Blog/docker-compose.yml at master · RyneExplorer/Blog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
services:
  blog-api:
    # 1. 使用当前 blog 目录的 Dockerfile 构建后端镜像。
    build:
      context: .
      dockerfile: Dockerfile
    container_name: blog-api
    restart: unless-stopped
    ports:
      - "8083:8083"
    environment:
      # 2. 敏感配置通过环境变量注入，避免写死到配置文件和镜像中。
      MYSQL_PASSWORD: ${MYSQL_ROOT_PASSWORD:-123456}
      REDIS_PASSWORD: ${REDIS_PASSWORD:-123456}
      JWT_SECRET: ${JWT_SECRET:-gan jiu wan le-just do it}
      BLOG_APP_MODE: release
      TZ: Asia/Shanghai
    volumes:
      # 3. 上传文件和日志挂载到服务器宿主机目录，方便直接查看和备份。
      - ./configs/config.docker.yaml:/app/config.yaml
      - ./uploads:/app/uploads
      - ./logs:/app/logs
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - blog_net

  mysql:
    image: mysql:8.4
    container_name: blog-mysql
    restart: unless-stopped
    environment:
      # 4. MySQL 初始化数据库名和 root 密码，密码可通过宿主机环境变量覆盖。
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-123456}
      MYSQL_DATABASE: blog
      TZ: Asia/Shanghai
    volumes:
      # 5. MySQL 数据挂载到服务器宿主机目录，避免容器删除后数据丢失。
      - /home/ryne/blog/data/mysql:/var/lib/mysql
      # 6. 首次初始化 MySQL 数据目录时，官方镜像会自动执行该目录下的 SQL 脚本。
      - ./scripts/blog.sql:/docker-entrypoint-initdb.d/001-blog.sql:ro
    healthcheck:
      test: [ "CMD-SHELL", "mysqladmin ping -h localhost -uroot -p\"$${MYSQL_ROOT_PASSWORD}\" --silent" ]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s
    networks:
      - blog_net

  redis:
    image: redis:7.4-alpine
    container_name: blog-redis
    restart: unless-stopped
    environment:
      # 6. Redis 密码和后端使用同一个 REDIS_PASSWORD 环境变量。
      REDIS_PASSWORD: ${REDIS_PASSWORD:-123456}
      TZ: Asia/Shanghai
    command: [ "sh", "-c", "redis-server --appendonly yes --requirepass \"$${REDIS_PASSWORD}\"" ]
    volumes:
      # 7. Redis AOF 数据挂载到服务器宿主机目录。
      - /home/ryne/blog/data/redis:/data
    healthcheck:
      test: [ "CMD-SHELL", "redis-cli -a \"$${REDIS_PASSWORD}\" ping | grep PONG" ]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 10s
    networks:
      - blog_net

networks:
  blog_net:
    driver: bridge