mirror of
https://github.com/labring/FastGPT.git
synced 2026-04-23 01:01:19 +08:00
Archer
408 lines
13 KiB
YAML
408 lines
13 KiB
YAML
# 用于开发的 docker-compose 文件:
|
|
# - 只包含 FastGPT 的最小化运行条件
|
|
# - 没有 FastGPT 本体
|
|
# - 所有端口都映射到外层
|
|
# - fastgpt-pg: 5432
|
|
# - fastgpt-mongo: 27017
|
|
# - fastgpt-redis: 6379
|
|
# - fastgpt-code-sandbox: 3002
|
|
# - fastgpt-mcp-server: 3003
|
|
# - fastgpt-plugin: 3004
|
|
# - fastgpt-volume-manager: 3005
|
|
# - opensandbox-server: 8090
|
|
# - fastgpt-aiproxy: 3010
|
|
# - fastgpt-aiproxy-pg: 5432
|
|
# - 使用 pgvector 作为默认的向量库
|
|
# - 配置 opensandbox-config 的 network_mode 为 docker 网络，如 dev_fastgpt
|
|
# - 配置 opensandbox-config 的 host_ip 为宿主机 LAN IP，如 192.168.1.100
|
|
|
|
# plugin auth token
|
|
x-plugin-auth-token: &x-plugin-auth-token 'token'
|
|
# code sandbox token
|
|
x-code-sandbox-token: &x-code-sandbox-token 'codesandbox'
|
|
# volume manager auth token
|
|
x-volume-manager-auth-token: &x-volume-manager-auth-token 'vmtoken'
|
|
# aiproxy token
|
|
x-aiproxy-token: &x-aiproxy-token 'token'
|
|
# 数据库连接相关配置
|
|
x-share-db-config: &x-share-db-config
|
|
MONGODB_URI: mongodb://myusername:mypassword@fastgpt-mongo:27017/fastgpt?authSource=admin
|
|
DB_MAX_LINK: 100
|
|
REDIS_URL: redis://default:mypassword@fastgpt-redis:6379
|
|
# @see https://doc.fastgpt.cn/docs/self-host/config/object-storage
|
|
STORAGE_VENDOR: minio # minio | aws-s3 | cos | oss
|
|
STORAGE_REGION: us-east-1
|
|
STORAGE_ACCESS_KEY_ID: minioadmin
|
|
STORAGE_SECRET_ACCESS_KEY: minioadmin
|
|
STORAGE_PUBLIC_BUCKET: fastgpt-public
|
|
STORAGE_PRIVATE_BUCKET: fastgpt-private
|
|
STORAGE_EXTERNAL_ENDPOINT: http://192.168.0.2:9000 # 一个服务器和客户端均可访问到存储桶的地址，可以是固定的宿主机 IP 或者域名，注意不要填写成 127.0.0.1 或者 localhost 等本地回环地址(因为容器里无法使用)
|
|
STORAGE_S3_ENDPOINT: http://fastgpt-minio:9000 # 协议://域名(IP):端口
|
|
STORAGE_S3_FORCE_PATH_STYLE: true
|
|
STORAGE_S3_MAX_RETRIES: 3
|
|
# Log 配置
|
|
x-log-config: &x-log-config
|
|
LOG_ENABLE_CONSOLE: true
|
|
LOG_CONSOLE_LEVEL: debug
|
|
LOG_ENABLE_OTEL: false
|
|
LOG_OTEL_LEVEL: info
|
|
LOG_OTEL_URL: http://localhost:4318/v1/logs
|
|
|
|
services:
|
|
# Vector DB
|
|
fastgpt-pg:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/pgvector:0.8.0-pg15
|
|
container_name: fastgpt-pg
|
|
restart: always
|
|
ports: # 生产环境建议不要暴露
|
|
- 5432:5432
|
|
networks:
|
|
- fastgpt
|
|
environment:
|
|
# 这里的配置只有首次运行生效。修改后，重启镜像是不会生效的。需要把持久化数据删除再重启，才有效果
|
|
- POSTGRES_USER=username
|
|
- POSTGRES_PASSWORD=password
|
|
- POSTGRES_DB=postgres
|
|
volumes:
|
|
- fastgpt-pg:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ['CMD', 'pg_isready', '-U', 'username', '-d', 'postgres']
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
# DB
|
|
fastgpt-mongo:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/mongo:5.0.32 # cpu 不支持 AVX 时候使用 4.4.29
|
|
container_name: fastgpt-mongo
|
|
restart: always
|
|
ports:
|
|
- 27017:27017
|
|
networks:
|
|
- fastgpt
|
|
command: mongod --keyFile /data/mongodb.key --replSet rs0
|
|
environment:
|
