feat(docker): 添加基本认证功能和环境变量配置

- 在 Dockerfile 中添加 htpasswd 工具和 dos2unix
- 更新 docker-compose.yml 文件以支持 ACCESS_USERNAME 和 ACCESS_PASSWORD 环境变量
- 修改 dev.md 和 README 文件，增加访问密码配置说明
- 更新 Nginx 配置以引入基本认证
- 将版本号更新至 1.0.6

Author: linshenkx

Dockerfile

@@ -10,10 +10,25 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile
 RUN pnpm run build
 
 FROM nginx:stable-alpine
+# 安装htpasswd工具和dos2unix
+RUN apk add --no-cache apache2-utils dos2unix
+
+# 复制Nginx配置
 COPY docker/nginx.conf /etc/nginx/conf.d/default.conf
+
+# 复制Web应用
 COPY --from=build /app/packages/web/dist /usr/share/nginx/html
-# 复制启动脚本
+
+# 复制并设置启动脚本
 COPY docker/generate-config.sh /docker-entrypoint.d/40-generate-config.sh
+COPY docker/generate-auth.sh /docker-entrypoint.d/30-generate-auth.sh
+
+# 确保脚本有执行权限
 RUN chmod +x /docker-entrypoint.d/40-generate-config.sh
+RUN chmod +x /docker-entrypoint.d/30-generate-auth.sh
+
+# 转换可能的Windows行尾符为Unix格式
+RUN dos2unix /docker-entrypoint.d/40-generate-config.sh
+RUN dos2unix /docker-entrypoint.d/30-generate-auth.sh
 
 EXPOSE 80

README.md

@@ -12,7 +12,7 @@
 ![GitHub forks](https://img.shields.io/github/forks/linshenkx/prompt-optimizer?style=flat)
 [![Deploy with Vercel](https://img.shields.io/badge/Vercel-indigo?style=flat&logo=vercel)](https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2Flinshenkx%2Fprompt-optimizer)
 
-[在线体验](https://prompt.always200.com) | [快速开始](#快速开始) | [常见问题](#常见问题) | [开发文档](dev.md) | [Vercel部署指南](docs/vercel.md) ([密码保护](docs/vercel-password-protection_zh.md)) | [Chrome插件](https://chromewebstore.google.com/detail/prompt-optimizer/cakkkhboolfnadechdlgdcnjammejlna)
+[在线体验](https://prompt.always200.com) | [快速开始](#快速开始) | [常见问题](#常见问题) | [开发文档](dev.md) | [Vercel部署指南](docs/vercel.md) | [Chrome插件](https://chromewebstore.google.com/detail/prompt-optimizer/cakkkhboolfnadechdlgdcnjammejlna)
 
 </div>
 
@@ -53,10 +53,12 @@ Prompt Optimizer是一个强大的AI提示词优化工具，帮助你编写更
    - 先Fork项目到自己的GitHub
    - 然后在Vercel中导入该项目
    - 可跟踪源项目更新，便于同步最新功能和修复
-  
+- 配置环境变量：
+  - `ACCESS_PASSWORD`：设置访问密码，启用访问限制
+  - `VITE_OPENAI_API_KEY`等：配置各AI服务商的API密钥
+
 更多详细的部署步骤和注意事项，请查看：
 - [Vercel部署指南](docs/vercel.md)
-- [Vercel密码保护指南](docs/vercel-password-protection_zh.md)
 
 ### 3. 安装Chrome插件
 1. 从Chrome商店安装（由于审批较慢，可能不是最新的）：[Chrome商店地址](https://chromewebstore.google.com/detail/prompt-optimizer/cakkkhboolfnadechdlgdcnjammejlna)
@@ -67,12 +69,15 @@ Prompt Optimizer是一个强大的AI提示词优化工具，帮助你编写更
 # 运行容器（默认配置）
 docker run -d -p 80:80 --restart unless-stopped --name prompt-optimizer linshen/prompt-optimizer
 
