refactor: migrate deploy layout and stabilize compose runtime

2026-05-02 12:24:39 +08:00
parent e3164f34ec
commit 85689bf1bd
24 changed files with 745 additions and 568 deletions
@@ -0,0 +1,56 @@
+DATABASE_URL=postgresql+psycopg://fquiz:replace_strong_password@db:5432/fquiz
+DB_HOST=db
+DB_PORT=5432
+DB_NAME=postgres
+DB_SCHEMA=public
+DB_USERNAME=fquiz
+DB_PASSWORD=replace_strong_password
+
+USER_USERNAME_COLUMN=username
+USER_PASSWORD_COLUMN=password_hash
+USER_STATUS_COLUMN=status
+
+FILE_VFS_ROOT=./data/vfs
+MINIO_ENABLED=true
+MINIO_ENDPOINT=http://minio:9000
+MINIO_ACCESS_KEY=replace_strong_access_key
+MINIO_SECRET_KEY=replace_strong_secret_key
+MINIO_BUCKET=fquiz-files
+MINIO_REGION=us-east-1
+
+JWT_SECRET_KEY=replace_strong_jwt_secret
+ACCESS_TOKEN_EXPIRE_MINUTES=480
+REFRESH_TOKEN_EXPIRE_DAYS=30
+REFRESH_COOKIE_SECURE=true
+REFRESH_COOKIE_SAMESITE=lax
+
+LLM_PROVIDER_API_KEYS=
+LLM_REQUEST_TIMEOUT_SECONDS=60
+CHAT_CONTEXT_MESSAGE_LIMIT=12
+CHAT_DEFAULT_SYSTEM_PROMPT=You are a helpful assistant.
+
+CELERY_BROKER_URL=redis://redis:6379/0
+CELERY_RESULT_BACKEND=redis://redis:6379/1
+CELERY_TIMEZONE=Asia/Shanghai
+SCHEDULER_EXPIRE_INTERVAL_SECONDS=60
+FLOWER_API_BASE_URL=http://flower:5555
+FLOWER_API_TIMEOUT_SECONDS=10
+FLOWER_BASIC_AUTH=admin:change_me
+WORKER_REGISTRY_TTL_SECONDS=90
+CELERY_WORKER_QUEUES=default,celery
+
+WINE_BINARY_PATH=wine
+WINE_ALLOWED_ROOT=./data/wine
+WINE_DEFAULT_TIMEOUT_SECONDS=300
+WINE_MAX_TIMEOUT_SECONDS=1800
+
+INITIAL_ADMIN_EMAIL=admin@example.com
+INITIAL_ADMIN_USERNAME=admin
+INITIAL_ADMIN_PASSWORD=replace_strong_admin_password
+
+POSTGRES_DB=fquiz
+POSTGRES_USER=fquiz
+POSTGRES_PASSWORD=replace_strong_password
+
+API_CORS_ORIGINS=https://quiz.example.com
+API_CORS_ORIGIN_REGEX=
@@ -0,0 +1,167 @@
+services:
+  db:
+    image: ${POSTGRES_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-db
+    environment:
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      PGDATA: /var/lib/postgresql/data/pgdata
+    ports:
+      - "${POSTGRES_PORT}:5432"
+    volumes:
+      - ./data/postgres:/var/lib/postgresql/data
+    restart: unless-stopped
+
+  redis:
+    image: ${REDIS_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-redis
+    command: redis-server --appendonly yes
+    ports:
+      - "${REDIS_PORT}:6379"
+    volumes:
+      - ./data/redis:/data
+    restart: unless-stopped
+
+  minio:
+    image: ${MINIO_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-minio
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ACCESS_KEY}
+      MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY}
+    ports:
+      - "${MINIO_API_PORT}:9000"
+      - "${MINIO_CONSOLE_PORT}:9001"
+    volumes:
+      - ./data/minio:/data
+    restart: unless-stopped
+
+  minio-init:
+    image: ${MINIO_MC_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-minio-init
+    depends_on:
+      - minio
+    entrypoint: /bin/sh
+    command:
+      - -c
+      - >
+        until mc alias set local "$${MINIO_ENDPOINT}" "$${MINIO_ACCESS_KEY}" "$${MINIO_SECRET_KEY}"; do
