827 lines
28 KiB
YAML
827 lines
28 KiB
YAML
# =============================================================================
|
||
# WOOO TECH - Momo Pro System
|
||
# Docker Compose Configuration
|
||
# Version: 12.0
|
||
# =============================================================================
|
||
#
|
||
# 使用方式：
|
||
# 核心服務： docker-compose up -d momo-app scheduler
|
||
# 完整監控： docker-compose --profile monitoring up -d
|
||
# BI 分析： docker-compose --profile bi up -d
|
||
# 全部服務： docker-compose --profile monitoring --profile bi up -d
|
||
# 本機開發： docker-compose --profile local-dev up -d (含 Docker Nginx)
|
||
#
|
||
# CI/CD 服務 (monitoring profile):
|
||
# - Watchtower: 自動偵測 Registry 映像更新並重啟容器
|
||
# - n8n: 工作流自動化平台 (僅 UAT 環境)
|
||
#
|
||
# Docker Registry:
|
||
# - URL: registry.wooo.work (HTTPS + 認證)
|
||
# - 帳密請由部署環境的 secret / CI 變數提供，不得寫入 repo
|
||
#
|
||
# 注意事項：
|
||
# - GCP 生產環境使用 VM 原生 Nginx，不需要啟動 Docker nginx
|
||
# - VM Nginx 配置位於: /etc/nginx/sites-available/momo.conf
|
||
# - 支援域名: momo.wooo.work, mo.wooo.work, mon.wooo.work
|
||
#
|
||
# =============================================================================
|
||
|
||
version: '3.8'
|
||
|
||
services:
|
||
# ===========================================================================
|
||
# Core Services
|
||
# ===========================================================================
|
||
|
||
momo-app:
|
||
build:
|
||
context: .
|
||
dockerfile: Dockerfile
|
||
# 支援兩種模式:
|
||
# 1. 本地構建: 不設定 MOMO_IMAGE 環境變數 (使用 build 區塊)
|
||
# 2. Registry 拉取: MOMO_IMAGE=registry.wooo.work/wooo/momo-pro-system
|
||
image: ${MOMO_IMAGE:-registry.wooo.work/wooo/momo-pro-system}:${VERSION:-stable}
|
||
container_name: momo-pro-system
|
||
restart: unless-stopped
|
||
cpus: "2.0"
|
||
mem_limit: 2g
|
||
labels:
|
||
- "com.centurylinklabs.watchtower.enable=true"
|
||
ports:
|
||
- "127.0.0.1:5003:80" # 僅本地連線，透過 Nginx 反向代理（nginx 反代 5003）
|
||
# 強制使用 gunicorn 綁定 port 80 (覆蓋 Dockerfile CMD)；preload + post_fork DB pool reset 見 gunicorn.conf.py
|
||
command: ["gunicorn", "--config", "gunicorn.conf.py", "app:app"]
|
||
volumes:
|
||
# 持久化數據
|
||
- ./data:/app/data
|
||
- ./logs:/app/logs
|
||
- ./backups:/app/backups
|
||
- ./config:/app/config
|
||
# Python 程式碼 (熱更新)
|
||
- ./config.py:/app/config.py:ro
|
||
- ./app.py:/app/app.py:ro
|
||
- ./auth.py:/app/auth.py:ro
|
||
- ./docker-compose.mcp.yml:/app/docker-compose.mcp.yml:ro
|
||
- ./gunicorn.conf.py:/app/gunicorn.conf.py:ro
|
||
- ./scheduler.py:/app/scheduler.py:ro
|
||
- ./scripts:/app/scripts:ro
|
||
- ./migrations:/app/migrations:ro
|
||
- ./services:/app/services:ro
|
||
- ./routes:/app/routes:ro
|
||
- ./database:/app/database:ro
|
||
- ./utils:/app/utils:ro
|
||
- ./static:/app/static:ro
|
||
- ./web/static:/app/web/static:ro
|
||
# HTML 模板 (熱更新)
|
||
- ./templates:/app/templates:ro
|
||
- ./web/templates:/app/web/templates:ro
|
||
environment:
|
||
- FLASK_ENV=production
|
||