|
- MONGO_INITDB_ROOT_USERNAME=myusername
|
|
- MONGO_INITDB_ROOT_PASSWORD=mypassword
|
|
volumes:
|
|
- fastgpt-mongo:/data/db
|
|
healthcheck:
|
|
test:
|
|
[
|
|
'CMD',
|
|
'mongo',
|
|
'-u',
|
|
'myusername',
|
|
'-p',
|
|
'mypassword',
|
|
'--authenticationDatabase',
|
|
'admin',
|
|
'--eval',
|
|
"db.adminCommand('ping')"
|
|
]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 30s
|
|
entrypoint:
|
|
- bash
|
|
- -c
|
|
- |
|
|
openssl rand -base64 128 > /data/mongodb.key
|
|
chmod 400 /data/mongodb.key
|
|
chown 999:999 /data/mongodb.key
|
|
echo 'const isInited = rs.status().ok === 1
|
|
if(!isInited){
|
|
rs.initiate({
|
|
_id: "rs0",
|
|
members: [
|
|
{ _id: 0, host: "fastgpt-mongo:27017" }
|
|
]
|
|
})
|
|
}' > /data/initReplicaSet.js
|
|
# 启动MongoDB服务
|
|
exec docker-entrypoint.sh "$$@" &
|
|
|
|
# 等待MongoDB服务启动
|
|
until mongo -u myusername -p mypassword --authenticationDatabase admin --eval "print('waited for connection')"; do
|
|
echo "Waiting for MongoDB to start..."
|
|
sleep 2
|
|
done
|
|
|
|
# 执行初始化副本集的脚本
|
|
mongo -u myusername -p mypassword --authenticationDatabase admin /data/initReplicaSet.js
|
|
|
|
# 等待docker-entrypoint.sh脚本执行的MongoDB服务进程
|
|
wait $$!
|
|
fastgpt-redis:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/redis:7.2-alpine
|
|
container_name: fastgpt-redis
|
|
ports:
|
|
- 6379:6379
|
|
networks:
|
|
- fastgpt
|
|
restart: always
|
|
command: |
|
|
redis-server --requirepass mypassword --loglevel warning --maxclients 10000 --appendonly yes --save 60 10 --maxmemory 4gb --maxmemory-policy noeviction
|
|
healthcheck:
|
|
test: ['CMD', 'redis-cli', '-a', 'mypassword', 'ping']
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 3
|
|
start_period: 30s
|
|
volumes:
|
|
- fastgpt-redis:/data
|
|
fastgpt-minio:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/minio:RELEASE.2025-09-07T16-13-09Z # cpu 不支持 AVX 时候使用 RELEASE.2025-09-07T16-13-09Z-cpuv1
|
|
container_name: fastgpt-minio
|
|
restart: always
|
|
networks:
|
|
- fastgpt
|
|
ports:
|
|
- '9000:9000'
|
|
- '9001:9001'
|
|
environment:
|
|
- MINIO_ROOT_USER=minioadmin
|
|
- MINIO_ROOT_PASSWORD=minioadmin
|
|
volumes:
|
|
- fastgpt-minio:/data
|
|
command: server /data --console-address ":9001"
|
|
healthcheck:
|
|
test: ['CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live']
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
fastgpt-code-sandbox:
|
|
container_name: fastgpt-code-sandbox
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/fastgpt-code-sandbox:v4.14.10
|
|
ports:
|
|
- 3002:3000
|
|
networks:
|
|
- fastgpt
|
|
restart: always
|
|
environment:
|
|
<<: [*x-log-config]
|
|
LOG_OTEL_SERVICE_NAME: fastgpt-code-sandbox
|
|
SANDBOX_TOKEN: *x-code-sandbox-token
|
|
# ===== Resource Limits =====
|
|
# Execution timeout per request (ms)
|
|
SANDBOX_MAX_TIMEOUT: 60000
|
|
# Maximum allowed memory per user code execution (MB)
|
|
# Note: System automatically adds 50MB for runtime overhead
|
|
# Actual process limit = SANDBOX_MAX_MEMORY_MB + 50MB
|
