feat(deploy): 完整 Docker 部署方案 — 寄卖商城 + 积分商城
新增两步独立 Docker 部署方案（czleilei240 环境）： 步骤一 寄卖商城（integral-resell） - step1-integral/docker-compose.yml：redis(Alpine自建) + houtai(webman PHP8) + h5(Nginx) - houtai.Dockerfile：PHP 8.0 + 阿里云镜像源 + webman.bin entrypoint - h5.Dockerfile：Nginx + configs.js 环境变量动态重写 - redis.Dockerfile：Alpine + apk 构建，绕过 DockerHub 镜像源问题 - 宿主机 bind-mount：/www/wwwroot/leileiadmin.czchunfang.com（FTP可直接更新程序） 步骤二 积分商城（single-shop-22） - step2-single-shop/docker-compose.yml：redis + admin-api + front-api + admin-web + h5 - Java Dockerfiles：OpenJDK 17 + --add-opens Spring Boot 2.2.6 兼容 公共配置 - nginx/：四个域名宝塔 Nginx 反代配置（HTTP→HTTPS 301、SSL 终止） - scripts/：sync-to-server.sh / deploy-step1.sh / remote-up.sh - DOCKER_DEPLOY.md：完整部署文档 Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
danaisuiyuan
12
.gitignore
vendored
12
.gitignore
vendored
@@ -19,3 +19,15 @@ backend/**/logs/
|
|||||||
backend/**/*.log
|
backend/**/*.log
|
||||||
backend/.idea/
|
backend/.idea/
|
||||||
backend/crmebimage/
|
backend/crmebimage/
|
||||||
|
|
||||||
|
# 独立子仓库（各自有独立 git，不纳入根 repo）
|
||||||
|
integral-resell/
|
||||||
|
single-shop-22/
|
||||||
|
MER-2.2_2601/
|
||||||
|
db/
|
||||||
|
|
||||||
|
# 敏感运行时配置（不入库）
|
||||||
|
deploy/docker/scripts/server.env
|
||||||
|
deploy/docker/step1-integral/.env
|
||||||
|
deploy/docker/step1-integral/houtai.env
|
||||||
|
deploy/docker/step2-single-shop/.env
|
||||||
|
|||||||
469
DOCKER_DEPLOY.md
Normal file
469
DOCKER_DEPLOY.md
Normal file
@@ -0,0 +1,469 @@
|
|||||||
|
# Docker 部署方案（寄卖商城 + 积分商城前后端）
|
||||||
|
|
||||||
|
> 本方案覆盖：
|
||||||
|
> - **integral-resell（积分商城）**：Webman PHP 后端二进制 + H5 静态站
|
||||||
|
> - **single-shop-22（寄卖商城）**：CRMEB Spring Boot 双 jar 后端 + Vue 管理后台 + uni-app H5
|
||||||
|
> - **Redis**：每个子栈独立容器（两套互不干扰）
|
||||||
|
>
|
||||||
|
> 不包含：`MER-2.2_2601` 多商户、Kafka 同步、MySQL（使用 **阿里云 RDS for MySQL**）。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 两步独立部署（推荐）
|
||||||
|
|
||||||
|
从 `czleilei240` 分支开始，两个商城**各自独立**部署，互不依赖。
|
||||||
|
|
||||||
|
| | 步骤一 寄卖商城 | 步骤二 积分商城 |
|
||||||
|
|---|---|---|
|
||||||
|
| 项目 | `integral-resell` | `single-shop-22` |
|
||||||
|
| 目录 | `deploy/docker/step1-integral/` | `deploy/docker/step2-single-shop/` |
|
||||||
|
| 服务 | redis · integral-houtai · integral-h5 | redis · single-admin-api · single-front-api · single-admin-web · single-h5 |
|
||||||
|
| 宿主机端口 | `18080` | `18081`(管理后台) `18082`(H5) |
|
||||||
|
| compose name | `resell-czleilei240` | `jifenmall-czleilei240` |
|
||||||
|
| 详细说明 | [README](deploy/docker/step1-integral/README.md) | [README](deploy/docker/step2-single-shop/README.md) |
|
||||||
|
|
||||||
|
### 步骤一 — 寄卖商城（integral-resell）
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker/step1-integral
|
||||||
|
cp .env.example .env && cp houtai.env.example houtai.env
|
||||||
|
# 填写 .env 中的 REDIS_PASSWORD
|
||||||
|
# 填写 houtai.env 中的 DB_PASSWORD 和 REDIS_PASSWORD（两者须一致）
|
||||||
|
docker compose --env-file .env up -d --build
|
||||||
|
```
|
||||||
|
|
||||||
|
### 步骤二 — 积分商城（single-shop-22）
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker/step2-single-shop
|
||||||
|
cp .env.example .env
|
||||||
|
# 填写 RDS_PASSWORD、REDIS_PASSWORD
|
||||||
|
docker compose --env-file .env up -d --build
|
||||||
|
# Java 首次构建约 10-20 分钟，可用 logs -f 观察进度
|
||||||
|
```
|
||||||
|
|
||||||
|
> 下方章节描述的是历史上合并部署时的 `docker-compose.yml`（`deploy/docker/docker-compose.yml`），供参考。两步拆分方案已取代合并方案。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 一、架构总览
|
||||||
|
|
||||||
|
```mermaid
|
||||||
|
flowchart LR
|
||||||
|
user((用户)) -->|H5/管理后台| EdgeLB[(阿里云 SLB / Nginx)]
|
||||||
|
|
||||||
|
subgraph Host [Docker 主机]
|
||||||
|
direction TB
|
||||||
|
|
||||||
|
subgraph integralStack [积分商城]
|
||||||
|
integral_h5[integral-h5\nNginx :80]
|
||||||
|
integral_houtai[integral-houtai\nwebman.bin :8787]
|
||||||
|
end
|
||||||
|
|
||||||
|
subgraph singleStack [寄卖商城]
|
||||||
|
single_admin_web[single-admin-web\nNginx :80]
|
||||||
|
single_h5[single-h5\nNginx :80]
|
||||||
|
single_admin_api[single-admin-api\nminiao-admin :30032]
|
||||||
|
single_front_api[single-front-api\nminiao-front :30031]
|
||||||
|
end
|
||||||
|
|
||||||
|
redis[(redis :6379)]
|
||||||
|
end
|
||||||
|
|
||||||
|
EdgeLB -- jf-h5.* --> single_h5
|
||||||
|
EdgeLB -- jfadmin.* --> single_admin_web
|
||||||
|
EdgeLB -- admin.* --> integral_h5
|
||||||
|
|
||||||
|
integral_h5 -- /api/ --> integral_houtai
|
||||||
|
single_admin_web -- /api/ --> single_admin_api
|
||||||
|
single_h5 -- /api/ --> single_front_api
|
||||||
|
|
||||||
|
integral_houtai --> redis
|
||||||
|
single_admin_api --> redis
|
||||||
|
single_front_api --> redis
|
||||||
|
|
||||||
|
integral_houtai --> RDS[(阿里云 RDS MySQL)]
|
||||||
|
single_admin_api --> RDS
|
||||||
|
single_front_api --> RDS
|
||||||
|
```
|
||||||
|
|
||||||
|
### 服务清单
|
||||||
|
|
||||||
|
| 服务 | 镜像构建来源 | 容器内端口 | 默认宿主机端口 | 说明 |
|
||||||
|
|------|--------------|------------|----------------|------|
|
||||||
|
| `redis` | 官方 `redis:6.2-alpine` | 6379 | 6379 (可不暴露) | 持久化 AOF，挂卷 `redis-data` |
|
||||||
|
| `integral-houtai` | `integral-resell/houtai/` | 8787 | （不暴露） | Webman 静态 ELF；同容器写 `runtime/` 与 `public/upload/` |
|
||||||
|
| `integral-h5` | `integral-resell/h5/` | 80 | 18080 | 服务静态站；`/api/` 反代到 `integral-houtai`；启动时根据 env 重写 `static/configs.js` |
|
||||||
|
| `single-admin-api` | `single-shop-22/backend/crmeb-admin` | 30032 | （不暴露） | 多阶段 Maven 构建出 `miao-admin-2.2.jar` |
|
||||||
|
| `single-front-api` | `single-shop-22/backend/crmeb-front` | 30031 | （不暴露） | 多阶段 Maven 构建出 `miao-front-2.2.jar` |
|
||||||
|
| `single-admin-web` | `single-shop-22/backend-adminend` | 80 | 18081 | 多阶段 Node 构建 `dist`；`/api/` 反代到 `single-admin-api` |
|
||||||
|
| `single-h5` | `single-shop-22/single_uniapp22miao` | 80 | 18082 | 多阶段 Node 构建 `unpackage/dist/build/h5`；`/api/` 反代到 `single-front-api` |
|
||||||
|
|
||||||
|
> **域名/端口策略**：建议在 docker 主机前再放一层 Nginx 或阿里云 SLB，按域名分发到 18080/18081/18082；下面的 compose 默认把这三个静态站暴露在宿主机不同端口。
|
||||||
|
|
||||||
|
### 共享资源 / 卷
|
||||||
|
|
||||||
|
| 卷 / 目录 | 容器内挂载点 | 用途 |
|
||||||
|
|-----------|-------------|------|
|
||||||
|
| `redis-data` | `/data` | Redis AOF 持久化 |
|
||||||
|
| `integral-runtime` | `/app/runtime` | Webman 运行时（session、views 缓存等） |
|
||||||
|
| `integral-upload` | `/app/public/upload` | 积分商城上传图片 |
|
||||||
|
| `single-images` | `/usr/local/crmeb/crmebimage` | 寄卖商城 `imagePath`，admin/front 两个 jar **共享** |
|
||||||
|
| `single-logs` | `/app/log` | Spring Boot 日志（按需保留） |
|
||||||
|
|
||||||
|
### 与外部资源的关系
|
||||||
|
|
||||||
|
| 资源 | 地址来源 | 说明 |
|
||||||
|
|------|---------|------|
|
||||||
|
| 阿里云 RDS MySQL | `.env` 中 `RDS_*` | RDS 白名单需放通宿主机出口 IP；建议同地域 VPC |
|
||||||
|
| OSS（可选） | `.env` 中 `OSS_*` | 不配置时积分商城走本地 `public/upload`；寄卖商城用 admin 后台界面里配置 |
|
||||||
|
| 短信（可选） | `.env` 中 `SMS_*` | 仅积分商城 `.env` 用到 |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 二、目录布局
|
||||||
|
|
||||||
|
```
|
||||||
|
integral-shop/
|
||||||
|
├── DOCKER_DEPLOY.md ← 本文档
|
||||||
|
├── deploy/
|
||||||
|
│ └── docker/
|
||||||
|
│ ├── docker-compose.yml
|
||||||
|
│ ├── .env.example
|
||||||
|
│ ├── README.md ← 一键启动说明（简版）
|
||||||
|
│ ├── redis/
|
||||||
|
│ │ └── redis.conf
|
||||||
|
│ ├── integral-resell/
|
||||||
|
│ │ ├── houtai.Dockerfile
|
||||||
|
│ │ ├── h5.Dockerfile
|
||||||
|
│ │ ├── nginx-h5.conf
|
||||||
|
│ │ ├── .env.template ← Webman 后端运行时 .env 模板
|
||||||
|
│ │ └── docker-entrypoint-h5.sh ← 启动时根据 env 改写 configs.js
|
||||||
|
│ └── single-shop/
|
||||||
|
│ ├── admin-api.Dockerfile
|
||||||
|
│ ├── front-api.Dockerfile
|
||||||
|
│ ├── admin-web.Dockerfile
|
||||||
|
│ ├── h5.Dockerfile
|
||||||
|
│ ├── application-docker.yml ← Spring Boot docker profile
|
||||||
|
│ ├── nginx-admin-web.conf
|
||||||
|
│ └── nginx-h5.conf
|
||||||
|
├── integral-resell/ ← 源码（不改动）
|
||||||
|
└── single-shop-22/ ← 源码（不改动）
|
||||||
|
```
|
||||||
|
|
||||||
|
> 所有 Dockerfile / compose 都**只读访问**源码目录，不会修改它们。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 三、配置与环境变量
|
||||||
|
|
||||||
|
复制一份 `deploy/docker/.env.example` 为 `deploy/docker/.env` 并按下面表格修改。
|
||||||
|
|
||||||
|
| 变量 | 用途 | 示例 |
|
||||||
|
|------|------|------|
|
||||||
|
| `TZ` | 容器时区 | `Asia/Shanghai` |
|
||||||
|
| `RDS_HOST` | 阿里云 RDS 外网/内网地址 | `rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com` |
|
||||||
|
| `RDS_PORT` | RDS 端口 | `3306` |
|
||||||
|
| `RDS_INTEGRAL_DB` | 积分商城数据库 | `yangtangyoupin` |
|
||||||
|
| `RDS_INTEGRAL_USER` / `RDS_INTEGRAL_PASS` | 积分商城账号 | 默认 `yangtangyoupin` / 来自原 sxsy80 |
|
||||||
|
| `RDS_SINGLE_DB` | 寄卖商城数据库（与积分共库） | `yangtangyoupin` |
|
||||||
|
| `RDS_SINGLE_USER` / `RDS_SINGLE_PASS` | 寄卖商城账号 | 同上 |
|
||||||
|
| `REDIS_PASSWORD` | 容器 Redis 密码 | 123456 |
|
||||||
|
| `REDIS_INTEGRAL_DB` | 积分商城使用的 Redis db | `0` |
|
||||||
|
| `REDIS_SINGLE_ADMIN_DB` | 寄卖 admin Redis db | `25` |
|
||||||
|
| `REDIS_SINGLE_FRONT_DB` | 寄卖 front Redis db | `26` |
|
||||||
|
| `INTEGRAL_API_PUBLIC_URL` | H5 调用后端的对外 URL | `https://admin.example.com` |
|
||||||
|
| `INTEGRAL_IMG_PUBLIC_URL` | H5 引用图片的对外 URL | `https://admin.example.com` |
|
||||||
|
| `INTEGRAL_H5_PUBLIC_URL` | H5 自身对外 URL | `https://h5.example.com/` |
|
||||||
|
| `INTEGRAL_SN_ID` | `configs.js` 中 `sn_id` | `17533260260405` |
|
||||||
|
| `INTEGRAL_APP_STR` | `configs.js` 中 `appStr`（**与寄卖 APP_SECRET 必须一致**） | `ZFyTNQTWEkCBczKzyUDJWE9Ecx260405` |
|
||||||
|
| `SINGLE_ADMIN_BASE_API` | 寄卖管理后台调用 API 的域名/路径 | 留空走同域 `/api/` 即可 |
|
||||||
|
| `SINGLE_H5_DOMAIN` | uni-app H5 调用 API 的域名 | 留空走同域 `/api/` 即可 |
|
||||||
|
| `SYNC_SOURCE_ID` / `SYNC_TARGET_MER_ID` | 多商户同步配置（无 MER 时留空） | `""` / `0` |
|
||||||
|
|
||||||
|
> **关键一致性**：积分商城 `configs.js#appStr` ↔ 积分商城 Webman `.env#APP_SECRET` ↔ 寄卖商城 admin 后台中的 `appStr` 必须一致；否则双向调用会鉴权失败。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 四、镜像构建策略
|
||||||
|
|
||||||
|
### 0. 基础镜像选型（与主机对齐）
|
||||||
|
|
||||||
|
| 服务 | 基础镜像 | libc | 选择理由 |
|
||||||
|
|------|----------|------|----------|
|
||||||
|
| `redis` | `redis:6.2-alpine` | musl | Redis 官方推荐，无 native 依赖 |
|
||||||
|
| `integral-houtai` | `php:8.0-cli-bullseye` (Debian 11) | **glibc** | 与宝塔 PHP 8.0.26 版本对齐；已装 pdo_mysql / redis / gd / imagick 等 webman 常用扩展 |
|
||||||
|
| `integral-h5` | `nginx:1.25-alpine` | musl | 纯静态文件 + nginx，无字体/native 依赖 |
|
||||||
|
| `single-admin-api` / `single-front-api` 构建 | `maven:3.8.8-eclipse-temurin-17` (Debian) | **glibc** | 与部署环境 OpenJDK 17.0.x 对齐；pom.xml source/target=1.8，Java 17 编译器向下兼容 |
|
||||||
|
| `single-admin-api` / `single-front-api` 运行 | `eclipse-temurin:17-jre-jammy` (Ubuntu 22.04) | **glibc** | 匹配主机 openjdk 17.0.18；Spring Boot 2.2.6 + Java 17 需额外 `--add-opens` JVM 参数（已写入 JAVA_OPTS）；预装 `fonts-dejavu` + `fonts-wqy-zenhei` |
|
||||||
|
| `single-admin-web` / `single-h5` 构建 | `node:16-alpine` | musl | 仅打包 JS/CSS，无 native 依赖 |
|
||||||
|
| `single-admin-web` / `single-h5` 运行 | `nginx:1.25-alpine` | musl | 同上 |
|
||||||
|
|
||||||
|
> **主机环境**：Debian-class（Linux kernel 6.1.164）/ x86_64 / Docker + BuildKit。
|
||||||
|
> 所有 `--platform=linux/amd64` 在主机上都是原生执行，**无 QEMU 模拟**；只有在 Apple Silicon 上本地 build 时才会走 QEMU。
|
||||||
|
> Java 后端最终镜像在 glibc 上运行，与主机 OS 完全同源；这样可避免 Alpine + musl 时验证码 / 中文字体 / POI 个别场景的兼容性问题。
|
||||||
|
|
||||||
|
### 1. integral-houtai（PHP Webman 二进制）
|
||||||
|
- 基础镜像：`debian:bookworm-slim`（webman.bin 为 ELF x86_64，静态链接，glibc 兼容）。
|
||||||
|
- 直接拷贝 `webman.bin`、`public/`、`runtime/views` 模板进镜像。
|
||||||
|
- `.env` **不打进镜像**，通过 `docker-compose` 把 `deploy/docker/integral-resell/.env.template` 渲染后挂进 `/app/.env`。
|
||||||
|
- 启动命令：`./webman.bin start -d`（业主指定的守护模式），entrypoint 在后台 `tail -F runtime/logs/*.log` 把日志接到容器 stdout，并监听主进程退出。收到 `SIGTERM` 时执行 `./webman.bin stop` 优雅退出。
|
||||||
|
|
||||||
|
### 2. integral-h5（静态站）
|
||||||
|
- 基础镜像：`nginx:1.25-alpine`。
|
||||||
|
- 直接拷贝 `integral-resell/h5/` 到 `/usr/share/nginx/html/`。
|
||||||
|
- `docker-entrypoint-h5.sh` 在启动时根据环境变量重写 `static/configs.js`：把 `BASE_URL/IMG_URL/H5_URL/sn_id/appStr` 替换为部署值，**无需重新构建前端**。
|
||||||
|
|
||||||
|
### 3. single-admin-api / single-front-api（Spring Boot）
|
||||||
|
- **多阶段构建**：
|
||||||
|
- 构建阶段：`maven:3.8.8-eclipse-temurin-17` → `mvn package -pl crmeb-admin -am -DskipTests`（front 同理）。pom.xml 已配置 `source/target=1.8`，Java 17 编译器向下兼容，产物字节码级别不变。
|
||||||
|
- 运行阶段：`eclipse-temurin:17-jre-jammy`（Ubuntu 22.04 / glibc），与部署环境 `openjdk 17.0.18` 对齐；预装 `fontconfig + fonts-dejavu + fonts-wqy-zenhei`。
|
||||||
|
- **Java 17 兼容性**：Spring Boot 2.2.6 使用 cglib、Druid、Quartz 等大量反射，Java 17 强模块封装会报 `InaccessibleObjectException`。已在 `JAVA_OPTS` 中加入 7 条 `--add-opens`，覆盖已知触发点（`java.lang / reflect / util / io / math / sun.net.util / net`）。若运行时出现新的 `InaccessibleObjectException`，按报错包名继续追加 `--add-opens`。
|
||||||
|
- 通过 `--spring.profiles.active=docker` + `--spring.config.additional-location=file:/config/` 加载 `application-docker.yml`，所有 DB/Redis/端口参数从 `.env` 注入。
|
||||||
|
- `imagePath` 指向 `/usr/local/crmeb/crmebimage/`（挂卷 `single-images`，两个 jar 共享）。
|
||||||
|
|
||||||
|
### 4. single-admin-web（Vue 管理后台）
|
||||||
|
- **多阶段构建**：
|
||||||
|
- 构建阶段：`node:16-alpine` → `npm ci && npm run build:prod`（`VUE_APP_BASE_API` 设为空，走同域 `/api/`）。
|
||||||
|
- 运行阶段：`nginx:1.25-alpine`，`/api/` 反代到 `single-admin-api:30032`。
|
||||||
|
- 若想**直接复用源码里现成的 `dist/`**，可改用「fast」分支（见 Dockerfile 注释）。
|
||||||
|
|
||||||
|
### 5. single-h5（uni-app H5）
|
||||||
|
- 同样多阶段：`node:16-alpine` → `npm install && npm run build:h5`，再 nginx 服务。
|
||||||
|
- `config/app.js` 里 `domain` 硬编码，需在构建前注入：通过 ARG `H5_API_DOMAIN` 做字符串替换，或留空让同域生效（推荐）。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 五、Spring Boot 接 RDS / Redis 的细节
|
||||||
|
|
||||||
|
寄卖商城原本通过 `spring.profiles.active=byjyw149` / `miao80` 等加载不同 yml。**Docker 部署用全新 profile `docker`**：
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
# deploy/docker/single-shop/application-docker.yml
|
||||||
|
spring:
|
||||||
|
datasource:
|
||||||
|
type: com.alibaba.druid.pool.DruidDataSource
|
||||||
|
driver-class-name: com.mysql.jdbc.Driver
|
||||||
|
url: jdbc:mysql://${MYSQL_HOST}:${MYSQL_PORT:3306}/${MYSQL_DATABASE}?useUnicode=true&characterEncoding=utf8&serverTimezone=GMT%2B8&useSSL=false
