53 lines
1.7 KiB
YAML
53 lines
1.7 KiB
YAML
services:
|
||
issue-ai:
|
||
build: .
|
||
container_name: issue-ai
|
||
ports:
|
||
- "6176:3000"
|
||
volumes:
|
||
- issue-data:/app/data
|
||
- issue-uploads:/app/uploads
|
||
- issue-reports:/app/reports
|
||
# .next 目录从主机挂载，npm run build 后直接生效，无需重建镜像
|
||
- ./.next:/app/.next
|
||
# 运行时从 LLDAP 容器动态读取 admin 密码（已迁移至环境变量注入）
|
||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||
environment:
|
||
- DATABASE_PATH=/app/data/issue.db
|
||
- JWT_SECRET=${JWT_SECRET:-oa-shared-jwt-secret-tlyq-2026}
|
||
- ADMIN_PASSWORD=${ADMIN_PASSWORD:-admin123}
|
||
- LLDAP_ADMIN_PASSWORD=${LLDAP_ADMIN_PASSWORD}
|
||
- ASSETS_API_URL=${ASSETS_API_URL:-https://assets.tlyq.ai/api}
|
||
- ASSETS_API_KEY=${ASSETS_API_KEY}
|
||
- ALLOWED_API_KEYS=${ALLOWED_API_KEYS}
|
||
- NODE_ENV=production
|
||
- COOKIE_DOMAIN=.tlyq.ai
|
||
- AUTHELIA_URL=${AUTHELIA_URL:-https://sso.tlyq.ai}
|
||
- LDAP_URL=ldap://lldap:3890
|
||
- LDAP_BASE_DN=dc=tlyq,dc=ai
|
||
- LDAP_ADMIN_DN=uid=admin,ou=people,dc=tlyq,dc=ai
|
||
- TZ=Asia/Shanghai
|
||
- NODE_TLS_REJECT_UNAUTHORIZED=0
|
||
# OIDC 配置
|
||
- OIDC_CLIENT_ID=${OIDC_CLIENT_ID:-issue-oidc}
|
||
- OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET}
|
||
- OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI:-https://issue.tlyq.ai/api/auth/callback}
|
||
healthcheck:
|
||
test: ["CMD", "node", "-e", "fetch('http://localhost:3000/api/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
|
||
interval: 30s
|
||
timeout: 5s
|
||
retries: 3
|
||
start_period: 40s
|
||
restart: unless-stopped
|
||
networks:
|
||
- webnet
|
||
|
||
volumes:
|
||
issue-data:
|
||
issue-uploads:
|
||
issue-reports:
|
||
|
||
networks:
|
||
webnet:
|
||
external: true
|