服务器部署

# 安装
npm install -g opencode-ai
 
# 启动服务端
opencode server --port 8080 --host 0.0.0.0
 
# 后台运行
nohup opencode server --port 8080 > /var/log/opencode.log 2>&1 &

# /etc/systemd/system/opencode.service
[Unit]
Description=OpenCode Server
After=network.target
 
[Service]
Type=simple
User=opencode
ExecStart=/usr/local/bin/opencode server --port 8080
Restart=always
RestartSec=5
Environment="NODE_ENV=production"
 
[Install]
WantedBy=multi-user.target

sudo systemctl enable opencode
sudo systemctl start opencode
sudo systemctl status opencode

FROM node:20-alpine
 
# 安装 OpenCode
RUN npm install -g opencode-ai
 
# 创建非 root 用户
RUN addgroup -g 1000 opencode && \
    adduser -D -u 1000 -G opencode opencode
 
USER opencode
 
# 暴露端口
EXPOSE 8080
 
# 健康检查
HEALTHCHECK --interval=30s --timeout=3s \
    CMD opencode health || exit 1
 
CMD ["opencode", "server", "--port", "8080", "--host", "0.0.0.0"]

# docker-compose.yml
version: '3.8'
 
services:
  opencode:
    build: .
    ports:
      - "8080:8080"
    environment:
      - NODE_ENV=production
      - OPENCODE_API_KEY=${OPENCODE_API_KEY}
    volumes:
      - ./config:/home/opencode/.config/opencode
      - ./data:/home/opencode/.local/share/opencode
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "opencode", "health"]
      interval: 30s
      timeout: 3s
      retries: 3
 
  redis:
    image: redis:7-alpine
    volumes:
      - redis-data:/data
    restart: unless-stopped
 
volumes:
  redis-data:

docker-compose up -d
docker-compose logs -f opencode

# k8s-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: opencode
  labels:
    app: opencode
spec:
  replicas: 3
  selector:
    matchLabels:
      app: opencode
  template:
    metadata:
      labels:
        app: opencode
    spec:
      containers:
      - name: opencode
        image: ghcr.io/anomalyco/opencode:latest
        ports:
        - containerPort: 8080
        env:
        - name: NODE_ENV
          value: "production"
        - name: OPENCODE_API_KEY
          valueFrom:
            secretKeyRef:
              name: opencode-secrets
              key: api-key
        resources:
          requests:
            memory: "256Mi"
            cpu: "250m"
          limits:
            memory: "512Mi"
            cpu: "500m"
        livenessProbe:
          httpGet:
            path: /health
            port: 8080
          initialDelaySeconds: 10
          periodSeconds: 30
        readinessProbe:
          httpGet:
            path: /ready
            port: 8080
          initialDelaySeconds: 5
          periodSeconds: 10
---
apiVersion: v1
kind: Service
metadata:
  name: opencode
spec:
  selector:
    app: opencode
  ports:
  - port: 80
    targetPort: 8080
  type: ClusterIP

# 创建密钥
kubectl create secret generic opencode-secrets \
  --from-literal=api-key=your-api-key
 
# 部署
kubectl apply -f k8s-deployment.yaml
 
# 查看状态
kubectl get pods -l app=opencode
kubectl logs -l app=opencode --tail=100

# /etc/nginx/sites-available/opencode
upstream opencode_backend {
    server 127.0.0.1:8080;
    server 127.0.0.1:8081;
    server 127.0.0.1:8082;
    
    keepalive 32;
}
 
server {
    listen 443 ssl http2;
    server_name opencode.company.com;
    
    # SSL
    ssl_certificate /etc/letsencrypt/live/opencode.company.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/opencode.company.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    
    # WebSocket 支持
    location /ws {
        proxy_pass http://opencode_backend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
    
    # SSE 流式支持
    location /stream {
        proxy_pass http://opencode_backend;
        proxy_http_version 1.1;
        proxy_set_header Connection '';
        proxy_buffering off;
        proxy_cache off;
        proxy_read_timeout 3600s;
    }
    
    # 普通 API
    location / {
        proxy_pass http://opencode_backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}
 
# HTTP 重定向到 HTTPS
server {
    listen 80;
    server_name opencode.company.com;
    return 301 https://$server_name$request_uri;
}

# Flask 示例
from flask import Flask, jsonify
 
app = Flask(__name__)
 
@app.route('/.well-known/opencode')
def opencode_config():
    return jsonify({
        "model": "anthropic/claude-sonnet-4-5",
        "mcp": {
            "internal-docs": {
                "url": "https://docs.company.com/mcp"
            }
        },
        "rules": [
            "遵循公司代码规范 v2.0",
            "所有 API 需要认证中间件"
        ],
        "permission": {
            "bash": "ask",
            "edit": "allow"
        }
    })
 
if __name__ == '__main__':
    app.run(port=5000)

{
  "remoteConfig": {
    "url": "https://company.com/.well-known/opencode",
    "refreshInterval": 3600
  }
}

# prometheus.yml
scrape_configs:
  - job_name: 'opencode'
    static_configs:
      - targets: ['opencode:8080']
    metrics_path: /metrics