|
SANDBOX_MAX_MEMORY_MB: 256
|
|
|
|
# ===== Process Pool =====
|
|
# Number of pre-warmed worker processes (JS + Python)
|
|
SANDBOX_POOL_SIZE: 20
|
|
|
|
# ===== Network Request Limits =====
|
|
# Whether to check if the request is to a private network
|
|
CHECK_INTERNAL_IP: false
|
|
# Maximum number of HTTP requests per execution
|
|
SANDBOX_REQUEST_MAX_COUNT: 30
|
|
# Timeout for each outbound HTTP request (ms)
|
|
SANDBOX_REQUEST_TIMEOUT: 60000
|
|
# Maximum response body size for outbound requests
|
|
SANDBOX_REQUEST_MAX_RESPONSE_MB: 10
|
|
# Maximum request body size for outbound requests (MB)
|
|
SANDBOX_REQUEST_MAX_BODY_MB: 5
|
|
|
|
# ===== Module Control =====
|
|
# JS allowed modules whitelist (comma-separated)
|
|
SANDBOX_JS_ALLOWED_MODULES: lodash,dayjs,moment,uuid,crypto-js,qs,url,querystring
|
|
# Python allowed modules whitelist (comma-separated)
|
|
SANDBOX_PYTHON_ALLOWED_MODULES: math,cmath,decimal,fractions,random,statistics,collections,array,heapq,bisect,queue,copy,itertools,functools,operator,string,re,difflib,textwrap,unicodedata,codecs,datetime,time,calendar,_strptime,json,csv,base64,binascii,struct,hashlib,hmac,secrets,uuid,typing,abc,enum,dataclasses,contextlib,pprint,weakref,numpy,pandas,matplotlib
|
|
healthcheck:
|
|
test: ['CMD', 'curl', '-f', 'http://localhost:3000/health']
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
fastgpt-mcp-server:
|
|
container_name: fastgpt-mcp-server
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/fastgpt-mcp_server:v4.14.10
|
|
ports:
|
|
- 3003:3000
|
|
networks:
|
|
- fastgpt
|
|
restart: always
|
|
environment:
|
|
- FASTGPT_ENDPOINT=http://fastgpt:3000
|
|
fastgpt-plugin:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/fastgpt-plugin:v0.5.6
|
|
container_name: fastgpt-plugin
|
|
restart: always
|
|
ports:
|
|
- 3004:3000
|
|
networks:
|
|
- fastgpt
|
|
environment:
|
|
<<: [*x-share-db-config, *x-log-config]
|
|
AUTH_TOKEN: *x-plugin-auth-token
|
|
# 工具网络请求，最大请求和响应体
|
|
SERVICE_REQUEST_MAX_CONTENT_LENGTH: 10
|
|
# 最大 API 请求体大小
|
|
MAX_API_SIZE: 10
|
|
# 传递给 OTLP 收集器的服务名称
|
|
LOG_OTEL_SERVICE_NAME: fastgpt-plugin
|
|
depends_on:
|
|
fastgpt-minio:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ['CMD', 'curl', '-f', 'http://localhost:3000/health']
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
|
|
# 沙盒控制器：管理 Docker 容器的创建/执行/停止/删除
|
|
# runtime=docker 模式需要挂载 Docker socket
|
|
# 配置 docker.host_ip 为宿主机 LAN IP（容器内访问宿主机服务用）
|
|
opensandbox-server:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-server:v0.1.9
|
|
container_name: fastgpt-opensandbox-server
|
|
restart: always
|
|
ports:
|
|
- 8090:8090
|
|
networks:
|
|
- fastgpt
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock # Docker 模式必须挂载
|
|
configs:
|
|
- source: opensandbox-config
|
|
target: /etc/opensandbox/config.toml
|
|
environment:
|
|
SANDBOX_CONFIG_PATH: /etc/opensandbox/config.toml
|
|
healthcheck:
|
|
test: ['CMD', 'curl', '-f', 'http://localhost:8090/health']