+          sleep 1;
+        done;
+        mc mb -p "local/$${MINIO_BUCKET}" || true;
+    environment:
+      MINIO_ENDPOINT: ${MINIO_ENDPOINT}
+      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
+      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
+      MINIO_BUCKET: ${MINIO_BUCKET}
+    restart: "no"
+
+  api:
+    image: ${API_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-api
+    depends_on:
+      - db
+      - redis
+      - minio
+      - minio-init
+    env_file:
+      - ./.env.prod
+    environment:
+      API_HOST: 0.0.0.0
+      API_PORT: 8000
+      DB_HOST: db
+      DB_PORT: 5432
+      MINIO_ENDPOINT: http://minio:9000
+      CELERY_BROKER_URL: redis://redis:6379/0
+      CELERY_RESULT_BACKEND: redis://redis:6379/1
+    expose:
+      - "8000"
+    volumes:
+      - ./data/app:/app/data
+    restart: unless-stopped
+
+  celery-worker:
+    image: ${API_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-celery-worker
+    command:
+      - celery
+      - -A
+      - app.core.celery_app.celery_app
+      - worker
+      - --loglevel=${CELERY_LOG_LEVEL}
+      - --concurrency=${CELERY_WORKER_CONCURRENCY}
+      - --queues=${CELERY_WORKER_QUEUES}
+    depends_on:
+      - api
+      - redis
+    env_file:
+      - ./.env.prod
+    environment:
+      DB_HOST: db
+      DB_PORT: 5432
+      CELERY_BROKER_URL: redis://redis:6379/0
+      CELERY_RESULT_BACKEND: redis://redis:6379/1
+      FLOWER_API_BASE_URL: http://flower:5555
+    volumes:
+      - ./data/app:/app/data
+    restart: unless-stopped
+
+  celery-beat:
+    image: ${API_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-celery-beat
+    command:
+      - celery
+      - -A
+      - app.core.celery_app.celery_app
+      - beat
+      - --loglevel=${CELERY_LOG_LEVEL}
+      - --schedule=/app/data/celery/beat-schedule
+    depends_on:
+      - api
+      - redis
+    env_file:
+      - ./.env.prod
+    environment:
+      DB_HOST: db
+      DB_PORT: 5432
+      CELERY_BROKER_URL: redis://redis:6379/0
+      CELERY_RESULT_BACKEND: redis://redis:6379/1
+    volumes:
+      - ./data/app:/app/data
+    restart: unless-stopped
+
+  flower:
+    image: ${API_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-flower
+    command:
+      - celery
+      - -A
+      - app.core.celery_app.celery_app
+      - flower
+      - --address=0.0.0.0
+      - --port=5555
+      - --persistent=False
+      - --basic-auth=${FLOWER_BASIC_AUTH}
+    depends_on:
+      - redis
+    environment:
+      CELERY_BROKER_URL: redis://redis:6379/0
+      CELERY_RESULT_BACKEND: redis://redis:6379/1
+      CELERY_TIMEZONE: ${CELERY_TIMEZONE}
+      FLOWER_BASIC_AUTH: ${FLOWER_BASIC_AUTH}
+    expose:
+      - "5555"
+    restart: unless-stopped
+
+  web:
+    image: ${WEB_IMAGE}
+    container_name: ${COMPOSE_PROJECT_NAME}-web
+    depends_on:
+      - api
+    environment:
+      NEXT_PUBLIC_API_BASE_URL: ${NEXT_PUBLIC_API_BASE_URL}
+      NODE_ENV: production
+    expose:
+      - "3000"
+    restart: unless-stopped