施工员andmultica-agent
a4dbe2bcf8
- 主站桌面端/移动端「数据中枢」入口固定 http://192.168.200.11:8766/admin/ （XIAOBAI_DATAHUB_URL 仍可覆盖）：域名只反代 8765，推导出的 <域名>:8766 打不开， 同时避免数据中枢被外网摸到 - 中枢 _review_url 不再从 Host 头推导，统一取 REVIEW_PUBLIC_URL， 默认 http://192.168.200.11:8765；compose 与 .env.example 示例值同步 - 补回归测试：Host 为域名且未配 REVIEW_PUBLIC_URL 时登录链接仍为固定内网地址 - 文档写明 Cookie 按门牌区分的边界与部署说明 Co-authored-by: multica-agent <github@multica.ai>
51 lines
1.7 KiB
YAML
51 lines
1.7 KiB
YAML
# Optional overlay. Does not replace the existing xiaobai-review service.
|
|
# Start later (总工部署时) with:
|
|
# docker compose -f compose.yaml -f compose.datahub.yaml up -d
|
|
#
|
|
# Required .env keys: DATAHUB_ENCRYPTION_KEY, DATAHUB_TOKEN, HUB_ADMIN_TOKEN, TUSHARE_TOKEN
|
|
# HUB_ADMIN_TOKEN 必须与主站 .env 里的同名变量一致：控制台靠它验证主站管理员会话。
|
|
|
|
services:
|
|
xiaobai-datahub:
|
|
build:
|
|
context: ./xiaobai-datahub
|
|
dockerfile: Dockerfile
|
|
image: xiaobai-datahub:local
|
|
container_name: xiaobai-datahub
|
|
ports:
|
|
- "0.0.0.0:8766:8766/tcp"
|
|
env_file:
|
|
- ./xiaobai-datahub/.env
|
|
environment:
|
|
DATAHUB_ENCRYPTION_KEY: "${DATAHUB_ENCRYPTION_KEY:?DATAHUB_ENCRYPTION_KEY must be set}"
|
|
DATAHUB_TOKEN: "${DATAHUB_TOKEN:?DATAHUB_TOKEN must be set}"
|
|
HUB_ADMIN_TOKEN: "${HUB_ADMIN_TOKEN:?HUB_ADMIN_TOKEN must be set}"
|
|
REVIEW_BASE_URL: "${REVIEW_BASE_URL:-http://xiaobai-review:8765}"
|
|
REVIEW_PUBLIC_URL: "${REVIEW_PUBLIC_URL:-http://192.168.200.11:8765}"
|
|
TUSHARE_TOKEN: "${TUSHARE_TOKEN:-}"
|
|
IFIND_REFRESH_TOKEN: "${IFIND_REFRESH_TOKEN:-}"
|
|
IFIND_ACCESS_TOKEN: "${IFIND_ACCESS_TOKEN:-}"
|
|
DATAHUB_DB_PATH: /app/data/datahub.db
|
|
DATAHUB_BACKUP_DIR: /app/data/backups
|
|
TZ: Asia/Shanghai
|
|
PYTHONUTF8: "1"
|
|
volumes:
|
|
- type: bind
|
|
source: ./datahub-data
|
|
target: /app/data
|
|
restart: unless-stopped
|
|
init: true
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=64m,mode=1777
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
stop_grace_period: 30s
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|