部署与验收

services:
  mysql:
    image: mysql:8.0
    container_name: nengtan-mysql
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: change-me
      MYSQL_DATABASE: ry-vue
      TZ: Asia/Shanghai
    command:
      - --character-set-server=utf8mb4
      - --collation-server=utf8mb4_general_ci
      - --default-time-zone=+08:00
    ports:
      - "3306:3306"
    volumes:
      - mysql-data:/var/lib/mysql
      - ./sql:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 10s
      timeout: 5s
      retries: 10

  redis:
    image: redis:7.2
    container_name: nengtan-redis
    restart: always
    command: ["redis-server", "--requirepass", "change-me", "--appendonly", "yes"]
    ports:
      - "6379:6379"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "change-me", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10

  tdengine:
    image: tdengine/tdengine:3.3.0.0
    container_name: nengtan-tdengine
    restart: always
    environment:
      TAOS_FQDN: tdengine
      TZ: Asia/Shanghai
    ports:
      - "6030:6030"
      - "6041:6041"
    volumes:
      - tdengine-data:/var/lib/taos
      - tdengine-log:/var/log/taos

  emqx:
    image: emqx/emqx:5.8.0
    container_name: nengtan-emqx
    restart: always
    environment:
      EMQX_DASHBOARD__DEFAULT_PASSWORD: change-me
      TZ: Asia/Shanghai
    ports:
      - "1883:1883"
      - "8083:8083"
      - "8883:8883"
      - "18083:18083"
    volumes:
      - emqx-data:/opt/emqx/data
      - emqx-log:/opt/emqx/log

  minio:
    image: minio/minio:latest
    container_name: nengtan-minio
    restart: always
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: change-me
      MINIO_ROOT_PASSWORD: change-me-too
    ports:
      - "9000:9000"
      - "9001:9001"
    volumes:
      - minio-data:/data

  nginx:
    image: nginx:1.26
    container_name: nengtan-nginx
    restart: always
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - ./nginx/cert:/etc/nginx/cert:ro
      - ./dist:/usr/share/nginx/html:ro
      - nginx-log:/var/log/nginx

volumes:
  mysql-data:
  redis-data:
  tdengine-data:
  tdengine-log:
  emqx-data:
  emqx-log:
  minio-data:
  nginx-log:

spring:
  datasource:
    druid:
      master:
        url: jdbc:mysql://127.0.0.1:3306/ry-vue?useUnicode=true&characterEncoding=utf8&zeroDateTimeBehavior=convertToNull&useSSL=false&serverTimezone=Asia/Shanghai
        username: ry
        password: ${DB_PASSWORD}
  redis:
    host: 127.0.0.1
    port: 6379
    password: ${REDIS_PASSWORD}
    database: 0

tdengine:
  url: jdbc:TAOS://127.0.0.1:6030/energy?charset=utf8
  username: root
  password: ${TDENGINE_PASSWORD}

mqtt:
  broker: tcp://127.0.0.1:1883
  username: collector
  password: ${MQTT_PASSWORD}

ruoyi:
  profile: /data/upload

[Unit]
Description=Nengtan RuoYi Application
After=network.target

[Service]
Type=simple
User=nengtan
WorkingDirectory=/opt/nengtan
EnvironmentFile=/opt/nengtan/env
ExecStart=/usr/bin/java -Xms2g -Xmx4g -XX:+UseG1GC \
  -Duser.timezone=Asia/Shanghai \
  -jar /opt/nengtan/ruoyi-admin.jar --spring.profiles.active=prod
Restart=always
RestartSec=10
StandardOutput=append:/var/log/nengtan/app.log
StandardError=append:/var/log/nengtan/app.log

[Install]
WantedBy=multi-user.target

server {
    listen 80;
    server_name energy.example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    http2 on;
    server_name energy.example.com;

    ssl_certificate     /etc/nginx/cert/fullchain.pem;
    ssl_certificate_key /etc/nginx/cert/privkey.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;

    root  /usr/share/nginx/html;
    index index.html;

    gzip on;
    gzip_types text/plain text/css application/json application/javascript;
    gzip_min_length 1024;

    location / {
        try_files $uri $uri/ /index.html;
    }

    location /prod-api/ {
        # Nginx 在容器里，后端在宿主机；用 host.docker.internal 指向宿主机
        proxy_pass http://host.docker.internal:8080/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 120s;
    }

    location /prod-api/ws/ {
        proxy_pass http://host.docker.internal:8080/ws/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_read_timeout 3600s;
    }

    location ~* \.(js|css|png|jpg|jpeg|gif|svg|woff2?)$ {
        expires 30d;
        add_header Cache-Control "public, immutable";
    }
}

#!/usr/bin/env bash
set -euo pipefail
DATE=$(date +%F)
DIR=/opt/nengtan/backup/mysql
mkdir -p "$DIR"
mysqldump -uroot -p"$DB_PASSWORD" \
  --single-transaction --routines --triggers \
  ry-vue | gzip > "$DIR/ry-vue-$DATE.sql.gz"
find "$DIR" -name "*.sql.gz" -mtime +30 -delete