mirror of
https://github.com/fastapiadmin/FastapiAdmin.git
synced 2026-10-14 05:00:10 +00:00
部署方式:服务器不再接收源码、不执行构建,改为本地构建成品后交付
- deploy-artifacts.sh:构建→备份→校验→原子替换,支持回滚、镜像/备份轮转、
mysql 与 postgres 双变体镜像;后端以 docker save|ssh|docker load 交付
- 依赖分组:requirements/{base,storage}.txt + db/{mysql,postgres,sqlite}.txt,
镜像按所选数据库只装对应驱动(MySQL 变体 565MB → 521MB)
编排与运行时加固
- compose:MySQL/Redis/backend 端口仅绑 127.0.0.1;密钥(SECRET_KEY、
DATA_ENCRYPTION_KEY、DATA_ENCRYPTION_OLD_KEYS)、PROD_CORS_ORIGINS、
FORWARDED_ALLOW_IPS、DEMO_ENABLE 一律由 docker/.env 注入
- Dockerfile:对齐依赖分组、以非 root(uid=1000) 运行;.dockerignore 排除全部真实 .env.*
- nginx:静态资源长缓存、隐藏文件拒绝、接口文档仅内网可访问、放行 ACME http-01 校验路径
工程基建
- 新增 CI:backend(uv sync + ruff + pytest)与 frontend(web type-check+vitest、app type-check)
- 新增 DEPLOYMENT.md 运维手册(部署/回滚/密钥轮换/每日巡检/证书/排查)
15 lines
824 B
Plaintext
Executable File
15 lines
824 B
Plaintext
Executable File
# ============================================================================
|
|
# 完整依赖入口(核心 + 全部数据库驱动 + 对象存储)
|
|
# 适用于:源码部署、本机开发、以及需要「一个镜像同时支持 mysql/postgres/sqlite」的场景。
|
|
#
|
|
# 想要更小的生产镜像,请按需组合,例如:
|
|
# MySQL : -r requirements/base.txt -r requirements/db/mysql.txt -r requirements/storage.txt
|
|
# Postgres : -r requirements/base.txt -r requirements/db/postgres.txt -r requirements/storage.txt
|
|
# SQLite : -r requirements/base.txt -r requirements/db/sqlite.txt
|
|
# ============================================================================
|
|
-r requirements/base.txt
|
|
-r requirements/db/mysql.txt
|
|
-r requirements/db/postgres.txt
|
|
-r requirements/db/sqlite.txt
|
|
-r requirements/storage.txt
|