- postgres 增加 mem_limit/cpus/shm_size/stop_grace_period 与 PG 性能参数(shared_buffers 等,env 可覆盖);backend/web 增加 内存/CPU 限额与更长的优雅关闭宽限(生产与开发编排同步) - ubuntu-deploy.sh 增加部署前磁盘空间预检,防止备份或迁移 中途磁盘写满 - .env.server.example 补充资源变量;文档补充容器资源限制说明
173 lines
5.7 KiB
YAML
173 lines
5.7 KiB
YAML
x-json-log-rotation: &json-log-rotation
|
|
driver: json-file
|
|
options:
|
|
max-size: "20m"
|
|
max-file: "5"
|
|
|
|
services:
|
|
postgres:
|
|
image: docker.m.daocloud.io/library/postgres:16-bookworm
|
|
command:
|
|
[
|
|
"postgres",
|
|
"-c",
|
|
"shared_preload_libraries=pg_stat_statements",
|
|
"-c",
|
|
"pg_stat_statements.track=all",
|
|
"-c",
|
|
"log_min_duration_statement=${POSTGRES_LOG_MIN_DURATION_STATEMENT_MS:-500}",
|
|
"-c",
|
|
"shared_buffers=${POSTGRES_SHARED_BUFFERS:-256MB}",
|
|
"-c",
|
|
"effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-1GB}",
|
|
"-c",
|
|
"work_mem=${POSTGRES_WORK_MEM:-8MB}",
|
|
"-c",
|
|
"maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-128MB}",
|
|
]
|
|
restart: unless-stopped
|
|
mem_limit: ${POSTGRES_MEM_LIMIT:-1g}
|
|
cpus: ${POSTGRES_CPUS:-2}
|
|
shm_size: 512mb
|
|
stop_grace_period: 60s
|
|
logging: *json-log-rotation
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
POSTGRES_DB: ${POSTGRES_DB:-order_site}
|
|
POSTGRES_USER: ${POSTGRES_USER:-postgres}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
|
|
ports:
|
|
- "${POSTGRES_PORT:-5432}:5432"
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD-SHELL",
|
|
"pg_isready -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-order_site}",
|
|
]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 20
|
|
volumes:
|
|
- postgres_dev_data:/var/lib/postgresql/data
|
|
|
|
minio:
|
|
image: docker.m.daocloud.io/minio/minio:latest
|
|
restart: unless-stopped
|
|
logging: *json-log-rotation
|
|
command: server /data --address ":9000" --console-address ":9001"
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
MINIO_ROOT_USER: ${STORAGE_ACCESS_KEY_ID:-minioadmin}
|
|
MINIO_ROOT_PASSWORD: ${STORAGE_SECRET_ACCESS_KEY:-minioadmin}
|
|
ports:
|
|
- "${MINIO_API_PORT:-19000}:9000"
|
|
- "${MINIO_CONSOLE_PORT:-19001}:9001"
|
|
volumes:
|
|
- minio_dev_data:/data
|
|
|
|
backend:
|
|
build:
|
|
context: .
