backup

docker-compose.yml

@@ -1,22 +1,27 @@
 services:
   # Redis 服務 (Celery 後端和緩存)
   redis:
-    image: redis:7-alpine
+    image: panjit-translator:redis
+    build:
+      context: .
+      dockerfile: Dockerfile.redis
     container_name: panjit-translator-redis
     # Redis only for internal network use; no public port exposure
     volumes:
       - redis_data:/data
     restart: unless-stopped
     command: redis-server --appendonly yes
+    networks:
+      - panjit-translator-network
 
   # 主應用服務
   app:
-    build: 
+    image: panjit-translator:main
+    build:
       context: .
       dockerfile: Dockerfile
-    container_name: panjit-translator-app
-    ports:
-      - "12010:12010"
+    container_name: translator-app
+    # No external port; only Nginx exposes ports
     volumes:
       - ./uploads:/app/uploads
       - ./cache:/app/cache
@@ -25,19 +30,34 @@ services:
       - redis
     environment:
       - REDIS_URL=redis://redis:6379/0
+      - LDAP_SERVER=panjit.com.tw
+      - LDAP_PORT=389
+      - LDAP_USE_SSL=false
+      - LDAP_SEARCH_BASE=DC=panjit,DC=com,DC=tw
+      - LDAP_USER_LOGIN_ATTR=userPrincipalName
+      - DEV_MODE=false
+      - DISABLE_WEBSOCKET=true
     restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          memory: 1.5G
+          cpus: '1.0'
+        reservations:
+          memory: 512M
+          cpus: '0.5'
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:12010/api/v1/health"]
       interval: 30s
       timeout: 10s
       retries: 3
       start_period: 40s
+    networks:
+      - panjit-translator-network
 
   # Celery Worker 服務
   celery-worker:
-    build:
-      context: .
-      dockerfile: Dockerfile
+    image: panjit-translator:main
     container_name: panjit-translator-worker
     volumes:
       - ./uploads:/app/uploads
@@ -46,22 +66,33 @@ services:
     depends_on:
       - redis
       - app
+    pull_policy: never
     environment:
       - REDIS_URL=redis://redis:6379/0
+      - DEV_MODE=false
+      - DISABLE_WEBSOCKET=true
     restart: unless-stopped
-    command: celery -A celery_app worker --loglevel=info --concurrency=8
+    command: celery -A celery_app worker --loglevel=info --concurrency=4 --max-memory-per-child=200000
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+          cpus: '0.8'
+        reservations:
+          memory: 256M
+          cpus: '0.3'
     healthcheck:
       test: ["CMD", "celery", "-A", "celery_app", "inspect", "ping"]
       interval: 30s
       timeout: 10s
       retries: 3
       start_period: 40s
+    networks:
+      - panjit-translator-network
 
   # Celery Beat 調度服務 (可選，如果需要定期任務)
   celery-beat:
-    build:
-      context: .
-      dockerfile: Dockerfile
+    image: panjit-translator:main
     container_name: panjit-translator-beat
     volumes:
       - ./uploads:/app/uploads
@@ -70,15 +101,35 @@ services:
     depends_on:
       - redis
       - app
+    pull_policy: never
     environment:
       - REDIS_URL=redis://redis:6379/0
+      - DEV_MODE=false
+      - DISABLE_WEBSOCKET=true
     restart: unless-stopped
     command: celery -A celery_app beat --loglevel=info
+    networks:
+      - panjit-translator-network
+
+  # Nginx reverse proxy
+  nginx:
+    image: panjit-translator:nginx
+    build:
+      context: ./nginx
+      dockerfile: Dockerfile
+    container_name: panjit-translator-nginx
+    depends_on:
+      - app
+    ports:
+      - "12010:12010"
+    restart: unless-stopped
+    networks:
+      - panjit-translator-network
 
 volumes:
   redis_data:
     driver: local
 
 networks:
-  default:
-    name: panjit-translator-network
+  panjit-translator-network:
+    driver: bridge