baiyue-firstleg/deploy/docker-compose.yml

name: firstleg-${DEPLOY_ENV:-test}

x-common: &common
  restart: unless-stopped
  networks: [firstleg-network, infra-network]
  # 测试机复用宿主机的 MySQL、Redis、Nacos 时，容器通过此别名访问宿主机。
  extra_hosts:
    - "host.docker.internal:host-gateway"
  environment: &common-environment
    SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-cn}
    NACOS_SERVER_ADDR: ${NACOS_SERVER_ADDR}
    NACOS_USERNAME: ${NACOS_USERNAME}
    NACOS_PASSWORD: ${NACOS_PASSWORD}
    NACOS_GROUP: ${NACOS_GROUP:-BAIYUE}
    NACOS_NAMESPACE: ${NACOS_NAMESPACE:-public}
    REDIS_HOST: ${REDIS_HOST}
    REDIS_PORT: ${REDIS_PORT:-6379}
    REDIS_PASSWORD: ${REDIS_PASSWORD}
    REDIS_DATABASE: ${REDIS_DATABASE:-0}
    JWT_SECRET: ${JWT_SECRET}
    INTERNAL_SERVICE_TOKEN: ${INTERNAL_SERVICE_TOKEN}
    BAIYUE_AUDIT_ENDPOINT: ${BAIYUE_AUDIT_ENDPOINT:-http://audit-service:9700/internal/audit/events}
    SERVER_MAX_HTTP_REQUEST_HEADER_SIZE: ${SERVER_MAX_HTTP_REQUEST_HEADER_SIZE:-32KB}
    AUDIT_OUTBOX_ENABLED: ${AUDIT_OUTBOX_ENABLED:-false}
    AUDIT_OUTBOX_PUBLISHER_ENABLED: ${AUDIT_OUTBOX_PUBLISHER_ENABLED:-false}
    REGION_CODE: ${REGION_CODE:-CN}
    DEPLOYMENT_CELL: ${DEPLOYMENT_CELL:-test-cn}
    DATA_RESIDENCY: ${DATA_RESIDENCY:-CN}
    TZ: Asia/Shanghai
  logging:
    # 应用只写 stdout/stderr；local 驱动负责单份本机日志与轮转。
    driver: local
    options:
      max-size: ${DOCKER_LOG_MAX_SIZE:-50m}
      max-file: "${DOCKER_LOG_MAX_FILE:-3}"

services:
  gateway:
    <<: *common
    image: ${IMAGE_REPOSITORY}/gateway:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-gateway
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${GATEWAY_PORT:-9000}:9000"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9000
      SWAGGER_ENABLED: ${SWAGGER_ENABLED:-false}
      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS}
      CORS_ALLOW_CREDENTIALS: ${CORS_ALLOW_CREDENTIALS:-false}

  auth:
    <<: *common
    image: ${IMAGE_REPOSITORY}/auth:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-auth
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${AUTH_PORT:-9100}:9100"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9100
      AUTH_DB_URL: ${AUTH_DB_URL}
      AUTH_DB_USERNAME: ${AUTH_DB_USERNAME}
      AUTH_DB_PASSWORD: ${AUTH_DB_PASSWORD}
      OVERSEAS_JWT_ENABLED: ${OVERSEAS_JWT_ENABLED:-false}
      OVERSEAS_JWT_ISSUER: ${OVERSEAS_JWT_ISSUER:-auth-service}
      OVERSEAS_JWT_AUDIENCE: ${OVERSEAS_JWT_AUDIENCE:-lastleg-api}
      OVERSEAS_JWT_RSA_JWK_SET: ${OVERSEAS_JWT_RSA_JWK_SET:-}
      OVERSEAS_JWT_CURRENT_KID: ${OVERSEAS_JWT_CURRENT_KID:-}
      OVERSEAS_ACCESS_TOKEN_TTL: ${OVERSEAS_ACCESS_TOKEN_TTL:-15m}

  iam:
    <<: *common
    image: ${IMAGE_REPOSITORY}/iam:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-iam
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${IAM_PORT:-9201}:9201"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9201
      IAM_DB_URL: ${IAM_DB_URL}
      IAM_DB_USERNAME: ${IAM_DB_USERNAME}
      IAM_DB_PASSWORD: ${IAM_DB_PASSWORD}
      SECURITY_EVENT_BRIDGE_URL: ${SECURITY_EVENT_BRIDGE_URL:-http://event-bridge-overseas:9312}

  firstleg:
    <<: *common
    image: ${IMAGE_REPOSITORY}/firstleg:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-business
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FIRSTLEG_PORT:-9202}:9202"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9202
      FIRSTLEG_DB_URL: ${FIRSTLEG_DB_URL}
      FIRSTLEG_DB_USERNAME: ${FIRSTLEG_DB_USERNAME}
      FIRSTLEG_DB_PASSWORD: ${FIRSTLEG_DB_PASSWORD}
      LASTLEG_EVENT_BRIDGE_URL: ${LASTLEG_EVENT_BRIDGE_URL}
      MATSON_TRACKING_ENABLED: ${MATSON_TRACKING_ENABLED:-false}
      SML_TRACKING_ENABLED: ${SML_TRACKING_ENABLED:-false}
      ZIM_TRACKING_ENABLED: ${ZIM_TRACKING_ENABLED:-false}
      COSCO_OPEN_API_ENABLED: ${COSCO_OPEN_API_ENABLED:-false}
      EMC_TRACKING_ENABLED: ${EMC_TRACKING_ENABLED:-false}
      HEDE_TRACKING_ENABLED: ${HEDE_TRACKING_ENABLED:-false}
      CARRIER_SCHEDULE_ZONE: ${CARRIER_SCHEDULE_ZONE:-Asia/Shanghai}
      CARRIER_SCHEDULE_SCAN_FIXED_DELAY: ${CARRIER_SCHEDULE_SCAN_FIXED_DELAY:-PT1M}
      CARRIER_SCHEDULE_SCAN_INITIAL_DELAY: ${CARRIER_SCHEDULE_SCAN_INITIAL_DELAY:-PT10S}
      CARRIER_SCHEDULE_BATCH_SIZE: ${CARRIER_SCHEDULE_BATCH_SIZE:-20}
      CARRIER_SCHEDULE_MAX_TASKS_PER_TRIGGER: ${CARRIER_SCHEDULE_MAX_TASKS_PER_TRIGGER:-2000}
      CARRIER_SCHEDULE_LEASE_DURATION: ${CARRIER_SCHEDULE_LEASE_DURATION:-PT5M}

  finance:
    <<: *common
    image: ${IMAGE_REPOSITORY}/finance:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-finance
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FINANCE_PORT:-9203}:9203"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9203
      FINANCE_DB_URL: ${FINANCE_DB_URL}
      FINANCE_DB_USERNAME: ${FINANCE_DB_USERNAME}
      FINANCE_DB_PASSWORD: ${FINANCE_DB_PASSWORD}

  order:
    <<: *common
    image: ${IMAGE_REPOSITORY}/order:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-order
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${ORDER_PORT:-9204}:9204"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9204
      ORDER_DB_URL: ${ORDER_DB_URL}
      ORDER_DB_USERNAME: ${ORDER_DB_USERNAME}
      ORDER_DB_PASSWORD: ${ORDER_DB_PASSWORD}

  warehouse:
    <<: *common
    image: ${IMAGE_REPOSITORY}/warehouse:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-warehouse
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${WAREHOUSE_PORT:-9205}:9205"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9205
      WAREHOUSE_DB_URL: ${WAREHOUSE_DB_URL}
      WAREHOUSE_DB_USERNAME: ${WAREHOUSE_DB_USERNAME}
      WAREHOUSE_DB_PASSWORD: ${WAREHOUSE_DB_PASSWORD}

