mirror of
https://github.com/Tencent/WeKnora.git
synced 2026-09-19 02:18:25 +08:00
356 lines
11 KiB
YAML
356 lines
11 KiB
YAML
services:
|
|
frontend:
|
|
image: wechatopenai/weknora-ui:${WEKNORA_VERSION:-latest}
|
|
build:
|
|
context: ./frontend
|
|
args:
|
|
- MAX_FILE_SIZE_MB=${MAX_FILE_SIZE_MB:-50}
|
|
container_name: WeKnora-frontend
|
|
ports:
|
|
- "${FRONTEND_PORT:-80}:80"
|
|
environment:
|
|
- MAX_FILE_SIZE_MB=${MAX_FILE_SIZE_MB:-50}
|
|
- APP_HOST=${APP_HOST:-app}
|
|
# APP_BACKEND_PORT: the port NGINX proxies to (default 8080).
|
|
# For local deployment this is the App container's listening port, independent of host-mapped APP_PORT.
|
|
# For remote deployment, set this to the remote App's service port.
|
|
- APP_PORT=${APP_BACKEND_PORT:-8080}
|
|
- APP_SCHEME=${APP_SCHEME:-http}
|
|
# NOTE: If using a remote App backend, comment out or remove the depends_on
|
|
# block below and set APP_HOST/APP_BACKEND_PORT/APP_SCHEME in your .env file.
|
|
depends_on:
|
|
app:
|
|
condition: service_healthy
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
|
|
app:
|
|
image: wechatopenai/weknora-app:${WEKNORA_VERSION:-latest}
|
|
build:
|
|
context: .
|
|
dockerfile: docker/Dockerfile.app
|
|
args:
|
|
- APK_MIRROR_ARG=${APK_MIRROR_ARG:-}
|
|
container_name: WeKnora-app
|
|
ports:
|
|
- "${APP_PORT:-8080}:8080"
|
|
volumes:
|
|
- data-files:/data/files
|
|
- docreader-tmp:/tmp/docreader:ro
|
|
- ./config/config.yaml:/app/config/config.yaml
|
|
# Optional: mount custom skills directory (allows adding skills without rebuilding image)
|
|
- ./skills/preloaded:/app/skills/preloaded
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
environment:
|
|
- LOG_LEVEL=${LOG_LEVEL:-}
|
|
- COS_SECRET_ID=${COS_SECRET_ID:-}
|
|
- COS_SECRET_KEY=${COS_SECRET_KEY:-}
|
|
- COS_REGION=${COS_REGION:-}
|
|
- COS_BUCKET_NAME=${COS_BUCKET_NAME:-}
|
|
- COS_APP_ID=${COS_APP_ID:-}
|
|
- COS_PATH_PREFIX=${COS_PATH_PREFIX:-}
|
|
- COS_ENABLE_OLD_DOMAIN=${COS_ENABLE_OLD_DOMAIN:-}
|
|
- GIN_MODE=${GIN_MODE:-release}
|
|
- DISABLE_REGISTRATION=${DISABLE_REGISTRATION:-false}
|
|
- DB_DRIVER=postgres
|
|
- DB_HOST=postgres
|
|
- DB_PORT=5432
|
|
- DB_USER=${DB_USER:-}
|
|
- DB_PASSWORD=${DB_PASSWORD:-}
|
|
- DB_NAME=${DB_NAME:-}
|
|
- TZ=${TZ:-Asia/Shanghai}
|
|
- WEKNORA_LANGUAGE=${WEKNORA_LANGUAGE:-zh-CN}
|
|
- OTEL_EXPORTER_OTLP_ENDPOINT=jaeger:4317
|
|
- OTEL_SERVICE_NAME=WeKnora
|
|
- OTEL_TRACES_EXPORTER=otlp
|
|
- OTEL_METRICS_EXPORTER=none
|
|
- OTEL_LOGS_EXPORTER=none
|
|
- OTEL_PROPAGATORS=tracecontext,baggage
|
|
- RETRIEVE_DRIVER=${RETRIEVE_DRIVER:-}
|
|
- ELASTICSEARCH_ADDR=${ELASTICSEARCH_ADDR:-}
|
|
- ELASTICSEARCH_USERNAME=${ELASTICSEARCH_USERNAME:-}
|
|