|
||||||
|
username: ${MYSQL_USERNAME}
|
||||||
|
password: ${MYSQL_PASSWORD}
|
||||||
|
redis:
|
||||||
|
host: ${REDIS_HOST}
|
||||||
|
port: ${REDIS_PORT:6379}
|
||||||
|
password: ${REDIS_PASSWORD:}
|
||||||
|
database: ${REDIS_DATABASE:0}
|
||||||
|
```
|
||||||
|
|
||||||
|
通过 docker-compose 注入：
|
||||||
|
```
|
||||||
|
MYSQL_HOST=${RDS_HOST}
|
||||||
|
MYSQL_DATABASE=${RDS_SINGLE_DB}
|
||||||
|
MYSQL_USERNAME=${RDS_SINGLE_USER}
|
||||||
|
MYSQL_PASSWORD=${RDS_SINGLE_PASS}
|
||||||
|
REDIS_HOST=redis
|
||||||
|
REDIS_PASSWORD=${REDIS_PASSWORD}
|
||||||
|
REDIS_DATABASE=${REDIS_SINGLE_ADMIN_DB}
|
||||||
|
```
|
||||||
|
|
||||||
|
> **数据库初始化**：首次部署前请用 `db/` 下的 SQL（推荐 `db/yangtangyoupin.sql`、`db/shop22-v2.sql` 等）在 RDS 中初始化对应库；本方案不在容器中建库，**避免误覆盖现网数据**。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 六、首次部署步骤
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 1. 准备环境变量
|
||||||
|
cd integral-shop/deploy/docker
|
||||||
|
cp .env.example .env
|
||||||
|
vim .env # 填入 RDS / Redis / 域名等
|
||||||
|
|
||||||
|
# 2. 准备积分商城 Webman .env（容器运行时挂载）
|
||||||
|
cp integral-resell/.env.template integral-resell/.env
|
||||||
|
vim integral-resell/.env # 至少配置 DB_*、APP_SECRET、SMS_*
|
||||||
|
|
||||||
|
# 3. 在阿里云 RDS 上提前导入数据
|
||||||
|
# - 积分商城：db/yangtangyoupin.sql
|
||||||
|
# - 寄卖商城：db/shop22-v2.sql / db/jjy153-mysql.sql （按实际版本）
|
||||||
|
|
||||||
|
# 4. 构建并启动
|
||||||
|
docker compose --env-file .env build
|
||||||
|
docker compose --env-file .env up -d
|
||||||
|
|
||||||
|
# 5. 健康检查
|
||||||
|
docker compose ps
|
||||||
|
docker compose logs -f single-admin-api # 看到 "Started CrmebAdminApplication" 即成功
|
||||||
|
docker compose logs -f integral-houtai # 看到 "Webman start success" 即成功
|
||||||
|
curl -I http://localhost:18080 # 积分商城 H5
|
||||||
|
curl -I http://localhost:18081 # 寄卖管理后台
|
||||||
|
curl -I http://localhost:18082 # 寄卖用户 H5
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 七、日常运维
|
||||||
|
|
||||||
|
| 场景 | 操作 |
|
||||||
|
|------|------|
|
||||||
|
| 拉取最新源码后重建 | `docker compose build --no-cache <service>` 然后 `docker compose up -d <service>` |
|
||||||
|
| 只重启某服务 | `docker compose restart single-admin-api` |
|
||||||
|
| 看日志 | `docker compose logs -f --tail 200 single-front-api` |
|
||||||
|
| 进入容器 | `docker compose exec single-admin-api sh` |
|
||||||
|
| 备份用户上传 | `docker run --rm -v integral-upload:/d -v $(pwd):/b alpine tar czf /b/upload.tgz -C /d .` |
|
||||||
|
| 备份寄卖商城图片 | 同上，卷名 `single-images` |
|
||||||
|
| 切换到外部 Redis | 在 `.env` 把 `REDIS_HOST` 改成外部地址，并在 compose 里把 `redis` 服务注释 |
|
||||||
|
| 切换到 Java 17 运行寄卖商城 | 把 `eclipse-temurin:8-jre-alpine` 改成 `17-jre`；本工程经验依旧建议 8 |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 八、性能与资源建议
|
||||||
|
|
||||||
|
| 容器 | CPU | 内存（建议） |
|
||||||
|
|------|----:|------------:|
|
||||||
|
| `redis` | 0.2 | 256 MB |
|
||||||
|
| `integral-houtai` | 0.5–1 | 256–512 MB（webman 多 worker 时 ↑） |
|
||||||
|
| `integral-h5` | 0.1 | 64 MB |
|
||||||
|
| `single-admin-api` | 1 | **JVM `-Xmx512m`，容器 limit 768 MB** |
|
||||||
|
| `single-front-api` | 1 | JVM `-Xmx768m`，容器 limit 1 GB |
|
||||||
|
| `single-admin-web` | 0.1 | 64 MB |
|
||||||
|
| `single-h5` | 0.1 | 64 MB |
|
||||||
|
|
||||||
|
最低配宿主机：**2 vCPU / 4 GB**（建议 4 vCPU / 8 GB 起）。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 九、上线检查清单
|
||||||
|
|
||||||
|
- [ ] 阿里云 RDS 白名单已放通 Docker 主机出口 IP
|
||||||
|
- [ ] RDS 中已导入对应库的 SQL，账号/密码权限正确
|
||||||
|
- [ ] `.env` 中无明文敏感信息提交到 git（已 `.gitignore`）
|
||||||
|
- [ ] `INTEGRAL_APP_STR` 与寄卖商城 admin 后台 + Webman `.env#APP_SECRET` 三处一致
|
||||||
|
- [ ] 域名 / SSL 在外层 Nginx 或阿里云 SLB 完成 443 卸载
|
||||||
|
- [ ] OSS 与 SMS 等第三方密钥若启用，已写入对应位置
|
||||||
|
- [ ] 备份策略：RDS 自动备份 + `integral-upload` / `single-images` 卷定期 tar 备份
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 十、远端 116.62.83.240 一键部署
|
||||||
|
|
||||||
|
服务器已具备的环境（来自宝塔软件商店截图）：
|
||||||
|
- Docker（节点管理 → Docker 已部署）
|
||||||
|
- Nginx 1.28.1（**未使用**，本方案的 Nginx 在容器内）
|
||||||
|
- MySQL 5.7.44（**未使用**，本方案走阿里云 RDS）
|
||||||
|
- Redis 8.0.5（**默认未使用**，容器内自带 Redis；想复用宿主 Redis 见下方"复用宿主 Redis"）
|
||||||
|
- PHP 8.0.26（**未使用**，webman 走静态二进制）
|
||||||
|
- rsync 已安装、SSH `root / A@123456`
|
||||||
|
|
||||||
|
### 1. 本机一次性配置
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker/scripts
|
||||||
|
cp server.env.example server.env
|
||||||
|
$EDITOR server.env # 默认已写好 116.62.83.240 / root / A@123456
|
||||||
|
```
|
||||||
|
|
||||||
|
> **强烈建议先用 SSH key 替代密码**：`ssh-copy-id root@116.62.83.240` 后把 `server.env` 里的 `SSHPASS=` 注释掉即可。脚本会自动切回 SSH key 通道。
|
||||||
|
|
||||||
|
### 2. 全量同步并启动
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./sync-to-server.sh up
|
||||||
|
```
|
||||||
|
|
||||||
|
脚本流程：
|
||||||
|
1. SSH 登录 116.62.83.240，确保 `/root/integral-shop` 目录存在；
|
||||||
|
2. rsync 增量同步整个工程（自动排除 `node_modules / target / .git / runtime/logs / MER-2.2_2601` 等大目录）；
|
||||||
|
3. 在远端 `cd /root/integral-shop/deploy/docker && docker compose build && docker compose up -d`；
|
||||||
|
4. 输出 `docker compose ps` 结果。
|
||||||
|
|
||||||
|
首次会要求你先在远端把 `.env / integral-resell/.env` 改成真实值（如未做，运行下面这一步）：
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./bootstrap-remote-env.sh # 在远端基于模板创建 .env，再 ssh 上去填写
|
||||||
|
```
|
||||||
|
|
||||||
|
### 3. 日常运维（无需登录服务器）
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./remote-up.sh ps # 服务状态
|
||||||
|
./remote-up.sh logs single-admin-api # 跟随日志
|
||||||
|
./remote-up.sh restart single-front-api # 重启某服务
|
||||||
|
./remote-up.sh build single-admin-web # 只重建某镜像
|
||||||
|
./remote-up.sh exec single-admin-api sh # 进容器
|
||||||
|
./remote-up.sh ssh # 直接登录服务器
|
||||||
|
./sync-to-server.sh up # 改了代码后再同步+重启
|
||||||
|
```
|
||||||
|
|
||||||
|
### 4. 端口规划与宝塔放行
|
||||||
|
|
||||||
|
宿主机暴露端口（来自 `.env.example`，可改）：
|
||||||
|
|
||||||
|
| 端口 | 服务 | 用途 |
|
||||||
|
|------|------|------|
|
||||||
|
| 18080 | `integral-h5` | 积分商城 H5 |
|
||||||
|
| 18081 | `single-admin-web` | 寄卖管理后台 |
|
||||||
|
| 18082 | `single-h5` | 寄卖用户 H5 |
|
||||||
|
| 6379 | `redis` | （生产建议关闭）`REDIS_HOST_PORT=` 留空即不暴露 |
|
||||||
|
|
||||||
|
**安全组 / 防火墙**：阿里云安全组放通 18080-18082；宝塔面板 → 安全 → 放行同样端口。**强烈建议在前面再挂一层域名 + SSL**（宝塔自带 Nginx 反代 / 阿里云 SLB / Cloudflare 都行）。
|
||||||
|
|
||||||
|
### 5. 复用宿主已有 Redis 8.0.5（可选）
|
||||||
|
|
||||||
|
若想节省一份 Redis，直接用宿主机的 Redis：
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 1) 远端编辑 deploy/docker/.env
|
||||||
|
REDIS_PASSWORD=宿主-Redis-的密码
|
||||||
|
|
||||||
|
# 2) 远端编辑 deploy/docker/docker-compose.yml
|
||||||
|
# a. 注释掉 redis: 整个服务块（包括 healthcheck）
|
||||||
|
# b. single-admin-api / single-front-api 把 REDIS_HOST: redis 改成 172.17.0.1
|
||||||
|
# （docker bridge 网关；宝塔默认端口 6379；先确保 Redis 监听 0.0.0.0 且防火墙放行 6379 to docker subnet）
|
||||||
|
# c. integral-resell/.env 把 REDIS_HOST=redis 同步改为 172.17.0.1
|
||||||
|
|
||||||
|
# 3) 同步重启
|
||||||
|
./sync-to-server.sh up
|
||||||
|
```
|
||||||
|
|
||||||
|
### 6. 阿里云 RDS 白名单
|
||||||
|
|
||||||
|
到 RDS 控制台 → 白名单 → 加入 `116.62.83.240`（如果 RDS 与 ECS 同 VPC 则用内网地址 + 内网白名单更优）。
|
||||||
|
|
||||||
|
### 7. 数据库初始化
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 本地把 SQL 上传到服务器（默认 db/ 已被 rsync 同步过去）
|
||||||
|
./remote-up.sh ssh
|
||||||
|
# 远端
|
||||||
|
mysql -h <RDS_HOST> -u <RDS_USER> -p<RDS_PASS> < /root/integral-shop/db/yangtangyoupin.sql
|
||||||
|
mysql -h <RDS_HOST> -u <RDS_USER> -p<RDS_PASS> < /root/integral-shop/db/shop22-v2.sql
|
||||||
|
```
|
||||||
|
|
||||||
|
也可以用宝塔自带的 phpMyAdmin 直接连 RDS 导入。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 十一、各文件清单一览
|
||||||
|
|
||||||
|
参见 `deploy/docker/` 下：
|
||||||
|
|
||||||
|
- `docker-compose.yml` ← 编排入口
|
||||||
|
- `.env.example` ← 环境变量模板
|
||||||
|
- `redis/redis.conf`
|
||||||
|
- `integral-resell/houtai.Dockerfile`
|
||||||
|
- `integral-resell/h5.Dockerfile`
|
||||||
|
- `integral-resell/nginx-h5.conf`
|
||||||
|
- `integral-resell/.env.template`
|
||||||
|
- `integral-resell/docker-entrypoint-h5.sh`
|
||||||
|
- `single-shop/admin-api.Dockerfile`
|
||||||
|
- `single-shop/front-api.Dockerfile`
|
||||||
|
- `single-shop/admin-web.Dockerfile`
|
||||||
|
- `single-shop/h5.Dockerfile`
|
||||||
|
- `single-shop/application-docker.yml`
|
||||||
|
- `single-shop/nginx-admin-web.conf`
|
||||||
|
- `single-shop/nginx-h5.conf`
|
||||||
|
- `scripts/server.env.example` ← 远端 SSH 配置模板
|
||||||
|
- `scripts/sync-to-server.sh` ← rsync 增量同步 + 触发远端部署
|
||||||
|
- `scripts/remote-up.sh` ← 远端 `docker compose` 操作（up/build/restart/logs/ps/exec/ssh）
|
||||||
|
- `scripts/bootstrap-remote-env.sh` ← 首次在远端生成 .env 模板
|
||||||
|
|
||||||
|
每个文件都已生成可直接使用的版本。
|
||||||
79
deploy/docker/.env.example
Normal file
79
deploy/docker/.env.example
Normal file
@@ -0,0 +1,79 @@
|
|||||||
|
# ============================================================
|
||||||
|
# Docker 部署环境变量模板
|
||||||
|
# 使用方法： cp .env.example .env 然后按实际填写
|
||||||
|
# 注意： .env 切勿提交到 git
|
||||||
|
# ============================================================
|
||||||
|
|
||||||
|
# ---------- 基础 ----------
|
||||||
|
TZ=Asia/Shanghai
|
||||||
|
COMPOSE_PROJECT_NAME=integral-shop
|
||||||
|
|
||||||
|
# ---------- 阿里云 RDS for MySQL ----------
|
||||||
|
# 外网地址（与 240 同地域 VPC 时建议改为内网地址，更快更安全）
|
||||||
|
RDS_HOST=rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com
|
||||||
|
RDS_PORT=3306
|
||||||
|
|
||||||
|
# 积分商城（Webman PHP 后端）
|
||||||
|
RDS_INTEGRAL_DB=yangtangyoupin
|
||||||
|
RDS_INTEGRAL_USER=yangtangyoupin
|
||||||
|
RDS_INTEGRAL_PASS=change-me
|
||||||
|
|
||||||
|
# 寄卖商城（Spring Boot 后端） — 与积分商城共库共账号
|
||||||
|
RDS_SINGLE_DB=yangtangyoupin
|
||||||
|
RDS_SINGLE_USER=yangtangyoupin
|
||||||
|
RDS_SINGLE_PASS=change-me
|
||||||
|
|
||||||
|
# ---------- 容器内 Redis ----------
|
||||||
|
REDIS_PASSWORD=change-me-redis
|
||||||
|
# 三个业务各自的 db 序号，建议互不冲突
|
||||||
|
REDIS_INTEGRAL_DB=0
|
||||||
|
REDIS_SINGLE_ADMIN_DB=25
|
||||||
|
REDIS_SINGLE_FRONT_DB=26
|
||||||
|
|
||||||
|
# 是否把 Redis 端口暴露到宿主机（生产建议不暴露，留空字符串即可关闭）
|
||||||
|
REDIS_HOST_PORT=6379
|
||||||
|
|
||||||
|
# ---------- 积分商城 H5 configs.js 注入 ----------
|
||||||
|
# 用户浏览器访问到的 API/图片/H5 域名（必须为外网可达 URL）
|
||||||
|
INTEGRAL_API_PUBLIC_URL=https://admin.example.com
|
||||||
|
INTEGRAL_IMG_PUBLIC_URL=https://admin.example.com
|
||||||
|
INTEGRAL_H5_PUBLIC_URL=https://h5.example.com/
|
||||||
|
# 业务标识：sn_id（数字）、appStr（与寄卖商城 APP_SECRET 必须一致）
|
||||||
|
INTEGRAL_SN_ID=17533260260405
|
||||||
|
INTEGRAL_APP_STR=ZFyTNQTWEkCBczKzyUDJWE9Ecx260405
|
||||||
|
INTEGRAL_TITLE=晨召春商贸
|
||||||
|
INTEGRAL_CONTRACT_PAGE=10012
|
||||||
|
|
||||||
|
# ---------- 积分商城 Webman 后端短信 / OSS ----------
|
||||||
|
# 不用就保持空值；启用时填写真实凭证（也可直接编辑 integral-resell/.env 文件）
|
||||||
|
SMS_CHANNEL=alibaba
|
||||||
|
SMS_SIGNNAME=
|
||||||
|
SMS_TEMPLATE=
|
||||||
|
SMS_KEYID=
|
||||||
|
SMS_KEYSECRET=
|
||||||
|
|
||||||
|
# OSS_TYPE=public 表示用本地 public/upload；oss 表示走阿里云 OSS
|
||||||
|
FILE_STORAGE=public
|
||||||
|
OSS_ACCESS_ID=
|
||||||
|
OSS_ACCESS_SECRET=
|
||||||
|
OSS_BUCKET=
|
||||||
|
OSS_ENDPOINT=
|
||||||
|
OSS_URL=
|
||||||
|
|
||||||
|
# ---------- 寄卖商城前端构建参数 ----------
|
||||||
|
# 留空即走与 Nginx 同域 /api/，最佳实践；如要直连后端写完整 URL
|
||||||
|
SINGLE_ADMIN_BASE_API=
|
||||||
|
SINGLE_H5_DOMAIN=
|
||||||
|
|
||||||
|
# ---------- 寄卖商城后端 JVM ----------
|
||||||
|
SINGLE_ADMIN_JAVA_OPTS=-Xms256m -Xmx512m
|
||||||
|
SINGLE_FRONT_JAVA_OPTS=-Xms256m -Xmx768m
|
||||||
|
|
||||||
|
# ---------- 寄卖商城订单同步（无 MER 时填默认） ----------
|
||||||
|
SYNC_SOURCE_ID=
|
||||||
|
SYNC_TARGET_MER_ID=0
|
||||||
|
|
||||||
|
# ---------- 宿主机暴露端口（可按需修改） ----------
|
||||||
|
INTEGRAL_H5_PORT=18080
|
||||||
|
SINGLE_ADMIN_WEB_PORT=18081
|
||||||
|
SINGLE_H5_PORT=18082
|
||||||
3
deploy/docker/.gitignore
vendored
Normal file
3
deploy/docker/.gitignore
vendored
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
# 部署敏感文件不入库
|
||||||
|
.env
|
||||||
|
integral-resell/.env
|
||||||
113
deploy/docker/README.md
Normal file
113
deploy/docker/README.md
Normal file
@@ -0,0 +1,113 @@
|
|||||||
|
# Docker 部署 — 快速上手
|
||||||
|
|
||||||
|
> 详细方案见仓库根目录的 `DOCKER_DEPLOY.md`。本文件只列必要操作。
|
||||||
|
|
||||||
|
## 1. 准备环境变量
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker
|
||||||
|
cp .env.example .env
|
||||||
|
$EDITOR .env # 填入 RDS / Redis / 域名 等
|
||||||
|
|
||||||
|
cp integral-resell/.env.template integral-resell/.env
|
||||||
|
$EDITOR integral-resell/.env # 积分商城 Webman 后端配置
|
||||||
|
```
|
||||||
|
|
||||||
|
## 2. 阿里云 RDS 初始化
|
||||||
|
|
||||||
|
在 RDS 控制台新建：
|
||||||
|
- 积分商城库（默认名 `yangtangyoupin`）→ 导入 `db/yangtangyoupin.sql`
|
||||||
|
- 寄卖商城库（默认同上）→ 导入 `db/shop22-v2.sql`（或与生产对齐的 `db/jjy153-mysql.sql`）
|
||||||
|
|
||||||
|
把 Docker 主机出口 IP 加入 RDS 白名单。
|
||||||
|
|
||||||
|
## 3. 构建并启动
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 一次性构建所有镜像（首次 5-15 分钟，含 Maven & Node 拉依赖）
|
||||||
|
docker compose build
|
||||||
|
|
||||||
|
# 后台启动全部服务
|
||||||
|
docker compose up -d
|
||||||
|
|
||||||
|
# 查看状态
|
||||||
|
docker compose ps
|
||||||
|
docker compose logs -f single-admin-api
|
||||||
|
docker compose logs -f single-front-api
|
||||||
|
docker compose logs -f integral-houtai
|
||||||
|
```
|
||||||
|
|
||||||
|
## 4. 验证
|
||||||
|
|
||||||
|
| URL | 期望 |
|
||||||
|
|-----|------|
|
||||||
|
| `http://<host>:18080/` | 积分商城 H5 首页 |
|
||||||
|
| `http://<host>:18080/api/...` | 转发到 integral-houtai |
|
||||||
|
| `http://<host>:18081/` | 寄卖管理后台登录页 |
|
||||||
|
| `http://<host>:18082/` | 寄卖用户端 H5 |
|
||||||
|
|
||||||
|
## 5. 常用运维
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker compose restart single-admin-api
|
||||||
|
docker compose build --no-cache single-front-api && docker compose up -d single-front-api
|
||||||
|
docker compose exec single-admin-api sh
|
||||||
|
docker compose down # 不删卷
|
||||||
|
docker compose down -v # 连卷一并删除（**慎用**）
|
||||||
|
```
|
||||||
|
|
||||||
|
## 6. 备份卷
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 在 docker host 上运行
|
||||||
|
for v in integral-upload single-images redis-data; do
|
||||||
|
docker run --rm -v $v:/d -v $(pwd):/b alpine \
|
||||||
|
tar czf /b/${v}-$(date +%F).tgz -C /d .
