f55eb001ae
- docker-compose.yml: Redis去掉端口公网映射，加密码和强制单机模式，修复未授权访问被攻击为从节点的问题 - 新增 ApiJstCallLogController（/manage/jst/call-log/list）橘视厅调用日志查询接口 - 新增 AuditLogController（/manage/audit-log/list）审计日志查询接口 - 新增 Redis安全防护备忘.md 文档
44 lines
1.4 KiB
YAML
44 lines
1.4 KiB
YAML
version: "3.8"
|
|
|
|
services:
|
|
daycard-openapi:
|
|
build: .
|
|
image: daycard-openapi:latest
|
|
container_name: daycard-openapi
|
|
ports:
|
|
- "8084:8084"
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
environment:
|
|
- SPRING_PROFILES_ACTIVE=prod
|
|
- SERVER_PORT=8084
|
|
- TZ=Asia/Shanghai
|
|
- DB_URL=jdbc:mysql://host.docker.internal:3306/jstopenapi?useUnicode=true&characterEncoding=UTF-8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
|
|
- DB_USERNAME=jstopenapi
|
|
- DB_PASSWORD=MAe8pALGWjE6jCwi
|
|
- REDIS_HOST=redis
|
|
- REDIS_PORT=6379
|
|
- REDIS_PASSWORD=AsRedis2026!Safe
|
|
- REDIS_OPEN=true
|
|
- JWT_SECRET=2F064BA10037477FBB3A1BF9D508AE96
|
|
- JWT_EXPIRE=604800
|
|
- API_SIGN_SECRET=5F2A2DD8BFBA4DA1B87EFBB405671B3D
|
|
- DAYCARD_ORDER_TIMEOUT=15
|
|
- DAYCARD_VALID_HOURS=24
|
|
- WECHAT_PAY_APP_ID=
|
|
- WECHAT_PAY_MCH_ID=
|
|
- WECHAT_PAY_API_V3_KEY=
|
|
- WECHAT_PAY_CERT_SERIAL_NO=
|
|
- WECHAT_PAY_PRIVATE_KEY_PATH=
|
|
- WECHAT_PAY_NOTIFY_URL=
|
|
depends_on:
|
|
- redis
|
|
restart: unless-stopped
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: daycard-redis
|
|
command: redis-server --requirepass AsRedis2026!Safe --replicaof no one
|
|
# 不映射端口到宿主机，仅在 docker 内网访问，防止公网未授权访问
|
|
restart: unless-stopped
|