优化

2026-09-29 18:47:37 +08:00
parent 2c60a29e0f
commit c2927ab9a6
291 changed files with 4008 additions and 6298 deletions
@@ -1,4 +1,4 @@
-name: firstleg-${DEPLOY_ENV:-test}
+name: firstleg-test

 x-common: &common
  restart: "on-failure:3"
@@ -8,31 +8,36 @@ x-common: &common
  extra_hosts:
    - "host.docker.internal:host-gateway"
  environment: &common-environment
-    DEPLOY_ENV: ${DEPLOY_ENV:-test}
-    BAIYUE_DEPLOY_SLOT: ${DEPLOY_SLOT:-rolling}
+    DEPLOY_ENV: test
    BAIYUE_RELEASE_ID: ${RELEASE_ID:-local}
    BAIYUE_RUNTIME_SCHEDULING_ENABLED: ${BAIYUE_RUNTIME_SCHEDULING_ENABLED:-true}
    SERVER_SHUTDOWN: graceful
    SPRING_LIFECYCLE_TIMEOUT_PER_SHUTDOWN_PHASE: ${SHUTDOWN_PHASE_TIMEOUT:-30s}
-    SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-cn}
+    SPRING_PROFILES_ACTIVE: test
    NACOS_SERVER_ADDR: ${NACOS_SERVER_ADDR}
    NACOS_USERNAME: ${NACOS_USERNAME}
    NACOS_PASSWORD: ${NACOS_PASSWORD}
    NACOS_GROUP: ${NACOS_GROUP:-BAIYUE}
-    NACOS_NAMESPACE: ${NACOS_NAMESPACE:-public}
+    NACOS_NAMESPACE: ${NACOS_NAMESPACE:?actual TEST namespace ID required}
    REDIS_HOST: ${REDIS_HOST}
    REDIS_PORT: ${REDIS_PORT:-6379}
    REDIS_PASSWORD: ${REDIS_PASSWORD}
+    REDIS_USERNAME: ${REDIS_USERNAME:-default}
+    SPRING_DATA_REDIS_USERNAME: ${REDIS_USERNAME:-default}
    REDIS_DATABASE: ${REDIS_DATABASE:-0}
-    JWT_SECRET: ${JWT_SECRET}
+    AUTH_SESSION_VALIDATION_URL: http://auth:9100/internal/auth/accounts/sessions/validate
+    JWT_ISSUER: ${JWT_ISSUER:-auth-service}
+    JWT_AUDIENCE: ${JWT_AUDIENCE:-lastleg-api}
+    JWT_JWKS_URI: http://auth:9100/api/auth/.well-known/jwks.json
+    REDIS_TOKEN_KEY_PREFIX: ${REDIS_TOKEN_KEY_PREFIX:-baiyue:auth}
+    SPRING_SQL_INIT_MODE: never
+    ROCKETMQ_NAME_SERVER: ${ROCKETMQ_NAME_SERVER}
+    MQ_TOPIC_PREFIX: test-
    INTERNAL_SERVICE_TOKEN: ${INTERNAL_SERVICE_TOKEN}
-    BAIYUE_AUDIT_ENDPOINT: ${BAIYUE_AUDIT_ENDPOINT:-http://audit-service:9700/internal/audit/events}
+    BAIYUE_AUDIT_ENDPOINT: http://audit-service:9700/internal/audit/events
    SERVER_MAX_HTTP_REQUEST_HEADER_SIZE: ${SERVER_MAX_HTTP_REQUEST_HEADER_SIZE:-32KB}
    AUDIT_OUTBOX_ENABLED: ${AUDIT_OUTBOX_ENABLED:-false}
    AUDIT_OUTBOX_PUBLISHER_ENABLED: ${AUDIT_OUTBOX_PUBLISHER_ENABLED:-false}
-    REGION_CODE: ${REGION_CODE:-CN}
-    DEPLOYMENT_CELL: ${DEPLOYMENT_CELL:-test-cn}
-    DATA_RESIDENCY: ${DATA_RESIDENCY:-CN}
    TZ: Asia/Shanghai
  logging:
    # 应用只写 stdout/stderr；json-file 兼容宝塔查看，大小与数量均受控。
@@ -45,8 +50,8 @@ services:
  gateway:
    <<: *common
    image: ${IMAGE_REPOSITORY}/gateway:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-gateway${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${GATEWAY_PUBLISHED_PORT:-${GATEWAY_PORT:-9000}}:9000"]
+    container_name: firstleg-test-gateway
+    ports: ["${PUBLISHED_BIND_ADDRESS:-127.0.0.1}:${GATEWAY_PUBLISHED_PORT:-${GATEWAY_PORT:-9000}}:9000"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9000
@@ -57,46 +62,53 @@ services:
  auth:
    <<: *common
    image: ${IMAGE_REPOSITORY}/auth:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-auth${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${AUTH_PUBLISHED_PORT:-${AUTH_PORT:-9100}}:9100"]
+    container_name: firstleg-test-auth
+    expose: ["9100"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9100
+      JWT_RSA_JWK_SET: ${JWT_RSA_JWK_SET}
+      JWT_CURRENT_KID: ${JWT_CURRENT_KID}
      AUTH_DB_URL: ${AUTH_DB_URL}
      AUTH_DB_USERNAME: ${AUTH_DB_USERNAME}
      AUTH_DB_PASSWORD: ${AUTH_DB_PASSWORD}
-      OVERSEAS_JWT_ENABLED: ${OVERSEAS_JWT_ENABLED:-false}
-      OVERSEAS_JWT_ISSUER: ${OVERSEAS_JWT_ISSUER:-auth-service}
-      OVERSEAS_JWT_AUDIENCE: ${OVERSEAS_JWT_AUDIENCE:-lastleg-api}
-      OVERSEAS_JWT_RSA_JWK_SET: ${OVERSEAS_JWT_RSA_JWK_SET:-}
-      OVERSEAS_JWT_CURRENT_KID: ${OVERSEAS_JWT_CURRENT_KID:-}
-      OVERSEAS_ACCESS_TOKEN_TTL: ${OVERSEAS_ACCESS_TOKEN_TTL:-15m}

  iam:
    <<: *common
    image: ${IMAGE_REPOSITORY}/iam:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-iam${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${IAM_PUBLISHED_PORT:-${IAM_PORT:-9201}}:9201"]
+    container_name: firstleg-test-iam
+    expose: ["9201"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9201
+      NOTIFICATION_SCHEDULER_ENABLED: ${NOTIFICATION_SCHEDULER_ENABLED:-false}
+      NOTIFICATION_MQ_CONSUMER_ENABLED: ${NOTIFICATION_MQ_CONSUMER_ENABLED:-false}
      IAM_DB_URL: ${IAM_DB_URL}
      IAM_DB_USERNAME: ${IAM_DB_USERNAME}
      IAM_DB_PASSWORD: ${IAM_DB_PASSWORD}
-      SECURITY_EVENT_BRIDGE_URL: ${SECURITY_EVENT_BRIDGE_URL:-http://event-bridge-overseas:9312}

  firstleg:
    <<: *common
    image: ${IMAGE_REPOSITORY}/firstleg:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-business${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FIRSTLEG_PUBLISHED_PORT:-${FIRSTLEG_PORT:-9202}}:9202"]
+    container_name: firstleg-test-business
+    expose: ["9202"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9202
+      EVENT_CONNECT_TIMEOUT_MS: ${EVENT_CONNECT_TIMEOUT_MS:-3000}
+      EVENT_READ_TIMEOUT_MS: ${EVENT_READ_TIMEOUT_MS:-15000}
+      EVENT_LEASE_SECONDS: ${EVENT_LEASE_SECONDS:-60}
+      EVENT_MAX_ATTEMPTS: ${EVENT_MAX_ATTEMPTS:-12}
+      EVENT_BASE_DELAY_SECONDS: ${EVENT_BASE_DELAY_SECONDS:-5}
+      EVENT_MAX_DELAY_SECONDS: ${EVENT_MAX_DELAY_SECONDS:-1800}
+      EVENT_JITTER: ${EVENT_JITTER:-0.1}
+      EVENT_OPERATIONS_TOKEN: ${EVENT_OPERATIONS_TOKEN:-}
+      LASTLEG_SERVICE_URL: http://lastleg-service:9303
+      FIRSTLEG_SERVICE_URL: http://firstleg:9202
+      FINANCE_SERVICE_URL: http://finance:9203
      FIRSTLEG_DB_URL: ${FIRSTLEG_DB_URL}
      FIRSTLEG_DB_USERNAME: ${FIRSTLEG_DB_USERNAME}
      FIRSTLEG_DB_PASSWORD: ${FIRSTLEG_DB_PASSWORD}
-      LASTLEG_EVENT_BRIDGE_URL: ${LASTLEG_EVENT_BRIDGE_URL}
      MATSON_TRACKING_ENABLED: ${MATSON_TRACKING_ENABLED:-false}
      SML_TRACKING_ENABLED: ${SML_TRACKING_ENABLED:-false}
      ZIM_TRACKING_ENABLED: ${ZIM_TRACKING_ENABLED:-false}
@@ -121,21 +133,31 @@ services:
  finance:
    <<: *common
    image: ${IMAGE_REPOSITORY}/finance:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-finance${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FINANCE_PUBLISHED_PORT:-${FINANCE_PORT:-9203}}:9203"]
+    container_name: firstleg-test-finance
+    expose: ["9203"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9203
+      EVENT_CONNECT_TIMEOUT_MS: ${EVENT_CONNECT_TIMEOUT_MS:-3000}
+      EVENT_READ_TIMEOUT_MS: ${EVENT_READ_TIMEOUT_MS:-15000}
+      EVENT_LEASE_SECONDS: ${EVENT_LEASE_SECONDS:-60}
+      EVENT_MAX_ATTEMPTS: ${EVENT_MAX_ATTEMPTS:-12}
+      EVENT_BASE_DELAY_SECONDS: ${EVENT_BASE_DELAY_SECONDS:-5}
+      EVENT_MAX_DELAY_SECONDS: ${EVENT_MAX_DELAY_SECONDS:-1800}
+      EVENT_JITTER: ${EVENT_JITTER:-0.1}
+      EVENT_OPERATIONS_TOKEN: ${EVENT_OPERATIONS_TOKEN:-}
+      LASTLEG_SERVICE_URL: http://lastleg-service:9303
+      FIRSTLEG_SERVICE_URL: http://firstleg:9202
+      FINANCE_SERVICE_URL: http://finance:9203
      FINANCE_DB_URL: ${FINANCE_DB_URL}
      FINANCE_DB_USERNAME: ${FINANCE_DB_USERNAME}
      FINANCE_DB_PASSWORD: ${FINANCE_DB_PASSWORD}
-      OVERSEAS_EVENT_BRIDGE_URL: ${OVERSEAS_EVENT_BRIDGE_URL:-http://event-bridge-overseas:9312}

  order:
    <<: *common
    image: ${IMAGE_REPOSITORY}/order:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-order${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${ORDER_PUBLISHED_PORT:-${ORDER_PORT:-9204}}:9204"]
+    container_name: firstleg-test-order
+    expose: ["9204"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9204
@@ -146,8 +168,8 @@ services:
  warehouse:
    <<: *common
    image: ${IMAGE_REPOSITORY}/warehouse:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-warehouse${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${WAREHOUSE_PUBLISHED_PORT:-${WAREHOUSE_PORT:-9205}}:9205"]
+    container_name: firstleg-test-warehouse
+    expose: ["9205"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9205
@@ -158,8 +180,8 @@ services:
  file:
    <<: *common
    image: ${IMAGE_REPOSITORY}/file:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-file${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${FILE_PUBLISHED_PORT:-${FILE_PORT:-9206}}:9206"]
+    container_name: firstleg-test-file
+    expose: ["9206"]
    volumes:
