- 发现 NAS 本机 80/443/3000 已被 Gitea/既有服务占用,调整 docker-compose.yml/nginx.conf 端口:nginx 改 8443(对应容器内 443),one-api 改 127.0.0.1:3001(内网回环,不再冲突 Gitea 的 3000) - 验证 NAS 到 Gemini/NVIDIA/Groq/OpenRouter/Mistral 五渠道直连稳定(待办任务1完成) - 确认并实施 Oracle 侧 frp 隧道反代方案:复用已运行的 frps,在 NAS frpc.toml 追加 nexusai 代理(remotePort 443 -> NAS:8443),未影响既有 gitea/wordpress/fam-core 隧道(待办任务3完成) - NAS 上 docker compose up -d 四容器(mysql/one-api/lobe-chat/nginx)全部启动,https://129.146.203.203/ 端到端验证通过(待办任务5:部署部分完成,渠道配置/Token 待人工在 One-API 后台完成)
68 lines
1.7 KiB
YAML
68 lines
1.7 KiB
YAML
version: '3.8'
|
||
|
||
services:
|
||
mysql:
|
||
image: mysql:8.0
|
||
container_name: one-api-mysql
|
||
restart: always
|
||
environment:
|
||
- MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
|
||
- MYSQL_DATABASE=oneapi
|
||
volumes:
|
||
- ./mysql-data:/var/lib/mysql
|
||
networks:
|
||
- ai-network
|
||
|
||
one-api:
|
||
image: justsong/one-api:latest
|
||
container_name: one-api
|
||
restart: always
|
||
ports:
|
||
# 3000 已被 NAS 上的 Gitea 容器占用,改用 3001;仅绑定 127.0.0.1,不对局域网/公网暴露
|
||
# 远程管理走 SSH 隧道:ssh -p 2222 -L 3001:127.0.0.1:3001 ericwyuan@192.168.50.64
|
||
- "127.0.0.1:3001:3000"
|
||
volumes:
|
||
- ./one-api-data:/data
|
||
environment:
|
||
- SQL_DSN=root:${MYSQL_ROOT_PASSWORD}@tcp(mysql:3306)/oneapi
|
||
- TZ=Asia/Shanghai
|
||
depends_on:
|
||
- mysql
|
||
networks:
|
||
- ai-network
|
||
|
||
lobe-chat:
|
||
image: lobehub/lobe-chat:latest
|
||
container_name: lobe-chat
|
||
restart: always
|
||
# 不发布主机端口:仅 Nginx 通过容器网络访问 lobe-chat:3210
|
||
environment:
|
||
- OPENAI_API_KEY=${ONE_API_TOKEN}
|
||
- OPENAI_PROXY_URL=http://one-api:3000/v1
|
||
- ACCESS_CODE=${LOBE_ACCESS_CODE}
|
||
- DEFAULT_LANG=zh-CN
|
||
depends_on:
|
||
- one-api
|
||
networks:
|
||
- ai-network
|
||
|
||
nginx:
|
||
image: nginx:alpine
|
||
container_name: nginx-proxy
|
||
restart: always
|
||
ports:
|
||
# NAS 本机 80/443 已被其他服务占用(DSM/其他容器),改用 8443
|
||
# 甲骨文 frp 隧道(frpc.toml [[proxies]] name=nexusai)将公网 443 转发到 NAS 的 8443
|
||
- "8443:443"
|
||
volumes:
|
||
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||
- ./certs:/etc/nginx/certs:ro
|
||
depends_on:
|
||
- lobe-chat
|
||
networks:
|
||
- ai-network
|
||
|
||
networks:
|
||
ai-network:
|
||
driver: bridge
|