- PYTHONUNBUFFERED=1
|
||
- TZ=Asia/Taipei
|
||
- METABASE_URL=/metabase
|
||
- GRIST_URL=/grist
|
||
# 關閉登入驗證（開發/測試用，生產環境預設啟用登入）
|
||
- DISABLE_LOGIN=${DISABLE_LOGIN:-false}
|
||
# 資料庫設定: Docker 環境使用 PostgreSQL
|
||
- USE_POSTGRESQL=true
|
||
- POSTGRES_HOST=${POSTGRES_HOST:-postgres}
|
||
- POSTGRES_PORT=5432
|
||
- POSTGRES_USER=${POSTGRES_USER:-momo}
|
||
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
||
- POSTGRES_DB=${POSTGRES_DB:-momo_analytics}
|
||
# Ollama 主機：GCP-A → GCP-B → 111 自動備援（ADR-028）
|
||
- OLLAMA_HOST_PRIMARY=${OLLAMA_HOST_PRIMARY:-http://34.87.90.216:11434}
|
||
- OLLAMA_HOST_SECONDARY=${OLLAMA_HOST_SECONDARY:-http://34.21.145.224:11434}
|
||
- OLLAMA_HOST_FALLBACK=${OLLAMA_HOST_FALLBACK:-http://192.168.0.111:11434}
|
||
# EMBEDDING_HOST 若未設定，由 resolve_ollama_host() 自動決定（三主機級聯）
|
||
- EMBEDDING_HOST=${EMBEDDING_HOST:-}
|
||
# Gemini 只能作緊急備援；即使 .env 有 API key，預設也不得產生付費出站。
|
||
- GEMINI_API_HARD_DISABLED=${GEMINI_API_HARD_DISABLED:-true}
|
||
- GEMINI_FALLBACK_ENABLED=${GEMINI_FALLBACK_ENABLED:-false}
|
||
# PPT 視覺 QA + 線上預覽：需要容器內 LibreOffice（Dockerfile 安裝 libreoffice-impress）
|
||
- PPT_VISION_ENABLED=${PPT_VISION_ENABLED:-true}
|
||
- PPT_VISION_MODEL=${PPT_VISION_MODEL:-minicpm-v:latest}
|
||
# ADR-020: Code Review 全自動修復主開關
|
||
# 預設 true（任何 finding 一律觸發 AiderHeal），可在 .env 顯式設 false 即時切斷
|
||
- CODE_REVIEW_AUTO_FIX_ENABLED=${CODE_REVIEW_AUTO_FIX_ENABLED:-true}
|
||
env_file:
|
||
- .env
|
||
healthcheck:
|
||
test: ["CMD", "curl", "-f", "http://localhost:80/health"]
|
||
interval: 30s
|
||
timeout: 10s
|
||
retries: 3
|
||
start_period: 60s
|
||
# ADR-011: 生產主機使用獨立的 momo-db，不依賴 compose postgres
|
||
networks:
|
||
- momo-network
|
||
- momo-pro_default
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# [DEPRECATED] Docker Nginx - 已改用 VM 原生 Nginx
|
||
# GCP 生產環境現在使用 VM 上安裝的 Nginx，配置位於:
|
||
# /etc/nginx/sites-available/momo.conf
|
||
# 支援的域名:
|
||
# - momo.wooo.work / mo.wooo.work => Flask App (port 5001)
|
||
# - mon.wooo.work => Grafana (port 3000)
|
||
# 保留此服務供本機開發使用，生產環境請勿啟動
|
||
# ---------------------------------------------------------------------------
|
||
nginx:
|
||
image: nginx:alpine
|
||
container_name: momo-nginx
|
||
restart: unless-stopped
|
||
profiles:
|
||
- local-dev # 只在本機開發時使用
|
||
ports:
|
||
- "80:80"
|
||
- "443:443"
|
||
volumes:
|
||
- ./docker/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
||
- ./docker/nginx/conf.d:/etc/nginx/conf.d:ro
|
||
- ./docker/nginx/html:/usr/share/nginx/html:ro
|
||
- ./logs/nginx:/var/log/nginx
|
||
# SSL 證書 (本機使用自簽名證書)
|
||
- ./docker/nginx/ssl:/etc/letsencrypt:ro
|
||
- ./docker/certbot/conf:/etc/letsencrypt-new:ro
|
||
# Let's Encrypt ACME challenge
|
||
- ./docker/certbot/www:/var/www/certbot:ro
|
||
# 應用靜態資源
|
||
- ./static:/app/static:ro
|
||
- ./web/static:/app/web/static:ro
|
||
depends_on:
|
||
- momo-app
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# [DEPRECATED] Nginx Monitor - 已整合到主 nginx
|
