docker-compose.yml

# Docker Compose ≥ 2.23.1。默认密码和密钥公开，公网部署建议修改顶部配置。
# 首次部署：docker compose pull && docker compose up -d --wait
# 升级前停止应用并备份 MySQL 和 app-data，禁止使用 down -v。
name: springagent

x-settings:
  mysql-user: &mysql-user "springagent"
  mysql-password: &mysql-password "springagent-mysql"
  mysql-root-password: &mysql-root-password "springagent-mysql"
  rabbitmq-user: &rabbitmq-user "springagent"
  rabbitmq-password: &rabbitmq-password "springagent-rabbitmq"
  internal-token: &internal-token "springagent-default-internal-token-0123456789abcdef"
  web-ports: &web-ports ["17900:80"]

services:
  mysql:
    image: mysql:8.0
    environment:
      MYSQL_ROOT_PASSWORD: *mysql-root-password
      MYSQL_DATABASE: springagent
      MYSQL_USER: *mysql-user
      MYSQL_PASSWORD: *mysql-password
    volumes:
      - mysql-data:/var/lib/mysql
    healthcheck:
      test: ["CMD-SHELL", "MYSQL_PWD=\"$${MYSQL_PASSWORD}\" mysql -h 127.0.0.1 -u\"$${MYSQL_USER}\" -D springagent -e 'SELECT 1' >/dev/null"]
      interval: 5s
      timeout: 5s
      retries: 30
      start_period: 30s
    command: >
      --character-set-server=utf8mb4
      --collation-server=utf8mb4_unicode_ci
      --performance-schema=OFF
      --innodb-buffer-pool-size=64M
      --innodb-log-buffer-size=8M
      --innodb-redo-log-capacity=128M
      --max-connections=50
      --table-open-cache=200
      --thread-cache-size=10
      --sort-buffer-size=256K
      --join-buffer-size=256K
      --read-buffer-size=256K
      --read-rnd-buffer-size=256K
    restart: unless-stopped

  redis:
    image: redis:7
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 20
    restart: unless-stopped

  rabbitmq:
    image: rabbitmq:3-management
    hostname: rabbitmq
    user: "999:999"
    environment:
      RABBITMQ_DEFAULT_USER: *rabbitmq-user
      RABBITMQ_DEFAULT_PASS: *rabbitmq-password
    volumes:
      - rabbitmq-data:/var/lib/rabbitmq
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
      interval: 5s
      timeout: 5s
      retries: 30
      start_period: 20s
    restart: unless-stopped

  springagent:
    image: ghcr.io/radiant303/springagent:latest
    container_name: springagent
    init: true
    stop_grace_period: 120s
    command:
      - /bin/sh
      - -ec
      - |
        umask 022
        echo 'SpringAgent：开始数据库迁移。'
        if alembic upgrade head; then
          echo 'SpringAgent：数据库迁移成功，启动应用。'
        else
          status=$$?
          echo 'SpringAgent：数据库迁移失败，应用未启动。' >&2
          exit "$$status"
        fi
        # 共享卷根目录需对只读分发容器可遍历；页面子树由应用在启动时逐个开放
        chmod a+rx /data/cloud
        if [ -d /data/cloud/works ]; then
          chmod a+rx /data/cloud/works
        fi
        exec python /app/start.py
    environment:
      MYSQL_USER: *mysql-user
      MYSQL_PASSWORD: *mysql-password
      RABBITMQ_USER: *rabbitmq-user
      RABBITMQ_PASSWORD: *rabbitmq-password
      SPRINGAGENT_CLOUD_DATA_ROOT: /data/cloud
      SPRINGAGENT_CLOUD_REDIS_URL: redis://redis:6379/0
      SPRINGAGENT_CLOUD_GATEWAY_BASE_URL: http://127.0.0.1:16900
      SPRINGAGENT_CLOUD_INTERNAL_TOKEN: *internal-token
      SPRING_DATASOURCE_URL: "jdbc:mysql://mysql:3306/springagent?characterEncoding=UTF-8&serverTimezone=UTC"
      SPRING_DATASOURCE_USERNAME: *mysql-user
      SPRING_DATASOURCE_PASSWORD: *mysql-password
      SPRING_DATA_REDIS_HOST: redis
      SPRING_DATA_REDIS_PORT: 6379
      SPRING_RABBITMQ_HOST: rabbitmq
      SPRING_RABBITMQ_PORT: 5672
      SPRING_RABBITMQ_USERNAME: *rabbitmq-user
      SPRING_RABBITMQ_PASSWORD: *rabbitmq-password
      APP_DATA_ROOT: /data/cloud
      ENGINE_BASE_URL: http://127.0.0.1:15900
      INTERNAL_TOKEN: *internal-token
    volumes:
      - app-data:/data/cloud
    healthcheck:
      test: ["CMD", "python", "/app/start.py", "--healthcheck"]
      interval: 5s
      timeout: 10s
      retries: 30
      start_period: 60s
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    restart: "no"

  nginx:
    image: nginx:1.27-alpine
    ports: *web-ports
    configs:
      - source: nginx-config
        target: /etc/nginx/conf.d/default.conf
    volumes:
      - app-data:/data/cloud:ro
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1/healthz"]
      interval: 5s
      timeout: 5s
      retries: 20
    depends_on:
      springagent:
        condition: service_healthy
    restart: unless-stopped

configs:
  nginx-config:
    content: |
      map $$http_upgrade $$connection_upgrade {
          default upgrade;
          "" close;
      }
      map "$$scheme:$$http_x_forwarded_proto" $$forwarded_proto {
          default $$scheme;
          "http:https" https;
      }
      server {
          listen 80;
          server_name _;
          client_max_body_size 5120m;
          location = /healthz {
              access_log off;
              return 200;
          }
          location /_internal/works/ {
              internal;
              alias /data/cloud/works/;
              disable_symlinks on;
              add_header Server-Timing $$upstream_http_server_timing always;
          }
          location /_internal/ {
              return 404;
          }
          location /ws {
              proxy_pass http://springagent:16900;
              proxy_http_version 1.1;
              proxy_set_header Upgrade $$http_upgrade;
              proxy_set_header Connection $$connection_upgrade;
              proxy_read_timeout 3600s;
              proxy_set_header Host $$http_host;
              proxy_set_header X-Forwarded-Proto $$forwarded_proto;
              proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
              proxy_set_header X-Accel-Capable nginx;
          }
          location / {
              proxy_pass http://springagent:16900;
              proxy_set_header Host $$http_host;
              proxy_set_header X-Forwarded-Proto $$forwarded_proto;
              proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
              proxy_set_header X-Accel-Capable nginx;
          }
      }

networks:
  default:
    driver: bridge

volumes:
  mysql-data:
  redis-data:
  rabbitmq-data:
  app-data: