优化

docker-compose.yml

@@ -40,9 +40,9 @@ services:
       RUSTFS_ACCESS_KEY: ${RUSTFS_ACCESS_KEY}
       RUSTFS_SECRET_KEY: ${RUSTFS_SECRET_KEY}
       RUSTFS_TIMEOUT: ${RUSTFS_TIMEOUT:-30}
-      SECRET_KEY: ${SECRET_KEY:-change-me-in-production}
+      SECRET_KEY: ${SECRET_KEY:?SECRET_KEY 未配置：请在 .env 中设置}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
-      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-admin123}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?ADMIN_PASSWORD 未配置：请在 .env 中设置}
       ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@gemold.com}
       ADMIN_FULL_NAME: ${ADMIN_FULL_NAME:-系统管理员}
       ALGORITHM: ${ALGORITHM:-HS256}
@@ -64,6 +64,12 @@ services:
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
       LLM_TIMEOUT: ${LLM_TIMEOUT:-60}
       LLM_MAX_TOKENS: ${LLM_MAX_TOKENS:-2000}
+      AUTO_MIGRATE: ${AUTO_MIGRATE:-true}
+    # 共享卷过渡兜底（D6/D11）：主链路已改走 RustFS，本地卷仅为
+    # RustFS 异常时的本地路径回退与 HTML 产物互通保留，后续批次移除
+    volumes:
+      - uploads_data:/app/uploads
+      - html_data:/app/html_output
     restart: unless-stopped
     profiles:
       - full
@@ -89,7 +95,7 @@ services:
       RUSTFS_ACCESS_KEY: ${RUSTFS_ACCESS_KEY}
       RUSTFS_SECRET_KEY: ${RUSTFS_SECRET_KEY}
       RUSTFS_TIMEOUT: ${RUSTFS_TIMEOUT:-30}
-      SECRET_KEY: ${SECRET_KEY:-change-me-in-production}
+      SECRET_KEY: ${SECRET_KEY:?SECRET_KEY 未配置：请在 .env 中设置}
       ALGORITHM: ${ALGORITHM:-HS256}
       ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-1440}
       DEBUG: ${DEBUG:-false}
@@ -109,6 +115,10 @@ services:
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
       LLM_TIMEOUT: ${LLM_TIMEOUT:-60}
       LLM_MAX_TOKENS: ${LLM_MAX_TOKENS:-2000}
+    # 与 backend 共享本地卷（过渡兜底，见 D6/D11）：worker 下载回退与 HTML 产物写读
+    volumes:
+      - uploads_data:/app/uploads
+      - html_data:/app/html_output
     depends_on:
       - backend
     restart: unless-stopped
@@ -142,9 +152,9 @@ services:
       RUSTFS_ACCESS_KEY: ${RUSTFS_ACCESS_KEY}
       RUSTFS_SECRET_KEY: ${RUSTFS_SECRET_KEY}
       RUSTFS_TIMEOUT: ${RUSTFS_TIMEOUT:-30}
-      SECRET_KEY: ${SECRET_KEY:-change-me-in-production}
+      SECRET_KEY: ${SECRET_KEY:?SECRET_KEY 未配置：请在 .env 中设置}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
-      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-admin123}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?ADMIN_PASSWORD 未配置：请在 .env 中设置}
       ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@gemold.com}
       ADMIN_FULL_NAME: ${ADMIN_FULL_NAME:-系统管理员}
       ALGORITHM: ${ALGORITHM:-HS256}
@@ -166,6 +176,10 @@ services:
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
       LLM_TIMEOUT: ${LLM_TIMEOUT:-60}
       LLM_MAX_TOKENS: ${LLM_MAX_TOKENS:-2000}
+      AUTO_MIGRATE: ${AUTO_MIGRATE:-true}
+    volumes:
+      - uploads_data:/app/uploads
+      - html_data:/app/html_output
     restart: unless-stopped
     profiles:
       - moldinsight
@@ -191,15 +205,16 @@ services:
       REDIS_HOST: ${REDIS_HOST}
       REDIS_PORT: ${REDIS_PORT:-6379}
       REDIS_PASSWORD: ${REDIS_PASSWORD:-}
-      SECRET_KEY: ${SECRET_KEY:-change-me-in-production}
+      SECRET_KEY: ${SECRET_KEY:?SECRET_KEY 未配置：请在 .env 中设置}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
-      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-admin123}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?ADMIN_PASSWORD 未配置：请在 .env 中设置}
       ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@gemold.com}
       ADMIN_FULL_NAME: ${ADMIN_FULL_NAME:-系统管理员}
       ALGORITHM: ${ALGORITHM:-HS256}
       ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-1440}
       DEBUG: ${DEBUG:-false}
       SERVE_FRONTEND_STATIC: ${SERVE_FRONTEND_STATIC:-false}
+      AUTO_MIGRATE: ${AUTO_MIGRATE:-true}
     restart: unless-stopped
     profiles:
       - inventory
@@ -209,3 +224,7 @@ services:
 networks:
   gemold_network:
     driver: bridge
+
+volumes:
+  uploads_data:
+  html_data: