docs: add 1Panel Docker production deploy stack

Add Dockerfile.prod, docker-compose.prod.yml, OpenResty example, and migration plan for Baota to 1Panel + Compose deployment.
2026-06-05 22:40:04 +08:00
parent 811eb97fbf
commit 2f67e9e2b9
8 changed files with 608 additions and 0 deletions
@@ -0,0 +1,93 @@
+# Nexus 6.0 — production Compose (1Panel / bare Docker host)
+# Usage:
+#   cp docker/.env.prod.example docker/.env.prod   # fill secrets from Baota .env
+#   docker compose -f docker/docker-compose.prod.yml --env-file docker/.env.prod up -d --build
+#
+# OpenResty on host proxies https://api.synaglobal.vip → 127.0.0.1:8600
+
+name: nexus-prod
+
+services:
+  mysql:
+    image: mysql:8.4
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:?set MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: nexus
+      MYSQL_USER: nexus
+      MYSQL_PASSWORD: ${MYSQL_PASSWORD:?set MYSQL_PASSWORD}
+    volumes:
+      - mysql-data:/var/lib/mysql
+    healthcheck:
+      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p\"$$MYSQL_ROOT_PASSWORD\" || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 8
+      start_period: 40s
+    networks:
+      - nexus-internal
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: ["redis-server", "--appendonly", "yes"]
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 8
+    networks:
+      - nexus-internal
+
+  nexus:
+    build:
+      context: ..
+      dockerfile: Dockerfile.prod
+    restart: unless-stopped
+    depends_on:
+      mysql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    ports:
+      - "127.0.0.1:${NEXUS_PUBLISH_PORT:-8600}:8600"
+    environment:
+      MYSQL_HOST: mysql
+      MYSQL_PORT: "3306"
+      REDIS_HOST: redis
+      REDIS_PORT: "6379"
+      NEXUS_PERSIST_DIR: /var/lib/nexus
+      NEXUS_DOCKER_WRITE_ENV: "1"
+      NEXUS_HOST: "0.0.0.0"
+      NEXUS_PORT: "8600"
+      NEXUS_DEPLOY_PATH: /app
+      NEXUS_DATABASE_URL: mysql+aiomysql://nexus:${MYSQL_PASSWORD}@mysql:3306/nexus
+      NEXUS_REDIS_URL: redis://redis:6379/0
+      NEXUS_CORS_ORIGINS: ${NEXUS_CORS_ORIGINS:?set NEXUS_CORS_ORIGINS}
+      NEXUS_SECRET_KEY: ${NEXUS_SECRET_KEY:?set NEXUS_SECRET_KEY}
+      NEXUS_API_KEY: ${NEXUS_API_KEY:?set NEXUS_API_KEY}
+      NEXUS_ENCRYPTION_KEY: ${NEXUS_ENCRYPTION_KEY:-}
+      NEXUS_API_BASE_URL: ${NEXUS_API_BASE_URL:?set NEXUS_API_BASE_URL}
+    volumes:
+      - nexus-state:/var/lib/nexus
+      - nexus-web-data:/app/web/data
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://127.0.0.1:8600/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 90s
+    networks:
+      - nexus-internal
+
+networks:
+  nexus-internal:
+    driver: bridge
+
+volumes:
+  mysql-data:
+  redis-data:
+  nexus-state:
+  nexus-web-data: