Translated to ENG

.containerignore

@@ -0,0 +1,9 @@
+# Keep the build context free of browser sessions, auth exports, source-only
+# helpers, and any future unlisted files. Containerfile copies this allow-list.
+*
+!Containerfile
+!.containerignore
+!package.json
+!server.js
+!lib/
+!lib/pow.js

.env.example

@@ -4,7 +4,18 @@
 
 # ── HTTP server ──
 PORT=9655
-HOST=0.0.0.0
+# Loopback-only by default. Use 0.0.0.0 only when remote access is intentional.
+HOST=127.0.0.1
+# Optional bearer token required by every non-health endpoint. Strongly
+# recommended whenever HOST is not a loopback address.
+# PROXY_API_KEY=replace-with-a-long-random-value
+# Read the bearer token from a mounted secret instead of the environment.
+# PROXY_API_KEY_FILE=/run/secrets/proxy-api-key
+# Fail startup when neither key source is set (enabled by Containerfile).
+REQUIRE_PROXY_API_KEY=0
+# Browser requests are accepted from loopback origins. Add exact remote UI
+# origins as a comma-separated allowlist when needed.
+# PROXY_CORS_ORIGINS=https://ui.example.com,http://192.168.1.20:3000
 
 # ── Account auth source ──
 # The pool loads DeepSeek accounts from files. Use either a single file or a
@@ -17,6 +28,17 @@ DEEPSEEK_AUTH_PATH=./deepseek-auth.json
 # (default: 600000 = 10 minutes).
 DEEPSEEK_ACCOUNT_COOLDOWN_MS=600000
 
+# ── Long agent sessions ──
+# Maximum characters sent to DeepSeek Web after compacting old context.
+# Lower this if the Web endpoint reports that the content is too long.
+DEEPSEEK_MAX_PROMPT_CHARS=80000
+# Fresh-session retries for an empty/context-too-long response (default: 2).
+DEEPSEEK_MAX_RETRIES=2
+# Clear session history on server start (1/true). Useful for development/testing.
+# DEEPSEEK_CLEAR_SESSIONS_ON_START=0
+# Log MCP tool names loaded per agent (1/true). For debugging only.
+# DEEPSEEK_LOG_TOOLS=0
+
 # ── Startup (deploy / CI) ──
 # Set either to 1/true to start the proxy immediately and skip the menu.
 NON_INTERACTIVE=0
@@ -39,3 +61,4 @@ DEEPSEEK_REUSE_CHROME=0
 # DEEPSEEK_TOKEN=
 # Run scripts/doctor.js without network checks (1/true).
 # DOCTOR_OFFLINE=0
+

.gitignore

@@ -3,12 +3,16 @@ node_modules/
 *.log
 auth.json
 deepseek-auth.json
+# Aggregate account export holding live tokens/cookies — never commit.
+deepseek-accounts.json
 # Runtime-added auth files contain secrets — keep the dir, ignore its contents.
 data/accounts/*.json
+.chrome-profile/
 .chrome-profile-deepseek/
 .chrome-for-testing-profile-deepseek/
 .chrome-for-testing-profile-deepseek.stale-*/
 *.session.json
 /tmp/deepseek_response_*
 .DS_Store
 *.pdf
+

Containerfile

@@ -0,0 +1,25 @@
+FROM docker.io/library/node:22-alpine
+
+ENV NODE_ENV=production \
+    HOST=0.0.0.0 \
+    PORT=9655 \
+    NON_INTERACTIVE=1 \
+    DEEPSEEK_AUTH_PATH=/run/secrets/deepseek-auth.json \
+    PROXY_API_KEY_FILE=/run/secrets/proxy-api-key \
+    REQUIRE_PROXY_API_KEY=1
+
+WORKDIR /app
+
+# FreeDeepseekAPI has no npm dependencies. Copy only the files needed by the
+# non-interactive proxy; browser auth helpers and credentials stay on the host.
+COPY --chown=1000:1000 package.json server.js ./
+COPY --chown=1000:1000 lib/pow.js ./lib/pow.js
+
+USER 1000:1000
+
+EXPOSE 9655
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD ["node", "-e", "const http=require('http');const req=http.get({host:'127.0.0.1',port:process.env.PORT||9655,path:'/health'},res=>{res.resume();process.exit(res.statusCode===200?0:1)});req.on('error',()=>process.exit(1));req.setTimeout(4000,()=>{req.destroy();process.exit(1)})"]
+
+CMD ["node", "server.js"]