Files
tyapi-server/docker-compose.prod.yml
2025-07-28 01:46:39 +08:00

189 lines
5.0 KiB
YAML

version: "3.8"
services:
# PostgreSQL 数据库 (生产环境)
postgres:
image: postgres:16.9
container_name: tyapi-postgres-prod
environment:
TZ: Asia/Shanghai
PGTZ: Asia/Shanghai
POSTGRES_DB: ${DB_NAME:-tyapi_prod}
POSTGRES_USER: ${DB_USER:-tyapi_user}
POSTGRES_PASSWORD: ${DB_PASSWORD}
POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
# 性能优化配置
POSTGRES_SHARED_PRELOAD_LIBRARIES: pg_stat_statements
volumes:
- postgres_data:/var/lib/postgresql/data
- ./scripts/init.sql:/docker-entrypoint-initdb.d/init.sql
networks:
- tyapi-network
healthcheck:
test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-tyapi_user}"]
interval: 30s
timeout: 10s
retries: 5
start_period: 60s
restart: unless-stopped
deploy:
resources:
limits:
memory: 2G
cpus: "1.0"
reservations:
memory: 512M
cpus: "0.5"
# 生产环境暴露数据库端口到主机
ports:
- "${DB_PORT:-25010}:5432"
# Redis 缓存 (生产环境)
redis:
image: redis:8.0.2
container_name: tyapi-redis-prod
environment:
TZ: Asia/Shanghai
REDIS_PASSWORD: ${REDIS_PASSWORD}
volumes:
- redis_data:/data
- ./deployments/docker/redis.conf:/usr/local/etc/redis/redis.conf
command: >
sh -c "
if [ ! -z '${REDIS_PASSWORD}' ]; then
redis-server /usr/local/etc/redis/redis.conf --requirepass ${REDIS_PASSWORD}
else
redis-server /usr/local/etc/redis/redis.conf
fi
"
networks:
- tyapi-network
healthcheck:
test: >
sh -c "
if [ ! -z '${REDIS_PASSWORD}' ]; then
redis-cli -a ${REDIS_PASSWORD} ping
else
redis-cli ping
fi
"
interval: 30s
timeout: 10s
retries: 5
restart: unless-stopped
deploy:
resources:
limits:
memory: 1G
cpus: "0.5"
reservations:
memory: 256M
cpus: "0.2"
# 生产环境不暴露端口到主机
# ports:
# - "6379:6379"
# TYAPI 应用程序
tyapi-app:
build:
context: .
dockerfile: Dockerfile
args:
VERSION: ${APP_VERSION:-1.0.0}
COMMIT: ${GIT_COMMIT:-dev}
BUILD_TIME: ${BUILD_TIME}
container_name: tyapi-app-prod
environment:
# 时区配置
TZ: Asia/Shanghai
# 环境设置
ENV: production
# 服务器配置
SERVER_PORT: ${SERVER_PORT:-8080}
SERVER_MODE: release
# 数据库配置
DB_HOST: postgres
DB_PORT: 5432
DB_USER: ${DB_USER:-tyapi_user}
DB_PASSWORD: ${DB_PASSWORD}
DB_NAME: ${DB_NAME:-tyapi_prod}
DB_SSLMODE: ${DB_SSLMODE:-require}
# Redis配置
REDIS_HOST: redis
REDIS_PORT: 6379
REDIS_PASSWORD: ${REDIS_PASSWORD}
# JWT配置
JWT_SECRET: ${JWT_SECRET}
# 监控配置
TRACING_ENABLED: false
METRICS_ENABLED: false
# 日志配置
LOG_LEVEL: ${LOG_LEVEL:-info}
LOG_FORMAT: json
# 短信配置
SMS_ACCESS_KEY_ID: ${SMS_ACCESS_KEY_ID}
SMS_ACCESS_KEY_SECRET: ${SMS_ACCESS_KEY_SECRET}
SMS_SIGN_NAME: ${SMS_SIGN_NAME}
SMS_TEMPLATE_CODE: ${SMS_TEMPLATE_CODE}
ports:
- "${APP_PORT:-25000}:8080"
volumes:
- app_logs:/app/logs
networks:
- tyapi-network
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
interval: 30s
timeout: 10s
retries: 5
start_period: 60s
restart: unless-stopped
deploy:
resources:
limits:
memory: 1G
cpus: "1.0"
reservations:
memory: 256M
cpus: "0.3"
volumes:
postgres_data:
driver: local
redis_data:
driver: local
app_logs:
driver: local
networks:
tyapi-network:
driver: bridge
ipam:
config:
- subnet: 172.20.0.0/16