编码工程师andmultica-agent
f1fe4a3928
客户端默认指向 jxd.jinniu.ink 的 HTTPS/WSS；登录后把 OpenIM userID 设为极光 alias。 华为 agconnect-services.json 不伪造、不入库。Master Secret 只从服务器文件注入。 Co-authored-by: multica-agent <github@multica.ai>
57 lines
1.9 KiB
YAML
57 lines
1.9 KiB
YAML
# 公网测试 overlay。用法（在仓库根目录，由总工执行，本卡不跑）：
|
|
# set -a && . ./.env && ./scripts/load-jpush-secret.sh && set +a
|
|
# docker compose -f docker-compose.yaml -f deploy/public/docker-compose.public.yaml up -d
|
|
#
|
|
# 原则：内部端口只绑 127.0.0.1；对外只开 80/443 + LiveKit 媒体 17881/tcp、17882/udp。
|
|
# 回滚：去掉本 overlay，改回 docker compose -f docker-compose.yaml up -d，数据目录 components/ 与 data/ 不动。
|
|
|
|
services:
|
|
openim-server:
|
|
ports:
|
|
- "127.0.0.1:${OPENIM_MSG_GATEWAY_PORT}:10001"
|
|
- "127.0.0.1:${OPENIM_API_PORT}:10002"
|
|
environment:
|
|
- IMENV_OPENIM_PUSH_ENABLE=${OPENIM_PUSH_ENABLE:-jpush}
|
|
- IMENV_OPENIM_PUSH_JPUSH_APPKEY=${JPUSH_APPKEY}
|
|
- IMENV_OPENIM_PUSH_JPUSH_MASTERSECRET=${JPUSH_MASTER_SECRET}
|
|
- IMENV_OPENIM_PUSH_JPUSH_PUSHURL=${JPUSH_PUSH_URL:-https://api.jpush.cn/v3/push}
|
|
- IMENV_OPENIM_PUSH_JPUSH_PUSHINTENT=${JPUSH_PUSH_INTENT}
|
|
|
|
minio:
|
|
ports:
|
|
- "127.0.0.1:${MINIO_PORT}:9000"
|
|
- "127.0.0.1:${MINIO_CONSOLE_PORT}:9090"
|
|
|
|
etcd:
|
|
ports:
|
|
- "127.0.0.1:12379:2379"
|
|
- "127.0.0.1:12380:2380"
|
|
|
|
livekit:
|
|
command: --config /etc/livekit.yaml --node-ip ${SERVER_IP}
|
|
ports:
|
|
- "127.0.0.1:${LIVEKIT_PORT:-17880}:17880"
|
|
- "${LIVEKIT_RTC_TCP_PORT:-17881}:17881"
|
|
- "${LIVEKIT_RTC_UDP_PORT:-17882}:17882/udp"
|
|
volumes:
|
|
- ./config/livekit.public.yaml:/etc/livekit.yaml
|
|
|
|
account-server:
|
|
ports:
|
|
- "127.0.0.1:${ACCOUNT_PORT:-10010}:10010"
|
|
|
|
edge:
|
|
image: nginx:1.27-alpine
|
|
container_name: jxd-edge
|
|
restart: always
|
|
network_mode: host
|
|
volumes:
|
|
- ./deploy/public/nginx.conf:/etc/nginx/nginx.conf:ro
|
|
- ./deploy/public/acme:/var/www/acme:ro
|
|
- /etc/letsencrypt:/etc/letsencrypt:ro
|
|
depends_on:
|
|
- openim-server
|
|
- account-server
|
|
- minio
|
|
- livekit
|