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
# Pre-pull only: not started by `docker compose up` (uses profile `prepull`).
|
|
opensandbox-agent-sandbox-image:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/fastgpt-agent-sandbox:v0.1
|
|
profiles:
|
|
- prepull
|
|
opensandbox-execd-image:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-execd:v1.0.7
|
|
profiles:
|
|
- prepull
|
|
opensandbox-egress-image:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-egress:v1.0.3
|
|
profiles:
|
|
- prepull
|
|
# 卷管理微服务：负责幂等创建/删除 Docker named volume 或 k8s PVC
|
|
fastgpt-volume-manager:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/fastgpt-agent-volume-manager:v0.1
|
|
container_name: fastgpt-volume-manager
|
|
restart: always
|
|
ports:
|
|
- 3005:3000
|
|
networks:
|
|
- fastgpt
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro # Docker 模式必须挂载（只读即可）
|
|
environment:
|
|
PORT: 3000
|
|
VM_RUNTIME: docker
|
|
VM_AUTH_TOKEN: *x-volume-manager-auth-token # 对应 AGENT_SANDBOX_VOLUME_MANAGER_TOKEN
|
|
VM_VOLUME_NAME_PREFIX: fastgpt-session # volume 名称前缀
|
|
VM_LOG_LEVEL: info
|
|
healthcheck:
|
|
test:
|
|
[
|
|
'CMD',
|
|
'bun',
|
|
'-e',
|
|
"fetch('http://localhost:3000/health').then((res) => { if (!res.ok) throw new Error(String(res.status)); })"
|
|
]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
# AI Proxy
|
|
fastgpt-aiproxy:
|
|
image: registry.cn-hangzhou.aliyuncs.com/labring/aiproxy:v0.3.5
|
|
container_name: fastgpt-aiproxy
|
|
restart: unless-stopped
|
|
ports:
|
|
- 3010:3000
|
|
depends_on:
|
|
fastgpt-aiproxy-pg:
|
|
condition: service_healthy
|
|
networks:
|
|
- fastgpt
|
|
- aiproxy
|
|
environment:
|
|
# 对应 fastgpt 里的AIPROXY_API_TOKEN
|
|
ADMIN_KEY: *x-aiproxy-token
|
|
# 错误日志详情保存时间（小时）
|
|
LOG_DETAIL_STORAGE_HOURS: 1
|
|
# 数据库连接地址
|
|
SQL_DSN: postgres://postgres:aiproxy@fastgpt-aiproxy-pg:5432/aiproxy
|
|
# 最大重试次数
|
|
RETRY_TIMES: 3
|
|
# 不需要计费
|
|
BILLING_ENABLED: false
|
|
# 不需要严格检测模型
|
|
DISABLE_MODEL_CONFIG: true
|
|
healthcheck:
|
|
test: ['CMD', 'curl', '-f', 'http://localhost:3000/api/status']
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
fastgpt-aiproxy-pg:
|
|
image: registry.cn-hangzhou.aliyuncs.com/fastgpt/pgvector:0.8.0-pg15 # docker hub
|
|
restart: unless-stopped
|
|
container_name: fastgpt-aiproxy-pg
|
|
volumes:
|
|
- fastgpt-aiproxy_pg:/var/lib/postgresql/data
|
|
networks:
|
|
- aiproxy
|
|
environment:
|
|
TZ: Asia/Shanghai
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_DB: aiproxy
|
|
POSTGRES_PASSWORD: aiproxy
|
|
healthcheck:
|
|
test: ['CMD', 'pg_isready', '-U', 'postgres', '-d', 'aiproxy']
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
networks:
|
|
fastgpt:
|
|
aiproxy:
|
|
|
|
volumes:
|
|
fastgpt-pg:
|
|
fastgpt-mongo:
|
|
fastgpt-redis:
|
|
fastgpt-minio:
|
|
fastgpt-aiproxy_pg:
|
|
|
|
configs:
|
|
opensandbox-config:
|
|
content: |
|
|
[server]
|
|
host = "0.0.0.0"
|
|
port = 8090
|
|
log_level = "INFO"
|
|
|
|
[runtime]
|
|
type = "docker"
|
|
execd_image = "registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-execd:v1.0.7"
|
|
|
|
[egress]
|
|
image = "registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-egress:v1.0.3"
|
|
|
|
[docker]
|
|
network_mode = "bridge"
|
|
# When server runs in a container, set host_ip to the host's IP or hostname so bridge-mode endpoints are reachable (e.g. host.docker.internal or the host LAN IP).
|
|
# It's required when server deployed with docker container under host.
|
|
host_ip = "host.docker.internal"
|
|
drop_capabilities = ["AUDIT_WRITE", "MKNOD", "NET_ADMIN", "NET_RAW", "SYS_ADMIN", "SYS_MODULE", "SYS_PTRACE", "SYS_TIME", "SYS_TTY_CONFIG"]
|
|
no_new_privileges = true
|
|
pids_limit = 512
|
|
|
|
[ingress]
|
|
mode = "direct"
|