  file:
    <<: *common
    image: ${IMAGE_REPOSITORY}/file:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-file
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FILE_PORT:-9206}:9206"]
    volumes:
      - "${FILE_UPLOADS_HOST_DIR:-/data/firstleg/uploads}:/data/files"
    environment:
      <<: *common-environment
      SERVER_PORT: 9206
      FILE_DB_URL: ${FILE_DB_URL}
      FILE_DB_USERNAME: ${FILE_DB_USERNAME}
      FILE_DB_PASSWORD: ${FILE_DB_PASSWORD}
      FILE_STORAGE_ROOT: /data/files
      JAVA_TOOL_OPTIONS: "-Xms1g -Xmx2g -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8"
      # Compose 会插值整份文件，即使只部署 auth 等其他服务；File 的必填校验由 deploy-services.sh 按服务执行。
      ROCKETMQ_NAME_SERVER: ${ROCKETMQ_NAME_SERVER-}
      MQ_TOPIC_PREFIX: ${MQ_TOPIC_PREFIX-}
      FILE_EXPORT_CONSUMER_ENABLED: ${FILE_EXPORT_CONSUMER_ENABLED:-false}
      FILE_EXPORT_CONSUMER_CONCURRENCY: ${FILE_EXPORT_CONSUMER_CONCURRENCY:-4}
      FILE_EXPORT_PUBLISHER_ENABLED: ${FILE_EXPORT_PUBLISHER_ENABLED:-false}
      FILE_EXPORT_RECONCILER_ENABLED: ${FILE_EXPORT_RECONCILER_ENABLED:-false}

  print:
    <<: *common
    image: ${IMAGE_REPOSITORY}/print:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-print
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${PRINT_PORT:-9207}:9207"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9207
      JAVA_TOOL_OPTIONS: "-Xms512m -Xmx1g -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8"

  integration-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/integration-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-integration
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${INTEGRATION_PORT:-9210}:9210"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9210
      BAIDU_OCR_ENABLED: ${BAIDU_OCR_ENABLED:-false}
      BAIDU_OCR_API_KEY: ${BAIDU_OCR_API_KEY:-}
      BAIDU_OCR_SECRET_KEY: ${BAIDU_OCR_SECRET_KEY:-}
      AMAZON_SP_API_ENABLED: ${AMAZON_SP_API_ENABLED:-false}
      AMAZON_SP_API_CLIENT_ID: ${AMAZON_SP_API_CLIENT_ID:-}
      AMAZON_SP_API_CLIENT_SECRET: ${AMAZON_SP_API_CLIENT_SECRET:-}
      AMAZON_SP_API_REFRESH_TOKEN: ${AMAZON_SP_API_REFRESH_TOKEN:-}
      AMAZON_SP_API_AWS_ACCESS_KEY: ${AMAZON_SP_API_AWS_ACCESS_KEY:-}
      AMAZON_SP_API_AWS_SECRET_KEY: ${AMAZON_SP_API_AWS_SECRET_KEY:-}
      AMAZON_SP_API_REGION: ${AMAZON_SP_API_REGION:-}
      MATSON_TRACKING_ENABLED: ${MATSON_TRACKING_ENABLED:-false}
      MATSON_TRACKING_PAGE_URL: ${MATSON_TRACKING_PAGE_URL:-https://www.matson.com/shipment-tracking.html}
      MATSON_TRACKING_QUERY_URL: ${MATSON_TRACKING_QUERY_URL:-https://www.matson.com/wp-content/plugins/matson-plugin/Api_calls/tracking_booking_proxy.php}
      MATSON_TRACKING_CONNECT_TIMEOUT: ${MATSON_TRACKING_CONNECT_TIMEOUT:-10s}
      MATSON_TRACKING_REQUEST_TIMEOUT: ${MATSON_TRACKING_REQUEST_TIMEOUT:-30s}
      MATSON_TRACKING_MIN_REQUEST_INTERVAL: ${MATSON_TRACKING_MIN_REQUEST_INTERVAL:-5s}
      SML_TRACKING_ENABLED: ${SML_TRACKING_ENABLED:-false}
      SML_TRACKING_QUERY_URL: ${SML_TRACKING_QUERY_URL:-https://esvc.smlines.com/smline/CUP_HOM_3301GS.do}
      SML_TRACKING_CONNECT_TIMEOUT: ${SML_TRACKING_CONNECT_TIMEOUT:-10s}
      SML_TRACKING_REQUEST_TIMEOUT: ${SML_TRACKING_REQUEST_TIMEOUT:-30s}
      SML_TRACKING_MIN_REQUEST_INTERVAL: ${SML_TRACKING_MIN_REQUEST_INTERVAL:-5s}
      ZIM_TRACKING_ENABLED: ${ZIM_TRACKING_ENABLED:-false}
      ZIM_AUTHORIZATION_URL: ${ZIM_AUTHORIZATION_URL:-https://apigw.zim.com/authorize/v1}
      ZIM_TRACING_BASE_URL: ${ZIM_TRACING_BASE_URL:-https://apigw.zim.com/tracing/v2}
      ZIM_CLIENT_ID: ${ZIM_CLIENT_ID:-}
      ZIM_CLIENT_SECRET: ${ZIM_CLIENT_SECRET:-}
      ZIM_TRACKING_SUBSCRIPTION_KEY: ${ZIM_TRACKING_SUBSCRIPTION_KEY:-}
      ZIM_TRACKING_CONNECT_TIMEOUT: ${ZIM_TRACKING_CONNECT_TIMEOUT:-10s}
      ZIM_TRACKING_REQUEST_TIMEOUT: ${ZIM_TRACKING_REQUEST_TIMEOUT:-30s}
      ZIM_TRACKING_MAX_CONCURRENCY: ${ZIM_TRACKING_MAX_CONCURRENCY:-10}
      EMC_TRACKING_ENABLED: ${EMC_TRACKING_ENABLED:-false}
      EMC_TRACKING_QUERY_URL: ${EMC_TRACKING_QUERY_URL:-https://www.evergreen-shipping.cn/servlet/TDB1_CargoTracking.do}
      EMC_TRACKING_CONNECT_TIMEOUT: ${EMC_TRACKING_CONNECT_TIMEOUT:-10s}
      EMC_TRACKING_REQUEST_TIMEOUT: ${EMC_TRACKING_REQUEST_TIMEOUT:-30s}
      EMC_TRACKING_MIN_REQUEST_INTERVAL: ${EMC_TRACKING_MIN_REQUEST_INTERVAL:-5s}
      HEDE_TRACKING_ENABLED: ${HEDE_TRACKING_ENABLED:-false}
      HEDE_TRACKING_QUERY_URL: ${HEDE_TRACKING_QUERY_URL:-http://elines.hedehk.com/getVBilldynamic}
      HEDE_TRACKING_CONNECT_TIMEOUT: ${HEDE_TRACKING_CONNECT_TIMEOUT:-10s}
      HEDE_TRACKING_REQUEST_TIMEOUT: ${HEDE_TRACKING_REQUEST_TIMEOUT:-30s}
      HEDE_TRACKING_MIN_REQUEST_INTERVAL: ${HEDE_TRACKING_MIN_REQUEST_INTERVAL:-5s}