||
# 監控路由現在直接在 momo-nginx 的 mon.wooo.work 配置中處理
|
||
# 保留此服務以供過渡期間使用，將於下個版本移除
|
||
# ---------------------------------------------------------------------------
|
||
nginx-monitor:
|
||
image: nginx:alpine
|
||
container_name: momo-nginx-monitor
|
||
restart: unless-stopped
|
||
profiles:
|
||
- deprecated
|
||
ports:
|
||
- "8082:80"
|
||
volumes:
|
||
- ./docker/nginx-monitor/nginx.conf:/etc/nginx/nginx.conf:ro
|
||
- ./docker/nginx-monitor/conf.d:/etc/nginx/conf.d:ro
|
||
- ./docker/nginx-monitor/html:/usr/share/nginx/html:ro
|
||
- ./logs/nginx-monitor:/var/log/nginx
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Scheduler - 排程服務 (商品看板、活動看板、Google Drive 自動匯入)
|
||
# ---------------------------------------------------------------------------
|
||
scheduler:
|
||
build:
|
||
context: .
|
||
dockerfile: Dockerfile
|
||
image: ${MOMO_IMAGE:-registry.wooo.work/wooo/momo-pro-system}:${VERSION:-stable}
|
||
container_name: momo-scheduler
|
||
restart: unless-stopped
|
||
cpus: "2.0"
|
||
mem_limit: 2g
|
||
labels:
|
||
- "com.centurylinklabs.watchtower.enable=true"
|
||
init: true # 使用 tini 作為 init 進程，自動回收僵屍進程
|
||
volumes:
|
||
- ./data:/app/data
|
||
- ./logs:/app/logs
|
||
- ./config:/app/config # Google Drive 認證檔案 (需要寫入權限以更新 token)
|
||
- ./config.py:/app/config.py:ro
|
||
- ./scheduler.py:/app/scheduler.py:ro
|
||
- ./run_scheduler.py:/app/run_scheduler.py:ro
|
||
- ./services:/app/services:ro
|
||
- ./routes:/app/routes:ro
|
||
- ./database:/app/database:ro # 資料庫模型
|
||
- ./utils:/app/utils:ro
|
||
environment:
|
||
- FLASK_ENV=production
|
||
- PYTHONUNBUFFERED=1
|
||
- TZ=Asia/Taipei
|
||
# 資料庫設定: Docker 環境使用 PostgreSQL
|
||
# H7 (2026-04-24): POSTGRES_* 改由 env_file: .env 唯一來源，移除 compose 層插值避免空值覆蓋
|
||
- USE_POSTGRESQL=true
|
||
- POSTGRES_PORT=5432
|
||
# Ollama 主機：GCP-A → GCP-B → 111 自動備援（ADR-028）
|
||
- OLLAMA_HOST_PRIMARY=${OLLAMA_HOST_PRIMARY:-http://34.87.90.216:11434}
|
||
- OLLAMA_HOST_SECONDARY=${OLLAMA_HOST_SECONDARY:-http://34.21.145.224:11434}
|
||
- OLLAMA_HOST_FALLBACK=${OLLAMA_HOST_FALLBACK:-http://192.168.0.111:11434}
|
||
- EMBEDDING_HOST=${EMBEDDING_HOST:-}
|
||
# Gemini 只能作緊急備援；即使 .env 有 API key，預設也不得產生付費出站。
|
||
- GEMINI_API_HARD_DISABLED=${GEMINI_API_HARD_DISABLED:-true}
|
||
- GEMINI_FALLBACK_ENABLED=${GEMINI_FALLBACK_ENABLED:-false}
|
||
- PPT_VISION_ENABLED=${PPT_VISION_ENABLED:-true}
|
||
- PPT_VISION_MODEL=${PPT_VISION_MODEL:-minicpm-v:latest}
|
||
env_file:
|
||
- .env
|
||
command: ["python", "run_scheduler.py"]
|
||
healthcheck:
|
||
test: ["CMD", "python3", "-c", "import sys; sys.exit(0)"]
|
||
interval: 60s
|
||
timeout: 10s
|
||
retries: 3
|
||
start_period: 30s
|
||
depends_on:
|
||
- momo-app
|
||
# ADR-011: postgres 移除（生產用 momo-db）
|
||
networks:
|
||
- momo-network
|
||
- momo-pro_default
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Telegram Bot - 互動指令 + 每日 09:00 推播
|
||
# ---------------------------------------------------------------------------
|