- ELASTICSEARCH_PASSWORD=${ELASTICSEARCH_PASSWORD:-}
|
|
- ELASTICSEARCH_INDEX=${ELASTICSEARCH_INDEX:-}
|
|
- QDRANT_HOST=qdrant
|
|
- QDRANT_PORT=${QDRANT_PORT:-6334}
|
|
- QDRANT_COLLECTION=${QDRANT_COLLECTION:-weknora_embeddings}
|
|
- QDRANT_API_KEY=${QDRANT_API_KEY:-}
|
|
- QDRANT_USE_TLS=${QDRANT_USE_TLS:-false}
|
|
- MILVUS_ADDRESS=milvus:19530
|
|
- MILVUS_COLLECTION=${MILVUS_COLLECTION:-weknora_embeddings}
|
|
- MILVUS_METRIC_TYPE=${MILVUS_METRIC_TYPE:-IP}
|
|
- DOCREADER_ADDR=${DOCREADER_ADDR:-docreader:50051}
|
|
- DOCREADER_TRANSPORT=${DOCREADER_TRANSPORT:-grpc}
|
|
- WEAVIATE_HOST=${WEAVIATE_HOST:-weaviate:8080}
|
|
- WEAVIATE_GRPC_ADDRESS=${WEAVIATE_GRPC_ADDRESS:-weaviate:50051}
|
|
- WEAVIATE_SCHEME=${WEAVIATE_SCHEME:-http}
|
|
- WEAVIATE_AUTH_ENABLED=${WEAVIATE_AUTH_ENABLED:-false}
|
|
- WEAVIATE_API_KEY=${WEAVIATE_API_KEY:-}
|
|
- STORAGE_TYPE=${STORAGE_TYPE:-}
|
|
- LOCAL_STORAGE_BASE_DIR=${LOCAL_STORAGE_BASE_DIR:-}
|
|
- AUTO_RECOVER_DIRTY=${AUTO_RECOVER_DIRTY:-true}
|
|
- MINIO_ENDPOINT=minio:9000
|
|
- MINIO_ACCESS_KEY_ID=${MINIO_ACCESS_KEY_ID:-minioadmin}
|
|
- MINIO_SECRET_ACCESS_KEY=${MINIO_SECRET_ACCESS_KEY:-minioadmin}
|
|
- MINIO_BUCKET_NAME=${MINIO_BUCKET_NAME:-}
|
|
- OLLAMA_BASE_URL=${OLLAMA_BASE_URL:-http://host.docker.internal:11434}
|
|
- STREAM_MANAGER_TYPE=${STREAM_MANAGER_TYPE:-}
|
|
- REDIS_ADDR=redis:6379
|
|
- REDIS_USERNAME=${REDIS_USERNAME:-}
|
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
|
- REDIS_DB=${REDIS_DB:-}
|
|
- REDIS_PREFIX=${REDIS_PREFIX:-}
|
|
- ENABLE_GRAPH_RAG=${ENABLE_GRAPH_RAG:-}
|
|
- NEO4J_ENABLE=${NEO4J_ENABLE:-}
|
|
- NEO4J_URI=bolt://neo4j:7687
|
|
- NEO4J_USERNAME=${NEO4J_USERNAME:-neo4j}
|
|
- NEO4J_PASSWORD=${NEO4J_PASSWORD:-password}
|
|
- TENANT_AES_KEY=${TENANT_AES_KEY:-}
|
|
- SYSTEM_AES_KEY=${SYSTEM_AES_KEY:-}
|
|
- CONCURRENCY_POOL_SIZE=${CONCURRENCY_POOL_SIZE:-5}
|
|
- JWT_SECRET=${JWT_SECRET:-}
|
|
# File size limit (in MB)
|
|
- MAX_FILE_SIZE_MB=${MAX_FILE_SIZE_MB:-50}
|
|
# Agent Skills Sandbox
|
|
- WEKNORA_SANDBOX_MODE=${WEKNORA_SANDBOX_MODE:-docker}
|
|
- WEKNORA_SANDBOX_TIMEOUT=${WEKNORA_SANDBOX_TIMEOUT:-60}
|
|
- WEKNORA_SANDBOX_DOCKER_IMAGE=${WEKNORA_SANDBOX_DOCKER_IMAGE:-wechatopenai/weknora-sandbox:${WEKNORA_VERSION:-latest}}
|
|
- APK_MIRROR_ARG=${APK_MIRROR_ARG:-}
|
|
depends_on:
|
|
redis:
|
|
condition: service_started
|
|
postgres:
|
|
condition: service_healthy
|
|
docreader:
|
|
condition: service_healthy
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
|
|
# Sandbox 镜像：仅用于 build/pull，非常驻服务；app 执行 Skills 时按需 docker run 该镜像，用毕即释
|
|
sandbox:
|
|
image: wechatopenai/weknora-sandbox:${WEKNORA_VERSION:-latest}
|
|
container_name: WeKnora-sandbox
|
|
build:
|
|
context: .