|
||||||
|
done
|
||||||
|
```
|
||||||
|
|
||||||
|
## 7. "fast" 模式（跳过前端构建，使用源码已有 dist）
|
||||||
|
|
||||||
|
如果源码目录里 `backend-adminend/dist` 和 `single_uniapp22miao/unpackage/dist/build/` 已经是最新构建产物，可加速：
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker compose build --build-arg=BUILDKIT_INLINE_CACHE=1 \
|
||||||
|
--target fast single-admin-web single-h5
|
||||||
|
```
|
||||||
|
|
||||||
|
## 8. 切换为外部 Redis
|
||||||
|
|
||||||
|
把 `.env` 中 `REDIS_HOST` 改为外部地址、注释 `docker-compose.yml` 中的 `redis:` 服务即可。Spring Boot 与 Webman 都通过环境变量读取 Redis 地址。
|
||||||
|
|
||||||
|
## 9. 远端一键部署（116.62.83.240）
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd scripts
|
||||||
|
cp server.env.example server.env # 已预填 116.62.83.240 / root / A@123456
|
||||||
|
|
||||||
|
# 首次（推荐）：把密码登录换成 SSH key
|
||||||
|
ssh-copy-id root@116.62.83.240
|
||||||
|
# 然后把 server.env 里的 SSHPASS 行注释掉
|
||||||
|
|
||||||
|
# 同步代码并启动
|
||||||
|
./sync-to-server.sh up
|
||||||
|
|
||||||
|
# 同步完成后，若是首次部署还需要先在远端填写 .env：
|
||||||
|
./bootstrap-remote-env.sh
|
||||||
|
./remote-up.sh ssh
|
||||||
|
# 远端：cd /root/integral-shop/deploy/docker
|
||||||
|
# vim .env
|
||||||
|
# vim integral-resell/.env
|
||||||
|
# 编辑完退出后：
|
||||||
|
./remote-up.sh up
|
||||||
|
|
||||||
|
# 日常运维（本机执行，不用登录服务器）
|
||||||
|
./remote-up.sh ps
|
||||||
|
./remote-up.sh logs single-admin-api
|
||||||
|
./remote-up.sh restart single-front-api
|
||||||
|
./remote-up.sh build single-admin-web
|
||||||
|
```
|
||||||
|
|
||||||
|
> 用密码模式需要先 `brew install hudochenkov/sshpass/sshpass`（macOS）。
|
||||||
|
> 用 SSH key 模式则任何依赖都不需要。
|
||||||
|
|
||||||
187
deploy/docker/docker-compose.yml
Normal file
187
deploy/docker/docker-compose.yml
Normal file
@@ -0,0 +1,187 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 + 积分商城 前后端 Docker 编排
|
||||||
|
# - 不含 MER-2.2 多商户
|
||||||
|
# - 不含 MySQL（使用阿里云 RDS）
|
||||||
|
# - 包含独立 Redis（如需用外部 Redis，注释掉 redis 服务并修改 REDIS_HOST）
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
name: integral-shop
|
||||||
|
|
||||||
|
x-common: &common
|
||||||
|
restart: unless-stopped
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
logging:
|
||||||
|
driver: json-file
|
||||||
|
options:
|
||||||
|
max-size: "20m"
|
||||||
|
max-file: "5"
|
||||||
|
|
||||||
|
networks:
|
||||||
|
inner:
|
||||||
|
driver: bridge
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
redis-data:
|
||||||
|
integral-runtime:
|
||||||
|
integral-upload:
|
||||||
|
single-images:
|
||||||
|
single-logs:
|
||||||
|
|
||||||
|
services:
|
||||||
|
# ---------------- Redis ----------------
|
||||||
|
redis:
|
||||||
|
<<: *common
|
||||||
|
image: redis:6.2-alpine
|
||||||
|
container_name: integral-shop-redis
|
||||||
|
command: ["redis-server", "/etc/redis/redis.conf", "--requirepass", "${REDIS_PASSWORD}"]
|
||||||
|
volumes:
|
||||||
|
- ./redis/redis.conf:/etc/redis/redis.conf:ro
|
||||||
|
- redis-data:/data
|
||||||
|
networks: [inner]
|
||||||
|
# 仅当 REDIS_HOST_PORT 非空时暴露
|
||||||
|
ports:
|
||||||
|
- "${REDIS_HOST_PORT:-}:6379"
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
|
||||||
|
interval: 10s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 5
|
||||||
|
|
||||||
|
# ---------------- 积分商城：Webman 后端 ----------------
|
||||||
|
integral-houtai:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../integral-resell/houtai
|
||||||
|
dockerfile: ../../deploy/docker/integral-resell/houtai.Dockerfile
|
||||||
|
image: integral-shop/integral-houtai:latest
|
||||||
|
container_name: integral-houtai
|
||||||
|
networks: [inner]
|
||||||
|
volumes:
|
||||||
|
# .env 由宿主机模板渲染挂入容器；编辑此文件即可改 DB / OSS / 短信
|
||||||
|
- ./integral-resell/.env:/app/.env:ro
|
||||||
|
- integral-runtime:/app/runtime
|
||||||
|
- integral-upload:/app/public/upload
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
|
||||||
|
# ---------------- 积分商城：H5 静态站 ----------------
|
||||||
|
integral-h5:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../integral-resell/h5
|
||||||
|
dockerfile: ../../deploy/docker/integral-resell/h5.Dockerfile
|
||||||
|
image: integral-shop/integral-h5:latest
|
||||||
|
container_name: integral-h5
|
||||||
|
networks: [inner]
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
# 这些会在 entrypoint 中被注入到 static/configs.js
|
||||||
|
INTEGRAL_TITLE: ${INTEGRAL_TITLE}
|
||||||
|
INTEGRAL_API_PUBLIC_URL: ${INTEGRAL_API_PUBLIC_URL}
|
||||||
|
INTEGRAL_IMG_PUBLIC_URL: ${INTEGRAL_IMG_PUBLIC_URL}
|
||||||
|
INTEGRAL_H5_PUBLIC_URL: ${INTEGRAL_H5_PUBLIC_URL}
|
||||||
|
INTEGRAL_SN_ID: ${INTEGRAL_SN_ID}
|
||||||
|
INTEGRAL_APP_STR: ${INTEGRAL_APP_STR}
|
||||||
|
INTEGRAL_CONTRACT_PAGE: ${INTEGRAL_CONTRACT_PAGE}
|
||||||
|
ports:
|
||||||
|
- "${INTEGRAL_H5_PORT:-18080}:80"
|
||||||
|
depends_on:
|
||||||
|
- integral-houtai
|
||||||
|
|
||||||
|
# ---------------- 寄卖商城：管理后台 API ----------------
|
||||||
|
single-admin-api:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../single-shop-22/backend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/admin-api.Dockerfile
|
||||||
|
image: integral-shop/single-admin-api:latest
|
||||||
|
container_name: single-admin-api
|
||||||
|
networks: [inner]
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
JAVA_HEAP_OPTS: ${SINGLE_ADMIN_JAVA_OPTS:--Xms128m -Xmx256m}
|
||||||
|
SPRING_PROFILES_ACTIVE: docker
|
||||||
|
SERVER_PORT: "30032"
|
||||||
|
MYSQL_HOST: ${RDS_HOST}
|
||||||
|
MYSQL_PORT: ${RDS_PORT:-3306}
|
||||||
|
MYSQL_DATABASE: ${RDS_SINGLE_DB}
|
||||||
|
MYSQL_USERNAME: ${RDS_SINGLE_USER}
|
||||||
|
MYSQL_PASSWORD: ${RDS_SINGLE_PASS}
|
||||||
|
REDIS_HOST: redis
|
||||||
|
REDIS_PORT: "6379"
|
||||||
|
REDIS_PASSWORD: ${REDIS_PASSWORD}
|
||||||
|
REDIS_DATABASE: ${REDIS_SINGLE_ADMIN_DB:-25}
|
||||||
|
SYNC_SOURCE_ID: ${SYNC_SOURCE_ID:-}
|
||||||
|
SYNC_TARGET_MER_ID: ${SYNC_TARGET_MER_ID:-0}
|
||||||
|
volumes:
|
||||||
|
- ./single-shop/application-docker.yml:/config/application-docker.yml:ro
|
||||||
|
- single-images:/usr/local/crmeb/crmebimage
|
||||||
|
- single-logs:/app/log
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
|
||||||
|
# ---------------- 寄卖商城：用户端 API ----------------
|
||||||
|
single-front-api:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../single-shop-22/backend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/front-api.Dockerfile
|
||||||
|
image: integral-shop/single-front-api:latest
|
||||||
|
container_name: single-front-api
|
||||||
|
networks: [inner]
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
JAVA_OPTS: ${SINGLE_FRONT_JAVA_OPTS:--Xms256m -Xmx768m}
|
||||||
|
SPRING_PROFILES_ACTIVE: docker
|
||||||
|
SERVER_PORT: "30031"
|
||||||
|
MYSQL_HOST: ${RDS_HOST}
|
||||||
|
MYSQL_PORT: ${RDS_PORT:-3306}
|
||||||
|
MYSQL_DATABASE: ${RDS_SINGLE_DB}
|
||||||
|
MYSQL_USERNAME: ${RDS_SINGLE_USER}
|
||||||
|
MYSQL_PASSWORD: ${RDS_SINGLE_PASS}
|
||||||
|
REDIS_HOST: redis
|
||||||
|
REDIS_PORT: "6379"
|
||||||
|
REDIS_PASSWORD: ${REDIS_PASSWORD}
|
||||||
|
REDIS_DATABASE: ${REDIS_SINGLE_FRONT_DB:-26}
|
||||||
|
volumes:
|
||||||
|
- ./single-shop/application-docker.yml:/config/application-docker.yml:ro
|
||||||
|
- single-images:/usr/local/crmeb/crmebimage
|
||||||
|
- single-logs:/app/log
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
|
||||||
|
# ---------------- 寄卖商城：管理后台 Web ----------------
|
||||||
|
single-admin-web:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../single-shop-22/backend-adminend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/admin-web.Dockerfile
|
||||||
|
args:
|
||||||
|
VUE_APP_BASE_API: ${SINGLE_ADMIN_BASE_API:-}
|
||||||
|
image: integral-shop/single-admin-web:latest
|
||||||
|
container_name: single-admin-web
|
||||||
|
networks: [inner]
|
||||||
|
ports:
|
||||||
|
- "${SINGLE_ADMIN_WEB_PORT:-18081}:80"
|
||||||
|
depends_on:
|
||||||
|
- single-admin-api
|
||||||
|
|
||||||
|
# ---------------- 寄卖商城：用户端 H5 ----------------
|
||||||
|
single-h5:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../single-shop-22/single_uniapp22miao
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/h5.Dockerfile
|
||||||
|
args:
|
||||||
|
H5_API_DOMAIN: ${SINGLE_H5_DOMAIN:-}
|
||||||
|
image: integral-shop/single-h5:latest
|
||||||
|
container_name: single-h5
|
||||||
|
networks: [inner]
|
||||||
|
ports:
|
||||||
|
- "${SINGLE_H5_PORT:-18082}:80"
|
||||||
|
depends_on:
|
||||||
|
- single-front-api
|
||||||
83
deploy/docker/nginx/leilei-jf.czchunfang.com.conf
Normal file
83
deploy/docker/nginx/leilei-jf.czchunfang.com.conf
Normal file
@@ -0,0 +1,83 @@
|
|||||||
|
upstream jifenmall_h5 {
|
||||||
|
server 127.0.0.1:18082;
|
||||||
|
keepalive 10240;
|
||||||
|
}
|
||||||
|
|
||||||
|
server
|
||||||
|
{
|
||||||
|
listen 80;
|
||||||
|
listen 443 ssl;
|
||||||
|
http2 on;
|
||||||
|
server_name leilei-jf.czchunfang.com;
|
||||||
|
index index.html index.htm default.htm default.html;
|
||||||
|
root /www/wwwroot/leilei-jf.czchunfang.com;
|
||||||
|
include /www/server/panel/vhost/nginx/extension/leilei-jf.czchunfang.com/*.conf;
|
||||||
|
#CERT-APPLY-CHECK--START
|
||||||
|
include /www/server/panel/vhost/nginx/well-known/leilei-jf.czchunfang.com.conf;
|
||||||
|
#CERT-APPLY-CHECK--END
|
||||||
|
|
||||||
|
#SSL-START
|
||||||
|
#error_page 404/404.html;
|
||||||
|
#HTTP_TO_HTTPS_START
|
||||||
|
set $isRedcert 1;
|
||||||
|
if ($server_port != 443) {
|
||||||
|
set $isRedcert 2;
|
||||||
|
}
|
||||||
|
if ( $uri ~ /\.well-known/ ) {
|
||||||
|
set $isRedcert 1;
|
||||||
|
}
|
||||||
|
if ($isRedcert != 1) {
|
||||||
|
rewrite ^(/.*)$ https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
#HTTP_TO_HTTPS_END
|
||||||
|
ssl_certificate /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei-jf.czchunfang.com_cert/nginx/leilei-jf.czchunfang.com.pem;
|
||||||
|
ssl_certificate_key /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei-jf.czchunfang.com_cert/nginx/leilei-jf.czchunfang.com.key;
|
||||||
|
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
||||||
|
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
ssl_session_tickets on;
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000";
|
||||||
|
error_page 497 https://$host$request_uri;
|
||||||
|
#SSL-END
|
||||||
|
|
||||||
|
#REWRITE-START
|
||||||
|
include /www/server/panel/vhost/rewrite/html_leilei-jf.czchunfang.com.conf;
|
||||||
|
#REWRITE-END
|
||||||
|
|
||||||
|
# 积分商城 H5 → Docker single-h5 容器（uni-app SPA）
|
||||||
|
location ^~ / {
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
if (!-f $request_filename) {
|
||||||
|
proxy_pass http://jifenmall_h5;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* (\.user.ini|\.htaccess|\.htpasswd|\.env.*|\.project|\.bashrc|\.bash_profile|\.bash_logout|\.DS_Store|\.gitignore|\.gitattributes|LICENSE|README\.md|CLAUDE\.md|CHANGELOG\.md|CHANGELOG|CONTRIBUTING\.md|TODO\.md|FAQ\.md|composer\.json|composer\.lock|package(-lock)?\.json|yarn\.lock|pnpm-lock\.yaml|\.\w+~|\.swp|\.swo|\.bak(up)?|\.old|\.tmp|\.temp|\.log|\.sql(\.gz)?|docker-compose\.yml|docker\.env|Dockerfile|\.csproj|\.sln|Cargo\.toml|Cargo\.lock|go\.mod|go\.sum|phpunit\.xml|phpunit\.xml|pom\.xml|build\.gradl|pyproject\.toml|requirements\.txt|application(-\w+)?\.(ya?ml|properties))$
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~* /(\.git|\.svn|\.bzr|\.vscode|\.claude|\.idea|\.ssh|\.github|\.npm|\.yarn|\.pnpm|\.cache|\.husky|\.turbo|\.next|\.nuxt|node_modules|runtime)/
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~ \.well-known { allow all; }
|
||||||
|
|
||||||
|
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||||
|
return 403;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
|
||||||
|
expires 30d; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
location ~ .*\.(js|css)?$ {
|
||||||
|
expires 12h; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
|
||||||
|
access_log /www/wwwlogs/leilei-jf.czchunfang.com.log;
|
||||||
|
error_log /www/wwwlogs/leilei-jf.czchunfang.com.error.log;
|
||||||
|
}
|
||||||
83
deploy/docker/nginx/leilei-jfadmin.czchunfang.com.conf
Normal file
83
deploy/docker/nginx/leilei-jfadmin.czchunfang.com.conf
Normal file
@@ -0,0 +1,83 @@
|
|||||||
|
upstream jifenmall_admin {
|
||||||
|
server 127.0.0.1:18081;
|
||||||
|
keepalive 10240;
|
||||||
|
}
|
||||||
|
|
||||||
|
server
|
||||||
|
{
|
||||||
|
listen 80;
|
||||||
|
listen 443 ssl;
|
||||||
|
http2 on;
|
||||||
|
server_name leilei-jfadmin.czchunfang.com;
|
||||||
|
index index.html index.htm default.htm default.html;
|
||||||
|
root /www/wwwroot/leilei-jfadmin.czchunfang.com;
|
||||||
|
include /www/server/panel/vhost/nginx/extension/leilei-jfadmin.czchunfang.com/*.conf;
|
||||||
|
#CERT-APPLY-CHECK--START
|
||||||
|
include /www/server/panel/vhost/nginx/well-known/leilei-jfadmin.czchunfang.com.conf;
|
||||||
|
#CERT-APPLY-CHECK--END
|
||||||
|
|
||||||
|
#SSL-START
|
||||||
|
#error_page 404/404.html;
|
||||||
|
#HTTP_TO_HTTPS_START
|
||||||
|
set $isRedcert 1;
|
||||||
|
if ($server_port != 443) {
|
||||||
|
set $isRedcert 2;
|
||||||
|
}
|
||||||
|
if ( $uri ~ /\.well-known/ ) {
|
||||||
|
set $isRedcert 1;
|
||||||
|
}
|
||||||
|
if ($isRedcert != 1) {
|
||||||
|
rewrite ^(/.*)$ https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
#HTTP_TO_HTTPS_END
|
||||||
|
ssl_certificate /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei-jfadmin.czchunfang.com_cert/nginx/leilei-jfadmin.czchunfang.com.pem;
|
||||||
|
ssl_certificate_key /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei-jfadmin.czchunfang.com_cert/nginx/leilei-jfadmin.czchunfang.com.key;
|
||||||
|
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
||||||
|
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
ssl_session_tickets on;
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000";
|
||||||
|
error_page 497 https://$host$request_uri;
|
||||||
|
#SSL-END
|
||||||
|
|
||||||
|
#REWRITE-START
|
||||||
|
include /www/server/panel/vhost/rewrite/html_leilei-jfadmin.czchunfang.com.conf;