||
telegram-bot:
|
||
build:
|
||
context: .
|
||
dockerfile: Dockerfile
|
||
image: ${MOMO_IMAGE:-registry.wooo.work/wooo/momo-pro-system}:${VERSION:-stable}
|
||
container_name: momo-telegram-bot
|
||
restart: unless-stopped
|
||
cpus: "0.5"
|
||
mem_limit: 512m
|
||
labels:
|
||
- "com.centurylinklabs.watchtower.enable=true"
|
||
init: true
|
||
volumes:
|
||
- ./data:/app/data
|
||
- ./logs:/app/logs
|
||
- ./config:/app/config
|
||
- ./config.py:/app/config.py:ro
|
||
- ./run_telegram_bot.py:/app/run_telegram_bot.py:ro
|
||
- ./services:/app/services:ro
|
||
- ./routes:/app/routes:ro
|
||
- ./database:/app/database:ro
|
||
- ./utils:/app/utils:ro
|
||
environment:
|
||
- FLASK_ENV=production
|
||
- PYTHONUNBUFFERED=1
|
||
- TZ=Asia/Taipei
|
||
# H7 (2026-04-24): POSTGRES_* 改由 env_file: .env 唯一來源，移除 compose 層插值避免空值覆蓋
|
||
- USE_POSTGRESQL=true
|
||
- POSTGRES_PORT=5432
|
||
# Ollama 主機：GCP-A → GCP-B → 111 自動備援（ADR-028）
|
||
- OLLAMA_HOST_PRIMARY=${OLLAMA_HOST_PRIMARY:-http://34.87.90.216:11434}
|
||
- OLLAMA_HOST_SECONDARY=${OLLAMA_HOST_SECONDARY:-http://34.21.145.224:11434}
|
||
- OLLAMA_HOST_FALLBACK=${OLLAMA_HOST_FALLBACK:-http://192.168.0.111:11434}
|
||
- EMBEDDING_HOST=${EMBEDDING_HOST:-}
|
||
# Gemini 只能作緊急備援；即使 .env 有 API key，預設也不得產生付費出站。
|
||
- GEMINI_API_HARD_DISABLED=${GEMINI_API_HARD_DISABLED:-true}
|
||
- GEMINI_FALLBACK_ENABLED=${GEMINI_FALLBACK_ENABLED:-false}
|
||
env_file:
|
||
- .env
|
||
command: ["python", "run_telegram_bot.py"]
|
||
healthcheck:
|
||
test: ["CMD", "python3", "-c", "import sys; sys.exit(0)"]
|
||
interval: 60s
|
||
timeout: 10s
|
||
retries: 3
|
||
start_period: 30s
|
||
# ADR-011: postgres depends_on 移除（生產用 momo-db）
|
||
networks:
|
||
- momo-network
|
||
- momo-pro_default
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ===========================================================================
|
||
# Monitoring Services (使用 --profile monitoring 啟用)
|
||
# ===========================================================================
|
||
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Prometheus - 指標收集與儲存
|
||
# ---------------------------------------------------------------------------
|
||
prometheus:
|
||
image: prom/prometheus:v2.47.0
|
||
container_name: momo-prometheus
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:9090:9090"
|
||
volumes:
|
||
- ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
|
||
- ./docker/prometheus/alert_rules.yml:/etc/prometheus/alert_rules.yml:ro
|
||
- prometheus-data:/prometheus
|
||
command:
|
||
- '--config.file=/etc/prometheus/prometheus.yml'
|
||
- '--storage.tsdb.path=/prometheus'
|
||
- '--storage.tsdb.retention.time=15d'
|
||
- '--web.console.libraries=/usr/share/prometheus/console_libraries'
|
||
- '--web.console.templates=/usr/share/prometheus/consoles'
|
||
- '--web.enable-lifecycle'
|
||
- '--web.external-url=https://mon.wooo.work/prometheus/'
|
||
- '--web.route-prefix=/'
|
||
