# 用于部署的 docker-compose 文件:
# - FastGPT 端口映射为 3000:3000
# - FastGPT-mcp-server 端口映射 3005:3000
# - 建议修改账密后再运行

# root 默认密码（重启后会强制重置该密码成环境变量值）
x-default-root-psw: &x-default-root-psw '1234'
# 系统最高密钥凭证
x-system-key: &x-system-key 'fastgpt-xxx'
# plugin auth token
x-plugin-auth-token: &x-plugin-auth-token 'token'
# code sandbox token
x-code-sandbox-token: &x-code-sandbox-token 'codesandbox'
# aiproxy token
x-aiproxy-token: &x-aiproxy-token 'token'
# 数据库连接相关配置
x-share-db-config: &x-share-db-config
  MONGODB_URI: mongodb://myusername:mypassword@mongo:27017/fastgpt?authSource=admin
  DB_MAX_LINK: 100
  REDIS_URL: redis://default:mypassword@redis:6379
  # @see https://doc.fastgpt.cn/docs/self-host/config/object-storage
  STORAGE_VENDOR: minio # minio | aws-s3 | cos | oss
  STORAGE_REGION: us-east-1
  STORAGE_ACCESS_KEY_ID: minioadmin
  STORAGE_SECRET_ACCESS_KEY: minioadmin
  STORAGE_PUBLIC_BUCKET: fastgpt-public
  STORAGE_PRIVATE_BUCKET: fastgpt-private
  STORAGE_EXTERNAL_ENDPOINT: http://192.168.0.2:9000 # 一个服务器和客户端均可访问到存储桶的地址，可以是固定的宿主机 IP 或者域名，注意不要填写成 127.0.0.1 或者 localhost 等本地回环地址(因为容器里无法使用)
  STORAGE_S3_ENDPOINT: http://fastgpt-minio:9000 # 协议://域名(IP):端口
  STORAGE_S3_FORCE_PATH_STYLE: true
  STORAGE_S3_MAX_RETRIES: 3
# Log 配置
x-log-config: &x-log-config
  LOG_ENABLE_CONSOLE: true
  LOG_CONSOLE_LEVEL: debug
  LOG_ENABLE_OTEL: false
  LOG_OTEL_LEVEL: info
  LOG_OTEL_URL: http://localhost:4318/v1/logs

# 向量库相关配置
x-vec-config: &x-vec-config
${{vec.config}}

version: '3.3'
services:
  # Vector DB
${{vec.db}}
  mongo:
    image: ${{mongo.image}}:${{mongo.tag}} # cpu 不支持 AVX 时候使用 4.4.29
    container_name: mongo
    restart: always
    networks:
      - fastgpt
    command: mongod --keyFile /data/mongodb.key --replSet rs0
    environment:
      - MONGO_INITDB_ROOT_USERNAME=myusername
      - MONGO_INITDB_ROOT_PASSWORD=mypassword
    volumes:
      - ./mongo/data:/data/db
    healthcheck:
      test: ['CMD', 'mongo', '-u', 'myusername', '-p', 'mypassword', '--authenticationDatabase', 'admin', '--eval', "db.adminCommand('ping')"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    entrypoint:
      - bash
      - -c
      - |
        openssl rand -base64 128 > /data/mongodb.key
        chmod 400 /data/mongodb.key
        chown 999:999 /data/mongodb.key
        echo 'const isInited = rs.status().ok === 1
        if(!isInited){
          rs.initiate({
              _id: "rs0",
              members: [
                  { _id: 0, host: "mongo:27017" }
              ]
          })
        }' > /data/initReplicaSet.js
        # 启动MongoDB服务
        exec docker-entrypoint.sh "$$@" &

        # 等待MongoDB服务启动
        until mongo -u myusername -p mypassword --authenticationDatabase admin --eval "print('waited for connection')"; do
          echo "Waiting for MongoDB to start..."
          sleep 2
        done

        # 执行初始化副本集的脚本
        mongo -u myusername -p mypassword --authenticationDatabase admin /data/initReplicaSet.js

        # 等待docker-entrypoint.sh脚本执行的MongoDB服务进程
        wait $$!
  redis:
    image: ${{redis.image}}:${{redis.tag}}
    container_name: redis
    networks:
      - fastgpt
    restart: always
    command: |
      redis-server --requirepass mypassword --loglevel warning --maxclients 10000 --appendonly yes --save 60 10 --maxmemory 4gb --maxmemory-policy noeviction
    healthcheck:
      test: ['CMD', 'redis-cli', '-a', 'mypassword', 'ping']
      interval: 10s
      timeout: 3s
      retries: 3
      start_period: 30s
    volumes:
      - ./redis/data:/data
  fastgpt-minio:
    image: ${{minio.image}}:${{minio.tag}}
    container_name: fastgpt-minio
    restart: always
    ports:
      - 9000:9000
      - 9001:9001
    networks:
      - fastgpt
    environment:
      - MINIO_ROOT_USER=minioadmin
      - MINIO_ROOT_PASSWORD=minioadmin
    volumes:
      - ./fastgpt-minio:/data
    command: server /data --console-address ":9001"
    healthcheck:
      test: ['CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live']
      interval: 30s
      timeout: 20s
      retries: 3

