potential-demand-analyzer/docker-compose.prod.yml at main · brucexia007-ui/potential-demand-analyzer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# docker-compose.prod.yml —— 生产环境端口覆盖
#
# 使用方式（与基础 compose 文件合并）：
#   docker compose --env-file .env.production \
#     -f docker-compose.yml -f docker-compose.prod.yml up -d
#
# 效果：
#   仅 nginx (80) 对外暴露端口，其余服务仅容器内网可见
#   PostgreSQL (5432)、Redis (6379)、Backend (8000)、Frontend (3000)、
#   Browserless (3000) 一律不暴露到宿主机
x-production-logging: &production-logging
  driver: json-file
  options:
    max-size: "20m"
    max-file: "5"

services:
  postgres:
    logging: *production-logging
    ports: !reset []
    environment:
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD:?生产环境必须设置 POSTGRES_PASSWORD}"

  redis:
    logging: *production-logging
    image: "${REDIS_IMAGE:?生产环境必须设置固定摘要的 REDIS_IMAGE}"
    ports: !reset []
    environment:
      REDIS_PASSWORD: "${REDIS_PASSWORD:?生产环境必须设置 REDIS_PASSWORD}"
    command:
      - redis-server
      - --requirepass
      - "${REDIS_PASSWORD:?生产环境必须设置 REDIS_PASSWORD}"
    healthcheck:
      test:
        - CMD-SHELL
        - redis-cli -a "$$REDIS_PASSWORD" ping | grep -q PONG

  backend:
    logging: *production-logging
    image: "${BACKEND_IMAGE:?生产环境必须设置经过验证的 BACKEND_IMAGE 摘要}"
    build: !reset null
    ports: !reset []
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      AUTH_COOKIE_SECURE: "true"
      LOG_FORMAT: "json"
      METRICS_ENABLED: "true"

  worker:
    logging: *production-logging
    image: "${BACKEND_IMAGE:?生产环境必须设置经过验证的 BACKEND_IMAGE 摘要}"
    build: !reset null
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      LOG_FORMAT: "json"

  crawler:
    logging: *production-logging
    image: "${BACKEND_IMAGE:?生产环境必须设置经过验证的 BACKEND_IMAGE 摘要}"
    build: !reset null
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      LOG_FORMAT: "json"

  beat:
    logging: *production-logging
    image: "${BACKEND_IMAGE:?生产环境必须设置经过验证的 BACKEND_IMAGE 摘要}"
    build: !reset null
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      LOG_FORMAT: "json"

  outbox-relay:
    logging: *production-logging
    image: "${BACKEND_IMAGE:?生产环境必须设置经过验证的 BACKEND_IMAGE 摘要}"
    build: !reset null
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      LOG_FORMAT: "json"

  frontend:
    logging: *production-logging
    image: "${FRONTEND_IMAGE:?生产环境必须设置经过验证的 FRONTEND_IMAGE 摘要}"
    build: !reset null
    ports: !reset []
    env_file: !override
      - .env.production
    environment:
      ENV: "production"

  nginx:
    logging: *production-logging
    image: "${NGINX_IMAGE:?生产环境必须设置固定摘要的 NGINX_IMAGE}"
    env_file: !override
      - .env.production
    environment:
      ENV: "production"
      TLS_ENABLED: "true"
    ports:
      - "${APP_HTTPS_PORT:-10443}:443"

  browserless:
    logging: *production-logging
    ports: !reset []
    environment:
      TOKEN: "${BROWSERLESS_TOKEN:?生产环境必须设置 BROWSERLESS_TOKEN}"