Containerfile

# Containerfile for VyOS MCP Server
# Multi-stage build: VyOS MCP server that can connect to external VyOS instances

FROM oven/bun:1-alpine AS mcp-server

# Install dependencies
RUN apk add --no-cache curl

# Create application directory
WORKDIR /opt/vyos-mcp

# Copy package.json and bun.lock for dependency installation
COPY package.json bun.lock ./

# Install dependencies
RUN bun install --frozen-lockfile

# Copy source code
COPY src/ ./src/
COPY tsconfig.json ./
COPY biome.json ./

# Build the application
RUN bun run build

# Create non-root user
RUN addgroup -g 1001 -S nodejs && \
    adduser -S mcp -u 1001 -G nodejs

# Set ownership
RUN chown -R mcp:nodejs /opt/vyos-mcp

# Switch to non-root user
USER mcp

# Expose MCP server port
EXPOSE 8080

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
    CMD curl -f http://localhost:8080/health || exit 1

# Start MCP server
CMD ["bun", "run", "start"]