-# 运行容器（配置API密钥）
+# 运行容器（配置API密钥和访问密码）
 docker run -d -p 80:80 \
   -e VITE_OPENAI_API_KEY=your_key \
+  -e ACCESS_USERNAME=your_username \  # 可选，默认为"admin"
+  -e ACCESS_PASSWORD=your_password \  # 设置访问密码
   --restart unless-stopped \
   --name prompt-optimizer \
   linshen/prompt-optimizer
+  
 ```
 
 ### 5. Docker Compose部署
@@ -81,11 +86,16 @@ docker run -d -p 80:80 \
 git clone https://github.com/linshenkx/prompt-optimizer.git
 cd prompt-optimizer
 
-# 2. 可选：创建.env文件配置API密钥
+# 2. 可选：创建.env文件配置API密钥和访问认证
 cat > .env << EOF
+# API密钥配置
 VITE_OPENAI_API_KEY=your_openai_api_key
 VITE_GEMINI_API_KEY=your_gemini_api_key
 VITE_DEEPSEEK_API_KEY=your_deepseek_api_key
+
+# Basic认证配置（密码保护）
+ACCESS_USERNAME=your_username  # 可选，默认为"admin"
+ACCESS_PASSWORD=your_password  # 设置访问密码
 EOF
 
 # 3. 启动服务
@@ -171,7 +181,6 @@ pnpm dev:fresh        # 完整重置并重新启动开发环境
 - [项目状态](docs/project-status.md) - 当前进度和计划
 - [产品需求](docs/prd.md) - 产品需求文档
 - [Vercel部署指南](docs/vercel.md) - Vercel部署详细说明
-- [Vercel密码保护指南](docs/vercel-password-protection_zh.md) - Vercel密码保护详细说明
 
 
 ## Star History

README_EN.md

@@ -53,10 +53,12 @@ Method 2: Fork the project and import to Vercel (Recommended):
    - First fork the project to your GitHub account
    - Then import the project to Vercel
    - This allows tracking of source project updates for easy syncing of new features and fixes
+- Configure environment variables:
+  - `ACCESS_PASSWORD`: Set access password to enable access restriction
+  - `VITE_OPENAI_API_KEY` etc.: Configure API keys for various AI service providers
 
 For more detailed deployment steps and important notes, please check:
 - [Vercel Deployment Guide](docs/vercel_en.md)
-- [Vercel Password Protection Guide](docs/vercel-password-protection.md)
 
 ### 3. Install Chrome Extension
 1. Install from Chrome Web Store (may not be the latest version due to approval delays): [Chrome Web Store](https://chromewebstore.google.com/detail/prompt-optimizer/cakkkhboolfnadechdlgdcnjammejlna)
@@ -67,9 +69,11 @@ For more detailed deployment steps and important notes, please check:
 # Run container (default configuration)
 docker run -d -p 80:80 --restart unless-stopped --name prompt-optimizer linshen/prompt-optimizer
 
-# Run container (with API key configuration)
+# Run container (with API key configuration and password protection)
 docker run -d -p 80:80 \
   -e VITE_OPENAI_API_KEY=your_key \
+  -e ACCESS_USERNAME=your_username \  # Optional, defaults to "admin"
+  -e ACCESS_PASSWORD=your_password \  # Required for password protection
   --restart unless-stopped \
   --name prompt-optimizer \
   linshen/prompt-optimizer
@@ -81,11 +85,16 @@ docker run -d -p 80:80 \
 git clone https://github.com/linshenkx/prompt-optimizer.git
 cd prompt-optimizer
 
-# 2. Optional: Create .env file for API keys
+# 2. Optional: Create .env file for API keys and authentication
 cat > .env << EOF
+# API Key Configuration
 VITE_OPENAI_API_KEY=your_openai_api_key
 VITE_GEMINI_API_KEY=your_gemini_api_key
 VITE_DEEPSEEK_API_KEY=your_deepseek_api_key
+
+# Basic Authentication
