MySQL 8 + new-api, all secrets from env vars

Dockerfile

@@ -0,0 +1,20 @@
+FROM calciumion/new-api:latest AS newapi
+
+FROM mysql:8.0
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates tzdata && \
+    rm -rf /var/lib/apt/lists/* && \
+    update-ca-certificates
+
+# Copy new-api binary
+COPY --from=newapi /new-api /new-api
+
+# Copy startup script (no secrets baked in)
+COPY start.sh /start.sh
+RUN chmod +x /start.sh
+
+EXPOSE 7860
+WORKDIR /data
+
+CMD ["/start.sh"]

README.md

@@ -0,0 +1,9 @@
+---
+title: New API
+emoji: 🚀
+colorFrom: blue
+colorTo: purple
+sdk: docker
+app_port: 7860
+pinned: false
+---

start.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+set -e
+
+MYSQL_DATA_DIR="/var/lib/mysql"
+MYSQL_RUN_DIR="/var/run/mysqld"
+
+mkdir -p "$MYSQL_RUN_DIR"
+chown -R mysql:mysql "$MYSQL_RUN_DIR" "$MYSQL_DATA_DIR"
+
+# Initialize MySQL if needed
+if [ ! -d "$MYSQL_DATA_DIR/sys" ]; then
+    echo "[init] Initializing MySQL 8..."
+    mysqld --initialize-insecure --user=mysql --datadir="$MYSQL_DATA_DIR"
+
+    # Start temporarily
+    mysqld --user=mysql --datadir="$MYSQL_DATA_DIR" --skip-networking &
+    PID=$!
+    for i in $(seq 1 60); do
+        mysqladmin -u root ping --silent 2>/dev/null && break
+        sleep 1
+    done
+
+    # Decode and import dump from Secret
+    if [ -n "$MYSQL_DUMP_B64" ]; then
+        echo "[init] Decoding and importing MySQL dump from secret..."
+        echo "$MYSQL_DUMP_B64" | base64 -d | gunzip | mysql -u root
+        echo "[init] Import done."
+    fi
+
+    # Set root password from Secret
+    if [ -n "$MYSQL_ROOT_PASSWORD" ]; then
+        mysql -u root -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '$MYSQL_ROOT_PASSWORD'; FLUSH PRIVILEGES;"
+        echo "[init] Root password set."
+    fi
+
+    mysqladmin -u root -p"$MYSQL_ROOT_PASSWORD" shutdown
+    wait $PID 2>/dev/null || true
+fi
+
+# Start MySQL in background
+echo "[start] Starting MySQL 8..."
+mysqld --user=mysql --datadir="$MYSQL_DATA_DIR" &
+
+for i in $(seq 1 60); do
+    mysqladmin -u root -p"$MYSQL_ROOT_PASSWORD" ping --silent 2>/dev/null && break
+    sleep 1
+done
+echo "[start] MySQL ready."
+
+# Build SQL_DSN from secrets
+export SQL_DSN="root:${MYSQL_ROOT_PASSWORD}@tcp(127.0.0.1:3306)/zeabur"
+export PORT=7860
+
+echo "[start] Starting new-api on port $PORT..."
+exec /new-api