feat: 首次推送到Gitea - 完整项目代码 + 安全加固 + 知识库

scripts/deploy-run.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+# 追光AI 部署：用新镜像重建 APP 容器（保留全部数据卷）
+set -e
+cd /home/ubuntu/zhuiguang-ai
+
+echo "=== 停止旧容器 ==="
+docker stop zhuiguang-ai-app || true
+docker rm zhuiguang-ai-app || true
+
+echo "=== 启动新容器 ==="
+docker run -d \
+  --name zhuiguang-ai-app \
+  --restart unless-stopped \
+  --network host \
+  -e TZ=Asia/Shanghai \
+  -e NODE_ENV=production \
+  -e PORT=8301 \
+  -e HOSTNAME=0.0.0.0 \
+  -v zhuiguang-ai_bot-public:/app/public \
+  -v zhuiguang-ai_bot-data:/app/data \
+  -v zhuiguang-ai_bot-logs:/app/logs \
+  -v zhuiguang-ai_bot-prisma:/app/node_modules/.prisma \
+  -v /home/ubuntu/zhuiguang-ai/env/.env.production:/app/.env:ro \
+  --log-opt max-size=50m --log-opt max-file=5 \
+  --health-cmd "curl -f http://localhost:8301/api/health || exit 1" \
+  --health-interval 30s --health-timeout 10s --health-retries 3 --health-start-period 40s \
+  zhuiguang-ai:2.1.3
+
+echo "CONTAINER_STARTED"