8017f691a1
- 发现 NAS sshd 关闭了 AllowTcpForwarding，SSH -L 隧道会报 administratively prohibited，此前文档里的隧道方案实际不可用 - one-api 端口绑定改为 192.168.50.64:3001（NAS 局域网 IP），不再绑定 127.0.0.1；仍不接入 frp、不暴露公网，只是访问方式从"SSH隧道转发"改为"同局域网直连" - 已在 NAS 上应用并验证 http://192.168.50.64:3001 可正常访问（HTTP 200） - 同步修正 README/PROGRESS/SDD 中的管理端口访问说明
70 lines
1.9 KiB
YAML
70 lines
1.9 KiB
YAML
version: '3.8'
|
||
|
||
services:
|
||
mysql:
|
||
image: mysql:8.0
|
||
container_name: one-api-mysql
|
||
restart: always
|
||
environment:
|
||
- MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
|
||
- MYSQL_DATABASE=oneapi
|
||
volumes:
|
||
- ./mysql-data:/var/lib/mysql
|
||
networks:
|
||
- ai-network
|
||
|
||
one-api:
|
||
image: justsong/one-api:latest
|
||
container_name: one-api
|
||
restart: always
|
||
ports:
|
||
# 3000 已被 NAS 上的 Gitea 容器占用，改用 3001
|
||
# NAS sshd 关闭了 AllowTcpForwarding，SSH 隧道方案不可行，改为仅绑定 NAS 局域网 IP（不经 frp，不映射公网）
|
||
- "192.168.50.64:3001:3000"
|
||
volumes:
|
||
- ./one-api-data:/data
|
||
environment:
|
||
- SQL_DSN=root:${MYSQL_ROOT_PASSWORD}@tcp(mysql:3306)/oneapi
|
||
- TZ=Asia/Shanghai
|
||
depends_on:
|
||
- mysql
|
||
networks:
|
||
- ai-network
|
||
|
||
lobe-chat:
|
||
image: lobehub/lobe-chat:latest
|
||
container_name: lobe-chat
|
||
restart: always
|
||
# 不发布主机端口：仅 Nginx 通过容器网络访问 lobe-chat:3210
|
||
environment:
|
||
- OPENAI_API_KEY=${ONE_API_TOKEN}
|
||
- OPENAI_PROXY_URL=http://one-api:3000/v1
|
||
- ACCESS_CODE=${LOBE_ACCESS_CODE}
|
||
- DEFAULT_LANG=zh-CN
|
||
# 只暴露聚合模型名，隐藏各厂商真实模型名（对应 SDD 3.2 模型映射设计）
|
||
- OPENAI_MODEL_LIST=-all,+auto-vision=Auto Vision<vision>,+auto-text=Auto Text
|
||
depends_on:
|
||
- one-api
|
||
networks:
|
||
- ai-network
|
||
|
||
nginx:
|
||
image: nginx:alpine
|
||
container_name: nginx-proxy
|
||
restart: always
|
||
ports:
|
||
# NAS 本机 80/443 已被其他服务占用（DSM/其他容器），改用 8443
|
||
# 甲骨文 frp 隧道（frpc.toml [[proxies]] name=nexusai）将公网专属端口 3210 转发到 NAS 的 8443
|
||
- "8443:443"
|
||
volumes:
|
||
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||
- ./certs:/etc/nginx/certs:ro
|
||
depends_on:
|
||
- lobe-chat
|
||
networks:
|
||
- ai-network
|
||
|
||
networks:
|
||
ai-network:
|
||
driver: bridge
|