36bian/openclashhelper repository overview

# ---- STAGE 1: Builder ----
FROM python:3.9-alpine AS builder
LABEL stage=builder

# 更新 Alpine 包索引，安装构建时依赖
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.tuna.tsinghua.edu.cn/g' /etc/apk/repositories
RUN apk update && \
    apk add --no-cache python3-dev gcc musl-dev libffi-dev sqlite-dev && \
    rm -rf /var/cache/apk/*

# 设置工作目录
WORKDIR /app

# 复制依赖文件
COPY requirements.txt .

# 安装 Python 依赖
# 假设 requirements.txt 已经包含了 PyYAML, requests, dnspython>=2.0.0
RUN pip install --no-cache-dir -r requirements.txt && \
    python -c "import tldextract; extractor = tldextract.TLDExtract(cache_dir='/app/build_tldextract_cache', include_psl_private_domains=True); extractor('example.com')"

# 复制应用程序脚本
COPY enhancer_script.py .

# ---- STAGE 2: Runtime ----
FROM python:3.9-alpine AS runtime

# 安装运行时的系统依赖
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.tuna.tsinghua.edu.cn/g' /etc/apk/repositories && \
    apk update && \
    apk add --no-cache ca-certificates tzdata sqlite-libs && \
    rm -rf /var/cache/apk/*

# 设置工作目录
WORKDIR /app

# 从 builder 阶段复制已安装的 Python 依赖库
COPY --from=builder /usr/local/lib/python3.9/site-packages /usr/local/lib/python3.9/site-packages
# 从 builder 阶段复制预热的 tldextract 缓存
RUN mkdir -p /root/.cache
COPY --from=builder /app/build_tldextract_cache /root/.cache/tldextract
# 从 builder 阶段复制应用程序脚本
COPY --from=builder /app/enhancer_script.py .

# --- 核心配置 ---
ENV CLASH_CONTAINER_NAME=clash
ENV CLASH_CONFIG_DIR_IN_HELPER=/clash_config
ENV PROVIDER_FILENAME=unreachable_domains.yaml
ENV CLASH_API_URL=
ENV CLASH_API_SECRET=
ENV CLASH_API_TIMEOUT=10
ENV ENABLE_CLASH_API_RELOAD=true
ENV DEBUG_MODE=false
ENV TZ=Asia/Shanghai

# --- DNS Resolver Configuration ---
ENV CLASH_CONFIG_FILENAME="config.yaml"
ENV DNS_SERVER=""
ENV DNS_PORT=""
# 旧的 CLASH_DNS_SERVER 和 CLASH_DNS_PORT 已被移除，因为脚本内部逻辑会处理DNS配置

# --- 日志匹配模式 ---
ENV ERROR_LOG_PATTERN='^.*match Match.*-->\s+([0-9a-fA-F:.\w-]+):\d+.*error:.*?(network is unreachable|connect(?:ion)? refused|dial tcp.*failed)'
ENV DIRECT_LOG_PATTERN='.*-->\s+([0-9a-fA-F:.\w-]+):(\d+)\s+match\s+Match\s+using\s+DIRECT\b'
# --- 行为与性能调优参数 ---
ENV NEW_DOMAIN_POOL_SIZE=3
ENV CONN_CHECK_MAX_WORKERS=7
# --- Generalization Configuration ---
ENV BLACKLIST_GENERALIZATION_THRESHOLD=2
ENV WHITELIST_GENERALIZATION_CHILD_COUNT=2
ENV WHITELIST_GENERALIZATION_MIN_CHILD_OK_LEVEL=1
ENV PERIODIC_GENERALIZATION_CHECK_INTERVAL=1800
ENV PERIODIC_RECHECK_SCHEDULER_INTERVAL=20
# --- 连接性与慢速检测阈值 ---
ENV CONN_CHECK_TIMEOUT_DNS=2
ENV CONN_CHECK_TIMEOUT_TCP=2
ENV CONN_CHECK_TIMEOUT_TLS=3
ENV ENABLE_SLOW_DETECTION=true
ENV CONN_CHECK_SLOW_TCP_MS=400
ENV CONN_CHECK_SLOW_TLS_MS=700
ENV ENABLE_TTFB_CHECK=true
ENV CONN_CHECK_TIMEOUT_TTFB_SECONDS=3
ENV CONN_CHECK_SLOW_TTFB_MS=1000
# --- Network Outage Detection ---
ENV PRIMARY_SENTINEL_HOST="223.5.5.5:53"
ENV SECONDARY_SENTINEL_HOST="8.8.8.8:53"
ENV NETWORK_STATUS_CHECK_INTERVAL_SECONDS=60
ENV NETWORK_STATUS_RETRY_INTERVAL_SECONDS=30
ENV SENTINEL_CONNECTION_TIMEOUT=2
# --- Startup Stale Check Config ---
ENV STALE_CHECK_MAX_GRACE_PERIOD_SECONDS=604800
# --- Domain Inactivity ---
ENV DOMAIN_INACTIVITY_THRESHOLD_SECONDS=2592000
ENV INACTIVE_DOMAIN_RESCHEDULE_DELAY_SECONDS=86400
# --- Clash Log Monitoring ---
ENV CLASH_LOG_RETRY_INTERVAL_SECONDS=15
# --- Python 运行时特定设置 ---
ENV PYTHONUNBUFFERED=1

# 容器启动时执行的命令
CMD ["python", "enhancer_script.py"]