Nexus Deploy
2f67e9e2b9
Add Dockerfile.prod, docker-compose.prod.yml, OpenResty example, and migration plan for Baota to 1Panel + Compose deployment.
94 lines
2.5 KiB
YAML
94 lines
2.5 KiB
YAML
# Nexus 6.0 — production Compose (1Panel / bare Docker host)
|
|
# Usage:
|
|
# cp docker/.env.prod.example docker/.env.prod # fill secrets from Baota .env
|
|
# docker compose -f docker/docker-compose.prod.yml --env-file docker/.env.prod up -d --build
|
|
#
|
|
# OpenResty on host proxies https://api.synaglobal.vip → 127.0.0.1:8600
|
|
|
|
name: nexus-prod
|
|
|
|
services:
|
|
mysql:
|
|
image: mysql:8.4
|
|
restart: unless-stopped
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:?set MYSQL_ROOT_PASSWORD}
|
|
MYSQL_DATABASE: nexus
|
|
MYSQL_USER: nexus
|
|
MYSQL_PASSWORD: ${MYSQL_PASSWORD:?set MYSQL_PASSWORD}
|
|
volumes:
|
|
- mysql-data:/var/lib/mysql
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p\"$$MYSQL_ROOT_PASSWORD\" || exit 1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 8
|
|
start_period: 40s
|
|
networks:
|
|
- nexus-internal
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
command: ["redis-server", "--appendonly", "yes"]
|
|
volumes:
|
|
- redis-data:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 8
|
|
networks:
|
|
- nexus-internal
|
|
|
|
nexus:
|
|
build:
|
|
context: ..
|
|
dockerfile: Dockerfile.prod
|
|
restart: unless-stopped
|
|
depends_on:
|
|
mysql:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
ports:
|
|
- "127.0.0.1:${NEXUS_PUBLISH_PORT:-8600}:8600"
|
|
environment:
|
|
MYSQL_HOST: mysql
|
|
MYSQL_PORT: "3306"
|
|
REDIS_HOST: redis
|
|
REDIS_PORT: "6379"
|
|
NEXUS_PERSIST_DIR: /var/lib/nexus
|
|
NEXUS_DOCKER_WRITE_ENV: "1"
|
|
NEXUS_HOST: "0.0.0.0"
|
|
NEXUS_PORT: "8600"
|
|
NEXUS_DEPLOY_PATH: /app
|
|
NEXUS_DATABASE_URL: mysql+aiomysql://nexus:${MYSQL_PASSWORD}@mysql:3306/nexus
|
|
NEXUS_REDIS_URL: redis://redis:6379/0
|
|
NEXUS_CORS_ORIGINS: ${NEXUS_CORS_ORIGINS:?set NEXUS_CORS_ORIGINS}
|
|
NEXUS_SECRET_KEY: ${NEXUS_SECRET_KEY:?set NEXUS_SECRET_KEY}
|
|
NEXUS_API_KEY: ${NEXUS_API_KEY:?set NEXUS_API_KEY}
|
|
NEXUS_ENCRYPTION_KEY: ${NEXUS_ENCRYPTION_KEY:-}
|
|
NEXUS_API_BASE_URL: ${NEXUS_API_BASE_URL:?set NEXUS_API_BASE_URL}
|
|
volumes:
|
|
- nexus-state:/var/lib/nexus
|
|
- nexus-web-data:/app/web/data
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-sf", "http://127.0.0.1:8600/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 90s
|
|
networks:
|
|
- nexus-internal
|
|
|
|
networks:
|
|
nexus-internal:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
mysql-data:
|
|
redis-data:
|
|
nexus-state:
|
|
nexus-web-data:
|