yuetsh
92e1c2b75d
TLS 和域名由前面的 Nginx Proxy Manager 负责，容器里这层只做静态文件
和反代，用 Caddy 配置更短，也消掉了两个坑：add_header 不继承、
entrypoint 里 __IP_HEADER__ 的 sed 替换。
- deploy/nginx/ 四个配置文件合并成一个 deploy/caddy/Caddyfile
- Dockerfile 去掉 nginx 包，改从官方镜像拷 Caddy 静态二进制
- supervisord 的 nginx 程序换成 caddy，跑在非特权的 server 账号下
- entrypoint 删掉自签证书、http_locations.conf 软链、IP header sed
行为对齐：body 上限写 200MiB 才等于 nginx 的 200M；心跳和 /assets/
继续不记访问日志；安全头、缓存策略、gzip 覆盖范围保持不变。
两处行为变化：
- 访问日志变成 JSON，路径 /data/log/caddy_access.log
- X-Accel-Buffering 是 nginx 私有头，AI 的 SSE 改由 flush_interval -1
保证不缓冲，上线需实测
FORCE_HTTPS 和 LOWER_IP_HEADER 两个环境变量随之作废，真实 IP 改由
trusted_proxies + {client_ip} 从 NPM 的 XFF 解析。
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
63 lines
1.9 KiB
Bash
Executable File
63 lines
1.9 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
APP=/app
|
|
DATA=/data
|
|
|
|
mkdir -p "$DATA/log" "$DATA/config" "$DATA/test_case" "$DATA/public/upload" "$DATA/public/avatar" "$DATA/public/website"
|
|
|
|
if [ ! -f "$DATA/config/secret.key" ]; then
|
|
echo "$(head -c 32 /dev/urandom | md5sum | head -c 32)" > "$DATA/config/secret.key"
|
|
fi
|
|
|
|
if [ ! -f "$DATA/public/avatar/default.png" ]; then
|
|
cp data/public/avatar/default.png "$DATA/public/avatar"
|
|
fi
|
|
|
|
if [ ! -f "$DATA/public/website/favicon.ico" ]; then
|
|
cp data/public/website/favicon.ico "$DATA/public/website"
|
|
fi
|
|
|
|
if [ -z "$MAX_WORKER_NUM" ]; then
|
|
CPU_CORE_NUM=$(grep -c ^processor /proc/cpuinfo)
|
|
export CPU_CORE_NUM
|
|
if [ "$CPU_CORE_NUM" -lt 2 ]; then
|
|
export MAX_WORKER_NUM=2
|
|
else
|
|
export MAX_WORKER_NUM="$CPU_CORE_NUM"
|
|
fi
|
|
fi
|
|
|
|
cd "$APP/dist"
|
|
if [ -n "$STATIC_CDN_HOST" ]; then
|
|
find . -name "*.*" -type f -exec sed -i "s/__STATIC_CDN_HOST__/\/$STATIC_CDN_HOST/g" {} \;
|
|
else
|
|
find . -name "*.*" -type f -exec sed -i "s/__STATIC_CDN_HOST__\///g" {} \;
|
|
fi
|
|
|
|
cd "$APP"
|
|
|
|
n=0
|
|
while [ $n -lt 5 ]
|
|
do
|
|
python manage.py migrate --no-input &&
|
|
python manage.py inituser --username=root --password=rootroot --action=create_super_admin &&
|
|
echo "from options.options import SysOptions; SysOptions.judge_server_token='$JUDGE_SERVER_TOKEN'" | python manage.py shell &&
|
|
echo "from conf.models import JudgeServer; JudgeServer.objects.update(task_number=0)" | python manage.py shell &&
|
|
break
|
|
n=$((n + 1))
|
|
echo "Failed to migrate, going to retry..."
|
|
sleep 8
|
|
done
|
|
|
|
if ! getent group spj >/dev/null; then
|
|
groupadd --system --gid 903 spj
|
|
fi
|
|
if ! id -u server >/dev/null 2>&1; then
|
|
useradd --system --uid 900 --gid spj --no-create-home --shell /usr/sbin/nologin server
|
|
fi
|
|
|
|
chown -R server:spj "$DATA" "$APP/dist"
|
|
find "$DATA/test_case" -type d -exec chmod 710 {} \;
|
|
find "$DATA/test_case" -type f -exec chmod 640 {} \;
|
|
exec supervisord -c /app/deploy/supervisord.conf
|