|
||||||
|
#REWRITE-END
|
||||||
|
|
||||||
|
# 积分商城管理后台 → Docker single-admin-web 容器（Vue SPA）
|
||||||
|
location ^~ / {
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
if (!-f $request_filename) {
|
||||||
|
proxy_pass http://jifenmall_admin;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* (\.user.ini|\.htaccess|\.htpasswd|\.env.*|\.project|\.bashrc|\.bash_profile|\.bash_logout|\.DS_Store|\.gitignore|\.gitattributes|LICENSE|README\.md|CLAUDE\.md|CHANGELOG\.md|CHANGELOG|CONTRIBUTING\.md|TODO\.md|FAQ\.md|composer\.json|composer\.lock|package(-lock)?\.json|yarn\.lock|pnpm-lock\.yaml|\.\w+~|\.swp|\.swo|\.bak(up)?|\.old|\.tmp|\.temp|\.log|\.sql(\.gz)?|docker-compose\.yml|docker\.env|Dockerfile|\.csproj|\.sln|Cargo\.toml|Cargo\.lock|go\.mod|go\.sum|phpunit\.xml|phpunit\.xml|pom\.xml|build\.gradl|pyproject\.toml|requirements\.txt|application(-\w+)?\.(ya?ml|properties))$
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~* /(\.git|\.svn|\.bzr|\.vscode|\.claude|\.idea|\.ssh|\.github|\.npm|\.yarn|\.pnpm|\.cache|\.husky|\.turbo|\.next|\.nuxt|node_modules|runtime)/
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~ \.well-known { allow all; }
|
||||||
|
|
||||||
|
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||||
|
return 403;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
|
||||||
|
expires 30d; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
location ~ .*\.(js|css)?$ {
|
||||||
|
expires 12h; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
|
||||||
|
access_log /www/wwwlogs/leilei-jfadmin.czchunfang.com.log;
|
||||||
|
error_log /www/wwwlogs/leilei-jfadmin.czchunfang.com.error.log;
|
||||||
|
}
|
||||||
82
deploy/docker/nginx/leilei.czchunfang.com.conf
Normal file
82
deploy/docker/nginx/leilei.czchunfang.com.conf
Normal file
@@ -0,0 +1,82 @@
|
|||||||
|
upstream resell_h5 {
|
||||||
|
server 127.0.0.1:18080;
|
||||||
|
keepalive 10240;
|
||||||
|
}
|
||||||
|
|
||||||
|
server
|
||||||
|
{
|
||||||
|
listen 80;
|
||||||
|
listen 443 ssl http2;
|
||||||
|
server_name leilei.czchunfang.com;
|
||||||
|
index index.html index.htm default.htm default.html;
|
||||||
|
root /www/wwwroot/leilei.czchunfang.com;
|
||||||
|
include /www/server/panel/vhost/nginx/extension/leilei.czchunfang.com/*.conf;
|
||||||
|
#CERT-APPLY-CHECK--START
|
||||||
|
include /www/server/panel/vhost/nginx/well-known/leilei.czchunfang.com.conf;
|
||||||
|
#CERT-APPLY-CHECK--END
|
||||||
|
|
||||||
|
#SSL-START
|
||||||
|
#error_page 404/404.html;
|
||||||
|
#HTTP_TO_HTTPS_START
|
||||||
|
set $isRedcert 1;
|
||||||
|
if ($server_port != 443) {
|
||||||
|
set $isRedcert 2;
|
||||||
|
}
|
||||||
|
if ( $uri ~ /\.well-known/ ) {
|
||||||
|
set $isRedcert 1;
|
||||||
|
}
|
||||||
|
if ($isRedcert != 1) {
|
||||||
|
rewrite ^(/.*)$ https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
#HTTP_TO_HTTPS_END
|
||||||
|
ssl_certificate /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei.czchunfang.com_cert/nginx/leilei.czchunfang.com.pem;
|
||||||
|
ssl_certificate_key /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leilei.czchunfang.com_cert/nginx/leilei.czchunfang.com.key;
|
||||||
|
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
||||||
|
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
ssl_session_tickets on;
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000";
|
||||||
|
error_page 497 https://$host$request_uri;
|
||||||
|
#SSL-END
|
||||||
|
|
||||||
|
#REWRITE-START
|
||||||
|
include /www/server/panel/vhost/rewrite/html_leilei.czchunfang.com.conf;
|
||||||
|
#REWRITE-END
|
||||||
|
|
||||||
|
# 寄卖商城 H5 → Docker integral-h5 容器（内部已含 /api/ /upload/ 反代到 webman:8785）
|
||||||
|
location ^~ / {
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
if (!-f $request_filename) {
|
||||||
|
proxy_pass http://resell_h5;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* (\.user.ini|\.htaccess|\.htpasswd|\.env.*|\.project|\.bashrc|\.bash_profile|\.bash_logout|\.DS_Store|\.gitignore|\.gitattributes|LICENSE|README\.md|CLAUDE\.md|CHANGELOG\.md|CHANGELOG|CONTRIBUTING\.md|TODO\.md|FAQ\.md|composer\.json|composer\.lock|package(-lock)?\.json|yarn\.lock|pnpm-lock\.yaml|\.\w+~|\.swp|\.swo|\.bak(up)?|\.old|\.tmp|\.temp|\.log|\.sql(\.gz)?|docker-compose\.yml|docker\.env|Dockerfile|\.csproj|\.sln|Cargo\.toml|Cargo\.lock|go\.mod|go\.sum|phpunit\.xml|phpunit\.xml|pom\.xml|build\.gradl|pyproject\.toml|requirements\.txt|application(-\w+)?\.(ya?ml|properties))$
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~* /(\.git|\.svn|\.bzr|\.vscode|\.claude|\.idea|\.ssh|\.github|\.npm|\.yarn|\.pnpm|\.cache|\.husky|\.turbo|\.next|\.nuxt|node_modules|runtime)/
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~ \.well-known { allow all; }
|
||||||
|
|
||||||
|
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||||
|
return 403;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
|
||||||
|
expires 30d; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
location ~ .*\.(js|css)?$ {
|
||||||
|
expires 12h; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
|
||||||
|
access_log /www/wwwlogs/leilei.czchunfang.com.log;
|
||||||
|
error_log /www/wwwlogs/leilei.czchunfang.com.error.log;
|
||||||
|
}
|
||||||
82
deploy/docker/nginx/leileiadmin.czchunfang.com.conf
Normal file
82
deploy/docker/nginx/leileiadmin.czchunfang.com.conf
Normal file
@@ -0,0 +1,82 @@
|
|||||||
|
upstream resell_api {
|
||||||
|
server 127.0.0.1:18085;
|
||||||
|
keepalive 10240;
|
||||||
|
}
|
||||||
|
|
||||||
|
server
|
||||||
|
{
|
||||||
|
listen 80;
|
||||||
|
listen 443 ssl http2;
|
||||||
|
server_name leileiadmin.czchunfang.com;
|
||||||
|
index index.html index.htm default.htm default.html;
|
||||||
|
root /www/wwwroot/leileiadmin.czchunfang.com;
|
||||||
|
include /www/server/panel/vhost/nginx/extension/leileiadmin.czchunfang.com/*.conf;
|
||||||
|
#CERT-APPLY-CHECK--START
|
||||||
|
include /www/server/panel/vhost/nginx/well-known/leileiadmin.czchunfang.com.conf;
|
||||||
|
#CERT-APPLY-CHECK--END
|
||||||
|
|
||||||
|
#SSL-START
|
||||||
|
#error_page 404/404.html;
|
||||||
|
#HTTP_TO_HTTPS_START
|
||||||
|
set $isRedcert 1;
|
||||||
|
if ($server_port != 443) {
|
||||||
|
set $isRedcert 2;
|
||||||
|
}
|
||||||
|
if ( $uri ~ /\.well-known/ ) {
|
||||||
|
set $isRedcert 1;
|
||||||
|
}
|
||||||
|
if ($isRedcert != 1) {
|
||||||
|
rewrite ^(/.*)$ https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
#HTTP_TO_HTTPS_END
|
||||||
|
ssl_certificate /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leileiadmin.czchunfang.com_cert/nginx/leileiadmin.czchunfang.com.pem;
|
||||||
|
ssl_certificate_key /www/wwwroot/integral-shop/deploy/docker/ssl-cert/leileiadmin.czchunfang.com_cert/nginx/leileiadmin.czchunfang.com.key;
|
||||||
|
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
||||||
|
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
ssl_session_tickets on;
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000";
|
||||||
|
error_page 497 https://$host$request_uri;
|
||||||
|
#SSL-END
|
||||||
|
|
||||||
|
#REWRITE-START
|
||||||
|
include /www/server/panel/vhost/rewrite/html_leileiadmin.czchunfang.com.conf;
|
||||||
|
#REWRITE-END
|
||||||
|
|
||||||
|
# 寄卖商城后台 API → Docker integral-houtai 容器（webman.bin 写死端口 8785）
|
||||||
|
location ^~ / {
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
if (!-f $request_filename) {
|
||||||
|
proxy_pass http://resell_api;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* (\.user.ini|\.htaccess|\.htpasswd|\.env.*|\.project|\.bashrc|\.bash_profile|\.bash_logout|\.DS_Store|\.gitignore|\.gitattributes|LICENSE|README\.md|CLAUDE\.md|CHANGELOG\.md|CHANGELOG|CONTRIBUTING\.md|TODO\.md|FAQ\.md|composer\.json|composer\.lock|package(-lock)?\.json|yarn\.lock|pnpm-lock\.yaml|\.\w+~|\.swp|\.swo|\.bak(up)?|\.old|\.tmp|\.temp|\.log|\.sql(\.gz)?|docker-compose\.yml|docker\.env|Dockerfile|\.csproj|\.sln|Cargo\.toml|Cargo\.lock|go\.mod|go\.sum|phpunit\.xml|phpunit\.xml|pom\.xml|build\.gradl|pyproject\.toml|requirements\.txt|application(-\w+)?\.(ya?ml|properties))$
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~* /(\.git|\.svn|\.bzr|\.vscode|\.claude|\.idea|\.ssh|\.github|\.npm|\.yarn|\.pnpm|\.cache|\.husky|\.turbo|\.next|\.nuxt|node_modules|runtime)/
|
||||||
|
{ return 404; }
|
||||||
|
|
||||||
|
location ~ \.well-known { allow all; }
|
||||||
|
|
||||||
|
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||||
|
return 403;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
|
||||||
|
expires 30d; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
location ~ .*\.(js|css)?$ {
|
||||||
|
expires 12h; error_log /dev/null; access_log /dev/null;
|
||||||
|
}
|
||||||
|
|
||||||
|
access_log /www/wwwlogs/leileiadmin.czchunfang.com.log;
|
||||||
|
error_log /www/wwwlogs/leileiadmin.czchunfang.com.error.log;
|
||||||
|
}
|
||||||
39
deploy/docker/redis/redis.conf
Normal file
39
deploy/docker/redis/redis.conf
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
# =============================================================
|
||||||
|
# Redis 6.2 — 容器内最小化生产配置
|
||||||
|
# 密码由 docker-compose 通过 --requirepass 参数注入
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
bind 0.0.0.0
|
||||||
|
protected-mode yes
|
||||||
|
port 6379
|
||||||
|
tcp-backlog 511
|
||||||
|
timeout 0
|
||||||
|
tcp-keepalive 300
|
||||||
|
|
||||||
|
# 数据持久化： AOF + 一份 RDB 兜底
|
||||||
|
appendonly yes
|
||||||
|
appendfsync everysec
|
||||||
|
save 900 1
|
||||||
|
save 300 10
|
||||||
|
save 60 10000
|
||||||
|
|
||||||
|
dir /data
|
||||||
|
dbfilename dump.rdb
|
||||||
|
appendfilename "appendonly.aof"
|
||||||
|
auto-aof-rewrite-percentage 100
|
||||||
|
auto-aof-rewrite-min-size 64mb
|
||||||
|
|
||||||
|
# 内存策略
|
||||||
|
maxmemory 512mb
|
||||||
|
maxmemory-policy allkeys-lru
|
||||||
|
|
||||||
|
# 日志
|
||||||
|
loglevel notice
|
||||||
|
logfile ""
|
||||||
|
|
||||||
|
# 慢日志
|
||||||
|
slowlog-log-slower-than 10000
|
||||||
|
slowlog-max-len 128
|
||||||
|
|
||||||
|
# 客户端
|
||||||
|
maxclients 1000
|
||||||
1
deploy/docker/scripts/.gitignore
vendored
Normal file
1
deploy/docker/scripts/.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
|||||||
|
server.env
|
||||||
39
deploy/docker/scripts/bootstrap-remote-env.sh
Executable file
39
deploy/docker/scripts/bootstrap-remote-env.sh
Executable file
@@ -0,0 +1,39 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# =============================================================
|
||||||
|
# 首次部署：在远端创建 .env 模板（仅在缺失时创建）
|
||||||
|
# 同步代码后执行： ./bootstrap-remote-env.sh
|
||||||
|
# 之后 ssh 上去 vim 这两个文件填入真实密码即可
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
|
||||||
|
if [ -f "$SCRIPT_DIR/server.env" ]; then
|
||||||
|
set -a; . "$SCRIPT_DIR/server.env"; set +a
|
||||||
|
fi
|
||||||
|
|
||||||
|
SERVER_HOST="${SERVER_HOST:?}"
|
||||||
|
SERVER_USER="${SERVER_USER:-root}"
|
||||||
|
SERVER_PORT="${SERVER_PORT:-22}"
|
||||||
|
REMOTE_DIR="${REMOTE_DIR:-/root/integral-shop}"
|
||||||
|
|
||||||
|
if [ -n "${SSHPASS:-}" ]; then
|
||||||
|
command -v sshpass >/dev/null || { echo "需要 sshpass"; exit 1; }
|
||||||
|
export SSHPASS
|
||||||
|
SSH=(sshpass -e ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null)
|
||||||
|
else
|
||||||
|
SSH=(ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no)
|
||||||
|
fi
|
||||||
|
|
||||||
|
"${SSH[@]}" "${SERVER_USER}@${SERVER_HOST}" bash -se <<EOSSH
|
||||||
|
set -e
|
||||||
|
cd "${REMOTE_DIR}/deploy/docker"
|
||||||
|
[ -f .env ] || { cp .env.example .env; echo "[+] 已创建 .env (基于 .env.example)"; }
|
||||||
|
[ -f integral-resell/.env ] || { cp integral-resell/.env.template integral-resell/.env; echo "[+] 已创建 integral-resell/.env"; }
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "请在远端编辑以下文件填入真实参数："
|
||||||
|
echo " ${REMOTE_DIR}/deploy/docker/.env"
|
||||||
|
echo " ${REMOTE_DIR}/deploy/docker/integral-resell/.env"
|
||||||
|
EOSSH
|
||||||
204
deploy/docker/scripts/deploy-step1.sh
Executable file
204
deploy/docker/scripts/deploy-step1.sh
Executable file
@@ -0,0 +1,204 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# =============================================================
|
||||||
|
# 寄卖商城（integral-resell）一键部署脚本
|
||||||
|
# 目标服务器：116.62.83.240
|
||||||
|
# 使用方式：bash deploy/docker/scripts/deploy-step1.sh
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
|
||||||
|
STEP1_DIR="${PROJECT_ROOT}/deploy/docker/step1-integral"
|
||||||
|
|
||||||
|
# ---------- 读取服务器配置 ----------
|
||||||
|
if [ -f "$SCRIPT_DIR/server.env" ]; then
|
||||||
|
set -a; . "$SCRIPT_DIR/server.env"; set +a
|
||||||
|
else
|
||||||
|
echo "[!] 未找到 server.env，请先创建"; exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
SERVER_HOST="${SERVER_HOST:?}"
|
||||||
|
SERVER_USER="${SERVER_USER:-root}"
|
||||||
|
SERVER_PORT="${SERVER_PORT:-22}"
|
||||||
|
REMOTE_DIR="${REMOTE_DIR:-/root/integral-shop}"
|
||||||
|
REMOTE_STEP1="${REMOTE_DIR}/deploy/docker/step1-integral"
|
||||||
|
|
||||||
|
REDIS_PASS="LeileiRedis@8899"
|
||||||
|
DB_PASS="5Fn8eWrbYFtAhCZw"
|
||||||
|
|
||||||
|
# ---------- SSH / rsync 通道 ----------
|
||||||
|
export SSHPASS="${SSHPASS:?缺少 SSHPASS}"
|
||||||
|
SSH_OPTS="-p $SERVER_PORT -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
|
||||||
|
SSH=(sshpass -e ssh $SSH_OPTS)
|
||||||
|
RSYNC_SSH="sshpass -e ssh $SSH_OPTS"
|
||||||
|
RSYNC_BIN="/opt/homebrew/bin/rsync"
|
||||||
|
[ -x "$RSYNC_BIN" ] || RSYNC_BIN="rsync"
|
||||||
|
|
||||||
|
remote() { "${SSH[@]}" "${SERVER_USER}@${SERVER_HOST}" "$@"; }
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "══════════════════════════════════════════════════════"
|
||||||
|
echo " 寄卖商城 Docker 一键部署 → ${SERVER_HOST}"
|
||||||
|
echo "══════════════════════════════════════════════════════"
|
||||||
|
|
||||||
|
# ─── 1. 生成本地临时 env 文件 ─────────────────────────────────
|
||||||
|
echo ""
|
||||||
|
echo "▶ [1/6] 生成临时 .env / houtai.env ..."
