baiyue-firstleg/deploy/docker-compose.yml

name: firstleg-${DEPLOY_ENV:-test}

x-common: &common
  restart: unless-stopped
  networks: [firstleg-network, infra-network]
  # 测试机复用宿主机的 MySQL、Redis、Nacos 时，容器通过此别名访问宿主机。
  extra_hosts:
    - "host.docker.internal:host-gateway"
  environment: &common-environment
    SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-cn}
    NACOS_SERVER_ADDR: ${NACOS_SERVER_ADDR}
    NACOS_USERNAME: ${NACOS_USERNAME}
    NACOS_PASSWORD: ${NACOS_PASSWORD}
    NACOS_GROUP: ${NACOS_GROUP:-BAIYUE}
    NACOS_NAMESPACE: ${NACOS_NAMESPACE:-public}
    REDIS_HOST: ${REDIS_HOST}
    REDIS_PORT: ${REDIS_PORT:-6379}
    REDIS_PASSWORD: ${REDIS_PASSWORD}
    REDIS_DATABASE: ${REDIS_DATABASE:-0}
    JWT_SECRET: ${JWT_SECRET}
    INTERNAL_SERVICE_TOKEN: ${INTERNAL_SERVICE_TOKEN}
    BAIYUE_AUDIT_ENDPOINT: ${BAIYUE_AUDIT_ENDPOINT:-http://audit-service:9700/internal/audit/events}
    SERVER_MAX_HTTP_REQUEST_HEADER_SIZE: ${SERVER_MAX_HTTP_REQUEST_HEADER_SIZE:-32KB}
    AUDIT_OUTBOX_ENABLED: ${AUDIT_OUTBOX_ENABLED:-false}
    AUDIT_OUTBOX_PUBLISHER_ENABLED: ${AUDIT_OUTBOX_PUBLISHER_ENABLED:-false}
    REGION_CODE: ${REGION_CODE:-CN}
    DEPLOYMENT_CELL: ${DEPLOYMENT_CELL:-test-cn}
    DATA_RESIDENCY: ${DATA_RESIDENCY:-CN}
    LOG_PATH: /app/logs
    TZ: Asia/Shanghai
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: "5"

services:
  gateway:
    <<: *common
    image: ${IMAGE_REPOSITORY}/gateway:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-gateway
    ports: ["${GATEWAY_PORT:-9000}:9000"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/gateway:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9000
      SWAGGER_ENABLED: ${SWAGGER_ENABLED:-false}
      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS}
      CORS_ALLOW_CREDENTIALS: ${CORS_ALLOW_CREDENTIALS:-false}

  auth:
    <<: *common
    image: ${IMAGE_REPOSITORY}/auth:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-auth
    ports: ["${AUTH_PORT:-9100}:9100"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/auth:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9100
      AUTH_DB_URL: ${AUTH_DB_URL}
      AUTH_DB_USERNAME: ${AUTH_DB_USERNAME}
      AUTH_DB_PASSWORD: ${AUTH_DB_PASSWORD}

  iam:
    <<: *common
    image: ${IMAGE_REPOSITORY}/iam:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-iam
    ports: ["${IAM_PORT:-9201}:9201"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/iam:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9201
      IAM_DB_URL: ${IAM_DB_URL}
      IAM_DB_USERNAME: ${IAM_DB_USERNAME}
      IAM_DB_PASSWORD: ${IAM_DB_PASSWORD}

  firstleg:
    <<: *common
    image: ${IMAGE_REPOSITORY}/firstleg:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-business
    ports: ["${FIRSTLEG_PORT:-9202}:9202"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/firstleg:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9202
      FIRSTLEG_DB_URL: ${FIRSTLEG_DB_URL}
      FIRSTLEG_DB_USERNAME: ${FIRSTLEG_DB_USERNAME}
      FIRSTLEG_DB_PASSWORD: ${FIRSTLEG_DB_PASSWORD}

  finance:
    <<: *common
    image: ${IMAGE_REPOSITORY}/finance:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-finance
    ports: ["${FINANCE_PORT:-9203}:9203"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/finance:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9203
      FINANCE_DB_URL: ${FINANCE_DB_URL}
      FINANCE_DB_USERNAME: ${FINANCE_DB_USERNAME}
      FINANCE_DB_PASSWORD: ${FINANCE_DB_PASSWORD}

  order:
    <<: *common
    image: ${IMAGE_REPOSITORY}/order:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-order
    ports: ["${ORDER_PORT:-9204}:9204"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/order:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9204
      ORDER_DB_URL: ${ORDER_DB_URL}
      ORDER_DB_USERNAME: ${ORDER_DB_USERNAME}
      ORDER_DB_PASSWORD: ${ORDER_DB_PASSWORD}

  warehouse:
    <<: *common
    image: ${IMAGE_REPOSITORY}/warehouse:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-warehouse
    ports: ["${WAREHOUSE_PORT:-9205}:9205"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/warehouse:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9205
      WAREHOUSE_DB_URL: ${WAREHOUSE_DB_URL}
      WAREHOUSE_DB_USERNAME: ${WAREHOUSE_DB_USERNAME}
      WAREHOUSE_DB_PASSWORD: ${WAREHOUSE_DB_PASSWORD}