|
|
dockerfile: deploy/docker/backend-dev.Dockerfile
|
|
args:
|
|
DEBIAN_MIRROR: ${DEBIAN_MIRROR:-mirrors.aliyun.com}
|
|
NPM_REGISTRY: ${NPM_REGISTRY:-https://registry.npmmirror.com}
|
|
restart: unless-stopped
|
|
env_file:
|
|
- .env
|
|
command: >-
|
|
sh /app/scripts/start-dev-container.sh
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
minio:
|
|
condition: service_started
|
|
healthcheck:
|
|
test:
|
|
["CMD-SHELL", "curl -fsS http://127.0.0.1:3000/health/ready || exit 1"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 20
|
|
start_period: 20s
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
PORT: ${BACKEND_PORT:-3000}
|
|
HTTP_TRUST_PROXY: ${HTTP_TRUST_PROXY:-1}
|
|
DATABASE_URL: ${DATABASE_URL:-postgres://postgres:postgres@postgres:5432/order_site}
|
|
DATABASE_SSL: ${DATABASE_SSL:-false}
|
|
DATABASE_MAX_CONNECTIONS: ${DATABASE_MAX_CONNECTIONS:-10}
|
|
DATA_ROOT: /app/data
|
|
LOG_RETENTION_DAYS: ${LOG_RETENTION_DAYS:-30}
|
|
CLAIM_BASE_URL: ${CLAIM_BASE_URL:-http://localhost/#/claim}
|
|
STORAGE_MODE: ${STORAGE_MODE:-minio}
|
|
STORAGE_ENDPOINT: ${STORAGE_ENDPOINT:-http://minio:9000}
|
|
STORAGE_BUCKET: ${STORAGE_BUCKET:-order-site}
|
|
STORAGE_ACCESS_KEY_ID: ${STORAGE_ACCESS_KEY_ID:-minioadmin}
|
|
STORAGE_SECRET_ACCESS_KEY: ${STORAGE_SECRET_ACCESS_KEY:-minioadmin}
|
|
STORAGE_REGION: ${STORAGE_REGION:-us-east-1}
|
|
STORAGE_MAX_UPLOAD_SIZE_MB: ${STORAGE_MAX_UPLOAD_SIZE_MB:-10}
|
|
STORAGE_OSS_ENDPOINT: ${STORAGE_OSS_ENDPOINT:-}
|
|
STORAGE_OSS_BUCKET: ${STORAGE_OSS_BUCKET:-}
|
|
STORAGE_OSS_ACCESS_KEY_ID: ${STORAGE_OSS_ACCESS_KEY_ID:-}
|
|
STORAGE_OSS_SECRET_ACCESS_KEY: ${STORAGE_OSS_SECRET_ACCESS_KEY:-}
|
|
STORAGE_OSS_REGION: ${STORAGE_OSS_REGION:-oss-cn-hangzhou}
|
|
WORKSPACE_ROOT: /workspace
|
|
# ADMIN_* 仅走 env_file,避免 JSON 经 ${} 注入时被 YAML 破坏
|
|
KUASHOU_INDUSTRY_RATE_LIMIT_MAX: ${KUASHOU_INDUSTRY_RATE_LIMIT_MAX:-120}
|
|
logging: *json-log-rotation
|
|
volumes:
|
|
- ./apps/backend:/app
|
|
- ./.prettierrc.json:/.prettierrc.json:ro
|
|
- ./.prettierignore:/.prettierignore:ro
|
|
- ./.env.server.example:/workspace/.env.server.example:ro
|
|
- ./.env.mac-docker.example:/workspace/.env.mac-docker.example:ro
|
|
- ./docker-compose.yml:/workspace/docker-compose.yml:ro
|
|
- ./docker-compose.dev.yml:/workspace/docker-compose.dev.yml:ro
|
|
- backend_node_modules:/app/node_modules
|
|
- ./apps/backend/data:/app/data
|
|
|
|
frontend:
|
|
image: docker.m.daocloud.io/library/node:22-bookworm-slim
|
|
working_dir: /app
|
|
restart: unless-stopped
|
|
logging: *json-log-rotation
|
|
command: >-
|
|
sh -lc
|
|
"npm install --no-fund --no-audit;
|
|
npm run dev -- --host 0.0.0.0 --port 5173"
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
CHOKIDAR_USEPOLLING: "true"
|
|
NPM_CONFIG_REGISTRY: https://registry.npmmirror.com
|
|
VITE_API_TARGET: http://backend:3000
|
|
VITE_ALLOWED_HOSTS: ${VITE_ALLOWED_HOSTS:-localhost,127.0.0.1}
|
|
VITE_WORKER_SITE_URL: ${WORKER_SITE_ADDR:-http://worker.localhost}
|
|
volumes:
|
|
- ./apps/frontend:/app
|
|
- ./.prettierrc.json:/.prettierrc.json:ro
|
|
- ./.prettierignore:/.prettierignore:ro
|
|
- frontend_node_modules:/app/node_modules
|
|
|
|
web:
|
|
image: docker.m.daocloud.io/library/caddy:2-alpine
|
|
restart: unless-stopped
|
|
logging: *json-log-rotation
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
frontend:
|
|
condition: service_started
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
volumes:
|
|
- ./deploy/caddy/Caddyfile.dev:/etc/caddy/Caddyfile:ro
|
|
|
|
volumes:
|
|
postgres_dev_data:
|
|
minio_dev_data:
|
|
backend_node_modules:
|
|
frontend_node_modules:
|