depends_on:
|
||
- alertmanager
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Alertmanager - 告警管理
|
||
# ---------------------------------------------------------------------------
|
||
alertmanager:
|
||
image: prom/alertmanager:v0.26.0
|
||
container_name: momo-alertmanager
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "9093:9093"
|
||
volumes:
|
||
- ./docker/alertmanager/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
|
||
- alertmanager-data:/alertmanager
|
||
command:
|
||
- '--config.file=/etc/alertmanager/alertmanager.yml'
|
||
- '--storage.path=/alertmanager'
|
||
- '--web.external-url=https://mon.wooo.work/alertmanager/'
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Node Exporter - 主機指標（CPU, Memory, Disk, Network）
|
||
# ---------------------------------------------------------------------------
|
||
node-exporter:
|
||
image: prom/node-exporter:v1.6.1
|
||
container_name: momo-node-exporter
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:9100:9100" # 僅本地連線，Node Exporter 會洩漏硬體資訊
|
||
volumes:
|
||
- /proc:/host/proc:ro
|
||
- /sys:/host/sys:ro
|
||
- /:/rootfs:ro
|
||
command:
|
||
- '--path.procfs=/host/proc'
|
||
- '--path.sysfs=/host/sys'
|
||
- '--path.rootfs=/rootfs'
|
||
- '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Blackbox Exporter - 網站/端口/網路探測
|
||
# ---------------------------------------------------------------------------
|
||
blackbox-exporter:
|
||
image: prom/blackbox-exporter:v0.24.0
|
||
container_name: momo-blackbox-exporter
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "9115:9115"
|
||
volumes:
|
||
- ./docker/blackbox/blackbox.yml:/etc/blackbox_exporter/config.yml:ro
|
||
command:
|
||
- '--config.file=/etc/blackbox_exporter/config.yml'
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# cAdvisor - 容器指標監控
|
||
# ---------------------------------------------------------------------------
|
||
cadvisor:
|
||
image: gcr.io/cadvisor/cadvisor:v0.47.0
|
||
container_name: momo-cadvisor
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:8080:8080"
|
||
volumes:
|
||
- /:/rootfs:ro
|
||
- /var/run:/var/run:ro
|
||
- /sys:/sys:ro
|
||
- /var/lib/docker/:/var/lib/docker:ro
|
||
- /dev/disk/:/dev/disk:ro
|
||
privileged: true
|
||
devices:
|
||
- /dev/kmsg
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Loki - 日誌聚合
|
||
# ---------------------------------------------------------------------------
|
||
loki:
|
||
image: grafana/loki:2.9.0
|
||
container_name: momo-loki
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "3100:3100"
|
||
volumes:
|
||
- ./docker/loki/loki-config.yaml:/etc/loki/local-config.yaml:ro
|
||
- loki-data:/loki
|
||
command: -config.file=/etc/loki/local-config.yaml
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Promtail - 日誌收集
|
||
# ---------------------------------------------------------------------------
|
||
promtail:
|
||
image: grafana/promtail:2.9.0
|
||
container_name: momo-promtail
