Update Dockerfile

Dockerfile

@@ -1,7 +1,6 @@
 # MCP-Compliant Dockerfile for Hugging Face Spaces deployment of Coral Server
 FROM gradle:8.5-jdk21 AS build
 
-# Set working directory
 WORKDIR /app
 
 # Clone the Coral Server repository
@@ -10,11 +9,11 @@ RUN git clone https://github.com/Coral-Protocol/coral-server.git .
 # Build the application
 RUN gradle build --no-daemon -x test
 
-# Create configuration files if they don't exist
+# Create configuration files
 RUN mkdir -p /coral-config && \
     if [ ! -f src/main/resources/application.yaml ]; then \
         echo "server:" > /coral-config/application.yaml && \
-        echo "  port: 7860" >> /coral-config/application.yaml && \
+        echo "  port: 5555" >> /coral-config/application.yaml && \
         echo "mcp:" >> /coral-config/application.yaml && \
         echo "  transport: sse" >> /coral-config/application.yaml; \
     else \
@@ -29,97 +28,128 @@ RUN mkdir -p /coral-config && \
 # Runtime stage
 FROM openjdk:21-jdk-slim
 
-# Install required packages including nginx for reverse proxy
+# Install required packages
 RUN apt-get update && apt-get install -y \
     curl \
     git \
     nginx \
     && rm -rf /var/lib/apt/lists/*
 
-# Set working directory
 WORKDIR /app
 
 # Copy built application from build stage
 COPY --from=build /app/build/libs/*.jar app.jar
+COPY --from=build /app/build /app/build
 COPY --from=build /coral-config /app/coral-config
-
-# Create nginx config for MCP proxying
-RUN echo 'server {' > /etc/nginx/sites-available/mcp-proxy && \
-    echo '    listen 7860;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    server_name localhost;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    # MCP SSE endpoint' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    location /sse {' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_pass http://127.0.0.1:5555;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_http_version 1.1;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Upgrade $http_upgrade;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Connection "upgrade";' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Host $host;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_cache_bypass $http_upgrade;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_buffering off;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_read_timeout 86400;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    }' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    # Proxy all MCP requests to Coral Server' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    location / {' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_pass http://127.0.0.1:5555;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_http_version 1.1;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Upgrade $http_upgrade;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Connection "upgrade";' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header Host $host;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header X-Real-IP $remote_addr;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_set_header X-Forwarded-Proto $scheme;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_cache_bypass $http_upgrade;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_buffering off;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '        proxy_read_timeout 86400;' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '    }' >> /etc/nginx/sites-available/mcp-proxy && \
-    echo '}' >> /etc/nginx/sites-available/mcp-proxy && \
-    ln -s /etc/nginx/sites-available/mcp-proxy /etc/nginx/sites-enabled/ && \
-    rm /etc/nginx/sites-enabled/default
+COPY --from=build /app/gradlew /app/gradlew
+COPY --from=build /app/gradle /app/gradle
+
+# Create user first (before modifying files)
+RUN useradd -m -u 1000 user
+
+# Configure nginx for non-root operation
+RUN mkdir -p /var/cache/nginx /var/log/nginx /var/lib/nginx /var/run && \
+    chown -R user:user /var/cache/nginx /var/log/nginx /var/lib/nginx /var/run && \
+    chmod -R 755 /var/cache/nginx /var/log/nginx /var/lib/nginx /var/run
+
+# Create nginx config that works with non-root user
+RUN echo 'daemon off;' > /etc/nginx/nginx.conf && \
+    echo 'user user;' >> /etc/nginx/nginx.conf && \
+    echo 'worker_processes 1;' >> /etc/nginx/nginx.conf && \
+    echo 'error_log /var/log/nginx/error.log warn;' >> /etc/nginx/nginx.conf && \
+    echo 'pid /var/run/nginx.pid;' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo 'events {' >> /etc/nginx/nginx.conf && \
+    echo '    worker_connections 1024;' >> /etc/nginx/nginx.conf && \
+    echo '}' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo 'http {' >> /etc/nginx/nginx.conf && \
+    echo '    include /etc/nginx/mime.types;' >> /etc/nginx/nginx.conf && \
+    echo '    default_type application/octet-stream;' >> /etc/nginx/nginx.conf && \
+    echo '    sendfile on;' >> /etc/nginx/nginx.conf && \
+    echo '    keepalive_timeout 65;' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo '    server {' >> /etc/nginx/nginx.conf && \
+    echo '        listen 7860;' >> /etc/nginx/nginx.conf && \
+    echo '        server_name _;' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo '        # Root endpoint' >> /etc/nginx/nginx.conf && \
+    echo '        location = / {' >> /etc/nginx/nginx.conf && \
+    echo '            return 200 "Coral Server is running";' >> /etc/nginx/nginx.conf && \
+    echo '            add_header Content-Type text/plain;' >> /etc/nginx/nginx.conf && \
+    echo '        }' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo '        # SSE endpoint for MCP' >> /etc/nginx/nginx.conf && \
+    echo '        location /devmode/ {' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_pass http://127.0.0.1:5555;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_http_version 1.1;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header Upgrade $http_upgrade;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header Connection "";' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header Host $host;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Real-IP $remote_addr;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Forwarded-Proto $scheme;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_buffering off;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_cache off;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_read_timeout 86400;' >> /etc/nginx/nginx.conf && \
+    echo '            chunked_transfer_encoding off;' >> /etc/nginx/nginx.conf && \
+    echo '        }' >> /etc/nginx/nginx.conf && \
+    echo '' >> /etc/nginx/nginx.conf && \
+    echo '        # General proxy for other endpoints' >> /etc/nginx/nginx.conf && \
+    echo '        location / {' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_pass http://127.0.0.1:5555;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_http_version 1.1;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header Host $host;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Real-IP $remote_addr;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> /etc/nginx/nginx.conf && \
+    echo '            proxy_set_header X-Forwarded-Proto $scheme;' >> /etc/nginx/nginx.conf && \
+    echo '        }' >> /etc/nginx/nginx.conf && \
+    echo '    }' >> /etc/nginx/nginx.conf && \
+    echo '}' >> /etc/nginx/nginx.conf
 
