QCNOTE/docker-compose.yml at main · NENWA618/QCNOTE · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
version: '3.8'

services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - BACKEND_URL=http://server:10000
      - REDIS_URL=redis://:${REDIS_PASSWORD:?set REDIS_PASSWORD}@redis:6379
      - NEXTAUTH_URL=${NEXTAUTH_URL:?set NEXTAUTH_URL}
      - NEXTAUTH_SECRET=${NEXTAUTH_SECRET:?set NEXTAUTH_SECRET}
      - DEVICE_SESSION_SECRET=${DEVICE_SESSION_SECRET:-}
    depends_on:
      - redis
      - server
    volumes:
      - ./data:/app/data
    restart: unless-stopped

  server:
    # Context is the repo root: server/tsconfig.server.json extends ../tsconfig.json
    build:
      context: .
      dockerfile: server/Dockerfile
    # 仅在 compose 内网暴露：后端没有面向公网的鉴权边界，只应由前端容器经代理访问
    expose:
      - "10000"
    environment:
      - NODE_ENV=production
      - PORT=10000
      - REDIS_URL=redis://:${REDIS_PASSWORD:?set REDIS_PASSWORD}@redis:6379
      # PostgreSQL is not part of this compose file; point this at your own instance
      - DATABASE_URL=${DATABASE_URL:?set DATABASE_URL}
      - NEXTAUTH_URL=${NEXTAUTH_URL:?set NEXTAUTH_URL}
      - NEXTAUTH_SECRET=${NEXTAUTH_SECRET:?set NEXTAUTH_SECRET}
      - VAULT_MASTER_KEY=${VAULT_MASTER_KEY:?set VAULT_MASTER_KEY}
      - DEVICE_SESSION_SECRET=${DEVICE_SESSION_SECRET:-}
      - VAPID_PUBLIC=${VAPID_PUBLIC:-}
      - VAPID_PRIVATE=${VAPID_PRIVATE:-}
    depends_on:
      - redis
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    # 不映射到宿主机端口：Redis 只在 compose 内网可达，并且要求密码
    volumes:
      - redis_data:/data
    restart: unless-stopped
    command: ["redis-server", "--appendonly", "yes", "--requirepass", "${REDIS_PASSWORD:?set REDIS_PASSWORD}"]

volumes:
  redis_data:

networks:
  default:
    driver: bridge