      - "${FILE_UPLOADS_HOST_DIR:-/data/firstleg/uploads}:/data/files"
    environment:
@@ -172,8 +194,6 @@ services:
      PDA_UPDATE_PUBLIC_BASE_URL: ${PDA_UPDATE_PUBLIC_BASE_URL:-}
      JAVA_TOOL_OPTIONS: "-Xms1g -Xmx2g -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8"
      # Compose 会插值整份文件，即使只部署 auth 等其他服务；File 的必填校验由 deploy-services.sh 按服务执行。
-      ROCKETMQ_NAME_SERVER: ${ROCKETMQ_NAME_SERVER-}
-      MQ_TOPIC_PREFIX: ${MQ_TOPIC_PREFIX-}
      FILE_EXPORT_CONSUMER_ENABLED: ${FILE_EXPORT_CONSUMER_ENABLED:-false}
      FILE_EXPORT_CONSUMER_CONCURRENCY: ${FILE_EXPORT_CONSUMER_CONCURRENCY:-4}
      FILE_EXPORT_PUBLISHER_ENABLED: ${FILE_EXPORT_PUBLISHER_ENABLED:-false}
@@ -182,8 +202,8 @@ services:
  print:
    <<: *common
    image: ${IMAGE_REPOSITORY}/print:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-print${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${PRINT_PUBLISHED_PORT:-${PRINT_PORT:-9207}}:9207"]
+    container_name: firstleg-test-print
+    expose: ["9207"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9207
@@ -192,8 +212,8 @@ services:
  integration-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/integration-service:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-integration${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${INTEGRATION_PUBLISHED_PORT:-${INTEGRATION_PORT:-9210}}:9210"]
+    container_name: firstleg-test-integration
+    expose: ["9210"]
    environment:
      <<: *common-environment
      SERVER_PORT: 9210
@@ -238,31 +258,10 @@ services:
      HEDE_TRACKING_REQUEST_TIMEOUT: ${HEDE_TRACKING_REQUEST_TIMEOUT:-30s}
      HEDE_TRACKING_MIN_REQUEST_INTERVAL: ${HEDE_TRACKING_MIN_REQUEST_INTERVAL:-5s}

-  event-bridge-service:
-    <<: *common
-    image: ${IMAGE_REPOSITORY}/event-bridge-service:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-event-bridge${DEPLOY_SLOT_SUFFIX:-}
-    ports: ["${PUBLISHED_BIND_ADDRESS:-0.0.0.0}:${EVENT_BRIDGE_PUBLISHED_PORT:-${EVENT_BRIDGE_PORT:-9312}}:9312"]
-    environment:
-      <<: *common-environment
-      SERVER_PORT: 9312
-      EVENT_BRIDGE_DB_URL: ${EVENT_BRIDGE_DB_URL}
-      EVENT_BRIDGE_DB_USERNAME: ${EVENT_BRIDGE_DB_USERNAME}
-      EVENT_BRIDGE_DB_PASSWORD: ${EVENT_BRIDGE_DB_PASSWORD}
-      EVENT_CONSUMER_URL: ${FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL:-http://firstleg:9202/internal/firstleg/v1/container-events}
-      FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL: ${FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL:-http://firstleg:9202/internal/firstleg/v1/container-events}
-      FINANCE_FEE_EVENT_CONSUMER_URL: ${FINANCE_FEE_EVENT_CONSUMER_URL:-http://finance:9203/internal/finance/v1/business-fee-source-events}
