lance159/12306-mcp repository overview

services:
  mcp12306:
    image: lance159/12306-mcp
    container_name: mcp12306
    command: npx 12306-mcp --port 8080
    ports:
      - "8080:8080"
    restart: unless-stopped

services:
  mcp12306:
    image: lance159/12306-mcp
    container_name: mcp12306
    command: npx 12306-mcp --port 8080
    ports:
      - "127.0.0.1:8080:8080"
    restart: unless-stopped

version: "3.9"

services:
  mcp12306:
    image: lance159/12306-mcp
    container_name: mcp12306

    command: npx 12306-mcp --port 8080

    # 只允许本机访问（安全）
    ports:
      - "127.0.0.1:8080:8080"

    restart: unless-stopped

    # 资源限制（防止异常占满机器）
    deploy:
      resources:
        limits:
          cpus: "0.50"
          memory: 512M

    # 健康检查
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

    # 日志限制（防止磁盘爆炸）
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

    # 安全加固
    read_only: true
    security_opt:
      - no-new-privileges:true

    cap_drop:
      - ALL

    tmpfs:
      - /tmp

    # 非 root 用户（如果镜像支持）
    user: "1000:1000"

    networks:
      - internal

networks:
  internal:
    driver: bridge

read-only file system

read_only: true

volumes:
  - ./data:/app/data

docker compose up -d --build

docker compose ps