as-daycard-openapi/docker-compose.yml

version: "3.8"

services:
  daycard-openapi:
    build: .
    image: daycard-openapi:latest
    container_name: daycard-openapi
    ports:
      - "8084:8084"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      - SPRING_PROFILES_ACTIVE=prod
      - SERVER_PORT=8084
      - TZ=Asia/Shanghai
      - DB_URL=jdbc:mysql://host.docker.internal:3306/jstopenapi?useUnicode=true&characterEncoding=UTF-8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
      - DB_USERNAME=jstopenapi
      - DB_PASSWORD=MAe8pALGWjE6jCwi
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=AsRedis2026!Safe
      - REDIS_OPEN=true
      - JWT_SECRET=2F064BA10037477FBB3A1BF9D508AE96
      - JWT_EXPIRE=604800
      - API_SIGN_SECRET=5F2A2DD8BFBA4DA1B87EFBB405671B3D
      - DAYCARD_ORDER_TIMEOUT=15
      - DAYCARD_VALID_HOURS=24
      - WECHAT_PAY_APP_ID=
      - WECHAT_PAY_MCH_ID=
      - WECHAT_PAY_API_V3_KEY=
      - WECHAT_PAY_CERT_SERIAL_NO=
      - WECHAT_PAY_PRIVATE_KEY_PATH=
      - WECHAT_PAY_NOTIFY_URL=
    depends_on:
      - redis
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    container_name: daycard-redis
    command: redis-server --requirepass AsRedis2026!Safe --replicaof no one
    # 不映射端口到宿主机，仅在 docker 内网访问，防止公网未授权访问
    restart: unless-stopped