|
||||||
|
|
||||||
|
TMPENV=$(mktemp -d)
|
||||||
|
trap 'rm -rf "$TMPENV"' EXIT
|
||||||
|
|
||||||
|
cat > "$TMPENV/.env" <<EOF
|
||||||
|
TZ=Asia/Shanghai
|
||||||
|
REDIS_PASSWORD=${REDIS_PASS}
|
||||||
|
INTEGRAL_TITLE=池州雷蕾商贸
|
||||||
|
INTEGRAL_API_PUBLIC_URL=https://leileiadmin.czchunfang.com
|
||||||
|
INTEGRAL_IMG_PUBLIC_URL=https://leileiadmin.czchunfang.com
|
||||||
|
INTEGRAL_H5_PUBLIC_URL=https://leilei.czchunfang.com/
|
||||||
|
INTEGRAL_SN_ID=17533260260517
|
||||||
|
INTEGRAL_APP_STR=ZFyTNQTWEkCBczKzyUDJWE9Ecx260517
|
||||||
|
INTEGRAL_CONTRACT_PAGE=10012
|
||||||
|
INTEGRAL_H5_PORT=18080
|
||||||
|
RESELL_API_PORT=18085
|
||||||
|
RESELL_H5_DIR=/www/wwwroot/leilei.czchunfang.com
|
||||||
|
RESELL_HOUTAI_DIR=/www/wwwroot/leileiadmin.czchunfang.com
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat > "$TMPENV/houtai.env" <<EOF
|
||||||
|
DB_HOST = 'rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com'
|
||||||
|
DB_PORT = 3306
|
||||||
|
DB_DATABASE = 'yangtangyoupin'
|
||||||
|
DB_USERNAME = 'yangtangyoupin'
|
||||||
|
DB_PASSWORD = '${DB_PASS}'
|
||||||
|
REDIS_HOST = 'redis'
|
||||||
|
REDIS_PORT = 6379
|
||||||
|
REDIS_PASSWORD = '${REDIS_PASS}'
|
||||||
|
SMS_CHANNEL = 'alibaba'
|
||||||
|
SMS_SIGNNAME = '池州雷蕾商贸'
|
||||||
|
SMS_TEMPLATE = 'SMS_334320185'
|
||||||
|
SMS_KEYID = 'LTAI5t7CfS15hZGdNLLEMUwG'
|
||||||
|
SMS_KEYSECRET = 'ikfTvHbMMg5sStGgdvLNL8iuVYdner'
|
||||||
|
SMS_SDKAPPID = ''
|
||||||
|
FILE_STORAGE = 'public'
|
||||||
|
OSS_ACCESS_ID = ''
|
||||||
|
OSS_ACCESS_SECRET = ''
|
||||||
|
OSS_BUCKET = ''
|
||||||
|
OSS_ENDPOINT = ''
|
||||||
|
OSS_URL = ''
|
||||||
|
APP_SIGN = '1'
|
||||||
|
APP_SECRET = 'ZFyTNQTWEkCBczKzyUDJWE9Ecx260517'
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo " ✓ 临时文件已生成"
|
||||||
|
|
||||||
|
# ─── 2. rsync 项目文件 ────────────────────────────────────────
|
||||||
|
echo ""
|
||||||
|
echo "▶ [2/6] rsync 项目文件 → ${SERVER_USER}@${SERVER_HOST}:${REMOTE_DIR}/"
|
||||||
|
remote "mkdir -p '${REMOTE_DIR}'"
|
||||||
|
|
||||||
|
"$RSYNC_BIN" -avz --partial \
|
||||||
|
-e "$RSYNC_SSH" \
|
||||||
|
--exclude '.git/' \
|
||||||
|
--exclude '.DS_Store' \
|
||||||
|
--exclude '*.log' \
|
||||||
|
--exclude '**/.idea/' \
|
||||||
|
--exclude '**/.cursor/' \
|
||||||
|
--exclude '**/.vscode/' \
|
||||||
|
--exclude '**/node_modules/' \
|
||||||
|
--exclude '**/target/' \
|
||||||
|
--exclude '**/unpackage/cache/' \
|
||||||
|
--exclude '**/unpackage/dist/dev/' \
|
||||||
|
--exclude 'integral-resell/houtai/runtime/' \
|
||||||
|
--exclude 'single-shop-22/backend/logs/' \
|
||||||
|
--exclude 'single-shop-22/backend/crmebimage/' \
|
||||||
|
--exclude 'MER-2.2_2601/' \
|
||||||
|
--exclude 'db/' \
|
||||||
|
--exclude 'deploy/docker/scripts/server.env' \
|
||||||
|
--exclude 'deploy/docker/step1-integral/.env' \
|
||||||
|
--exclude 'deploy/docker/step1-integral/houtai.env' \
|
||||||
|
"${PROJECT_ROOT}/" "${SERVER_USER}@${SERVER_HOST}:${REMOTE_DIR}/"
|
||||||
|
|
||||||
|
echo " ✓ 项目文件同步完成"
|
||||||
|
|
||||||
|
# ─── 3. 上传 env 文件 ─────────────────────────────────────────
|
||||||
|
echo ""
|
||||||
|
echo "▶ [3/6] 上传 .env 和 houtai.env ..."
|
||||||
|
|
||||||
|
"$RSYNC_BIN" -avz \
|
||||||
|
-e "$RSYNC_SSH" \
|
||||||
|
"$TMPENV/.env" \
|
||||||
|
"${SERVER_USER}@${SERVER_HOST}:${REMOTE_STEP1}/.env"
|
||||||
|
|
||||||
|
"$RSYNC_BIN" -avz \
|
||||||
|
-e "$RSYNC_SSH" \
|
||||||
|
"$TMPENV/houtai.env" \
|
||||||
|
"${SERVER_USER}@${SERVER_HOST}:${REMOTE_STEP1}/houtai.env"
|
||||||
|
|
||||||
|
echo " ✓ env 文件上传完成"
|
||||||
|
|
||||||
|
# ─── 4. 创建宿主机挂载目录 + 同步 H5 到 wwwroot ──────────────
|
||||||
|
echo ""
|
||||||
|
echo "▶ [4/6] 创建宿主机目录 & 同步 H5 静态文件 ..."
|
||||||
|
|
||||||
|
remote "
|
||||||
|
set -e
|
||||||
|
mkdir -p /www/wwwroot/leilei.czchunfang.com
|
||||||
|
mkdir -p /www/wwwroot/leileiadmin.czchunfang.com/public/upload
|
||||||
|
mkdir -p /www/wwwroot/leileiadmin.czchunfang.com/runtime/logs
|
||||||
|
mkdir -p /www/wwwroot/leileiadmin.czchunfang.com/runtime/sessions
|
||||||
|
echo ' ✓ 宿主机目录已就绪'
|
||||||
|
|
||||||
|
# 同步 H5 静态文件
|
||||||
|
rsync -a --delete \
|
||||||
|
'${REMOTE_DIR}/integral-resell/h5/' \
|
||||||
|
'/www/wwwroot/leilei.czchunfang.com/'
|
||||||
|
echo ' ✓ H5 静态文件已同步到 /www/wwwroot/leilei.czchunfang.com/'
|
||||||
|
|
||||||
|
# 同步 webman 应用文件（webman.bin / public / index.html）到宿主机，
|
||||||
|
# 容器启动后直接从此目录运行，FTP 更新文件后 restart 即可生效
|
||||||
|
rsync -a --exclude='runtime/' --exclude='.env' \
|
||||||
|
'${REMOTE_DIR}/integral-resell/houtai/' \
|
||||||
|
'/www/wwwroot/leileiadmin.czchunfang.com/'
|
||||||
|
chmod +x /www/wwwroot/leileiadmin.czchunfang.com/webman.bin
|
||||||
|
echo ' ✓ webman 应用文件已同步到 /www/wwwroot/leileiadmin.czchunfang.com/'
|
||||||
|
ls /www/wwwroot/leileiadmin.czchunfang.com/ | head -8
|
||||||
|
"
|
||||||
|
|
||||||
|
# ─── 5. docker compose build & up ────────────────────────────
|
||||||
|
echo ""
|
||||||
|
echo "▶ [5/6] docker compose build --no-cache ..."
|
||||||
|
echo " （首次构建耗时 5-15 分钟，请耐心等待）"
|
||||||
|
|
||||||
|
remote "
|
||||||
|
set -e
|
||||||
|
cd '${REMOTE_STEP1}'
|
||||||
|
docker compose --env-file .env build --no-cache
|
||||||
|
echo ' ✓ 镜像构建完成'
|
||||||
|
"
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "▶ [6/6] docker compose up -d ..."
|
||||||
|
|
||||||
|
remote "
|
||||||
|
set -e
|
||||||
|
cd '${REMOTE_STEP1}'
|
||||||
|
docker compose --env-file .env up -d
|
||||||
|
echo ''
|
||||||
|
docker compose --env-file .env ps
|
||||||
|
"
|
||||||
|
|
||||||
|
# ─── 完成 ─────────────────────────────────────────────────────
|
||||||
|
echo ""
|
||||||
|
echo "══════════════════════════════════════════════════════"
|
||||||
|
echo " ✅ 寄卖商城部署完成！"
|
||||||
|
echo ""
|
||||||
|
echo " H5 前台: http://${SERVER_HOST}:18080"
|
||||||
|
echo " API 端口: http://${SERVER_HOST}:18085"
|
||||||
|
echo ""
|
||||||
|
echo " 查看日志:"
|
||||||
|
echo " cd ${REMOTE_STEP1} && docker compose --env-file .env logs -f"
|
||||||
|
echo ""
|
||||||
|
echo " 查看容器状态:"
|
||||||
|
echo " docker compose --env-file .env ps"
|
||||||
|
echo "══════════════════════════════════════════════════════"
|
||||||
92
deploy/docker/scripts/remote-up.sh
Executable file
92
deploy/docker/scripts/remote-up.sh
Executable file
@@ -0,0 +1,92 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# =============================================================
|
||||||
|
# 远端执行 docker compose 命令
|
||||||
|
# 用法：
|
||||||
|
# ./remote-up.sh up # build + up -d
|
||||||
|
# ./remote-up.sh build # 仅 build
|
||||||
|
# ./remote-up.sh restart svc # 重启某服务
|
||||||
|
# ./remote-up.sh logs [svc] # 跟日志
|
||||||
|
# ./remote-up.sh ps # 服务状态
|
||||||
|
# ./remote-up.sh ssh # 登录到远端
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
|
||||||
|
if [ -f "$SCRIPT_DIR/server.env" ]; then
|
||||||
|
# shellcheck disable=SC1091
|
||||||
|
set -a
|
||||||
|
. "$SCRIPT_DIR/server.env"
|
||||||
|
set +a
|
||||||
|
fi
|
||||||
|
|
||||||
|
SERVER_HOST="${SERVER_HOST:?SERVER_HOST 未配置，请先 cp server.env.example server.env}"
|
||||||
|
SERVER_USER="${SERVER_USER:-root}"
|
||||||
|
SERVER_PORT="${SERVER_PORT:-22}"
|
||||||
|
REMOTE_DIR="${REMOTE_DIR:-/root/integral-shop}"
|
||||||
|
|
||||||
|
if [ -n "${SSHPASS:-}" ]; then
|
||||||
|
command -v sshpass >/dev/null 2>&1 || { echo "需要 sshpass"; exit 1; }
|
||||||
|
export SSHPASS
|
||||||
|
SSH=(sshpass -e ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -t)
|
||||||
|
else
|
||||||
|
SSH=(ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no -t)
|
||||||
|
fi
|
||||||
|
|
||||||
|
run_remote() {
|
||||||
|
"${SSH[@]}" "${SERVER_USER}@${SERVER_HOST}" "cd ${REMOTE_DIR}/deploy/docker && $*"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd="${1:-up}"
|
||||||
|
shift || true
|
||||||
|
|
||||||
|
case "$cmd" in
|
||||||
|
up)
|
||||||
|
# 预检：必须存在 .env
|
||||||
|
run_remote "test -f .env && test -f integral-resell/.env" || {
|
||||||
|
cat <<EOF
|
||||||
|
[!] 远端缺少 .env 文件，请在远端执行：
|
||||||
|
|
||||||
|
ssh ${SERVER_USER}@${SERVER_HOST}
|
||||||
|
cd ${REMOTE_DIR}/deploy/docker
|
||||||
|
cp .env.example .env
|
||||||
|
vim .env
|
||||||
|
cp integral-resell/.env.template integral-resell/.env
|
||||||
|
vim integral-resell/.env
|
||||||
|
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
run_remote "docker compose build && docker compose up -d && docker compose ps"
|
||||||
|
;;
|
||||||
|
build)
|
||||||
|
run_remote "docker compose build $*"
|
||||||
|
;;
|
||||||
|
restart)
|
||||||
|
run_remote "docker compose restart $*"
|
||||||
|
;;
|
||||||
|
logs)
|
||||||
|
run_remote "docker compose logs --tail 200 -f $*"
|
||||||
|
;;
|
||||||
|
ps|status)
|
||||||
|
run_remote "docker compose ps"
|
||||||
|
;;
|
||||||
|
down)
|
||||||
|
run_remote "docker compose down"
|
||||||
|
;;
|
||||||
|
pull)
|
||||||
|
run_remote "docker compose pull"
|
||||||
|
;;
|
||||||
|
ssh)
|
||||||
|
"${SSH[@]}" "${SERVER_USER}@${SERVER_HOST}"
|
||||||
|
;;
|
||||||
|
exec)
|
||||||
|
run_remote "docker compose exec $*"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "未知子命令: $cmd"
|
||||||
|
echo "支持: up | build | restart | logs | ps | down | pull | ssh | exec"
|
||||||
|
exit 2
|
||||||
|
;;
|
||||||
|
esac
|
||||||
21
deploy/docker/scripts/server.env.example
Normal file
21
deploy/docker/scripts/server.env.example
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 部署目标服务器配置 — 复制为 server.env 并按实际填写
|
||||||
|
# 不要提交到 git
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
# 远端服务器
|
||||||
|
# 宝塔 Docker 管理面板： https://116.62.83.240:14874/docker/conmanger
|
||||||
|
SERVER_HOST=116.62.83.240
|
||||||
|
SERVER_USER=root
|
||||||
|
SERVER_PORT=22
|
||||||
|
# 部署到服务器的目标目录
|
||||||
|
REMOTE_DIR=/root/integral-shop
|
||||||
|
|
||||||
|
# 用密码登录时填写（需要 sshpass）
|
||||||
|
# macOS: brew install hudochenkov/sshpass/sshpass
|
||||||
|
# Linux: apt-get install -y sshpass
|
||||||
|
# 留空则走 SSH key（推荐先 ssh-copy-id root@116.62.83.240）
|
||||||
|
SSHPASS=A@123456
|
||||||
|
|
||||||
|
# 是否在 rsync 之后自动 build + up（yes / no）
|
||||||
|
AUTO_UP=yes
|
||||||
123
deploy/docker/scripts/sync-to-server.sh
Executable file
123
deploy/docker/scripts/sync-to-server.sh
Executable file
@@ -0,0 +1,123 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# =============================================================
|
||||||
|
# 通过 rsync 把整个工程同步到远端服务器
|
||||||
|
# 用法：
|
||||||
|
# 1. 复制 server.env.example -> server.env，填入主机/密码
|
||||||
|
# 2. ./sync-to-server.sh # 仅同步
|
||||||
|
# ./sync-to-server.sh up # 同步后在远端 docker compose build && up -d
|
||||||
|
# ./sync-to-server.sh logs # 远端 docker compose logs
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
|
||||||
|
|
||||||
|
# 读取服务器配置
|
||||||
|
if [ -f "$SCRIPT_DIR/server.env" ]; then
|
||||||
|
# shellcheck disable=SC1091
|
||||||
|
set -a
|
||||||
|
. "$SCRIPT_DIR/server.env"
|
||||||
|
set +a
|
||||||
|
elif [ -f "$SCRIPT_DIR/server.env.example" ]; then
|
||||||
|
echo "[!] 未发现 server.env，请先 cp server.env.example server.env 并修改"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
SERVER_HOST="${SERVER_HOST:?SERVER_HOST 未配置}"
|
||||||
|
SERVER_USER="${SERVER_USER:-root}"
|
||||||
|
SERVER_PORT="${SERVER_PORT:-22}"
|
||||||
|
REMOTE_DIR="${REMOTE_DIR:-/root/integral-shop}"
|
||||||
|
|
||||||
|
# ---------- 选择 SSH/rsync 通道 ----------
|
||||||
|
if [ -n "${SSHPASS:-}" ]; then
|
||||||
|
if ! command -v sshpass >/dev/null 2>&1; then
|
||||||
|
echo "[!] 检测到 SSHPASS 但未安装 sshpass"
|
||||||
|
echo " macOS: brew install hudochenkov/sshpass/sshpass"
|
||||||
|
echo " Linux: apt-get install -y sshpass"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
export SSHPASS
|
||||||
|
SSH=(sshpass -e ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null)
|
||||||
|
RSYNC_SSH="sshpass -e ssh -p $SERVER_PORT -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
|
||||||
|
else
|
||||||
|
SSH=(ssh -p "$SERVER_PORT" -o StrictHostKeyChecking=no -o ServerAliveInterval=30)
|
||||||
|
RSYNC_SSH="ssh -p $SERVER_PORT -o StrictHostKeyChecking=no -o ServerAliveInterval=30"
|
||||||
|
fi
|
||||||
|
|
||||||
|
remote() {
|
||||||
|
"${SSH[@]}" "${SERVER_USER}@${SERVER_HOST}" "$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ---------- 1. 远端目录准备 ----------
|
||||||
|
echo "[1/3] 准备远端目录 ${SERVER_USER}@${SERVER_HOST}:${REMOTE_DIR}"
|
||||||
|
remote "mkdir -p '${REMOTE_DIR}'"
|
||||||
|
|
||||||
|
# 优先使用 homebrew rsync（macOS 内置版本 2.6.9 太旧）
|
||||||
|
RSYNC_BIN="/opt/homebrew/bin/rsync"
|
||||||
|
[ -x "$RSYNC_BIN" ] || RSYNC_BIN="rsync"
|
||||||
|
|
||||||
|
# ---------- 2. rsync ----------
|
||||||
|
echo "[2/3] rsync ${PROJECT_ROOT}/ -> ${SERVER_USER}@${SERVER_HOST}:${REMOTE_DIR}/"
|
||||||
|
"$RSYNC_BIN" -avz --delete --partial \
|
||||||
|
-e "$RSYNC_SSH" \
|
||||||
|
--exclude '.git/' \
|
||||||
|
--exclude '.DS_Store' \
|
||||||
|
--exclude '*.log' \
|
||||||
|
--exclude '**/.idea/' \
|
||||||
|
--exclude '**/.cursor/' \
|
||||||
|
--exclude '**/.vscode/' \
|
||||||
|
--exclude '**/node_modules/' \
|
||||||
|
--exclude '**/target/' \
|
||||||
|
--exclude '**/unpackage/cache/' \
|
||||||
|
--exclude '**/unpackage/dist/dev/' \
|
||||||
|
--exclude 'integral-resell/houtai/runtime/logs/' \
|
||||||
|
--exclude 'integral-resell/houtai/runtime/sessions/' \
|
||||||
|
--exclude 'integral-resell/houtai/runtime/login/' \
|
||||||
|
--exclude 'integral-resell/houtai/runtime/webman.pid' \
|
||||||
|
--exclude 'single-shop-22/backend/logs/' \
|
||||||
|
--exclude 'single-shop-22/backend/crmebimage/' \
|
||||||
|
--exclude 'single-shop-22/backend-adminend/dist/' \
|
||||||
|
--exclude 'MER-2.2_2601/' \
|
||||||
|
--exclude 'db/mysql-recover-20260514/' \
|
||||||
|
--exclude 'db/yangtangyoupin.sql' \
|
||||||
|
--exclude 'deploy/docker/.env' \
|
||||||
|
--exclude 'deploy/docker/integral-resell/.env' \
|
||||||
|
--exclude 'deploy/docker/scripts/server.env' \
|
||||||
|
"${PROJECT_ROOT}/" "${SERVER_USER}@${SERVER_HOST}:${REMOTE_DIR}/"
|
||||||
|
|
||||||
|
# ---------- 3. 远端 env 文件提示 ----------
|
||||||
|
echo "[3/3] 检查远端环境文件"
|
||||||
|
remote "test -f ${REMOTE_DIR}/deploy/docker/.env || echo '[!] 远端缺少 deploy/docker/.env，请按下面提示创建'"
|
||||||
|
remote "test -f ${REMOTE_DIR}/deploy/docker/integral-resell/.env || echo '[!] 远端缺少 deploy/docker/integral-resell/.env'"
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "==============================================="
|
||||||
|
echo " rsync 完成"
|
||||||
|
echo " 远端目录： ${REMOTE_DIR}"
|
||||||
|
echo "==============================================="
|
||||||
|
|
||||||
|
# ---------- 后续动作 ----------
|
||||||
|
case "${1:-${AUTO_UP:-}}" in
|
||||||
|
up|yes|YES)
|
||||||
|
echo "[远端] 执行 docker compose build && up -d"
|
||||||
|
"$SCRIPT_DIR/remote-up.sh" up
|
||||||
|
;;
|
||||||
|
build)
|
||||||
|
"$SCRIPT_DIR/remote-up.sh" build
|
||||||
|
;;
|
||||||
|
logs)
|
||||||
|
shift || true
|
||||||
|
"$SCRIPT_DIR/remote-up.sh" logs "$@"
|
||||||
|
;;
|
||||||
|
"")
|
||||||
|
echo "下一步:"
|
||||||
|
echo " $0 up # 同步并启动"
|
||||||
|
echo " $0 build # 仅构建"
|
||||||
|
echo " $0 logs # 查看日志"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "未知参数: $1"
|
||||||
|
exit 2
|
||||||
|
;;
|
||||||
|
esac
|
||||||
62
deploy/docker/single-shop/admin-api.Dockerfile
Normal file
62
deploy/docker/single-shop/admin-api.Dockerfile
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 管理后台 API （miao-admin-2.2.jar）
|
||||||
|
# build context = single-shop-22/backend
|
||||||
|
# 对应宿主机启动命令：
|
||||||
|
# nohup java -Xms128m -Xmx256m -jar miao-admin-2.2.jar > admin.log &
|
||||||
|
# =============================================================
|
||||||
|
# syntax=docker/dockerfile:1.6
|
||||||
|
|
||||||
|
FROM maven:3.8.8-eclipse-temurin-17 AS builder
|
||||||
|
WORKDIR /src
|
||||||
|
COPY pom.xml ./
|
||||||
|
COPY crmeb-common/pom.xml crmeb-common/pom.xml
|
||||||
|
COPY crmeb-service/pom.xml crmeb-service/pom.xml
|
||||||
|
COPY crmeb-admin/pom.xml crmeb-admin/pom.xml
|
||||||
|
COPY crmeb-front/pom.xml crmeb-front/pom.xml
|
||||||
|
RUN mvn -B -pl crmeb-admin -am dependency:go-offline -DskipTests || true
|
||||||
|
COPY . .
|
||||||
|
RUN mvn -B clean package -pl crmeb-admin -am -DskipTests
|
||||||
|
|
||||||
|
FROM eclipse-temurin:17-jre-jammy
|
||||||
|
ENV TZ=Asia/Shanghai \
|
||||||
|
DEBIAN_FRONTEND=noninteractive \
|
||||||
|
LANG=C.UTF-8 LC_ALL=C.UTF-8
|
||||||
|
|
||||||
|
# 堆大小：可通过 compose 的 JAVA_HEAP_OPTS 覆盖
|
||||||
|
ENV JAVA_HEAP_OPTS="-Xms128m -Xmx256m"
|
||||||
|
|
||||||
|
# Spring Boot 2.2.6 + Java 17 必须的模块开放参数（固定，不允许 compose 覆盖）
|
||||||
|
ENV JAVA_MODULE_OPTS="\
|
||||||
|
--add-opens java.base/java.lang=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.lang.reflect=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.util=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.io=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.math=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/sun.net.util=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.net=ALL-UNNAMED"
|
||||||
|
|
||||||
|
RUN apt-get update \
|
||||||
|
&& apt-get install -y --no-install-recommends \
|
||||||
|
tzdata ca-certificates curl \
|
||||||
|
fontconfig fonts-dejavu fonts-wqy-zenhei \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone \
|
||||||
|
&& rm -rf /var/lib/apt/lists/* \
|
||||||
|
&& mkdir -p /app /config /usr/local/crmeb/crmebimage /app/log
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY --from=builder /src/crmeb-admin/target/miao-admin-2.2.jar /app/app.jar
|
||||||
|
|
||||||
|
EXPOSE 30032
|
||||||
|
|
||||||
|
# 等价于：nohup java -Xms128m -Xmx256m -jar miao-admin-2.2.jar > admin.log &
|
||||||
|
# 日志直接输出到容器 stdout，docker logs 可查看
|
||||||
|
ENTRYPOINT ["sh","-c","exec java \
|
||||||
|
$JAVA_HEAP_OPTS \
|
||||||
|
$JAVA_MODULE_OPTS \
|
||||||
|
-Dfile.encoding=UTF-8 \
|
||||||
|
-Duser.timezone=$TZ \
|
||||||
|
-jar /app/app.jar \
|
||||||
|
--spring.profiles.active=${SPRING_PROFILES_ACTIVE:-docker} \
|
||||||
|
--spring.config.additional-location=file:/config/ \
|
||||||
|
--server.port=${SERVER_PORT:-30032}"]
|
||||||
88
deploy/docker/single-shop/admin-web.Dockerfile
Normal file
88
deploy/docker/single-shop/admin-web.Dockerfile
Normal file
@@ -0,0 +1,88 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 管理后台前端 （Vue 2 / Vue CLI 4）
|
||||||
|
# build context = single-shop-22/backend-adminend
|
||||||
|
# 多阶段： Node 构建 -> Nginx 运行；可通过 ARG VUE_APP_BASE_API 注入 API 域名
|
||||||
|
#
|
||||||
|
# 想直接使用源码里已有的 dist/： 用 --target=fast 构建
|
||||||
|
# =============================================================
|
||||||
|
# syntax=docker/dockerfile:1.6
|
||||||
|
|
||||||
|
# ---------- 构建阶段（默认） ----------
|
||||||
|
FROM node:16-alpine AS builder
|
||||||
|
|
||||||
|
# 留空（默认）→ 浏览器走与 nginx 同域的 /api/；填具体 URL 则直连后端
|
||||||
|
ARG VUE_APP_BASE_API=""
|
||||||
|
ENV NODE_OPTIONS=--openssl-legacy-provider \
|
||||||
|
NPM_CONFIG_REGISTRY=https://registry.npmmirror.com
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY package.json yarn.lock* package-lock.json* ./
|
||||||
|
RUN (yarn install --frozen-lockfile 2>/dev/null) || npm ci || npm install --legacy-peer-deps
|
||||||
|
|
||||||
|
COPY . .
|
||||||
|
# 覆盖 .env.production，使用 build arg
|
||||||
|
RUN printf "ENV='production'\nVUE_APP_BASE_API=%s\n" "$VUE_APP_BASE_API" > .env.production \
|
||||||
|
&& npm run build:prod
|
||||||
|
|
||||||
|
# ---------- 运行阶段 ----------
|
||||||
|
FROM nginx:1.25-alpine AS runtime
|
||||||
|
ENV TZ=Asia/Shanghai
|
||||||
|
RUN apk add --no-cache tzdata \
|
||||||
|
&& cp /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone
|
||||||
|
|
||||||
|
COPY --from=builder /app/dist /usr/share/nginx/html
|
||||||
|
|
||||||
|
RUN cat > /etc/nginx/conf.d/default.conf <<'NGX'
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name _;
|
||||||
|
root /usr/share/nginx/html;
|
||||||
|
index index.html;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
add_header X-Frame-Options SAMEORIGIN always;
|
||||||
|
|
||||||
|
location ~* \.(?:js|css|png|jpg|jpeg|gif|svg|woff2?|ttf|map)$ {
|
||||||
|
expires 30d;
|
||||||
|
add_header Cache-Control "public, max-age=2592000, immutable";
|
||||||
|
try_files $uri =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 反代到管理后台 API
|
||||||
|
location /api/ {
|
||||||
|
proxy_pass http://single-admin-api:30032/api/;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_read_timeout 120s;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
}
|
||||||
|
|
||||||
|
# CRMEB 部分接口直接命中 /adminapi （兼容）
|
||||||
|
location /adminapi/ {
|
||||||
|
proxy_pass http://single-admin-api:30032/adminapi/;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
NGX
|
||||||
|
|
||||||
|
EXPOSE 80
|
||||||
|
|
||||||
|
# ---------- 备选： 直接复用源码已构建的 dist/（fast 模式） ----------
|
||||||
|
# 构建命令： docker compose build --target fast single-admin-web
|
||||||
|
FROM nginx:1.25-alpine AS fast
|
||||||
|
ENV TZ=Asia/Shanghai
|
||||||
|
RUN apk add --no-cache tzdata \
|
||||||
|
&& cp /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone
|
||||||
|
COPY dist/ /usr/share/nginx/html
|
||||||
|
COPY --from=runtime /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf
|
||||||
|
EXPOSE 80
|
||||||
68
deploy/docker/single-shop/application-docker.yml
Normal file
68
deploy/docker/single-shop/application-docker.yml
Normal file
@@ -0,0 +1,68 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 Docker 部署专用 Spring profile
|
||||||
|
# 通过 --spring.config.additional-location=file:/config/ + --spring.profiles.active=docker
|
||||||
|
# 加载本文件，并由环境变量覆盖关键参数
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
server:
|
||||||
|
port: ${SERVER_PORT:30032}
|
||||||
|
|
||||||
|
crmeb:
|
||||||
|
imagePath: /usr/local/crmeb/crmebimage/
|
||||||
|
captchaOn: false
|
||||||
|
asyncConfig: true
|
||||||
|
demoSite: false
|
||||||
|
|
||||||
|
spring:
|
||||||
|
datasource:
|
||||||
|
name: ${MYSQL_DATABASE}
|
||||||
|
type: com.alibaba.druid.pool.DruidDataSource
|
||||||
|
driver-class-name: com.mysql.jdbc.Driver
|
||||||
|
url: jdbc:mysql://${MYSQL_HOST}:${MYSQL_PORT:3306}/${MYSQL_DATABASE}?useUnicode=true&characterEncoding=utf8&serverTimezone=GMT%2B8&useSSL=false&allowPublicKeyRetrieval=true
|
||||||
|
username: ${MYSQL_USERNAME}
|
||||||
|
password: ${MYSQL_PASSWORD}
|
||||||
|
druid:
|
||||||
|
initial-size: 5
|
||||||
|
min-idle: 5
|
||||||
|
max-active: 50
|
||||||
|
max-wait: 60000
|
||||||
|
validation-query: SELECT 1
|
||||||
|
test-while-idle: true
|
||||||
|
test-on-borrow: false
|
||||||
|
test-on-return: false
|
||||||
|
redis:
|
||||||
|
host: ${REDIS_HOST:redis}
|
||||||
|
port: ${REDIS_PORT:6379}
|
||||||
|
password: ${REDIS_PASSWORD:}
|
||||||
|
database: ${REDIS_DATABASE:0}
|
||||||
|
timeout: 10000
|
||||||
|
jedis:
|
||||||
|
pool:
|
||||||
|
max-active: 200
|
||||||
|
max-wait: -1
|
||||||
|
max-idle: 10
|
||||||
|
min-idle: 0
|
||||||
|
time-between-eviction-runs: -1
|
||||||
|
|
||||||
|
# 订单同步（无 MER 时填默认）
|
||||||
|
sync:
|
||||||
|
source-id: ${SYNC_SOURCE_ID:}
|
||||||
|
target-mer-id: ${SYNC_TARGET_MER_ID:0}
|
||||||
|
|
||||||
|
logging:
|
||||||
|
level:
|
||||||
|
io.swagger.*: error
|
||||||
|
com.zbjk.crmeb: info
|
||||||
|
org.springframework.boot.autoconfigure: ERROR
|
||||||
|
config: classpath:logback-spring.xml
|
||||||
|
file:
|
||||||
|
path: /app/log
|
||||||
|
|
||||||
|
mybatis-plus:
|
||||||
|
configuration:
|
||||||
|
log-impl:
|
||||||
|
|
||||||
|
swagger:
|
||||||
|
basic:
|
||||||
|
enable: false
|
||||||
|
check: false
|
||||||
62
deploy/docker/single-shop/front-api.Dockerfile
Normal file
62
deploy/docker/single-shop/front-api.Dockerfile
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 用户端 API （miao-front-2.2.jar）
|
||||||
|
# build context = single-shop-22/backend
|
||||||
|
# 对应宿主机启动命令：
|
||||||
|
# nohup java -Xms128m -Xmx256m -jar miao-front-2.2.jar > front.log &
|
||||||
|
# =============================================================
|
||||||
|
# syntax=docker/dockerfile:1.6
|
||||||
|
|
||||||
|
FROM maven:3.8.8-eclipse-temurin-17 AS builder
|
||||||
|
WORKDIR /src
|
||||||
|
COPY pom.xml ./
|
||||||
|
COPY crmeb-common/pom.xml crmeb-common/pom.xml
|
||||||
|
COPY crmeb-service/pom.xml crmeb-service/pom.xml
|
||||||
|
COPY crmeb-admin/pom.xml crmeb-admin/pom.xml
|
||||||
|
COPY crmeb-front/pom.xml crmeb-front/pom.xml
|
||||||
|
RUN mvn -B -pl crmeb-front -am dependency:go-offline -DskipTests || true
|
||||||
|
COPY . .
|
||||||
|
RUN mvn -B clean package -pl crmeb-front -am -DskipTests
|
||||||
|
|
||||||
|
FROM eclipse-temurin:17-jre-jammy
|
||||||
|
ENV TZ=Asia/Shanghai \
|
||||||
|
DEBIAN_FRONTEND=noninteractive \
|
||||||
|
LANG=C.UTF-8 LC_ALL=C.UTF-8
|
||||||
|
|
||||||
|
# 堆大小：可通过 compose 的 JAVA_HEAP_OPTS 覆盖
|
||||||
|
ENV JAVA_HEAP_OPTS="-Xms128m -Xmx256m"
|
||||||
|
|
||||||
|
# Spring Boot 2.2.6 + Java 17 必须的模块开放参数（固定，不允许 compose 覆盖）
|
||||||
|
ENV JAVA_MODULE_OPTS="\
|
||||||
|
--add-opens java.base/java.lang=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.lang.reflect=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.util=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.io=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.math=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/sun.net.util=ALL-UNNAMED \
|
||||||
|
--add-opens java.base/java.net=ALL-UNNAMED"
|
||||||
|
|
||||||
|
RUN apt-get update \
|
||||||
|
&& apt-get install -y --no-install-recommends \
|
||||||
|
tzdata ca-certificates curl \
|
||||||
|
fontconfig fonts-dejavu fonts-wqy-zenhei \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone \
|
||||||
|
&& rm -rf /var/lib/apt/lists/* \
|
||||||
|
&& mkdir -p /app /config /usr/local/crmeb/crmebimage /app/log
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY --from=builder /src/crmeb-front/target/miao-front-2.2.jar /app/app.jar
|
||||||
|
|
||||||
|
EXPOSE 30031
|
||||||
|
|
||||||
|
# 等价于：nohup java -Xms128m -Xmx256m -jar miao-front-2.2.jar > front.log &
|
||||||
|
# 日志直接输出到容器 stdout，docker logs 可查看
|
||||||
|
ENTRYPOINT ["sh","-c","exec java \
|
||||||
|
$JAVA_HEAP_OPTS \
|
||||||
|
$JAVA_MODULE_OPTS \
|
||||||
|
-Dfile.encoding=UTF-8 \
|
||||||
|
-Duser.timezone=$TZ \
|
||||||
|
-jar /app/app.jar \
|
||||||
|
--spring.profiles.active=${SPRING_PROFILES_ACTIVE:-docker} \
|
||||||
|
--spring.config.additional-location=file:/config/ \
|
||||||
|
--server.port=${SERVER_PORT:-30031}"]
|
||||||
96
deploy/docker/single-shop/h5.Dockerfile
Normal file
96
deploy/docker/single-shop/h5.Dockerfile
Normal file
@@ -0,0 +1,96 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 寄卖商城 用户端 H5 （uni-app）
|
||||||
|
# build context = single-shop-22/single_uniapp22miao
|
||||||
|
# 多阶段： Node 构建 H5 -> Nginx 运行
|
||||||
|
# 通过 ARG H5_API_DOMAIN 注入 API 域名（留空走同域 /api/）
|
||||||
|
#
|
||||||
|
# 直接复用源码已构建产物： 用 --target=fast 构建
|
||||||
|
# =============================================================
|
||||||
|
# syntax=docker/dockerfile:1.6
|
||||||
|
|
||||||
|
# ---------- 构建阶段 ----------
|
||||||
|
FROM node:16-alpine AS builder
|
||||||
|
ARG H5_API_DOMAIN=""
|
||||||
|
ENV NODE_OPTIONS=--openssl-legacy-provider \
|
||||||
|
NPM_CONFIG_REGISTRY=https://registry.npmmirror.com
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY package.json package-lock.json* ./
|
||||||
|
RUN npm install --legacy-peer-deps
|
||||||
|
|
||||||
|
COPY . .