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
volumes:
|
||
- ./docker/promtail/promtail-config.yaml:/etc/promtail/config.yaml:ro
|
||
- ./logs:/var/log/app:ro
|
||
- ./logs/nginx:/var/log/nginx:ro
|
||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||
command: -config.file=/etc/promtail/config.yaml
|
||
depends_on:
|
||
- loki
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Grafana - 視覺化儀表板
|
||
# ---------------------------------------------------------------------------
|
||
grafana:
|
||
image: grafana/grafana:10.2.0
|
||
container_name: momo-grafana
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:3000:3000"
|
||
volumes:
|
||
- grafana-data:/var/lib/grafana
|
||
- ./docker/grafana/provisioning:/etc/grafana/provisioning:ro
|
||
environment:
|
||
- GF_SECURITY_ADMIN_USER=admin
|
||
- GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
|
||
- GF_USERS_ALLOW_SIGN_UP=false
|
||
- GF_SERVER_ROOT_URL=https://mon.wooo.work/grafana/
|
||
- GF_SERVER_SERVE_FROM_SUB_PATH=true
|
||
- GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
|
||
depends_on:
|
||
- prometheus
|
||
- loki
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# [DEPRECATED] SQLite Web - 已停用 (改用 PostgreSQL + pgAdmin)
|
||
# ---------------------------------------------------------------------------
|
||
# sqlite-web:
|
||
# profiles:
|
||
# - deprecated
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# PostgreSQL Exporter - PostgreSQL 指標監控
|
||
# ---------------------------------------------------------------------------
|
||
postgres-exporter:
|
||
image: prometheuscommunity/postgres-exporter:v0.15.0
|
||
container_name: momo-postgres-exporter
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "9187:9187"
|
||
environment:
|
||
- DATA_SOURCE_NAME=postgresql://${POSTGRES_USER:-momo}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-momo_analytics}?sslmode=disable
|
||
depends_on:
|
||
- postgres
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# pgAdmin - PostgreSQL 管理介面 (取代 SQLite Web)
|
||
# ---------------------------------------------------------------------------
|
||
pgadmin:
|
||
image: dpage/pgadmin4:latest
|
||
container_name: momo-pgadmin
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:8088:80"
|
||
environment:
|
||
- PGADMIN_DEFAULT_EMAIL=${PGADMIN_EMAIL:-admin@wooo.work}
|
||
- PGADMIN_DEFAULT_PASSWORD=${PGADMIN_PASSWORD}
|
||
- PGADMIN_CONFIG_SERVER_MODE=False
|
||
volumes:
|
||
- pgadmin-data:/var/lib/pgadmin
|
||
depends_on:
|
||
- postgres
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Portainer - Docker 管理介面
|
||
# ---------------------------------------------------------------------------
|
||
portainer:
|
||
image: portainer/portainer-ce:latest
|
||
container_name: momo-portainer
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:9000:9000" # 僅本地連線，透過 SSH Tunnel 存取
|
||
- "127.0.0.1:9443:9443" # 僅本地連線
|
||
volumes:
|
||
- /var/run/docker.sock:/var/run/docker.sock
