baiyue-firstleg/deploy/docker-compose.overseas.yml

name: firstleg-${DEPLOY_ENV:-test}-overseas

x-overseas-common: &overseas-common
  restart: "on-failure:3"
  stop_grace_period: ${STOP_GRACE_PERIOD:-45s}
  networks: [firstleg-overseas-network, infra-network]
  extra_hosts:
    - "host.docker.internal:host-gateway"
  environment: &overseas-environment
    BAIYUE_DEPLOY_SLOT: ${DEPLOY_SLOT:-rolling}
    BAIYUE_RELEASE_ID: ${RELEASE_ID:-local}
    BAIYUE_RUNTIME_SCHEDULING_ENABLED: ${BAIYUE_RUNTIME_SCHEDULING_ENABLED:-true}
    SERVER_SHUTDOWN: graceful
    SPRING_LIFECYCLE_TIMEOUT_PER_SHUTDOWN_PHASE: ${SHUTDOWN_PHASE_TIMEOUT:-30s}
    SPRING_PROFILES_ACTIVE: overseas
    NACOS_SERVER_ADDR: ${NACOS_SERVER_ADDR}
    NACOS_USERNAME: ${OVERSEAS_NACOS_USERNAME}
    NACOS_PASSWORD: ${OVERSEAS_NACOS_PASSWORD}
    NACOS_GROUP: ${NACOS_GROUP:-BAIYUE}
    NACOS_NAMESPACE: ${OVERSEAS_NACOS_NAMESPACE:-prod-overseas}
    REDIS_HOST: ${OVERSEAS_REDIS_HOST:-host.docker.internal}
    REDIS_PORT: ${OVERSEAS_REDIS_PORT:-6379}
    REDIS_PASSWORD: ${OVERSEAS_REDIS_PASSWORD:-}
    REDIS_DATABASE: ${OVERSEAS_REDIS_DATABASE:-0}
    INTERNAL_SERVICE_TOKEN: ${INTERNAL_SERVICE_TOKEN}
    JWT_ISSUER: ${JWT_ISSUER}
    JWT_AUDIENCE: ${OVERSEAS_JWT_AUDIENCE:-lastleg-api}
    JWT_JWK_SET_URI: ${JWT_JWK_SET_URI}
    REGION_CODE: OVERSEAS
    DEPLOYMENT_CELL: ${OVERSEAS_DEPLOYMENT_CELL:-test-overseas}
    DATA_RESIDENCY: OVERSEAS
    SPRING_SQL_INIT_MODE: never
    SERVER_MAX_HTTP_REQUEST_HEADER_SIZE: ${SERVER_MAX_HTTP_REQUEST_HEADER_SIZE:-32KB}
    TZ: Asia/Shanghai
  logging:
    # 应用只写 stdout/stderr；json-file 兼容宝塔查看，大小与数量均受控。
    driver: ${DOCKER_LOG_DRIVER:-json-file}
    options:
      max-size: ${DOCKER_LOG_MAX_SIZE:-50m}
      max-file: "${DOCKER_LOG_MAX_FILE:-3}"

services:
  gateway-overseas:
    <<: *overseas-common
    image: ${IMAGE_REPOSITORY}/gateway-overseas:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-gateway-overseas${DEPLOY_SLOT_SUFFIX:-}
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${GATEWAY_OVERSEAS_PUBLISHED_PORT:-${GATEWAY_OVERSEAS_PORT:-9300}}:9300"]
    environment:
      <<: *overseas-environment
      SERVER_PORT: 9300
      SWAGGER_ENABLED: ${SWAGGER_ENABLED:-false}
      CORS_ALLOWED_ORIGINS: ${OVERSEAS_CORS_ALLOWED_ORIGINS:-}
      CORS_ALLOW_CREDENTIALS: ${CORS_ALLOW_CREDENTIALS:-false}
      AUTH_SESSION_VALIDATION_URL: ${AUTH_SESSION_VALIDATION_URL}
      PDA_SESSION_VALIDATION_TIMEOUT: ${PDA_SESSION_VALIDATION_TIMEOUT:-2s}
      LASTLEG_SECURITY_SERVICE_URL: ${LASTLEG_SECURITY_SERVICE_URL:-http://lastleg-service:9303}
      LASTLEG_SECURITY_VALIDATION_TIMEOUT: ${LASTLEG_SECURITY_VALIDATION_TIMEOUT:-2s}

