feat: 首次推送到Gitea - 完整项目代码 + 安全加固 + 知识库

docker-compose.yml

@@ -1,19 +1,21 @@
 # =============================================================================
 #  追光AI Docker Compose (生产部署)
 #  - 1 个 APP 容器 (Next.js, 端口 8301)
-#  - 1 个 CRON 容器 (supercronic 调度 13 个任务)
+#  - 1 个 CRON 容器 (supercronic 调度 25 个任务)
 #  - 共用同一镜像，通过 override command 区分
 #  - 用 network_mode: host 让容器能访问宿主机共享服务 (Redis/Nacos/MinIO)
 #  - 卷挂载：data、public、logs 持久化
 # =============================================================================
 
+version: '3.7'
+
 services:
 
   # -------------------------------------------------------------------------
   #  1) APP 服务
   # -------------------------------------------------------------------------
   zhuiguang-ai-app:
-    image: zhuiguang-ai:2.1.2
+    image: zhuiguang-ai:2.1.3
     container_name: zhuiguang-ai-app
     build:
       context: .
@@ -44,11 +46,11 @@ services:
 
     # 不依赖 DB 健康检查（DB 是外网阿里云 RDS，检测不到会拖累启动）
     healthcheck:
-      test: ["CMD", "curl", "-fs", "http://localhost:8301/api/health"]
+      test: ["CMD", "curl", "-f", "http://localhost:8301/api/health"]
       interval: 30s
-      timeout: 5s
+      timeout: 10s
       retries: 3
-      start_period: 30s
+      start_period: 40s
 
     logging:
       driver: json-file
@@ -63,7 +65,7 @@ services:
   #  2) CRON 服务
   # -------------------------------------------------------------------------
   zhuiguang-ai-cron:
-    image: zhuiguang-ai:2.1.2
+    image: zhuiguang-ai:2.1.3
     container_name: zhuiguang-ai-cron
     build:
       context: .
@@ -112,10 +114,6 @@ services:
 # =============================================================================
 volumes:
   bot-data:
-    name: zhuiguang_ai_bot_data
   bot-public:
-    name: zhuiguang_ai_bot_public
   bot-logs:
-    name: zhuiguang_ai_bot_logs
   bot-prisma:
-    name: zhuiguang_ai_bot_prisma