|
|
dockerfile: docker/Dockerfile.sandbox
|
|
profiles:
|
|
- full
|
|
command: ["true"]
|
|
restart: "no"
|
|
|
|
docreader:
|
|
image: wechatopenai/weknora-docreader:${WEKNORA_VERSION:-latest}
|
|
build:
|
|
context: .
|
|
dockerfile: docker/Dockerfile.docreader
|
|
args:
|
|
- APT_MIRROR=${APT_MIRROR:-}
|
|
container_name: WeKnora-docreader
|
|
ports:
|
|
- "${DOCREADER_PORT:-50051}:50051"
|
|
volumes:
|
|
- docreader-tmp:/tmp/docreader
|
|
environment:
|
|
- DOCREADER_IMAGE_OUTPUT_DIR=/tmp/docreader
|
|
- MAX_FILE_SIZE_MB=${MAX_FILE_SIZE_MB:-}
|
|
healthcheck:
|
|
test: ["CMD", "grpc_health_probe", "-addr=:50051"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
|
|
# 修改的PostgreSQL配置
|
|
postgres:
|
|
image: paradedb/paradedb:v0.21.4-pg17
|
|
container_name: WeKnora-postgres
|
|
environment:
|
|
- POSTGRES_USER=${DB_USER}
|
|
- POSTGRES_PASSWORD=${DB_PASSWORD}
|
|
- POSTGRES_DB=${DB_NAME}
|
|
volumes:
|
|
- postgres-data:/var/lib/postgresql/data
|
|
networks:
|
|
- WeKnora-network
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${DB_USER}"]
|
|
interval: 10s # 增加时间间隔
|
|
timeout: 10s # 增加超时时间
|
|
retries: 3 # 减少重试次数，让失败更快反馈
|
|
start_period: 30s # 给予初始启动更多时间
|
|
restart: unless-stopped
|
|
# 添加停机时的优雅退出时间
|
|
stop_grace_period: 1m
|
|
|
|
redis:
|
|
image: redis:7.0-alpine
|
|
container_name: WeKnora-redis
|
|
command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
|
|
restart: always
|
|
networks:
|
|
- WeKnora-network
|
|
|
|
minio:
|
|
image: minio/minio:RELEASE.2025-09-07T16-13-09Z
|
|
container_name: WeKnora-minio
|
|
ports:
|
|
- "${MINIO_PORT:-9000}:9000"
|
|
- "${MINIO_CONSOLE_PORT:-9001}:9001"
|
|
environment:
|
|
- MINIO_ROOT_USER=${MINIO_ACCESS_KEY_ID:-minioadmin}
|
|
- MINIO_ROOT_PASSWORD=${MINIO_SECRET_ACCESS_KEY:-minioadmin}
|
|
command: server --console-address ":9001" /data
|
|
volumes:
|
|
- minio_data:/data
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
networks:
|
|
- WeKnora-network
|
|
profiles:
|
|
- minio
|
|
- full
|
|
|
|
jaeger:
|
|
image: jaegertracing/all-in-one:1.76.0
|
|
container_name: WeKnora-jaeger
|
|
ports:
|
|
- "6831:6831/udp" # Jaeger Thrift接收器
|
|
- "6832:6832/udp" # Jaeger Thrift接收器(Compact)
|
|
- "5778:5778" # 配置端口
|
|
- "16686:16686" # Web UI
|
|
- "4317:4317" # OTLP gRPC接收器
|
|
- "4318:4318" # OTLP HTTP接收器
|
|
- "14250:14250" # 接收模型端口
|
|
- "14268:14268" # Jaeger HTTP接收器
|
|
- "9411:9411" # Zipkin兼容性端口
|
|
environment:
|
|
- COLLECTOR_OTLP_ENABLED=true
|
|