|
||||||
|
|
||||||
|
# 重写 config/app.js 中的 domain
|
||||||
|
# 留空时使用同域： let domain = ''
|
||||||
|
RUN sed -i -E "s|^let[[:space:]]+domain[[:space:]]*=.*|let domain = '${H5_API_DOMAIN}'|" config/app.js \
|
||||||
|
&& sed -i -E "s|HTTP_H5_URL:[[:space:]]*'[^']*'|HTTP_H5_URL: '${H5_API_DOMAIN}'|" config/app.js \
|
||||||
|
&& cat config/app.js
|
||||||
|
|
||||||
|
RUN npm run build:h5
|
||||||
|
|
||||||
|
# uni-app 默认产物路径
|
||||||
|
# unpackage/dist/build/h5 （Vue CLI Plugin uni 旧版： unpackage/dist/build/web）
|
||||||
|
|
||||||
|
# ---------- 运行阶段 ----------
|
||||||
|
FROM nginx:1.25-alpine AS runtime
|
||||||
|
ENV TZ=Asia/Shanghai
|
||||||
|
RUN apk add --no-cache tzdata \
|
||||||
|
&& cp /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone
|
||||||
|
|
||||||
|
COPY --from=builder /app/unpackage/dist/build/ /tmp/h5build/
|
||||||
|
# 兼容两种输出目录名 h5/ 或 web/
|
||||||
|
RUN if [ -d /tmp/h5build/h5 ]; then cp -r /tmp/h5build/h5/. /usr/share/nginx/html/; \
|
||||||
|
elif [ -d /tmp/h5build/web ]; then cp -r /tmp/h5build/web/. /usr/share/nginx/html/; \
|
||||||
|
else echo "未找到 h5 / web 产物"; exit 1; fi \
|
||||||
|
&& rm -rf /tmp/h5build
|
||||||
|
|
||||||
|
RUN cat > /etc/nginx/conf.d/default.conf <<'NGX'
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name _;
|
||||||
|
root /usr/share/nginx/html;
|
||||||
|
index index.html;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
add_header X-Frame-Options SAMEORIGIN always;
|
||||||
|
|
||||||
|
location ~* \.(?:js|css|png|jpg|jpeg|gif|svg|woff2?|ttf|map)$ {
|
||||||
|
expires 30d;
|
||||||
|
add_header Cache-Control "public, max-age=2592000, immutable";
|
||||||
|
try_files $uri =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /api/ {
|
||||||
|
proxy_pass http://single-front-api:30031/api/;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_read_timeout 120s;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
NGX
|
||||||
|
|
||||||
|
EXPOSE 80
|
||||||
|
|
||||||
|
# ---------- 备选： 直接复用源码已构建的 unpackage/dist/build/h5 ----------
|
||||||
|
# 构建： docker compose build --target fast single-h5
|
||||||
|
FROM nginx:1.25-alpine AS fast
|
||||||
|
ENV TZ=Asia/Shanghai
|
||||||
|
RUN apk add --no-cache tzdata \
|
||||||
|
&& cp /usr/share/zoneinfo/$TZ /etc/localtime \
|
||||||
|
&& echo $TZ > /etc/timezone
|
||||||
|
|
||||||
|
COPY unpackage/dist/build/ /tmp/h5build/
|
||||||
|
RUN if [ -d /tmp/h5build/h5 ]; then cp -r /tmp/h5build/h5/. /usr/share/nginx/html/; \
|
||||||
|
elif [ -d /tmp/h5build/web ]; then cp -r /tmp/h5build/web/. /usr/share/nginx/html/; \
|
||||||
|
else echo "未找到 h5 / web 产物"; exit 1; fi \
|
||||||
|
&& rm -rf /tmp/h5build
|
||||||
|
COPY --from=runtime /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf
|
||||||
|
EXPOSE 80
|
||||||
37
deploy/docker/single-shop/nginx-admin-web.conf
Normal file
37
deploy/docker/single-shop/nginx-admin-web.conf
Normal file
@@ -0,0 +1,37 @@
|
|||||||
|
# 仅供参考： 内容已内联到 admin-web.Dockerfile
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name _;
|
||||||
|
root /usr/share/nginx/html;
|
||||||
|
index index.html;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
add_header X-Frame-Options SAMEORIGIN always;
|
||||||
|
|
||||||
|
location ~* \.(?:js|css|png|jpg|jpeg|gif|svg|woff2?|ttf|map)$ {
|
||||||
|
expires 30d;
|
||||||
|
add_header Cache-Control "public, max-age=2592000, immutable";
|
||||||
|
try_files $uri =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /api/ {
|
||||||
|
proxy_pass http://single-admin-api:30032/api/;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_read_timeout 120s;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /adminapi/ {
|
||||||
|
proxy_pass http://single-admin-api:30032/adminapi/;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
30
deploy/docker/single-shop/nginx-h5.conf
Normal file
30
deploy/docker/single-shop/nginx-h5.conf
Normal file
@@ -0,0 +1,30 @@
|
|||||||
|
# 仅供参考： 内容已内联到 h5.Dockerfile
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name _;
|
||||||
|
root /usr/share/nginx/html;
|
||||||
|
index index.html;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
add_header X-Frame-Options SAMEORIGIN always;
|
||||||
|
|
||||||
|
location ~* \.(?:js|css|png|jpg|jpeg|gif|svg|woff2?|ttf|map)$ {
|
||||||
|
expires 30d;
|
||||||
|
add_header Cache-Control "public, max-age=2592000, immutable";
|
||||||
|
try_files $uri =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /api/ {
|
||||||
|
proxy_pass http://single-front-api:30031/api/;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_read_timeout 120s;
|
||||||
|
client_max_body_size 50m;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
7
deploy/docker/ssl-cert/.gitignore
vendored
Normal file
7
deploy/docker/ssl-cert/.gitignore
vendored
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
# 忽略证书文件，不入库
|
||||||
|
*.pem
|
||||||
|
*.key
|
||||||
|
*.crt
|
||||||
|
*.cer
|
||||||
|
*.p12
|
||||||
|
*.pfx
|
||||||
31
deploy/docker/step1-integral/.env.example
Normal file
31
deploy/docker/step1-integral/.env.example
Normal file
@@ -0,0 +1,31 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 步骤一：寄卖商城环境变量 — 池州雷蕾商贸 czleilei240
|
||||||
|
# cp .env.example .env 并填入真实密码
|
||||||
|
# .env 不入库
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
TZ=Asia/Shanghai
|
||||||
|
|
||||||
|
# ---------- Redis（容器内） ----------
|
||||||
|
REDIS_PASSWORD=change-me-redis
|
||||||
|
|
||||||
|
# ---------- H5 对外域名（浏览器可达） ----------
|
||||||
|
INTEGRAL_TITLE=池州雷蕾商贸
|
||||||
|
INTEGRAL_API_PUBLIC_URL=https://leileiadmin.czchunfang.com
|
||||||
|
INTEGRAL_IMG_PUBLIC_URL=https://leileiadmin.czchunfang.com
|
||||||
|
INTEGRAL_H5_PUBLIC_URL=https://leilei.czchunfang.com/
|
||||||
|
INTEGRAL_SN_ID=17533260260517
|
||||||
|
INTEGRAL_APP_STR=ZFyTNQTWEkCBczKzyUDJWE9Ecx260517
|
||||||
|
INTEGRAL_CONTRACT_PAGE=10012
|
||||||
|
|
||||||
|
# ---------- 宿主机暴露端口 ----------
|
||||||
|
INTEGRAL_H5_PORT=18080
|
||||||
|
# webman API 直连端口（宝塔 Nginx leileiadmin.czchunfang.com → 此端口）
|
||||||
|
RESELL_API_PORT=18085
|
||||||
|
|
||||||
|
# ---------- 宿主机目录映射（bind mount，与原部署路径一致）----------
|
||||||
|
# 寄卖商城 H5 静态文件目录（手动改 JS/configs.js 直接生效，无需重建镜像）
|
||||||
|
RESELL_H5_DIR=/www/wwwroot/leilei.czchunfang.com
|
||||||
|
# webman 后台完整应用目录（FTP 上传新 webman.bin/public/ 后 restart 容器即可更新）
|
||||||
|
# 上传图片、public/upload 等均包含在此目录内，无需单独挂载
|
||||||
|
RESELL_HOUTAI_DIR=/www/wwwroot/leileiadmin.czchunfang.com
|
||||||
2
deploy/docker/step1-integral/.gitignore
vendored
Normal file
2
deploy/docker/step1-integral/.gitignore
vendored
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
.env
|
||||||
|
houtai.env
|
||||||
126
deploy/docker/step1-integral/README.md
Normal file
126
deploy/docker/step1-integral/README.md
Normal file
@@ -0,0 +1,126 @@
|
|||||||
|
# 步骤一：寄卖商城 Docker 部署（池州雷蕾商贸 czleilei240）
|
||||||
|
|
||||||
|
项目：`integral-resell`（寄卖商城）
|
||||||
|
服务：`redis` · `integral-houtai`（Webman PHP 8.0）· `integral-h5`（Nginx 静态站）
|
||||||
|
|
||||||
|
步骤二（积分商城）与本步骤完全独立，可以单独部署、单独重启。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 快速部署
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker/step1-integral
|
||||||
|
|
||||||
|
# 1. 准备环境变量
|
||||||
|
cp .env.example .env
|
||||||
|
cp houtai.env.example houtai.env
|
||||||
|
vim .env # 填入 REDIS_PASSWORD
|
||||||
|
vim houtai.env # 填入 DB_PASSWORD（RDS 密码）、REDIS_PASSWORD（同 .env）
|
||||||
|
|
||||||
|
# 2. 首次部署：在服务器上确保宿主机目录存在
|
||||||
|
# （若原部署目录已存在则跳过）
|
||||||
|
mkdir -p /www/wwwroot/leilei.czchunfang.com
|
||||||
|
mkdir -p /www/wwwroot/leileiadmin.czchunfang.com/public/upload
|
||||||
|
|
||||||
|
# 3. 将 H5 静态文件同步到宿主机目录（首次 / 每次前端更新后）
|
||||||
|
rsync -av integral-resell/h5/ /www/wwwroot/leilei.czchunfang.com/
|
||||||
|
|
||||||
|
# 4. 构建并启动
|
||||||
|
docker compose --env-file .env up -d --build
|
||||||
|
|
||||||
|
# 5. 查看状态
|
||||||
|
docker compose --env-file .env ps
|
||||||
|
docker compose --env-file .env logs -f integral-houtai
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 目录映射（宿主机 ↔ 容器）
|
||||||
|
|
||||||
|
| 宿主机路径 | 容器路径 | 用途 |
|
||||||
|
|---|---|---|
|
||||||
|
| `/www/wwwroot/leilei.czchunfang.com` | `/usr/share/nginx/html` | H5 静态文件，手动改 JS 即时生效 |
|
||||||
|
| `/www/wwwroot/leileiadmin.czchunfang.com/public/upload` | `/app/public/upload` | webman 后台上传文件 |
|
||||||
|
| `./houtai.env` | `/app/.env` | 运行时配置，只读挂入，不打进镜像 |
|
||||||
|
| `integral-runtime`（named vol）| `/app/runtime` | webman PID、session 等运行时数据 |
|
||||||
|
|
||||||
|
> **H5 文件更新流程**：直接修改 `/www/wwwroot/leilei.czchunfang.com/` 下的文件（如 JS bundle、configs.js），
|
||||||
|
> Nginx 下次请求时自动读取新文件，**无需重启容器**。
|
||||||
|
> 仅当 Nginx 配置或镜像本身需要变更时，才需要 `docker compose build integral-h5`。
|
||||||
|
|
||||||
|
| 域名 | 用途 | Docker 容器端口 | 宿主机端口 | 宝塔 upstream |
|
||||||
|
|---|---|---|---|---|
|
||||||
|
| `leilei.czchunfang.com` | 寄卖商城 H5 | integral-h5:80 | **18080** | `resell_h5` |
|
||||||
|
| `leileiadmin.czchunfang.com` | 寄卖商城 API / 后台 | integral-houtai:**8785** | **18085** | `resell_api` |
|
||||||
|
|
||||||
|
> webman.bin 写死监听 **8785** 端口。
|
||||||
|
> - H5 容器内部 Nginx 已将 `/api/` 和 `/upload/` 代理到 `integral-houtai:8785`（Docker 内网，无需暴露）
|
||||||
|
> - 宝塔 Nginx 的 `leileiadmin.czchunfang.com` 直连宿主机 **18085**（映射到 webman 8785）
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 宝塔 Nginx 配置
|
||||||
|
|
||||||
|
将以下两个文件内容分别粘贴到宝塔面板对应站点的「配置文件」中：
|
||||||
|
|
||||||
|
| 配置文件 | 说明 |
|
||||||
|
|---|---|
|
||||||
|
| `deploy/docker/nginx/leilei.czchunfang.com.conf` | H5 站点，upstream → 127.0.0.1:18080 |
|
||||||
|
| `deploy/docker/nginx/leileiadmin.czchunfang.com.conf` | API 站点，upstream → 127.0.0.1:18085 |
|
||||||
|
|
||||||
|
证书路径（文件已在项目中）：
|
||||||
|
|
||||||
|
```
|
||||||
|
deploy/docker/ssl-cert/
|
||||||
|
leilei.czchunfang.com_cert/nginx/leilei.czchunfang.com.{pem,key}
|
||||||
|
leileiadmin.czchunfang.com_cert/nginx/leileiadmin.czchunfang.com.{pem,key}
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 验证
|
||||||
|
|
||||||
|
| 地址 | 预期 |
|
||||||
|
|------|------|
|
||||||
|
| `https://leilei.czchunfang.com/` | 寄卖商城 H5 首页（生产） |
|
||||||
|
| `https://leileiadmin.czchunfang.com/api/...` | 寄卖商城 API（生产） |
|
||||||
|
| `http://116.62.83.240:18080/` | H5 直连测试（绕过域名/SSL） |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 常用命令
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 重启 webman
|
||||||
|
docker compose --env-file .env restart integral-houtai
|
||||||
|
|
||||||
|
# 看 webman 日志
|
||||||
|
docker compose --env-file .env logs -f integral-houtai
|
||||||
|
|
||||||
|
# 进入 webman 容器
|
||||||
|
docker compose --env-file .env exec integral-houtai bash
|
||||||
|
|
||||||
|
# 仅重建 H5（改了 .env 中的域名参数后）
|
||||||
|
docker compose --env-file .env build integral-h5
|
||||||
|
docker compose --env-file .env up -d integral-h5
|
||||||
|
|
||||||
|
# 停止（保留卷）
|
||||||
|
docker compose --env-file .env down
|
||||||
|
|
||||||
|
# 停止并删除所有卷（慎用：清空上传图片和 runtime）
|
||||||
|
docker compose --env-file .env down -v
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 关键一致性检查
|
||||||
|
|
||||||
|
| 位置 | 值 |
|
||||||
|
|---|---|
|
||||||
|
| `.env` INTEGRAL_API_PUBLIC_URL | `https://leileiadmin.czchunfang.com` |
|
||||||
|
| `.env` INTEGRAL_H5_PUBLIC_URL | `https://leilei.czchunfang.com/` |
|
||||||
|
| `.env` INTEGRAL_APP_STR | `ZFyTNQTWEkCBczKzyUDJWE9Ecx260517` |
|
||||||
|
| `houtai.env` APP_SECRET | **同上** |
|
||||||
|
| `.env` INTEGRAL_SN_ID | `17533260260517` |
|
||||||
|
| `h5/static/configs.js` sn_id | **同上** |
|
||||||
95
deploy/docker/step1-integral/docker-compose.yml
Normal file
95
deploy/docker/step1-integral/docker-compose.yml
Normal file
@@ -0,0 +1,95 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 步骤一：寄卖商城（integral-resell）独立部署
|
||||||
|
# 客户：池州雷蕾商贸 czleilei240
|
||||||
|
# 包含服务：redis · integral-houtai(webman) · integral-h5(Nginx)
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
name: resell-czleilei240
|
||||||
|
|
||||||
|
x-common: &common
|
||||||
|
restart: unless-stopped
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
logging:
|
||||||
|
driver: json-file
|
||||||
|
options:
|
||||||
|
max-size: "20m"
|
||||||
|
max-file: "5"
|
||||||
|
|
||||||
|
networks:
|
||||||
|
integral-net:
|
||||||
|
driver: bridge
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
integral-redis-data:
|
||||||
|
integral-runtime:
|
||||||
|
|
||||||
|
services:
|
||||||
|
# ---------- Redis ----------
|
||||||
|
redis:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: .
