astra/owpengram-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix

Browse source
This commit is contained in:
onysd 2026-08-07 13:50:38 +03:00
parent 78f174018e
commit cf23b184d2
1 changed files with 5 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

16
deploy/docker-compose.yml
View file

@ -41,7 +41,7 @@ services:
POSTGRES_PASSWORD: owpengram POSTGRES_PASSWORD: owpengram
TZ: UTC TZ: UTC
ports: ports:
- "5432:5432" - "127.0.0.1:5432:5432" # <-- ЗАХИЩЕНО (доступ тільки з 127.0.0.1)
volumes: volumes:
- pgdata:/var/lib/postgresql/data - pgdata:/var/lib/postgresql/data
healthcheck: healthcheck:
@ -56,7 +56,7 @@ services:
container_name: ${TELESRV_DOCKER_PREFIX:-owpengram}-redis container_name: ${TELESRV_DOCKER_PREFIX:-owpengram}-redis
command: ["redis-server", "--appendonly", "yes"] command: ["redis-server", "--appendonly", "yes"]
ports: ports:
- "6399:6379" # 宿主 6379 常被其他项目占用，telesrv 对外用 6399（容器内仍 6379） - "127.0.0.1:6399:6379" # <-- ЗАХИЩЕНО (доступ тільки з 127.0.0.1)
volumes: volumes:
- redisdata:/data - redisdata:/data
healthcheck: healthcheck:
@ -73,18 +73,12 @@ services:
image: minio/minio:latest image: minio/minio:latest
container_name: ${TELESRV_DOCKER_PREFIX:-owpengram}-minio container_name: ${TELESRV_DOCKER_PREFIX:-owpengram}-minio
command: ["server", "/data", "--console-address", ":9001"] command: ["server", "/data", "--console-address", ":9001"]
# Reuses the same TELESRV_S3_* vars the app itself reads (single source
# of truth), with the documented local-dev defaults as a fallback so a
# fresh clone still works with no .env at all. Run docker compose with
# --env-file pointed at your real .env (or export the vars into the
# shell) so a production deployment gets real credentials here instead
# of silently falling back to the checked-in defaults.
environment: environment:
MINIO_ROOT_USER: ${TELESRV_S3_ACCESS_KEY_ID:-owpengram} MINIO_ROOT_USER: ${TELESRV_S3_ACCESS_KEY_ID:-owpengram}
MINIO_ROOT_PASSWORD: ${TELESRV_S3_SECRET_ACCESS_KEY:-owpengram123} MINIO_ROOT_PASSWORD: ${TELESRV_S3_SECRET_ACCESS_KEY:-owpengram123}
ports: ports:
- "9000:9000" # S3 API（对应 .env.example 的 TELESRV_S3_ENDPOINT=localhost:9000） - "127.0.0.1:9000:9000" # <-- якщо S3 використовує тільки локальний бекенд
- "9001:9001" # Web 控制台，浏览器打开 http://localhost:9001 查看存储内容 - "127.0.0.1:9001:9001" # <-- Web UI Minio (можна залишити без 127.0.0.1, якщо потрібен адмін-веб ззовні)
volumes: volumes:
- miniodata:/data - miniodata:/data
healthcheck: healthcheck:
@ -100,4 +94,4 @@ volumes:
redisdata: redisdata:
name: ${TELESRV_DOCKER_PREFIX:-owpengram}_redisdata name: ${TELESRV_DOCKER_PREFIX:-owpengram}_redisdata
miniodata: miniodata:
name: ${TELESRV_DOCKER_PREFIX:-owpengram}_miniodata name: ${TELESRV_DOCKER_PREFIX:-owpengram}_miniodata