903a49d3b0
This commit adds comprehensive support for JSON configuration files in Docker containers, addressing the issue where the Docker image fails to start in server mode and ignores configuration files. ## Changes ### Docker Configuration Support - Added parse-config.js to safely parse JSON configs and export as shell variables - Implemented secure shell quoting to prevent command injection - Added dangerous environment variable blocking for security - Support for all JSON data types with proper edge case handling ### Docker Server Mode Fix - Added support for "n8n-mcp serve" command in entrypoint - Properly transforms serve command to HTTP mode - Fixed missing n8n-mcp binary issue in Docker image ### Security Enhancements - POSIX-compliant shell quoting without eval - Blocked dangerous variables (PATH, LD_PRELOAD, etc.) - Sanitized configuration keys to prevent invalid shell variables - Protection against shell metacharacters in values ### Testing - Added 53 comprehensive tests for Docker configuration - Unit tests for parsing, security, and edge cases - Integration tests for Docker entrypoint behavior - Security-focused tests for injection prevention ### Documentation - Updated Docker README with config file mounting examples - Enhanced troubleshooting guide with config file issues - Added version bump to 2.8.2 ### Additional Files - Included deployment-engineer and technical-researcher agent files 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
83 lines
2.5 KiB
Docker
83 lines
2.5 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
# Ultra-optimized Dockerfile - minimal runtime dependencies (no n8n packages)
|
|
|
|
# Stage 1: Builder (TypeScript compilation only)
|
|
FROM node:22-alpine AS builder
|
|
WORKDIR /app
|
|
|
|
# Copy tsconfig files for TypeScript compilation
|
|
COPY tsconfig*.json ./
|
|
|
|
# Create minimal package.json and install ONLY build dependencies
|
|
RUN --mount=type=cache,target=/root/.npm \
|
|
echo '{}' > package.json && \
|
|
npm install --no-save typescript@^5.8.3 @types/node@^22.15.30 @types/express@^5.0.3 \
|
|
@modelcontextprotocol/sdk@^1.12.1 dotenv@^16.5.0 express@^5.1.0 axios@^1.10.0 \
|
|
n8n-workflow@^1.96.0 uuid@^11.0.5 @types/uuid@^10.0.0
|
|
|
|
# Copy source and build
|
|
COPY src ./src
|
|
# Note: src/n8n contains TypeScript types needed for compilation
|
|
# These will be compiled but not included in runtime
|
|
RUN npx tsc -p tsconfig.build.json
|
|
|
|
# Stage 2: Runtime (minimal dependencies)
|
|
FROM node:22-alpine AS runtime
|
|
WORKDIR /app
|
|
|
|
# Install only essential runtime tools
|
|
RUN apk add --no-cache curl && \
|
|
rm -rf /var/cache/apk/*
|
|
|
|
# Copy runtime-only package.json
|
|
COPY package.runtime.json package.json
|
|
|
|
# Install runtime dependencies with cache mount
|
|
RUN --mount=type=cache,target=/root/.npm \
|
|
npm install --production --no-audit --no-fund
|
|
|
|
# Copy built application
|
|
COPY --from=builder /app/dist ./dist
|
|
|
|
# Copy pre-built database and required files
|
|
# Cache bust: 2025-07-06-trigger-fix-v3 - includes is_trigger=true for webhook,cron,interval,emailReadImap
|
|
COPY data/nodes.db ./data/
|
|
COPY src/database/schema-optimized.sql ./src/database/
|
|
COPY .env.example ./
|
|
|
|
# Copy entrypoint script and config parser
|
|
COPY docker/docker-entrypoint.sh /usr/local/bin/
|
|
COPY docker/parse-config.js /app/docker/
|
|
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
|
|
# Add container labels
|
|
LABEL org.opencontainers.image.source="https://github.com/czlonkowski/n8n-mcp"
|
|
LABEL org.opencontainers.image.description="n8n MCP Server - Runtime Only"
|
|
LABEL org.opencontainers.image.licenses="MIT"
|
|
LABEL org.opencontainers.image.title="n8n-mcp"
|
|
|
|
# Create non-root user
|
|
RUN addgroup -g 1001 -S nodejs && \
|
|
adduser -S nodejs -u 1001 && \
|
|
chown -R nodejs:nodejs /app
|
|
|
|
# Switch to non-root user
|
|
USER nodejs
|
|
|
|
# Set Docker environment flag
|
|
ENV IS_DOCKER=true
|
|
|
|
# Expose HTTP port
|
|
EXPOSE 3000
|
|
|
|
# Set stop signal to SIGTERM (default, but explicit is better)
|
|
STOPSIGNAL SIGTERM
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD curl -f http://127.0.0.1:3000/health || exit 1
|
|
|
|
# Optimized entrypoint
|
|
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
|
|
CMD ["node", "dist/mcp/index.js"]
|