geMoldInsight/docker-compose.yml

# geMoldInsight — unified 模式（默认入口）
#
# 一键启动：
#   docker compose up -d                          # 推荐（默认走本文件）
# 等价命令（保留 profile 双保险，AGENTS.md 兼容性需要）：
#   docker compose --profile full up -d           # frontend + backend + celery
#   docker compose --profile unified up -d        # backend + celery（不带前端）
#   docker compose --profile frontend up -d       # 只起前端
#
# 其他模式（换文件名）：
#   docker compose -f docker-compose.moldinsight.yml up -d
#   docker compose -f docker-compose.inventory.yml up -d
#
# 服务清单：frontend + backend(unified 入口) + moldinsight-celery
# 镜像构建顺序由 deploy/build.sh 保证（base → backend → frontend，celery 复用 backend）

# ---------------------------------------------------------------
# 公共环境变量（moldinsight 家族 backend/celery/moldinsight 共用）
# 通过 anchor 在本文件内复用，避免 environment 块重复
# ---------------------------------------------------------------
x-base-env: &base_env
  DB_HOST: ${DB_HOST}
  DB_PORT: ${DB_PORT:-5432}
  DB_NAME: ${DB_NAME:-moldinsight}
  DB_USER: ${DB_USER}
  DB_PASSWORD: ${DB_PASSWORD}
  REDIS_HOST: ${REDIS_HOST}
  REDIS_PORT: ${REDIS_PORT:-6379}
  REDIS_PASSWORD: ${REDIS_PASSWORD:-}
  RUSTFS_ENDPOINT: ${RUSTFS_ENDPOINT}
  RUSTFS_ACCESS_KEY: ${RUSTFS_ACCESS_KEY}
  RUSTFS_SECRET_KEY: ${RUSTFS_SECRET_KEY}
  RUSTFS_TIMEOUT: ${RUSTFS_TIMEOUT:-30}
  # SECRET_KEY 必须在 .env 中显式配置，否则 compose 直接失败
  SECRET_KEY: ${SECRET_KEY:?SECRET_KEY 未配置：请在 .env 中设置}
  ALGORITHM: ${ALGORITHM:-HS256}
  ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-1440}
  DEBUG: ${DEBUG:-false}
  SERVE_FRONTEND_STATIC: ${SERVE_FRONTEND_STATIC:-false}
  UPLOAD_DIR: ${UPLOAD_DIR:-./uploads}
  MAX_FILE_SIZE: ${MAX_FILE_SIZE:-104857600}
  ALLOWED_EXTENSIONS: ${ALLOWED_EXTENSIONS:-.stp,.step,.stp.gz}
  POINTCLOUD_SAMPLE_COUNT: ${POINTCLOUD_SAMPLE_COUNT:-10000}
  MESH_QUALITY: ${MESH_QUALITY:-high}
  PARALLEL_PROCESSING: ${PARALLEL_PROCESSING:-true}
  RUSTFS_PRESIGNED_URL_EXPIRES: ${RUSTFS_PRESIGNED_URL_EXPIRES:-3600}
  ENABLE_FREECAD_VERIFICATION: ${ENABLE_FREECAD_VERIFICATION:-false}
  FREECAD_VERIFICATION_TIMEOUT: ${FREECAD_VERIFICATION_TIMEOUT:-120}
  LLM_ENABLED: ${LLM_ENABLED:-false}
  LLM_API_URL: ${LLM_API_URL:-https://api.openai.com/v1}
  LLM_API_KEY: ${LLM_API_KEY:-}
  LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
  LLM_TIMEOUT: ${LLM_TIMEOUT:-60}
  LLM_MAX_TOKENS: ${LLM_MAX_TOKENS:-2000}

services:
  frontend:
    build:
      context: .
      dockerfile: deploy/Dockerfile.frontend
    image: gemold-frontend:latest
    container_name: gemold_frontend
    ports:
      - "${FRONTEND_PORT:-80}:80"
    depends_on:
      - backend
    restart: unless-stopped
    profiles:
      - full
      - frontend
    networks:
      - gemold_network

  backend:
    build:
      context: .
      dockerfile: deploy/Dockerfile.moldinsight
    image: gemold-backend:latest
    container_name: gemold_backend
    command: ["python", "-m", "uvicorn", "entrypoints.unified:app", "--host", "0.0.0.0", "--port", "8000"]
    ports:
      - "${BACKEND_PORT:-8000}:8000"
    environment:
      <<: *base_env
      HOST: 0.0.0.0
      PORT: "8000"
      ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?ADMIN_PASSWORD 未配置：请在 .env 中设置}
      ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@gemold.com}
      ADMIN_FULL_NAME: ${ADMIN_FULL_NAME:-系统管理员}
      AUTO_MIGRATE: ${AUTO_MIGRATE:-true}
    # 共享卷过渡兜底（D6/D11）：主链路已改走 RustFS。uploads 供 RustFS 异常时
    # 本地路径回退；html_output 仅作 /html 报告代理的存量兜底读（新产物不落本地）
    volumes:
      - uploads_data:/app/uploads
      - html_data:/app/html_output
    restart: unless-stopped
    profiles:
      - full
      - unified
    networks:
      - gemold_network

  moldinsight-celery:
    build:
      context: .
      dockerfile: deploy/Dockerfile.celery
    container_name: gemold_celery
    environment:
      <<: *base_env
      # Celery/OCC 吞吐调优（OCC_THROUGHPUT 方案 A，默认值在 Dockerfile.celery）
      CELERY_CONCURRENCY: ${CELERY_CONCURRENCY:-2}
      CELERY_MAX_TASKS_PER_CHILD: ${CELERY_MAX_TASKS_PER_CHILD:-50}
    # uploads_data 共享卷（D6 过渡兜底）：RustFS 异常时 worker 回退本地路径下载。
    # D11 后 worker 不再写 HTML 产物（直传 RustFS 报告键），无需 html_data 卷
    volumes:
      - uploads_data:/app/uploads
    depends_on:
      - backend
    restart: unless-stopped
    profiles:
      - full
      - unified
    networks:
      - gemold_network

networks:
  gemold_network:
    # 固定 name，便于跨 compose 文件调试时容器互通（如 inventory-only 与 unified 临时联调）
    name: gemold_network
    driver: bridge

volumes:
  uploads_data:
    name: gemold_uploads_data
  html_data:
    name: gemold_html_data