1
services:
2
  mariadb:
3
    image: mariadb:11
4
    container_name: chevereto-db
5
    restart: unless-stopped
6
    environment:
7
      MYSQL_ROOT_PASSWORD: change_this_root_password # MariaDB root 密码
8
      MYSQL_DATABASE: chevereto # 自动创建的数据库名
9
      MYSQL_USER: chevereto # 应用连接数据库使用的用户名
10
      MYSQL_PASSWORD: change_this_db_password # 应用连接数据库的密码
11
    volumes:
12
      - ./data/mysql:/var/lib/mysql # 挂载数据库数据目录，防止容器删除后数据丢失
13

14
  chevereto:
15
    image: chevereto/chevereto:latest
16
    container_name: chevereto
17
    restart: unless-stopped
18
    depends_on:
19
      - mariadb # 先启动数据库，再启动 chevereto
20
    ports:
21
      - "8080:80" # 宿主机 8080 映射到容器 80
22
    environment:
23
      CHEVERETO_DB_HOST: mariadb # 数据库主机名，对应上面的服务名
24
      CHEVERETO_DB_USER: chevereto # 数据库用户名
25
      CHEVERETO_DB_PASS: change_this_db_password # 数据库密码
26
      CHEVERETO_DB_PORT: 3306 # 数据库端口
27
      CHEVERETO_DB_NAME: chevereto # 数据库名
28
      CHEVERETO_MAX_POST_SIZE: 128M # POST 请求大小限制
29
      CHEVERETO_MAX_UPLOAD_SIZE: 128M # 单次上传大小限制
30
    volumes:
31
      - ./data/images:/var/www/html/images # 本地图片目录挂载

1
server {
2
    # 80 强制跳转到 443
3
    listen 80;
4

5
    server_name chevereto.example.com;
6

7
    # HTTP 请求永久重定向到 HTTPS
8
    return 301 https://$host$request_uri;
9
}
10

11
server {
12
    listen 443 ssl http2;
13

14
    # 当前 HTTPS 站点绑定的域名
15
    server_name chevereto.example.com;
16

17
    # ssl证书配置
18
    ssl_certificate     /etc/nginx/ssl/chevereto.example.com/fullchain.pem;
19
    ssl_certificate_key /etc/nginx/ssl/chevereto.example.com/privkey.pem;
20

21
    # 关闭 session tickets，减少某些场景下的安全风险
22
    ssl_session_tickets off;
23

24
    # 关闭“优先使用服务端加密套件”设置
25
    ssl_prefer_server_ciphers off;
26

27
    # 日志配置
28
    access_log /var/log/nginx/chevereto.example.com.access.log;
29
    error_log /var/log/nginx/chevereto.example.com.error.log warn;
30

31
    # 上传大小限制
32
    client_max_body_size 128M;
33

34
    location / {
35
        proxy_pass http://127.0.0.1:8080;
36

37
        proxy_http_version 1.1;
38
        proxy_set_header Host $host;
39
        proxy_set_header X-Real-IP $remote_addr;
40
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
41
        proxy_set_header X-Forwarded-Proto https;
42
        proxy_set_header X-Forwarded-Host $host;
43
        proxy_set_header X-Forwarded-Port 443;
44

45
        # 与后端建立连接的超时时间
46
        proxy_connect_timeout 60s;
47

48
        # 向后端发送请求的超时时间
49
        proxy_send_timeout 60s;
50

51
        # 等待后端响应的超时时间
52
        proxy_read_timeout 60s;
53

54
        # 关闭代理缓冲
55
        proxy_buffering off;
56
    }
57
}