|
||
- portainer-data:/data
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Watchtower - 自動更新容器 (偵測 Registry 映像更新)
|
||
# ---------------------------------------------------------------------------
|
||
watchtower:
|
||
image: containrrr/watchtower:latest
|
||
container_name: momo-watchtower
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
volumes:
|
||
- /var/run/docker.sock:/var/run/docker.sock
|
||
# Registry 認證: 掛載 Docker config 讓 Watchtower 可以從 Registry 拉取映像
|
||
- /home/wooo/.docker/config.json:/config.json:ro
|
||
environment:
|
||
- WATCHTOWER_CLEANUP=true
|
||
- WATCHTOWER_POLL_INTERVAL=30 # 每 30 秒檢查一次（近即時更新）
|
||
- WATCHTOWER_INCLUDE_STOPPED=false
|
||
- WATCHTOWER_LABEL_ENABLE=true
|
||
- TZ=Asia/Taipei
|
||
- DOCKER_API_VERSION=1.44
|
||
command: --label-enable
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# n8n - Workflow Automation (CI/CD notifications, webhooks)
|
||
# UAT only: http://192.168.0.110:5678
|
||
# ---------------------------------------------------------------------------
|
||
n8n:
|
||
image: n8nio/n8n:latest
|
||
container_name: momo-n8n
|
||
restart: unless-stopped
|
||
profiles:
|
||
- monitoring
|
||
ports:
|
||
- "127.0.0.1:5678:5678"
|
||
volumes:
|
||
- n8n-data:/home/node/.n8n
|
||
environment:
|
||
- N8N_HOST=${N8N_HOST:-192.168.0.110}
|
||
- N8N_PORT=5678
|
||
- N8N_PROTOCOL=${N8N_PROTOCOL:-http}
|
||
- WEBHOOK_URL=${N8N_WEBHOOK_BASE_URL:-http://192.168.0.110:5678/}
|
||
- GENERIC_TIMEZONE=Asia/Taipei
|
||
- TZ=Asia/Taipei
|
||
- N8N_SECURE_COOKIE=false
|
||
- N8N_BASIC_AUTH_ACTIVE=true
|
||
- N8N_BASIC_AUTH_USER=${N8N_USER:-admin}
|
||
- N8N_BASIC_AUTH_PASSWORD=${N8N_PASSWORD}
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ===========================================================================
|
||
# Database Services (核心服務)
|
||
# ===========================================================================
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# PostgreSQL - 主要資料庫 (取代 SQLite)
|
||
# ---------------------------------------------------------------------------
|
||
postgres:
|
||
image: postgres:15-alpine
|
||
container_name: momo-postgres
|
||
restart: unless-stopped
|
||
cpus: "2.0"
|
||
mem_limit: 4g
|
||
# ADR-011: 生產主機使用獨立的 momo-db（手動 docker run，非 compose 管理）
|
||
# 此 service 僅供本地開發 / 一次性 migration 使用，預設不啟動。
|
||
# 啟用方式: docker compose --profile bundled-db up -d postgres
|
||
profiles:
|
||
- bundled-db
|
||
ports:
|
||
- "127.0.0.1:5432:5432" # 僅本地連線，防止資料庫暴露
|
||
volumes:
|
||
- postgres-data:/var/lib/postgresql/data
|
||
- ./docker/postgres/init:/docker-entrypoint-initdb.d:ro
|
||
- ./docker/postgres/postgresql.conf:/etc/postgresql/postgresql.conf:ro
|
||
environment:
|
||
- POSTGRES_USER=${POSTGRES_USER:-momo}
|
||
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
||
- POSTGRES_DB=${POSTGRES_DB:-momo_analytics}
|
||
- TZ=Asia/Taipei
|
||
command: postgres -c config_file=/etc/postgresql/postgresql.conf
