5304449de6
- V4 迁移: psks 表 (version, secret, description, is_active) - PskService: 启动导入 PAR_MEDIABOT_PSK → v1, verify 遍历所有活跃 PSK - HmacAuthInterceptor: PSK 签名优先验签，精简为 Bearer/PSK 双路径 - AdminController: GET/POST /psks + toggle 启禁 - AuthController: register/recover 改用 PskService 验证 - docker-compose.yml 新增 PAR_MEDIABOT_PSK 环境变量 mediabot 端只需: X-Signature = HMAC(PSK, 'email:ts')
34 lines
1.0 KiB
YAML
34 lines
1.0 KiB
YAML
version: '3.8'
|
|
|
|
services:
|
|
app:
|
|
image: 192.168.31.253/yescent/par:latest
|
|
container_name: par-server
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${APP_PORT:-9012}:8080"
|
|
volumes:
|
|
- ${DATA_ROOT:-./data}/static/configs:/app/static/configs
|
|
- ${DATA_ROOT:-./data}/static/admin:/app/static/admin
|
|
- ${LOG_ROOT:-./logs}:/app/logs
|
|
environment:
|
|
TZ: "Asia/Shanghai"
|
|
JAVA_OPTS: "-Xms256m -Xmx512m"
|
|
MYSQL_HOST: "${MYSQL_HOST:-host.docker.internal}"
|
|
MYSQL_PORT: "${MYSQL_PORT:-3306}"
|
|
MYSQL_DB: "${MYSQL_DB:-par_registry}"
|
|
MYSQL_USER: "${MYSQL_USER:-root}"
|
|
MYSQL_PASSWORD: "${MYSQL_PASSWORD:-root}"
|
|
HMAC_SECRET: "${HMAC_SECRET:-}"
|
|
PAR_MEDIABOT_PSK: "${PAR_MEDIABOT_PSK:-}"
|
|
PAR_STATIC_PATH: "/app/static"
|
|
PAR_ADMIN_PATH: "/app/static/admin"
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://localhost:8080/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 60s
|