- COLLECTOR_ZIPKIN_HOST_PORT=:9411
|
|
volumes:
|
|
- jaeger_data:/var/lib/jaeger # 持久化 Jaeger 数据
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
profiles:
|
|
- jaeger
|
|
- full
|
|
|
|
neo4j:
|
|
image: neo4j:2025.10.1
|
|
container_name: WeKnora-neo4j
|
|
volumes:
|
|
- neo4j-data:/data
|
|
environment:
|
|
- NEO4J_AUTH=${NEO4J_USERNAME:-neo4j}/${NEO4J_PASSWORD:-password}
|
|
- NEO4J_apoc_export_file_enabled=true
|
|
- NEO4J_apoc_import_file_enabled=true
|
|
- NEO4J_apoc_import_file_use__neo4j__config=true
|
|
- NEO4JLABS_PLUGINS=["apoc"]
|
|
ports:
|
|
- "7474:7474"
|
|
- "7687:7687"
|
|
restart: always
|
|
networks:
|
|
- WeKnora-network
|
|
profiles:
|
|
- neo4j
|
|
- full
|
|
|
|
qdrant:
|
|
image: qdrant/qdrant:v1.16.2
|
|
container_name: WeKnora-qdrant
|
|
ports:
|
|
- "${QDRANT_REST_PORT:-6333}:6333"
|
|
- "${QDRANT_PORT:-6334}:6334"
|
|
volumes:
|
|
- qdrant_data:/qdrant/storage
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
profiles:
|
|
- qdrant
|
|
- full
|
|
|
|
milvus:
|
|
image: milvusdb/milvus:v2.6.11
|
|
container_name: WeKnora-milvus
|
|
security_opt:
|
|
- seccomp:unconfined
|
|
command: ["milvus", "run", "standalone"]
|
|
environment:
|
|
- ETCD_USE_EMBED=true
|
|
- ETCD_DATA_DIR=/var/lib/milvus/etcd
|
|
- COMMON_STORAGETYPE=local
|
|
- DEPLOY_MODE=STANDALONE
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
|
|
interval: 30s
|
|
start_period: 90s
|
|
timeout: 20s
|
|
retries: 3
|
|
ports:
|
|
- "19530:19530"
|
|
- "9091:9091"
|
|
volumes:
|
|
- milvus_data:/var/lib/milvus
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
profiles:
|
|
- milvus
|
|
|
|
weaviate:
|
|
image: semitechnologies/weaviate:1.28.4
|
|
container_name: WeKnora-weaviate
|
|
environment:
|
|
- PERSISTENCE_DATA_PATH=/var/lib/weaviate
|
|
- CLUSTER_HOSTNAME=node1
|
|
- DEFAULT_VECTORIZER_MODULE=none
|
|
- ENABLE_MODULES=none
|
|
- AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true
|
|
- CLUSTER_GOSSIP_BIND_PORT=7000
|
|
- CLUSTER_DATA_BIND_PORT=7001
|
|
- RAFT_BOOTSTRAP_EXPECT=1
|
|
ports:
|
|
- "9035:8080"
|
|
- "50052:50051"
|
|
volumes:
|
|
- weaviate_data:/var/lib/weaviate
|
|
networks:
|
|
- WeKnora-network
|
|
restart: unless-stopped
|
|
profiles:
|
|
- weaviate
|
|
|
|
networks:
|
|
WeKnora-network:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
postgres-data:
|
|
data-files:
|
|
docreader-tmp:
|
|
jaeger_data:
|
|
minio_data:
|
|
neo4j-data:
|
|
qdrant_data:
|
|
milvus_data:
|
|
weaviate_data:
|