+ACCESS_USERNAME=your_username  # Optional, defaults to "admin"
+ACCESS_PASSWORD=your_password  # Required for authentication
 EOF
 
 # 3. Start the service
@@ -171,7 +180,6 @@ For detailed project status, see [Project Status Document](docs/project-status.m
 - [Project Status](docs/project-status.md) - Current progress and plans
 - [Product Requirements](docs/prd.md) - Product requirements document
 - [Vercel Deployment Guide](docs/vercel_en.md) - Detailed instructions for Vercel deployment
-- [Vercel Password Protection Guide](docs/vercel-password-protection.md) - Detailed instructions for Vercel password protection
 
 ## Star History
 

dev.md

@@ -51,7 +51,7 @@ docker build -t linshen/prompt-optimizer:$VERSION .
 docker tag linshen/prompt-optimizer:$VERSION linshen/prompt-optimizer:latest
 
 # 运行容器
-docker run -d -p 80:80 --restart unless-stopped --name prompt-optimizer linshen/prompt-optimizer:$VERSION
+docker run -d -p 80:80 --restart unless-stopped --name prompt-optimizer -e ACCESS_PASSWORD=1234!@#$  linshen/prompt-optimizer:$VERSION
 
 
 # 推送

docker-compose.yml

@@ -1,3 +1,5 @@
+version: '3'
+
 services:
   prompt-optimizer:
     image: linshen/prompt-optimizer:latest
@@ -22,6 +24,9 @@ services:
       - VITE_CUSTOM_API_KEY=${VITE_CUSTOM_API_KEY:-}
       - VITE_CUSTOM_API_BASE_URL=${VITE_CUSTOM_API_BASE_URL:-}
       - VITE_CUSTOM_API_MODEL=${VITE_CUSTOM_API_MODEL:-}
+      # Basic认证配置（可选）
+      - ACCESS_USERNAME=${ACCESS_USERNAME:-admin}  # 可选，默认为"admin"
+      - ACCESS_PASSWORD=${ACCESS_PASSWORD:-}       # 设置访问密码
     # 健康检查
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:80"]

docker/generate-auth.sh

@@ -0,0 +1,46 @@
+#!/bin/sh
+
+# 检查是否设置了ACCESS_PASSWORD环境变量
+if [ -n "$ACCESS_PASSWORD" ]; then
+    # 检查密码是否为空字符串
+    if [ "$ACCESS_PASSWORD" = "" ]; then
+        echo "警告: 设置了空密码，不安全。不启用Basic认证"
+        # 创建空的auth配置（禁用认证）
+        cat > /etc/nginx/conf.d/auth.conf << EOF
+# Basic认证未启用 - 密码为空
+auth_basic off;
+EOF
+        exit 0
+    fi
+
+    echo "启用Basic认证..."
+    
+    # 创建认证文件目录
+    mkdir -p /etc/nginx/auth
+    
+    # 确定用户名（如果未设置ACCESS_USERNAME则使用默认值"admin"）
+    USERNAME=${ACCESS_USERNAME:-admin}
+    
+    # 生成htpasswd文件 - 使用printf避免特殊字符问题
+    printf '%s' "$ACCESS_PASSWORD" | htpasswd -i -c /etc/nginx/auth/.htpasswd "$USERNAME"
+    
+    # 容器环境中简化权限管理 - 确保所有人都可读取认证文件
+    chmod -R a+r /etc/nginx/auth
+    
+    # 创建启用认证的配置
+    cat > /etc/nginx/conf.d/auth.conf << EOF
+# 此文件由generate-auth.sh脚本自动生成
+auth_basic "请输入访问凭据 (Please enter your credentials)";
+auth_basic_user_file /etc/nginx/auth/.htpasswd;
+EOF
+    
+    echo "Basic认证已配置，用户名: $USERNAME"
+else
+    echo "未设置ACCESS_PASSWORD环境变量，不启用Basic认证"
+    
+    # 创建空的auth配置（禁用认证）
+    cat > /etc/nginx/conf.d/auth.conf << EOF
+# Basic认证未启用
+auth_basic off;
+EOF
+fi 

docker/nginx.conf

@@ -38,6 +38,9 @@ server {
 
     # SPA应用路由支持
     location / {
+        # 引入Basic认证配置
+        include /etc/nginx/conf.d/auth.conf;
+        
         try_files $uri $uri/ /index.html;
         expires -1;
         add_header Cache-Control "no-store, no-cache, must-revalidate";