LazyAdmin/docker-compose.prod.yml at master · melonlee/LazyAdmin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
version: '3.8'

services:
  # 应用服务
  lazy-admin:
    build: .
    container_name: lazy-admin-prod
    depends_on:
      - mysql
      - redis
    environment:
      - SPRING_PROFILES_ACTIVE=prod
      - SPRING_DATASOURCE_URL=jdbc:mysql://mysql:3306/lazy_admin?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=UTC&allowPublicKeyRetrieval=true
      - SPRING_DATASOURCE_USERNAME=${MYSQL_USER:-lazy_admin}
      - SPRING_DATASOURCE_PASSWORD=${MYSQL_PASSWORD}
      - SPRING_REDIS_HOST=redis
      - SPRING_REDIS_PORT=6379
      - SPRING_REDIS_PASSWORD=${REDIS_PASSWORD}
      - SECURITY_JWT_SECRET=${JWT_SECRET}
      - JAVA_OPTS=-Xmx2g -Xms1g -XX:+UseG1GC -XX:+UseContainerSupport
    volumes:
      - app_logs:/app/logs
      - app_uploads:/app/uploads
    restart: unless-stopped
    networks:
      - lazy-admin-network
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 2G
        reservations:
          memory: 1G
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/admin/actuator/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 90s

  # MySQL数据库
  mysql:
    image: mysql:8.0
    container_name: lazy-admin-mysql-prod
    environment:
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_DATABASE=lazy_admin
      - MYSQL_USER=${MYSQL_USER:-lazy_admin}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql
      - mysql_conf:/etc/mysql/conf.d
      - mysql_logs:/var/log/mysql
      - ./database/lazy_admin_v2.sql:/docker-entrypoint-initdb.d/init.sql
    restart: unless-stopped
    networks:
      - lazy-admin-network
    command: --default-authentication-plugin=mysql_native_password
              --character-set-server=utf8mb4
              --collation-server=utf8mb4_unicode_ci
              --max_connections=1000
              --innodb_buffer_pool_size=1G
              --innodb_log_file_size=256M
              --slow_query_log=1
              --long_query_time=2
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
        reservations:
          memory: 512M

  # Redis缓存
  redis:
    image: redis:7-alpine
    container_name: lazy-admin-redis-prod
    command: redis-server --requirepass ${REDIS_PASSWORD}
              --maxmemory 512mb
              --maxmemory-policy allkeys-lru
              --appendonly yes
              --appendfsync everysec
    volumes:
      - redis_data:/data
      - redis_conf:/etc/redis
    restart: unless-stopped
    networks:
      - lazy-admin-network
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          memory: 256M

  # Nginx反向代理
  nginx:
    image: nginx:alpine
    container_name: lazy-admin-nginx-prod
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - lazy-admin
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
      - nginx_logs:/var/log/nginx
    restart: unless-stopped
    networks:
      - lazy-admin-network
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          memory: 128M

  # 日志收集 (可选)
  filebeat:
    image: docker.elastic.co/beats/filebeat:8.8.0
    container_name: lazy-admin-filebeat
    user: root
    volumes:
      - ./filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro
      - app_logs:/var/log/app:ro
      - nginx_logs:/var/log/nginx:ro
      - mysql_logs:/var/log/mysql:ro
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: unless-stopped
    networks:
      - lazy-admin-network
    depends_on:
      - lazy-admin
    deploy:
      resources:
        limits:
          cpus: '0.2'
          memory: 256M

volumes:
  mysql_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /data/mysql
  redis_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /data/redis
  app_logs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /data/logs
  app_uploads:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /data/uploads
  mysql_conf:
    driver: local
  mysql_logs:
    driver: local
  nginx_logs:
    driver: local
  redis_conf:
    driver: local

networks:
  lazy-admin-network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16