- 主站桌面端/移动端「数据中枢」入口固定 http://192.168.200.11:8766/admin/ (XIAOBAI_DATAHUB_URL 仍可覆盖):域名只反代 8765,推导出的 <域名>:8766 打不开, 同时避免数据中枢被外网摸到 - 中枢 _review_url 不再从 Host 头推导,统一取 REVIEW_PUBLIC_URL, 默认 http://192.168.200.11:8765;compose 与 .env.example 示例值同步 - 补回归测试:Host 为域名且未配 REVIEW_PUBLIC_URL 时登录链接仍为固定内网地址 - 文档写明 Cookie 按门牌区分的边界与部署说明 Co-authored-by: multica-agent <github@multica.ai>
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
services:
|
|
xiaobai-datahub:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
image: xiaobai-datahub:local
|
|
container_name: xiaobai-datahub
|
|
ports:
|
|
- "0.0.0.0:8766:8766/tcp"
|
|
env_file:
|
|
- ./.env
|
|
environment:
|
|
DATAHUB_ENCRYPTION_KEY: "${DATAHUB_ENCRYPTION_KEY:?DATAHUB_ENCRYPTION_KEY must be set}"
|
|
DATAHUB_TOKEN: "${DATAHUB_TOKEN:?DATAHUB_TOKEN must be set}"
|
|
HUB_ADMIN_TOKEN: "${HUB_ADMIN_TOKEN:?HUB_ADMIN_TOKEN must be set}"
|
|
REVIEW_BASE_URL: "${REVIEW_BASE_URL:-http://xiaobai-review:8765}"
|
|
REVIEW_PUBLIC_URL: "${REVIEW_PUBLIC_URL:-http://192.168.200.11:8765}"
|
|
TUSHARE_TOKEN: "${TUSHARE_TOKEN:-}"
|
|
IFIND_REFRESH_TOKEN: "${IFIND_REFRESH_TOKEN:-}"
|
|
IFIND_ACCESS_TOKEN: "${IFIND_ACCESS_TOKEN:-}"
|
|
DATAHUB_DB_PATH: /app/data/datahub.db
|
|
DATAHUB_BACKUP_DIR: /app/data/backups
|
|
TZ: Asia/Shanghai
|
|
PYTHONUTF8: "1"
|
|
volumes:
|
|
- type: bind
|
|
source: ./data
|
|
target: /app/data
|
|
restart: unless-stopped
|
|
init: true
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=64m,mode=1777
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
stop_grace_period: 30s
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|