  fastgpt:
    container_name: fastgpt
    image: ${{fastgpt.image}}:${{fastgpt.tag}} # git
    ports:
      - 3000:3000
    networks:
      - fastgpt
    depends_on:
      - mongo
      - code-sandbox
      - vectorDB
    restart: always
    environment:
      <<: [*x-share-db-config, *x-vec-config, *x-log-config]
      # ==================== 基础配置 ====================
      # 前端外部可访问的地址，用于自动补全文件资源路径。例如 https:fastgpt.cn，不能填 localhost。这个值可以不填，不填则发给模型的图片会是一个相对路径，而不是全路径，模型可能伪造Host。
      FE_DOMAIN: http://localhost:3000
      # root key（最高权限）
      ROOT_KEY: *x-system-key
      # root 密码，用户名为: root。如果需要修改 root 密码，直接修改这个环境变量，并重启即可。
      DEFAULT_ROOT_PSW: *x-default-root-psw
      # 数据库最大连接数
      DB_MAX_LINK: 5
      # 自动同步索引（0 表示不同步）
      SYNC_INDEX: 1
      TOKEN_KEY: fastgpt
      # 文件阅读时的密钥
      FILE_TOKEN_KEY: filetokenkey
      # 密钥加密 key
      AES256_SECRET_KEY: fastgptsecret
      # 强制将图片转成 base64 传递给模型
      MULTIPLE_DATA_TO_BASE64: true

      # ==================== 服务地址与集成 ====================
      # plugin 地址
      PLUGIN_BASE_URL: http://fastgpt-plugin:3000
      PLUGIN_TOKEN: *x-plugin-auth-token
      # code-sandbox 地址
      SANDBOX_URL: http://code-sandbox:3000
      SANDBOX_TOKEN: *x-code-sandbox-token
      # AI Proxy 的地址，如果配了该地址，优先使用
      AIPROXY_API_ENDPOINT: http://aiproxy:3000
      # AI Proxy 的 Admin Token，与 AI Proxy 中的环境变量 ADMIN_KEY
      AIPROXY_API_TOKEN: *x-aiproxy-token

      # ==================== 日志与监控 ====================
      # 传递给 OTLP 收集器的服务名称
      LOG_OTEL_SERVICE_NAME: fastgpt-client

      # ==================== 安全与运行限制 ====================
      # 启动 IP 限流（true）；部分接口启用 IP 限流策略以防止异常请求
      USE_IP_LIMIT: false
      # 工作流最大运行次数，避免极端死循环
      WORKFLOW_MAX_RUN_TIMES: 1000
      # 循环最大运行次数，避免极端死循环
      WORKFLOW_MAX_LOOP_TIMES: 100
      # 服务器接收请求的最大大小（MB）
      SERVICE_REQUEST_MAX_CONTENT_LENGTH: 10
      # 启用内网 IP 检查
      CHECK_INTERNAL_IP: false
      # ==================== 上传与账号策略 ====================
      # 最大上传文件大小（MB）
      UPLOAD_FILE_MAX_SIZE: 1000
      # 最大上传文件数量
      UPLOAD_FILE_MAX_AMOUNT: 1000
      # LLM 请求追踪保留时长（小时）
      LLM_REQUEST_TRACKING_RETENTION_HOURS: 6
      # ==================== 功能开关与特殊配置 ====================
      # 自定义跨域；不配置时默认允许所有跨域（逗号分割）
      ALLOWED_ORIGINS: 
      # HTML 转 Markdown 最大字符数（超过后不执行转换）
      MAX_HTML_TRANSFORM_CHARS: 1000000
    volumes:
      - ./config.json:/app/data/config.json
  code-sandbox:
    container_name: code-sandbox
    image: ${{fastgpt-sandbox.image}}:${{fastgpt-sandbox.tag}}
    networks:
      - fastgpt
    restart: always
    environment:
      <<: [*x-log-config]
      LOG_OTEL_SERVICE_NAME: fastgpt-code-sandbox
      SANDBOX_TOKEN: *x-code-sandbox-token
      # ===== Resource Limits =====
      # Execution timeout per request (ms)
      SANDBOX_MAX_TIMEOUT: 60000
      # Maximum allowed memory per user code execution (MB)
      # Note: System automatically adds 50MB for runtime overhead
      # Actual process limit = SANDBOX_MAX_MEMORY_MB + 50MB
      SANDBOX_MAX_MEMORY_MB: 256

