huty
3ad430e3e3
支持两种部署模式，兼容新建 MySQL 和现有 MySQL： - Dockerfile：Python 3.12-slim 两阶段构建，非 root 运行 - docker-compose.yml：全栈模式（含 MySQL 8.0 + 可选 Nginx） - docker-compose.external-db.yml：接入现有 MySQL 模式 - docker/entrypoint.sh：自动等待 DB 就绪 → 初始化表 → 启动 Gunicorn - docker/nginx.conf：反向代理 + 静态文件直出 + 安全响应头 - .env.docker.example / .env.external-db.example：各模式配置示例 - .gitattributes：确保 entrypoint.sh 在 Windows 上保持 LF 换行 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
119 lines
4.4 KiB
YAML
119 lines
4.4 KiB
YAML
# ═══════════════════════════════════════════════════════════════
|
|
# docker-compose.yml — 模式一：新建 MySQL（全栈部署）
|
|
#
|
|
# 用法：
|
|
# cp .env.docker.example .env.docker
|
|
# # 编辑 .env.docker 修改密码和 SECRET_KEY
|
|
# docker compose --env-file .env.docker up -d
|
|
#
|
|
# 包含服务：
|
|
# db — MySQL 8.0
|
|
# app — Flask + Gunicorn
|
|
# nginx — Nginx 反向代理（可选，使用 --profile nginx 启用）
|
|
# ═══════════════════════════════════════════════════════════════
|
|
|
|
services:
|
|
|
|
# ── MySQL 数据库 ────────────────────────────────────────────
|
|
db:
|
|
image: mysql:8.0
|
|
container_name: resource_library_db
|
|
restart: unless-stopped
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
|
|
MYSQL_DATABASE: ${MYSQL_DATABASE:-resource_library}
|
|
MYSQL_USER: ${MYSQL_USER:-resource_library}
|
|
MYSQL_PASSWORD: ${MYSQL_PASSWORD}
|
|
volumes:
|
|
- mysql_data:/var/lib/mysql
|
|
- ./docker/mysql-init:/docker-entrypoint-initdb.d:ro # 可放自定义初始化 SQL
|
|
command: >
|
|
--character-set-server=utf8mb4
|
|
--collation-server=utf8mb4_unicode_ci
|
|
--default-authentication-plugin=mysql_native_password
|
|
--innodb-buffer-pool-size=256M
|
|
ports:
|
|
- "${MYSQL_EXPOSE_PORT:-127.0.0.1:3306}:3306" # 默认仅本机可访问
|
|
healthcheck:
|
|
test: ["CMD", "mysqladmin", "ping", "-h", "localhost",
|
|
"-u", "${MYSQL_USER:-resource_library}",
|
|
"-p${MYSQL_PASSWORD}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 30s
|
|
networks:
|
|
- backend
|
|
|
|
# ── Flask 应用 ──────────────────────────────────────────────
|
|
app:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
container_name: resource_library_app
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
FLASK_ENV: ${FLASK_ENV:-production}
|
|
SECRET_KEY: ${SECRET_KEY}
|
|
DATABASE_URL: mysql+pymysql://${MYSQL_USER:-resource_library}:${MYSQL_PASSWORD}@db:3306/${MYSQL_DATABASE:-resource_library}
|
|
ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
|
|
ADMIN_PASSWORD: ${ADMIN_PASSWORD:-Admin@123456}
|
|
ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@example.com}
|
|
GUNICORN_WORKERS: ${GUNICORN_WORKERS:-4}
|
|
GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-120}
|
|
MAX_UPLOAD_SIZE_MB: ${MAX_UPLOAD_SIZE_MB:-500}
|
|
LOG_LEVEL: ${LOG_LEVEL:-info}
|
|
volumes:
|
|
- uploads_data:/app/app/static/uploads
|
|
ports:
|
|
- "${APP_PORT:-5000}:5000" # 使用 Nginx 时可去掉此行
|
|
networks:
|
|
- backend
|
|
- frontend
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "20m"
|
|
max-file: "5"
|
|
|
|
# ── Nginx 反向代理（可选，加 --profile nginx 启用）──────────
|
|
nginx:
|
|
image: nginx:1.27-alpine
|
|
container_name: resource_library_nginx
|
|
restart: unless-stopped
|
|
profiles: ["nginx"]
|
|
depends_on:
|
|
- app
|
|
ports:
|
|
- "${NGINX_HTTP_PORT:-80}:80"
|
|
- "${NGINX_HTTPS_PORT:-443}:443"
|
|
volumes:
|
|
- ./docker/nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
|
- uploads_data:/app/app/static/uploads:ro # 让 Nginx 直接服务静态文件
|
|
# - ./docker/ssl:/etc/nginx/ssl:ro # HTTPS 证书目录（取消注释后使用）
|
|
networks:
|
|
- frontend
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
# ── 持久化卷 ────────────────────────────────────────────────────
|
|
volumes:
|
|
mysql_data:
|
|
name: resource_library_mysql
|
|
uploads_data:
|
|
name: resource_library_uploads
|
|
|
|
# ── 网络 ────────────────────────────────────────────────────────
|
|
networks:
|
|
backend:
|
|
name: resource_library_backend
|
|
internal: true # db 不暴露给外部网络
|
|
frontend:
|
|
name: resource_library_frontend
|