|
||||||
|
dockerfile: redis.Dockerfile
|
||||||
|
image: resell-czleilei240/redis:local
|
||||||
|
container_name: integral-redis
|
||||||
|
command: ["--requirepass", "${REDIS_PASSWORD}", "--appendonly", "yes"]
|
||||||
|
volumes:
|
||||||
|
- integral-redis-data:/data
|
||||||
|
networks: [integral-net]
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
|
||||||
|
interval: 10s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 5
|
||||||
|
|
||||||
|
# ---------- Webman 后端 ----------
|
||||||
|
integral-houtai:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../../integral-resell/houtai
|
||||||
|
dockerfile: ../../deploy/docker/integral-resell/houtai.Dockerfile
|
||||||
|
image: resell-czleilei240/houtai:latest
|
||||||
|
container_name: integral-houtai
|
||||||
|
networks: [integral-net]
|
||||||
|
ports:
|
||||||
|
# 宝塔 Nginx 直连 webman API（webman.bin 写死监听 8785）
|
||||||
|
- "${RESELL_API_PORT:-18085}:8785"
|
||||||
|
volumes:
|
||||||
|
# 整个应用目录挂到宿主机 /www/wwwroot/leileiadmin.czchunfang.com/
|
||||||
|
# FTP 上传新 webman.bin / public/ 后 docker compose restart integral-houtai 即可生效
|
||||||
|
- ${RESELL_HOUTAI_DIR}:/app
|
||||||
|
# .env 单独挂入（覆盖宿主机目录里的 .env），避免明文密码出现在 wwwroot
|
||||||
|
- ./houtai.env:/app/.env:ro
|
||||||
|
# runtime 使用命名卷（日志/session/pid 不受 FTP 覆盖影响）
|
||||||
|
- integral-runtime:/app/runtime
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
|
||||||
|
# ---------- H5 静态站 ----------
|
||||||
|
integral-h5:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../../integral-resell/h5
|
||||||
|
dockerfile: ../../deploy/docker/integral-resell/h5.Dockerfile
|
||||||
|
image: resell-czleilei240/h5:latest
|
||||||
|
container_name: integral-h5
|
||||||
|
networks: [integral-net]
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
INTEGRAL_TITLE: ${INTEGRAL_TITLE}
|
||||||
|
INTEGRAL_API_PUBLIC_URL: ${INTEGRAL_API_PUBLIC_URL}
|
||||||
|
INTEGRAL_IMG_PUBLIC_URL: ${INTEGRAL_IMG_PUBLIC_URL}
|
||||||
|
INTEGRAL_H5_PUBLIC_URL: ${INTEGRAL_H5_PUBLIC_URL}
|
||||||
|
INTEGRAL_SN_ID: ${INTEGRAL_SN_ID}
|
||||||
|
INTEGRAL_APP_STR: ${INTEGRAL_APP_STR}
|
||||||
|
INTEGRAL_CONTRACT_PAGE: ${INTEGRAL_CONTRACT_PAGE}
|
||||||
|
volumes:
|
||||||
|
# H5 静态文件目录挂到宿主机，手动更新 JS/configs.js 直接生效，无需重建镜像
|
||||||
|
# 子目录 crmebimage/ 同时由步骤二 Java 后端写入（PDF/图片），Nginx 直接对外提供访问
|
||||||
|
- ${RESELL_H5_DIR}:/usr/share/nginx/html
|
||||||
|
ports:
|
||||||
|
- "${INTEGRAL_H5_PORT:-18080}:80"
|
||||||
|
depends_on:
|
||||||
|
- integral-houtai
|
||||||
37
deploy/docker/step1-integral/houtai.env.example
Normal file
37
deploy/docker/step1-integral/houtai.env.example
Normal file
@@ -0,0 +1,37 @@
|
|||||||
|
# =============================================================
|
||||||
|
# Webman 后端运行时配置 — 池州雷蕾商贸 czleilei240（寄卖商城）
|
||||||
|
# cp houtai.env.example houtai.env 并填入真实密码
|
||||||
|
# houtai.env 不入库，由 docker-compose volumes: 挂入 /app/.env
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
# MySQL（阿里云 RDS）
|
||||||
|
DB_HOST = 'rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com'
|
||||||
|
DB_PORT = 3306
|
||||||
|
DB_DATABASE = 'yangtangyoupin'
|
||||||
|
DB_USERNAME = 'yangtangyoupin'
|
||||||
|
DB_PASSWORD = 'change-me'
|
||||||
|
|
||||||
|
# Redis（指向同 compose 内的 redis 容器）
|
||||||
|
REDIS_HOST = 'redis'
|
||||||
|
REDIS_PORT = 6379
|
||||||
|
REDIS_PASSWORD = 'change-me-redis'
|
||||||
|
|
||||||
|
# 短信（池州雷蕾商贸专属通道）
|
||||||
|
SMS_CHANNEL = 'alibaba'
|
||||||
|
SMS_SIGNNAME = '池州雷蕾商贸'
|
||||||
|
SMS_TEMPLATE = 'SMS_334320185'
|
||||||
|
SMS_KEYID = 'LTAI5t7CfS15hZGdNLLEMUwG'
|
||||||
|
SMS_KEYSECRET = 'ikfTvHbMMg5sStGgdvLNL8iuVYdner'
|
||||||
|
SMS_SDKAPPID = ''
|
||||||
|
|
||||||
|
# OSS（不启用则走本地 public/upload）
|
||||||
|
FILE_STORAGE = 'public'
|
||||||
|
OSS_ACCESS_ID = ''
|
||||||
|
OSS_ACCESS_SECRET = ''
|
||||||
|
OSS_BUCKET = ''
|
||||||
|
OSS_ENDPOINT = ''
|
||||||
|
OSS_URL = ''
|
||||||
|
|
||||||
|
# 业务标识（须与 H5 configs.js 的 sn_id / appStr 以及积分商城 admin 后台一致）
|
||||||
|
APP_SIGN = '1'
|
||||||
|
APP_SECRET = 'ZFyTNQTWEkCBczKzyUDJWE9Ecx260517'
|
||||||
13
deploy/docker/step1-integral/redis.Dockerfile
Normal file
13
deploy/docker/step1-integral/redis.Dockerfile
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
# 使用 Alpine 通过 apk 安装 Redis，绕过镜像源问题
|
||||||
|
FROM alpine:3.19
|
||||||
|
|
||||||
|
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
|
||||||
|
&& apk add --no-cache redis tzdata \
|
||||||
|
&& cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||||
|
&& echo "Asia/Shanghai" > /etc/timezone
|
||||||
|
|
||||||
|
VOLUME /data
|
||||||
|
WORKDIR /data
|
||||||
|
EXPOSE 6379
|
||||||
|
|
||||||
|
ENTRYPOINT ["redis-server"]
|
||||||
37
deploy/docker/step2-single-shop/.env.example
Normal file
37
deploy/docker/step2-single-shop/.env.example
Normal file
@@ -0,0 +1,37 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 步骤二：积分商城环境变量 — 池州雷蕾商贸 czleilei240
|
||||||
|
# cp .env.example .env 并填入真实密码
|
||||||
|
# .env 不入库
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
TZ=Asia/Shanghai
|
||||||
|
|
||||||
|
# ---------- Redis（容器内，与步骤一独立） ----------
|
||||||
|
REDIS_PASSWORD=change-me-redis
|
||||||
|
|
||||||
|
# ---------- 阿里云 RDS ----------
|
||||||
|
RDS_HOST=rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com
|
||||||
|
RDS_DB=yangtangyoupin
|
||||||
|
RDS_USER=yangtangyoupin
|
||||||
|
RDS_PASSWORD=change-me
|
||||||
|
|
||||||
|
# ---------- 积分商城 admin web 打包目标 URL ----------
|
||||||
|
# VUE_APP_BASE_API（backend-adminend 打包时注入，指向 single-shop-22 admin-api）
|
||||||
|
SINGLE_ADMIN_API_PUBLIC_URL=https://leilei-jf.czchunfang.com
|
||||||
|
|
||||||
|
# ---------- 积分商城 H5 打包目标 URL ----------
|
||||||
|
# H5_API_DOMAIN（uni-app 打包时注入 config/app.js，指向 single-shop-22 front-api）
|
||||||
|
SINGLE_FRONT_API_PUBLIC_URL=https://leilei-jf.czchunfang.com
|
||||||
|
|
||||||
|
# ---------- 订单同步（多商户 source / target） ----------
|
||||||
|
SYNC_SOURCE_ID=shop_15
|
||||||
|
SYNC_TARGET_MER_ID=15
|
||||||
|
|
||||||
|
# ---------- 图片/PDF 目录（与步骤一 H5 Nginx 共享宿主机路径）----------
|
||||||
|
# Java 后端写入 /usr/local/crmeb/crmebimage/ → 宿主机 /www/wwwroot/leilei.czchunfang.com/crmebimage/
|
||||||
|
# 步骤一的 H5 Nginx 从 /www/wwwroot/leilei.czchunfang.com/ 对外提供访问
|
||||||
|
CRMEB_IMAGE_DIR=/www/wwwroot/leilei.czchunfang.com/crmebimage
|
||||||
|
|
||||||
|
# ---------- 宿主机暴露端口 ----------
|
||||||
|
SINGLE_ADMIN_PORT=18081
|
||||||
|
SINGLE_H5_PORT=18082
|
||||||
1
deploy/docker/step2-single-shop/.gitignore
vendored
Normal file
1
deploy/docker/step2-single-shop/.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
|||||||
|
.env
|
||||||
130
deploy/docker/step2-single-shop/README.md
Normal file
130
deploy/docker/step2-single-shop/README.md
Normal file
@@ -0,0 +1,130 @@
|
|||||||
|
# 步骤二：积分商城 Docker 部署（池州雷蕾商贸 czleilei240）
|
||||||
|
|
||||||
|
项目：`single-shop-22`（积分商城）
|
||||||
|
服务：`redis` · `single-front-api`（Spring Boot）· `single-admin-api`（Spring Boot）
|
||||||
|
`single-admin-web`（Vue 管理后台）· `single-h5`（uni-app H5）
|
||||||
|
|
||||||
|
步骤一（寄卖商城）与本步骤完全独立，可以单独部署、单独重启。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 快速部署
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd deploy/docker/step2-single-shop
|
||||||
|
|
||||||
|
# 1. 准备环境变量
|
||||||
|
cp .env.example .env
|
||||||
|
vim .env # 填入 RDS_PASSWORD、REDIS_PASSWORD
|
||||||
|
|
||||||
|
# 2. 全量构建并启动（首次，会编译 Java jar + 打包前端）
|
||||||
|
docker compose --env-file .env up -d --build
|
||||||
|
|
||||||
|
# 3. 查看状态
|
||||||
|
docker compose --env-file .env ps
|
||||||
|
docker compose --env-file .env logs -f single-front-api
|
||||||
|
docker compose --env-file .env logs -f single-admin-api
|
||||||
|
```
|
||||||
|
|
||||||
|
> ⚠️ Java 构建需要从 Maven Central 下载依赖，首次约需 10-20 分钟，请耐心等待。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 域名与端口
|
||||||
|
|
||||||
|
| 域名 | 用途 | 宿主机端口 |
|
||||||
|
|---|---|---|
|
||||||
|
| `leilei-jf.czchunfang.com` | 积分商城 H5（uni-app） | **18082** |
|
||||||
|
| `leilei-jfadmin.czchunfang.com` | 积分商城管理后台（Vue） | **18081** |
|
||||||
|
|
||||||
|
> Spring Boot API 端口（30032 / 30033）仅容器内使用，不对外暴露，通过 Nginx 反代访问。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 宝塔 Nginx 配置
|
||||||
|
|
||||||
|
将以下两个文件内容分别粘贴到宝塔面板对应站点的「配置文件」中：
|
||||||
|
|
||||||
|
| 配置文件 | 说明 |
|
||||||
|
|---|---|
|
||||||
|
| `deploy/docker/nginx/leilei-jf.czchunfang.com.conf` | H5 站点，upstream → 127.0.0.1:18082 |
|
||||||
|
| `deploy/docker/nginx/leilei-jfadmin.czchunfang.com.conf` | 管理后台，upstream → 127.0.0.1:18081 |
|
||||||
|
|
||||||
|
证书路径（文件已在项目中）：
|
||||||
|
|
||||||
|
```
|
||||||
|
deploy/docker/ssl-cert/
|
||||||
|
leilei-jf.czchunfang.com_cert/nginx/leilei-jf.czchunfang.com.{pem,key}
|
||||||
|
leilei-jfadmin.czchunfang.com_cert/nginx/leilei-jfadmin.czchunfang.com.{pem,key}
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 验证
|
||||||
|
|
||||||
|
| 地址 | 预期 |
|
||||||
|
|------|------|
|
||||||
|
| `https://leilei-jf.czchunfang.com/` | 积分商城 H5（生产） |
|
||||||
|
| `https://leilei-jfadmin.czchunfang.com/` | 积分商城管理后台（生产） |
|
||||||
|
| `http://116.62.83.240:18082/` | H5 直连测试（绕过域名/SSL） |
|
||||||
|
| `http://116.62.83.240:18081/` | 管理后台直连测试 |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 仅重建前端（改了域名后）
|
||||||
|
|
||||||
|
前端镜像在 build time 注入了 API 域名（`VUE_APP_BASE_API` / `H5_API_DOMAIN`），
|
||||||
|
修改 `.env` 中的 URL 后需要重新构建：
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 重建管理后台（改了 SINGLE_ADMIN_API_PUBLIC_URL）
|
||||||
|
docker compose --env-file .env build single-admin-web
|
||||||
|
docker compose --env-file .env up -d single-admin-web
|
||||||
|
|
||||||
|
# 重建 H5（改了 SINGLE_FRONT_API_PUBLIC_URL）
|
||||||
|
docker compose --env-file .env build single-h5
|
||||||
|
docker compose --env-file .env up -d single-h5
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 常用命令
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 重启某个服务
|
||||||
|
docker compose --env-file .env restart single-admin-api
|
||||||
|
|
||||||
|
# 实时日志
|
||||||
|
docker compose --env-file .env logs -f single-admin-api
|
||||||
|
docker compose --env-file .env logs -f single-front-api
|
||||||
|
|
||||||
|
# 进入容器
|
||||||
|
docker compose --env-file .env exec single-admin-api bash
|
||||||
|
|
||||||
|
# 停止（保留卷）
|
||||||
|
docker compose --env-file .env down
|
||||||
|
|
||||||
|
# 停止并删除卷（慎用：清空图片/日志）
|
||||||
|
docker compose --env-file .env down -v
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## czleilei240 关键配置对照
|
||||||
|
|
||||||
|
| 配置项 | 值 |
|
||||||
|
|---|---|
|
||||||
|
| RDS Host | `rm-bp1a178eq62lxba9xbo.mysql.rds.aliyuncs.com` |
|
||||||
|
| DB / User | `yangtangyoupin` |
|
||||||
|
| admin-web API URL（VUE_APP_BASE_API） | `https://leilei-jf.czchunfang.com` |
|
||||||
|
| H5 API Domain（H5_API_DOMAIN） | `https://leilei-jf.czchunfang.com` |
|
||||||
|
| SYNC_SOURCE_ID | `shop_15` |
|
||||||
|
| SYNC_TARGET_MER_ID | `15` |
|
||||||
|
| Spring profile | `docker`（application-docker.yml 通过 env 注入） |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 备注
|
||||||
|
|
||||||
|
- `single-images` 卷挂载到两个 API 容器，确保图片文件共享。
|
||||||
|
- JVM 参数已包含 Java 17 + Spring Boot 2.2.6 所需的 `--add-opens` 标志（见 Dockerfile）。
|
||||||
163
deploy/docker/step2-single-shop/docker-compose.yml
Normal file
163
deploy/docker/step2-single-shop/docker-compose.yml
Normal file
@@ -0,0 +1,163 @@
|
|||||||
|
# =============================================================
|
||||||
|
# 步骤二：积分商城（single-shop-22）独立部署
|
||||||
|
# 客户：池州雷蕾商贸 czleilei240
|
||||||
|
# 包含服务：redis · single-admin-api · single-front-api
|
||||||
|
# single-admin-web(Vue) · single-h5(uni-app)
|
||||||
|
# =============================================================
|
||||||
|
|
||||||
|
name: jifenmall-czleilei240
|
||||||
|
|
||||||
|
x-common: &common
|
||||||
|
restart: unless-stopped
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
logging:
|
||||||
|
driver: json-file
|
||||||
|
options:
|
||||||
|
max-size: "20m"
|
||||||
|
max-file: "5"
|
||||||
|
|
||||||
|
x-spring-common: &spring-common
|
||||||
|
<<: *common
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
MYSQL_HOST: ${RDS_HOST}
|
||||||
|
MYSQL_DATABASE: ${RDS_DB}
|
||||||
|
MYSQL_USERNAME: ${RDS_USER}
|
||||||
|
MYSQL_PASSWORD: ${RDS_PASSWORD}
|
||||||
|
REDIS_HOST: redis
|
||||||
|
REDIS_PORT: 6379
|
||||||
|
REDIS_PASSWORD: ${REDIS_PASSWORD}
|
||||||
|
SYNC_SOURCE_ID: ${SYNC_SOURCE_ID:-shop_15}
|
||||||
|
SYNC_TARGET_MER_ID: ${SYNC_TARGET_MER_ID:-15}
|
||||||
|
|
||||||
|
networks:
|
||||||
|
single-net:
|
||||||
|
driver: bridge
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
single-redis-data:
|
||||||
|
single-front-logs:
|
||||||
|
single-admin-logs:
|
||||||
|
|
||||||
|
services:
|
||||||
|
# ---------- Redis ----------
|
||||||
|
redis:
|
||||||
|
<<: *common
|
||||||
|
image: redis:6.2-alpine
|
||||||
|
container_name: single-redis
|
||||||
|
command: ["redis-server", "--requirepass", "${REDIS_PASSWORD}", "--appendonly", "yes"]
|
||||||
|
volumes:
|
||||||
|
- single-redis-data:/data
|
||||||
|
networks: [single-net]
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
|
||||||
|
interval: 10s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 5
|
||||||
|
|
||||||
|
# ---------- Front API（用户端 Spring Boot） ----------
|
||||||
|
single-front-api:
|
||||||
|
<<: *spring-common
|
||||||
|
build:
|
||||||
|
context: ../../../single-shop-22/backend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/front-api.Dockerfile
|
||||||
|
image: jifenmall-czleilei240/front-api:latest
|
||||||
|
container_name: single-front-api
|
||||||
|
networks: [single-net]
|
||||||
|
volumes:
|
||||||
|
# 图片/PDF 目录 bind mount 到宿主机，与步骤一 H5 Nginx 共享同一路径
|
||||||
|
# /www/wwwroot/leilei.czchunfang.com/crmebimage/ → 通过 leilei.czchunfang.com 对外访问
|
||||||
|
- ${CRMEB_IMAGE_DIR}:/usr/local/crmeb/crmebimage
|
||||||
|
- single-front-logs:/app/log
|
||||||
|
- ../single-shop/application-docker.yml:/config/application-docker.yml:ro
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
MYSQL_HOST: ${RDS_HOST}
|
||||||
|
MYSQL_DATABASE: ${RDS_DB}
|
||||||
|
MYSQL_USERNAME: ${RDS_USER}
|
||||||
|
MYSQL_PASSWORD: ${RDS_PASSWORD}
|
||||||
|
REDIS_HOST: redis
|
||||||
|
REDIS_PORT: 6379
|
||||||
|
REDIS_PASSWORD: ${REDIS_PASSWORD}
|
||||||
|
SYNC_SOURCE_ID: ${SYNC_SOURCE_ID:-shop_15}
|
||||||
|
SYNC_TARGET_MER_ID: ${SYNC_TARGET_MER_ID:-15}
|
||||||
|
SERVER_PORT: 30033
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "curl -sf http://localhost:30033/actuator/health || exit 1"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 5
|
||||||
|
start_period: 90s
|
||||||
|
|
||||||
|
# ---------- Admin API（管理端 Spring Boot） ----------
|
||||||
|
single-admin-api:
|
||||||
|
<<: *spring-common
|
||||||
|
build:
|
||||||
|
context: ../../../single-shop-22/backend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/admin-api.Dockerfile
|
||||||
|
image: jifenmall-czleilei240/admin-api:latest
|
||||||
|
container_name: single-admin-api
|
||||||
|
networks: [single-net]
|
||||||
|
volumes:
|
||||||
|
# 图片/PDF 目录 bind mount 到宿主机，与步骤一 H5 Nginx 共享同一路径
|
||||||
|
# /www/wwwroot/leilei.czchunfang.com/crmebimage/ → 通过 leilei.czchunfang.com 对外访问
|
||||||
|
- ${CRMEB_IMAGE_DIR}:/usr/local/crmeb/crmebimage
|
||||||
|
- single-admin-logs:/app/log
|
||||||
|
- ../single-shop/application-docker.yml:/config/application-docker.yml:ro
|
||||||
|
environment:
|
||||||
|
TZ: ${TZ:-Asia/Shanghai}
|
||||||
|
MYSQL_HOST: ${RDS_HOST}
|
||||||
|
MYSQL_DATABASE: ${RDS_DB}
|
||||||
|
MYSQL_USERNAME: ${RDS_USER}
|
||||||
|
MYSQL_PASSWORD: ${RDS_PASSWORD}
|
||||||
|
REDIS_HOST: redis
|
||||||
|
REDIS_PORT: 6379
|
||||||
|
REDIS_PASSWORD: ${REDIS_PASSWORD}
|
||||||
|
SYNC_SOURCE_ID: ${SYNC_SOURCE_ID:-shop_15}
|
||||||
|
SYNC_TARGET_MER_ID: ${SYNC_TARGET_MER_ID:-15}
|
||||||
|
SERVER_PORT: 30032
|
||||||
|
depends_on:
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "curl -sf http://localhost:30032/actuator/health || exit 1"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 5
|
||||||
|
start_period: 90s
|
||||||
|
|
||||||
|
# ---------- Admin Web（Vue 管理后台） ----------
|
||||||
|
single-admin-web:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../../single-shop-22/backend-adminend
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/admin-web.Dockerfile
|
||||||
|
args:
|
||||||
|
VUE_APP_BASE_API: ${SINGLE_ADMIN_API_PUBLIC_URL}
|
||||||
|
image: jifenmall-czleilei240/admin-web:latest
|
||||||
|
container_name: single-admin-web
|
||||||
|
networks: [single-net]
|
||||||
|
ports:
|
||||||
|
- "${SINGLE_ADMIN_PORT:-18081}:80"
|
||||||
|
depends_on:
|
||||||
|
- single-admin-api
|
||||||
|
|
||||||
|
# ---------- H5 前端（uni-app） ----------
|
||||||
|
single-h5:
|
||||||
|
<<: *common
|
||||||
|
build:
|
||||||
|
context: ../../../single-shop-22/single_uniapp22miao
|
||||||
|
dockerfile: ../../deploy/docker/single-shop/h5.Dockerfile
|
||||||
|
args:
|
||||||
|
H5_API_DOMAIN: ${SINGLE_FRONT_API_PUBLIC_URL}
|
||||||
|
image: jifenmall-czleilei240/h5:latest
|
||||||
|
container_name: single-h5
|
||||||
|
networks: [single-net]
|
||||||
|
ports:
|
||||||
|
- "${SINGLE_H5_PORT:-18082}:80"
|
||||||
|
depends_on:
|
||||||
|
- single-front-api
|
||||||
BIN
deploy/ssl/leilei-jf.czchunfang.com_cert.zip
Normal file
BIN
deploy/ssl/leilei-jf.czchunfang.com_cert.zip
Normal file
Binary file not shown.
BIN
deploy/ssl/leilei-jfadmin.czchunfang.com_cert.zip
Normal file
BIN
deploy/ssl/leilei-jfadmin.czchunfang.com_cert.zip
Normal file
Binary file not shown.
BIN
deploy/ssl/leilei.czchunfang.com_cert.zip
Normal file
BIN
deploy/ssl/leilei.czchunfang.com_cert.zip
Normal file
Binary file not shown.
BIN
deploy/ssl/leileiadmin.czchunfang.com_cert.zip
Normal file
BIN
deploy/ssl/leileiadmin.czchunfang.com_cert.zip
Normal file
Binary file not shown.
11
integralResell&singleShop.code-workspace
Normal file
11
integralResell&singleShop.code-workspace
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
{
|
||||||
|
"folders": [
|
||||||
|
{
|
||||||
|
"path": "single-shop-22"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"path": "integral-resell"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"settings": {}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user