      # ===== Process Pool =====
      # Number of pre-warmed worker processes (JS + Python)
      SANDBOX_POOL_SIZE: 20

      # ===== Network Request Limits =====
      # Whether to check if the request is to a private network
      CHECK_INTERNAL_IP: false
      # Maximum number of HTTP requests per execution
      SANDBOX_REQUEST_MAX_COUNT: 30
      # Timeout for each outbound HTTP request (ms)
      SANDBOX_REQUEST_TIMEOUT: 60000
      # Maximum response body size for outbound requests
      SANDBOX_REQUEST_MAX_RESPONSE_MB: 10
      # Maximum request body size for outbound requests (MB)
      SANDBOX_REQUEST_MAX_BODY_MB: 5

      # ===== Module Control =====
      # JS allowed modules whitelist (comma-separated)
      SANDBOX_JS_ALLOWED_MODULES: lodash,dayjs,moment,uuid,crypto-js,qs,url,querystring
      # Python allowed modules whitelist (comma-separated)
      SANDBOX_PYTHON_ALLOWED_MODULES: math,cmath,decimal,fractions,random,statistics,collections,array,heapq,bisect,queue,copy,itertools,functools,operator,string,re,difflib,textwrap,unicodedata,codecs,datetime,time,calendar,_strptime,json,csv,base64,binascii,struct,hashlib,hmac,secrets,uuid,typing,abc,enum,dataclasses,contextlib,pprint,weakref,numpy,pandas,matplotlib

    healthcheck:
      test: ['CMD', 'curl', '-f', 'http://localhost:3000/health']
      interval: 30s
      timeout: 20s
      retries: 3
  fastgpt-mcp-server:
    container_name: fastgpt-mcp-server
    image: ${{fastgpt-mcp_server.image}}:${{fastgpt-mcp_server.tag}}
    networks:
      - fastgpt
    ports:
      - 3005:3000
    restart: always
    environment:
      <<: [*x-log-config]
      FASTGPT_ENDPOINT: http://fastgpt:3000
  fastgpt-plugin:
    image: ${{fastgpt-plugin.image}}:${{fastgpt-plugin.tag}}
    container_name: fastgpt-plugin
    restart: always
    networks:
      - fastgpt
    environment:
      <<: [*x-share-db-config, *x-log-config]
      AUTH_TOKEN: *x-plugin-auth-token
      # 工具网络请求，最大请求和响应体
      SERVICE_REQUEST_MAX_CONTENT_LENGTH: 10
      # 最大 API 请求体大小
      MAX_API_SIZE: 10
      # 传递给 OTLP 收集器的服务名称
      LOG_OTEL_SERVICE_NAME: fastgpt-plugin
    depends_on:
      fastgpt-minio:
        condition: service_healthy
    healthcheck:
      test: ['CMD', 'curl', '-f', 'http://localhost:3000/health']
      interval: 30s
      timeout: 20s
      retries: 3
  # AI Proxy
  aiproxy:
    image: ${{aiproxy.image}}:${{aiproxy.tag}}
    container_name: aiproxy
    restart: unless-stopped
    depends_on:
      aiproxy_pg:
        condition: service_healthy
    networks:
      - fastgpt
      - aiproxy
    environment:
      # 对应 fastgpt 里的AIPROXY_API_TOKEN
      ADMIN_KEY: *x-aiproxy-token
      # 错误日志详情保存时间（小时）
      LOG_DETAIL_STORAGE_HOURS: 1
      # 数据库连接地址
      SQL_DSN: postgres://postgres:aiproxy@aiproxy_pg:5432/aiproxy
      # 最大重试次数
      RETRY_TIMES: 3
      # 不需要计费
      BILLING_ENABLED: false
      # 不需要严格检测模型
      DISABLE_MODEL_CONFIG: true
    healthcheck:
      test: ['CMD', 'curl', '-f', 'http://localhost:3000/api/status']
      interval: 5s
      timeout: 5s
      retries: 10
  aiproxy_pg:
    image: ${{aiproxy-pg.image}}:${{aiproxy-pg.tag}} # docker hub
    restart: unless-stopped
    container_name: aiproxy_pg
    volumes:
      - ./aiproxy_pg:/var/lib/postgresql/data
    networks:
      - aiproxy
    environment:
      TZ: Asia/Shanghai
      POSTGRES_USER: postgres
      POSTGRES_DB: aiproxy
      POSTGRES_PASSWORD: aiproxy
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', 'postgres', '-d', 'aiproxy']
      interval: 5s
      timeout: 5s
      retries: 10
networks:
  fastgpt:
  aiproxy:
  vector:
${{vec.extra}}