 # Create startup script
 RUN echo '#!/bin/bash' > /app/start.sh && \
     echo 'set -e' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    echo '# Start nginx in background' >> /app/start.sh && \
-    echo 'nginx -g "daemon off;" &' >> /app/start.sh && \
-    echo 'NGINX_PID=$!' >> /app/start.sh && \
+    echo 'echo "Starting Coral Server on port 5555..."' >> /app/start.sh && \
+    echo 'cd /app' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    echo '# Start Coral Server on port 5555' >> /app/start.sh && \
-    echo 'java -Xmx1g -Xms512m -jar app.jar --sse-server 5555 &' >> /app/start.sh && \
+    echo '# Start Coral Server with Gradle (using SSE Ktor server)' >> /app/start.sh && \
+    echo './gradlew run --args="--sse-server-ktor 5555" &' >> /app/start.sh && \
     echo 'CORAL_PID=$!' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    echo '# Wait for either process to exit' >> /app/start.sh && \
-    echo 'wait -n $NGINX_PID $CORAL_PID' >> /app/start.sh && \
+    echo '# Wait for Coral Server to start' >> /app/start.sh && \
+    echo 'sleep 10' >> /app/start.sh && \
+    echo '' >> /app/start.sh && \
+    echo '# Check if Coral Server is running' >> /app/start.sh && \
+    echo 'if ! ps -p $CORAL_PID > /dev/null; then' >> /app/start.sh && \
+    echo '    echo "Coral Server failed to start"' >> /app/start.sh && \
+    echo '    exit 1' >> /app/start.sh && \
+    echo 'fi' >> /app/start.sh && \
     echo '' >> /app/start.sh && \
-    echo '# Kill both processes if one exits' >> /app/start.sh && \
-    echo 'kill $NGINX_PID $CORAL_PID 2>/dev/null || true' >> /app/start.sh && \
+    echo 'echo "Starting nginx on port 7860..."' >> /app/start.sh && \
+    echo 'nginx' >> /app/start.sh && \
     chmod +x /app/start.sh
 
-# Create non-root user (required by HF Spaces)
-RUN useradd -m -u 1000 user && \
-    chown -R user:user /app && \
-    chown -R user:user /var/log/nginx && \
-    chown -R user:user /var/lib/nginx && \
-    touch /var/run/nginx.pid && \
-    chown user:user /var/run/nginx.pid
+# Set ownership
+RUN chown -R user:user /app && \
+    chown -R user:user /etc/nginx && \
+    chmod -R 755 /app
 
 USER user
 
-# Set environment variables for HF Spaces
+# Set environment variables
 ENV HOME=/home/user \
     PATH=/home/user/.local/bin:$PATH \
-    GRADIO_SERVER_NAME=0.0.0.0 \
-    GRADIO_SERVER_PORT=7860 \
-    CONFIG_PATH=/app/coral-config/
+    CONFIG_PATH=/app/coral-config/ \
+    GRADLE_USER_HOME=/home/user/.gradle
 
 # HF Spaces expects port 7860
 EXPOSE 7860
 
-# Health check for the proxied service
+# Health check
 HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
-    CMD curl -f http://localhost:7860/devmode/exampleApplication/privkey/session1/sse || exit 1
+    CMD curl -f http://localhost:7860/ || exit 1
 
 # Start both nginx proxy and Coral Server
 CMD ["/app/start.sh"]