  lastleg-service:
    <<: *overseas-common
    image: ${IMAGE_REPOSITORY}/lastleg-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-lastleg${DEPLOY_SLOT_SUFFIX:-}
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${LASTLEG_PUBLISHED_PORT:-${LASTLEG_PORT:-9303}}:9303"]
    environment:
      <<: *overseas-environment
      SERVER_PORT: 9303
      LASTLEG_DB_URL: ${LASTLEG_DB_URL}
      LASTLEG_DB_USERNAME: ${LASTLEG_DB_USERNAME}
      LASTLEG_DB_PASSWORD: ${LASTLEG_DB_PASSWORD}
      CN_EVENT_BRIDGE_URL: ${CN_EVENT_BRIDGE_TARGET_URL:-http://event-bridge-cn:9312}
      FIRSTLEG_EVENT_BRIDGE_URL: ${CN_EVENT_BRIDGE_TARGET_URL:-http://event-bridge-cn:9312}
      DOMESTIC_WAREHOUSE_URL: ${DOMESTIC_WAREHOUSE_URL}
      FILE_SERVICE_URL: ${FILE_SERVICE_URL}
      # Print 注册在国内 Nacos namespace；海外服务通过共享 infra-network 的 Docker DNS 直连。
      PRINT_SERVICE_URL: ${PRINT_SERVICE_URL:-http://print:9207}
      WAREHOUSE_OVERSEAS_SERVICE_URL: ${WAREHOUSE_OVERSEAS_SERVICE_URL:-http://warehouse-overseas-service:9305}

  warehouse-overseas-service:
    <<: *overseas-common
    image: ${IMAGE_REPOSITORY}/warehouse-overseas-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-warehouse-overseas${DEPLOY_SLOT_SUFFIX:-}
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${WAREHOUSE_OVERSEAS_PUBLISHED_PORT:-${WAREHOUSE_OVERSEAS_PORT:-9305}}:9305"]
    environment:
      <<: *overseas-environment
      SERVER_PORT: 9305
      WAREHOUSE_DB_URL: ${WAREHOUSE_OVERSEAS_DB_URL}
      WAREHOUSE_DB_USERNAME: ${WAREHOUSE_OVERSEAS_DB_USERNAME}
      WAREHOUSE_DB_PASSWORD: ${WAREHOUSE_OVERSEAS_DB_PASSWORD}
      DOMESTIC_WAREHOUSE_URL: ${DOMESTIC_WAREHOUSE_URL}
      # 与海外 BOL 共用国内 Print；不能在海外 Nacos namespace 中发现该服务。
      PRINT_SERVICE_URL: ${PRINT_SERVICE_URL:-http://print:9207}

  event-bridge-service:
    <<: *overseas-common
    image: ${IMAGE_REPOSITORY}/event-bridge-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-event-bridge-overseas${DEPLOY_SLOT_SUFFIX:-}
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${EVENT_BRIDGE_OVERSEAS_PUBLISHED_PORT:-${EVENT_BRIDGE_OVERSEAS_PORT:-9313}}:9312"]
    environment:
      <<: *overseas-environment
      SERVER_PORT: 9312
      EVENT_BRIDGE_DB_URL: ${EVENT_BRIDGE_OVERSEAS_DB_URL}
      EVENT_BRIDGE_DB_USERNAME: ${EVENT_BRIDGE_OVERSEAS_DB_USERNAME}
      EVENT_BRIDGE_DB_PASSWORD: ${EVENT_BRIDGE_OVERSEAS_DB_PASSWORD}
      EVENT_CONSUMER_URL: ${EVENT_CONSUMER_URL:-http://lastleg-service:9303/internal/lastleg/events}
      LASTLEG_SECURITY_EVENT_CONSUMER_URL: ${LASTLEG_SECURITY_EVENT_CONSUMER_URL:-http://lastleg-service:9303/internal/lastleg/security/v1/events}
    networks:
      firstleg-overseas-network:
      infra-network:
        aliases: [event-bridge-overseas]

networks:
  firstleg-overseas-network:
    name: firstleg-${DEPLOY_ENV:-test}-overseas-network
  infra-network:
    external: true
    name: ${INFRA_NETWORK:-firstleg-test-infra-network}