS_PASSWORD}"
+  db: 0
+  enable_tls: true
+
+jwt:
+  secret: "${JWT_SECRET}"
+  expire_hour: 24
+
+totp:
+  encryption_key: "${TOTP_ENCRYPTION_KEY}"
+
+default:
+  admin_email: "${ADMIN_EMAIL}"
+  admin_password: "${ADMIN_PASSWORD}"
+  user_concurrency: 5
+  user_balance: 0
+  api_key_prefix: "sk-"
+  rate_multiplier: 1.0
+
+log:
+  level: "info"
+  format: "console"
+  output:
+    to_stdout: true
+    to_file: false
+
+run_mode: "standard"
+
+security:
+  url_allowlist:
+    enabled: false
+    allow_insecure_http: false
+    allow_private_hosts: false