|
||
# PostgreSQL 效能優化參數 (8GB RAM 伺服器)
|
||
# - shared_buffers=2GB (25% RAM)
|
||
# - work_mem=64MB (大型查詢排序)
|
||
# - effective_cache_size=6GB (75% RAM)
|
||
# - max_parallel_workers_per_gather=2 (並行查詢)
|
||
healthcheck:
|
||
test: ["CMD-SHELL", "pg_isready -U momo -d momo_analytics"]
|
||
interval: 10s
|
||
timeout: 5s
|
||
retries: 5
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Metabase - 自定義圖表 BI 平台
|
||
# ---------------------------------------------------------------------------
|
||
metabase:
|
||
image: metabase/metabase:v0.48.6
|
||
container_name: momo-metabase
|
||
restart: unless-stopped
|
||
profiles:
|
||
- bi
|
||
ports:
|
||
- "3001:3000"
|
||
volumes:
|
||
- metabase-data:/metabase-data
|
||
environment:
|
||
- MB_DB_TYPE=postgres
|
||
- MB_DB_DBNAME=metabase
|
||
- MB_DB_PORT=5432
|
||
- MB_DB_USER=${POSTGRES_USER:-momo}
|
||
- MB_DB_PASS=${POSTGRES_PASSWORD}
|
||
- MB_DB_HOST=postgres
|
||
- JAVA_TIMEZONE=Asia/Taipei
|
||
- MB_SITE_NAME=WOOO Analytics
|
||
- MB_SITE_URL=${MB_SITE_URL:-https://mo.wooo.work/metabase}
|
||
depends_on:
|
||
postgres:
|
||
condition: service_healthy
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Grist - 開源電子表格/資料庫平台
|
||
# ---------------------------------------------------------------------------
|
||
grist:
|
||
image: gristlabs/grist:latest
|
||
container_name: momo-grist
|
||
restart: unless-stopped
|
||
profiles:
|
||
- bi
|
||
ports:
|
||
- "8484:8484"
|
||
volumes:
|
||
- grist-data:/persist
|
||
environment:
|
||
- GRIST_DEFAULT_EMAIL=${GRIST_ADMIN_EMAIL:-admin@wooo.work}
|
||
- GRIST_SUPPORT_ANON=true
|
||
- GRIST_FORCE_LOGIN=false
|
||
- GRIST_HIDE_UI_ELEMENTS=helpCenter,billing,templates,multiSite,multiAccounts
|
||
- APP_HOME_URL=${GRIST_APP_HOME_URL:-https://mo.wooo.work/grist}
|
||
- TZ=Asia/Taipei
|
||
networks:
|
||
- momo-network
|
||
logging:
|
||
driver: "json-file"
|
||
options:
|
||
max-size: "10m"
|
||
max-file: "3"
|
||
|
||
# =============================================================================
|
||
# Networks
|
||
# =============================================================================
|
||
networks:
|
||
momo-network:
|
||
driver: bridge
|
||
name: momo-network
|
||
momo-pro_default:
|
||
external: true
|
||
|
||
# =============================================================================
|
||
# Volumes
|
||
# =============================================================================
|
||
volumes:
|
||
prometheus-data:
|
||
name: momo-prometheus-data
|
||
alertmanager-data:
|
||
name: momo-alertmanager-data
|
||
loki-data:
|
||
name: momo-loki-data
|
||
grafana-data:
|
||
name: momo-grafana-data
|
||
portainer-data:
|
||
name: momo-portainer-data
|
||
postgres-data:
|
||
name: momo-postgres-data
|
||
pgadmin-data:
|
||
name: momo-pgadmin-data
|
||
metabase-data:
|
||
name: momo-metabase-data
|
||
grist-data:
|
||
name: momo-grist-data
|
||
n8n-data:
|
||
name: momo-n8n-data
|