Files
autoclip/docker-compose.yml
周小舟andClaude Opus 5.5 1267e2b1a9 fix(security): 其他网页不能再读取本地后端的 API Key 或发起写请求
CORS 由 * + credentials 收紧为 AutoClip 自家来源;带 Origin 的写请求必须同源或在白名单内,
表单/multipart 简单请求也会被拦;桌面模式只接受本机 Host,防 DNS 重绑定。
调试路由默认不挂载,web 入口默认只听 127.0.0.1。Docker 局域网访问用 AUTOCLIP_ALLOWED_ORIGINS。

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-09-29 15:50:40 +08:00

156 lines
5.0 KiB
YAML

services:
# Redis服务
redis:
image: redis:7-alpine
container_name: autoclip-redis
restart: unless-stopped
ports:
- "6379:6379"
volumes:
- redis_data:/data
command: redis-server --appendonly yes
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5
# 主应用服务
autoclip:
build:
context: .
dockerfile: Dockerfile
# 四个服务共用同一个镜像;统一 image 名后只需 build 一次
image: autoclip:local
container_name: autoclip-app
restart: unless-stopped
ports:
- "8000:8000" # 后端API
- "3000:3000" # 前端界面
volumes:
- ./data:/app/data
- ./logs:/app/logs
- ./uploads:/app/uploads
environment:
- REDIS_URL=redis://redis:6379/0
- DATABASE_URL=sqlite:///./data/autoclip.db
- ENVIRONMENT=production
- DEBUG=false
- LOG_LEVEL=INFO
# LLM 配置从宿主机 .env / shell 透传(compose 会自动读项目根目录的 .env 做变量替换)。
# 没有这一段时 DOCKER.md 里让用户填的 API_DASHSCOPE_API_KEY 根本进不了容器。
- LLM_PROVIDER=${LLM_PROVIDER:-dashscope}
- API_MODEL_NAME=${API_MODEL_NAME:-qwen-plus}
- API_DASHSCOPE_API_KEY=${API_DASHSCOPE_API_KEY:-}
- API_OPENAI_API_KEY=${API_OPENAI_API_KEY:-}
- OPENAI_BASE_URL=${OPENAI_BASE_URL:-}
- DASHSCOPE_BASE_URL=${DASHSCOPE_BASE_URL:-}
- API_GEMINI_API_KEY=${API_GEMINI_API_KEY:-}
- API_SILICONFLOW_API_KEY=${API_SILICONFLOW_API_KEY:-}
- UPLOAD_POST_API_KEY=${UPLOAD_POST_API_KEY:-}
- AUTOCLIP_ALLOWED_ORIGINS=${AUTOCLIP_ALLOWED_ORIGINS:-}
- UPLOAD_POST_USER=${UPLOAD_POST_USER:-}
- AUTOCLIP_YT_SUBTITLE_LANGS=${AUTOCLIP_YT_SUBTITLE_LANGS:-}
depends_on:
redis:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8000/api/v1/health/"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
# Celery Worker服务
celery-worker:
build:
context: .
dockerfile: Dockerfile
image: autoclip:local
container_name: autoclip-celery-worker
restart: unless-stopped
volumes:
- ./data:/app/data
- ./logs:/app/logs
- ./uploads:/app/uploads
environment:
- REDIS_URL=redis://redis:6379/0
- DATABASE_URL=sqlite:///./data/autoclip.db
- ENVIRONMENT=production
- DEBUG=false
- LOG_LEVEL=INFO
# LLM 配置从宿主机 .env / shell 透传(compose 会自动读项目根目录的 .env 做变量替换)。
# 没有这一段时 DOCKER.md 里让用户填的 API_DASHSCOPE_API_KEY 根本进不了容器。
- LLM_PROVIDER=${LLM_PROVIDER:-dashscope}
- API_MODEL_NAME=${API_MODEL_NAME:-qwen-plus}
- API_DASHSCOPE_API_KEY=${API_DASHSCOPE_API_KEY:-}
- API_OPENAI_API_KEY=${API_OPENAI_API_KEY:-}
- OPENAI_BASE_URL=${OPENAI_BASE_URL:-}
- DASHSCOPE_BASE_URL=${DASHSCOPE_BASE_URL:-}
- API_GEMINI_API_KEY=${API_GEMINI_API_KEY:-}
- API_SILICONFLOW_API_KEY=${API_SILICONFLOW_API_KEY:-}
- UPLOAD_POST_API_KEY=${UPLOAD_POST_API_KEY:-}
- UPLOAD_POST_USER=${UPLOAD_POST_USER:-}
- AUTOCLIP_YT_SUBTITLE_LANGS=${AUTOCLIP_YT_SUBTITLE_LANGS:-}
# 任务通过 celery_app.task_routes 被路由到专用队列;不带 -Q 的 worker 只消费默认的
# `celery` 队列,流水线任务会一直堆在 `processing` 里没人执行,项目永远卡在处理中。
command: celery -A backend.core.celery_app worker --loglevel=info --concurrency=2 -Q celery,processing,video,notification,upload
depends_on:
redis:
condition: service_healthy
autoclip:
condition: service_healthy
# Celery Beat调度器
celery-beat:
build:
context: .
dockerfile: Dockerfile
image: autoclip:local
container_name: autoclip-celery-beat
restart: unless-stopped
volumes:
- ./data:/app/data
- ./logs:/app/logs
environment:
- REDIS_URL=redis://redis:6379/0
- DATABASE_URL=sqlite:///./data/autoclip.db
- ENVIRONMENT=production
- DEBUG=false
- LOG_LEVEL=INFO
command: celery -A backend.core.celery_app beat --loglevel=info
depends_on:
redis:
condition: service_healthy
autoclip:
condition: service_healthy
# Flower监控服务(可选)
flower:
build:
context: .
dockerfile: Dockerfile
image: autoclip:local
container_name: autoclip-flower
restart: unless-stopped
ports:
- "5555:5555"
environment:
- REDIS_URL=redis://redis:6379/0
- DATABASE_URL=sqlite:///./data/autoclip.db
- ENVIRONMENT=production
command: celery -A backend.core.celery_app flower --port=5555
depends_on:
redis:
condition: service_healthy
celery-worker:
condition: service_started
volumes:
redis_data:
driver: local
networks:
default:
name: autoclip-network