-      FINANCE_WALLET_EVENT_CONSUMER_URL: ${FINANCE_WALLET_EVENT_CONSUMER_URL:-http://finance:9203/internal/finance/v1/wallet-command-events}
-      SPRING_SQL_INIT_MODE: never
-    networks:
-      firstleg-network:
-      infra-network:
-        aliases: [event-bridge-cn]
-
  audit-service:
    <<: *common
    image: ${IMAGE_REPOSITORY}/audit-service:${IMAGE_TAG}
-    container_name: firstleg-${DEPLOY_ENV:-test}-audit${DEPLOY_SLOT_SUFFIX:-}
+    container_name: firstleg-test-audit
    expose: ["9700"]
    environment:
      <<: *common-environment
@@ -274,9 +273,50 @@ services:
      AUDIT_DLQ_CONSUMER_ENABLED: ${AUDIT_DLQ_CONSUMER_ENABLED:-false}
      AUDIT_DLQ_COMPENSATION_ENABLED: ${AUDIT_DLQ_COMPENSATION_ENABLED:-false}

+  lastleg-service:
+    <<: *common
+    image: ${IMAGE_REPOSITORY}/lastleg-service:${IMAGE_TAG}
+    container_name: firstleg-test-lastleg
+    expose: ["9303"]
+    environment:
+      <<: *common-environment
+      SERVER_PORT: 9303
+      EVENT_CONNECT_TIMEOUT_MS: ${EVENT_CONNECT_TIMEOUT_MS:-3000}
+      EVENT_READ_TIMEOUT_MS: ${EVENT_READ_TIMEOUT_MS:-15000}
+      EVENT_LEASE_SECONDS: ${EVENT_LEASE_SECONDS:-60}
+      EVENT_MAX_ATTEMPTS: ${EVENT_MAX_ATTEMPTS:-12}
+      EVENT_BASE_DELAY_SECONDS: ${EVENT_BASE_DELAY_SECONDS:-5}
+      EVENT_MAX_DELAY_SECONDS: ${EVENT_MAX_DELAY_SECONDS:-1800}
+      EVENT_JITTER: ${EVENT_JITTER:-0.1}
+      EVENT_OPERATIONS_TOKEN: ${EVENT_OPERATIONS_TOKEN:-}
+      LASTLEG_SERVICE_URL: http://lastleg-service:9303
+      FIRSTLEG_SERVICE_URL: http://firstleg:9202
+      FINANCE_SERVICE_URL: http://finance:9203
+      LASTLEG_DB_URL: ${LASTLEG_DB_URL}
+      LASTLEG_DB_USERNAME: ${LASTLEG_DB_USERNAME}
+      LASTLEG_DB_PASSWORD: ${LASTLEG_DB_PASSWORD}
+      DOMESTIC_WAREHOUSE_URL: ${DOMESTIC_WAREHOUSE_URL:-http://warehouse:9205}
+      FILE_SERVICE_URL: ${FILE_SERVICE_URL:-http://file:9206}
+      PRINT_SERVICE_URL: ${PRINT_SERVICE_URL:-http://print:9207}
+      WAREHOUSE_OVERSEAS_SERVICE_URL: ${WAREHOUSE_OVERSEAS_SERVICE_URL:-http://warehouse-overseas-service:9305}
+
+  warehouse-overseas-service:
+    <<: *common
+    image: ${IMAGE_REPOSITORY}/warehouse-overseas-service:${IMAGE_TAG}
+    container_name: firstleg-test-warehouse-overseas
+    expose: ["9305"]
+    environment:
+      <<: *common-environment
+      SERVER_PORT: 9305
+      WAREHOUSE_DB_URL: ${WAREHOUSE_OVERSEAS_DB_URL}
+      WAREHOUSE_DB_USERNAME: ${WAREHOUSE_OVERSEAS_DB_USERNAME}
+      WAREHOUSE_DB_PASSWORD: ${WAREHOUSE_OVERSEAS_DB_PASSWORD}
+      DOMESTIC_WAREHOUSE_URL: ${DOMESTIC_WAREHOUSE_URL}
+      PRINT_SERVICE_URL: ${PRINT_SERVICE_URL:-http://print:9207}
+
 networks:
  firstleg-network:
-    name: firstleg-${DEPLOY_ENV:-test}-network
+    name: firstleg-test-network
  infra-network:
    external: true
    name: ${INFRA_NETWORK:-firstleg-test-infra-network}