  event-bridge-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/event-bridge-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-event-bridge
    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${EVENT_BRIDGE_PORT:-9312}:9312"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9312
      EVENT_BRIDGE_DB_URL: ${EVENT_BRIDGE_DB_URL}
      EVENT_BRIDGE_DB_USERNAME: ${EVENT_BRIDGE_DB_USERNAME}
      EVENT_BRIDGE_DB_PASSWORD: ${EVENT_BRIDGE_DB_PASSWORD}
      EVENT_CONSUMER_URL: ${FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL:-http://firstleg:9202/internal/firstleg/v1/container-events}
      FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL: ${FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL:-http://firstleg:9202/internal/firstleg/v1/container-events}
      SPRING_SQL_INIT_MODE: never
    networks:
      firstleg-network:
      infra-network:
        aliases: [event-bridge-cn]

  audit-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/audit-service:${IMAGE_TAG}
    container_name: firstleg-${DEPLOY_ENV:-test}-audit
    expose: ["9700"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9700
      AUDIT_DB_URL: ${AUDIT_DB_URL}
      AUDIT_DB_USERNAME: ${AUDIT_DB_USERNAME}
      AUDIT_DB_PASSWORD: ${AUDIT_DB_PASSWORD}
      AUDIT_MQ_CONSUMER_ENABLED: ${AUDIT_MQ_CONSUMER_ENABLED:-false}
      AUDIT_DLQ_CONSUMER_ENABLED: ${AUDIT_DLQ_CONSUMER_ENABLED:-false}
      AUDIT_DLQ_COMPENSATION_ENABLED: ${AUDIT_DLQ_COMPENSATION_ENABLED:-false}

networks:
  firstleg-network:
    name: firstleg-${DEPLOY_ENV:-test}-network
  infra-network:
    external: true
    name: ${INFRA_NETWORK:-firstleg-test-infra-network}