  file:
    <<: *common
    image: ${IMAGE_REPOSITORY}/file:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-file
    ports: ["${FILE_PORT:-9206}:9206"]
    volumes:
      - "${FILE_UPLOADS_HOST_DIR:-/data/firstleg/uploads}:/data/files"
      - "${LOG_ROOT:-/data/logs/baiyue-firstleg}/file:/app/logs"
    environment:
      <<: *common-environment
      SERVER_PORT: 9206
      FILE_DB_URL: ${FILE_DB_URL}
      FILE_DB_USERNAME: ${FILE_DB_USERNAME}
      FILE_DB_PASSWORD: ${FILE_DB_PASSWORD}
      FILE_STORAGE_ROOT: /data/files
      JAVA_TOOL_OPTIONS: "-Xms1g -Xmx2g -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8"
      # Compose 会插值整份文件，即使只部署 auth 等其他服务；File 的必填校验由 deploy-services.sh 按服务执行。
      ROCKETMQ_NAME_SERVER: ${ROCKETMQ_NAME_SERVER-}
      MQ_TOPIC_PREFIX: ${MQ_TOPIC_PREFIX-}
      FILE_EXPORT_CONSUMER_ENABLED: ${FILE_EXPORT_CONSUMER_ENABLED:-false}
      FILE_EXPORT_CONSUMER_CONCURRENCY: ${FILE_EXPORT_CONSUMER_CONCURRENCY:-4}
      FILE_EXPORT_PUBLISHER_ENABLED: ${FILE_EXPORT_PUBLISHER_ENABLED:-false}
      FILE_EXPORT_RECONCILER_ENABLED: ${FILE_EXPORT_RECONCILER_ENABLED:-false}

  print:
    <<: *common
    image: ${IMAGE_REPOSITORY}/print:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-print
    ports: ["${PRINT_PORT:-9207}:9207"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/print:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9207
      JAVA_TOOL_OPTIONS: "-Xms512m -Xmx1g -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8"

  integration-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/integration-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-integration
    ports: ["${INTEGRATION_PORT:-9210}:9210"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/integration-service:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9210
      BAIDU_OCR_ENABLED: ${BAIDU_OCR_ENABLED:-false}
      BAIDU_OCR_API_KEY: ${BAIDU_OCR_API_KEY:-}
      BAIDU_OCR_SECRET_KEY: ${BAIDU_OCR_SECRET_KEY:-}
      AMAZON_SP_API_ENABLED: ${AMAZON_SP_API_ENABLED:-false}
      AMAZON_SP_API_CLIENT_ID: ${AMAZON_SP_API_CLIENT_ID:-}
      AMAZON_SP_API_CLIENT_SECRET: ${AMAZON_SP_API_CLIENT_SECRET:-}
      AMAZON_SP_API_REFRESH_TOKEN: ${AMAZON_SP_API_REFRESH_TOKEN:-}
      AMAZON_SP_API_AWS_ACCESS_KEY: ${AMAZON_SP_API_AWS_ACCESS_KEY:-}
      AMAZON_SP_API_AWS_SECRET_KEY: ${AMAZON_SP_API_AWS_SECRET_KEY:-}
      AMAZON_SP_API_REGION: ${AMAZON_SP_API_REGION:-}

  event-bridge-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/event-bridge-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-event-bridge
    ports: ["${EVENT_BRIDGE_PORT:-9300}:9300"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/event-bridge-service:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9300
      EVENT_BRIDGE_DB_URL: ${EVENT_BRIDGE_DB_URL}
      EVENT_BRIDGE_DB_USERNAME: ${EVENT_BRIDGE_DB_USERNAME}
      EVENT_BRIDGE_DB_PASSWORD: ${EVENT_BRIDGE_DB_PASSWORD}

  audit-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/audit-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-audit
    expose: ["9700"]
    volumes: ["${LOG_ROOT:-/data/logs/baiyue-firstleg}/audit-service:/app/logs"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9700
      AUDIT_DB_URL: ${AUDIT_DB_URL}
      AUDIT_DB_USERNAME: ${AUDIT_DB_USERNAME}
      AUDIT_DB_PASSWORD: ${AUDIT_DB_PASSWORD}
      AUDIT_MQ_CONSUMER_ENABLED: ${AUDIT_MQ_CONSUMER_ENABLED:-false}
      AUDIT_DLQ_CONSUMER_ENABLED: ${AUDIT_DLQ_CONSUMER_ENABLED:-false}
      AUDIT_DLQ_COMPENSATION_ENABLED: ${AUDIT_DLQ_COMPENSATION_ENABLED:-false}

networks:
  firstleg-network:
    name: firstleg-${DEPLOY_ENV:-test}-network
  infra-network:
    external: true
    name: ${INFRA_NETWORK:-firstleg-test-infra-network}