😴发布 5.2.2 正式版 安全性提升

疯狂的狮子Li

2024-08-26 463048e0173fd7532933841ae11ab945f2ca868c

 script/docker/docker-compose.yml

@@ -2,7 +2,7 @@

services:
  mysql:
    image: mysql:8.0.27
    image: mysql:8.0.33
    container_name: mysql
    environment:
      # 时区上海
@@ -26,13 +26,10 @@
      --explicit_defaults_for_timestamp=true
      --lower_case_table_names=1
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.36
    network_mode: "host"

  nginx-web:
    image: nginx:1.21.3
    image: nginx:1.23.4
    container_name: nginx-web
    environment:
      # 时区上海
@@ -50,12 +47,10 @@
      # 日志目录
      - /docker/nginx/log:/var/log/nginx
    privileged: true
    restart: always
    networks:
      - ruoyi_net
    network_mode: "host"

  redis:
    image: redis:6.2.6
    image: redis:6.2.12
    container_name: redis
    ports:
      - "6379:6379"
@@ -69,13 +64,10 @@
      - /docker/redis/data/:/redis/data/:rw
    command: "redis-server /redis/config/redis.conf"
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.48
    network_mode: "host"

  minio:
    image: minio/minio:RELEASE.2021-10-27T16-29-42Z
    image: minio/minio:RELEASE.2023-04-13T03-08-07Z
    container_name: minio
    ports:
      # api 端口
@@ -86,53 +78,59 @@
      # 时区上海
      TZ: Asia/Shanghai
      # 管理后台用户名
      MINIO_ACCESS_KEY: ruoyi
      MINIO_ROOT_USER: ruoyi
      # 管理后台密码，最小8个字符
      MINIO_SECRET_KEY: ruoyi123
      MINIO_ROOT_PASSWORD: ruoyi123
      # https需要指定域名
      #MINIO_SERVER_URL: "https://xxx.com:9000"
      #MINIO_BROWSER_REDIRECT_URL: "https://xxx.com:9001"
      # 开启压缩 on 开启 off 关闭
      MINIO_COMPRESS: "off"
      # 扩展名 .pdf,.doc 为空 所有类型均压缩
      MINIO_COMPRESS_EXTENSIONS: ""
      # mime 类型 application/pdf 为空 所有类型均压缩
      MINIO_COMPRESS_MIME_TYPES: ""
    volumes:
      # 映射当前目录下的data目录至容器内/data目录
      - /docker/minio/data:/data
      # 映射配置目录
      - /docker/minio/config:/root/.minio/
    command: server --console-address ':9001' /data  # 指定容器中的目录 /data
    command: server --address ':9000' --console-address ':9001' /data  # 指定容器中的目录 /data
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.54
    network_mode: "host"

  ruoyi-server1:
    image: ruoyi/ruoyi-server:4.0.0
    image: ruoyi/ruoyi-server:5.2.2
    container_name: ruoyi-server1
    environment:
      # 时区上海
      TZ: Asia/Shanghai
      SERVER_PORT: 8080
    volumes:
      # 配置文件
      - /docker/server1/logs/:/ruoyi/server/logs/
      # skywalking 探针
#      - /docker/skywalking/agent/:/ruoyi/skywalking/agent
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.60
    network_mode: "host"

  ruoyi-server2:
    image: "ruoyi/ruoyi-server:4.0.0"
    image: ruoyi/ruoyi-server:5.2.2
    container_name: ruoyi-server2
    environment:
      # 时区上海
      TZ: Asia/Shanghai
      SERVER_PORT: 8081
    volumes:
      # 配置文件
      - /docker/server2/logs/:/ruoyi/server/logs/
      # skywalking 探针
#      - /docker/skywalking/agent/:/ruoyi/skywalking/agent
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.61
    network_mode: "host"

  ruoyi-monitor-admin:
    image: ruoyi/ruoyi-monitor-admin:4.0.0
    image: ruoyi/ruoyi-monitor-admin:5.2.2
    container_name: ruoyi-monitor-admin
    environment:
      # 时区上海
@@ -141,29 +139,18 @@
      # 配置文件
      - /docker/monitor/logs/:/ruoyi/monitor/logs
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.90
    network_mode: "host"

  ruoyi-xxl-job-admin:
    image: ruoyi/ruoyi-xxl-job-admin:4.0.0
    container_name: ruoyi-xxl-job-admin
  ruoyi-snailjob-server:
    image: ruoyi/ruoyi-snailjob-server:5.2.2
    container_name: ruoyi-snailjob-server
    environment:
      # 时区上海
      TZ: Asia/Shanghai
    ports:
      - "8800:8800"
      - "17888:17888"
    volumes:
      # 配置文件
      - /docker/xxljob/logs/:/ruoyi/xxljob/logs
      - /docker/snailjob/logs/:/ruoyi/snailjob/logs
    privileged: true
    restart: always
    networks:
      ruoyi_net:
        ipv4_address: 172.30.0.92

networks:
  ruoyi_net:
    driver: bridge
    ipam:
      config:
        - subnet: 172.30.0.0/16
    network_mode: "host"