 浅念
|
eb8983a06c
|
feat(storage,g1): real-OSS support and G1 smoke — gate CLOSED
G1 (skipped at P1 for lack of credentials) executed 2026-09-21 against the
user-provided bucket live-album @ oss-cn-beijing:
Raw-SDK smoke (scripts/g1-oss-smoke.mjs, creds via runtime env only):
- HeadBucket / presign PUT direct upload / head byte+type verify /
presign GET round-trip / copy staging→originals / idempotent replay /
DeleteObject cleanup — all pass.
- S3-compat lifecycle query unsupported → console manual check remains the
only open G1 sub-item (need: confirm no lifecycle rule hits photo-live/).
Adapter-level (production path, createStorageFromEnv → real OSS):
- presignPut+PUT 200, head verify, presignGet round-trip equal,
copyIfAbsent idempotent (created:true→false, same etag),
forbid-overwrite guard throws UPLOAD_VERIFY_FAILED — all pass.
Findings locked in:
- Addressing: OSS S3-compat requires virtual-host style with BASE endpoint
(path-style → 403 signature mismatch). StoragePort adapter gains optional
MinioStorageConfig.forcePathStyle + S3_FORCE_PATH_STYLE env (default true
keeps local MinIO behavior); required-field validation fixed to string
fields only (boolean false ≠ missing).
- .env.production.example-cn S3 section updated to the confirmed shape
(beijing endpoint/region, virtual-host, bucket live-album).
Co-Authored-By: Claude Code <noreply@anthropic.com>
|
2026-09-21 10:16:33 +08:00 |
|
|
浅念
|
250d4355b9
|
build(deploy): production images, compose stacks and 1panel guide
P5-prep Task 1（docs/plans/2026-09-21-P5-准备件.md）：
- docker/server.Dockerfile：单镜像 photo-live-server 多角色（api-cn/api-ov/
worker/sync/migrate-deploy/seed-admin，entrypoint.sh 分发；migrate-deploy
支持 cn|ov|all 区域参数）。三阶段：全量 install（锁文件冻结）→ prisma
generate 双库 + 逐包构建；--prod 依赖层；runtime=node:20-alpine+openssl/curl
+ 全局 prisma@5.22.0（对齐锁文件）+ 双库 client 镜像内重建（db-cn 落 pnpm
store .prisma、db-ov 落包内 generated/）。sharp 走 musl 预编译验证通过。
- docker/web.Dockerfile + infra/deploy/nginx.conf.template：photo-live-web
（nginx:alpine + envsubst 模板）。viewer(/，history 回退) + admin(/admin/，
hash 路由) + /v1 反代 API_UPSTREAM（含 /v1/realtime WS 升级）+
/assets/、/admin/assets/、/embed/v1/ immutable 长缓存（admin assets 的
alias 前缀剥除坑已实测修复）。VITE_* 为构建期参数（VIEWER_BASE/
EMBED_ORIGIN 随域名构建传入）。
- infra/deploy/docker-compose.cn.yml / -ov.yml：cn=api-cn+worker+sync+web，
ov=api-ov+web-ov（核实架构：sync 仅 cn 侧，inbox/emergency 内嵌 api-ov，
无 ov 侧 sync 进程）；健康检查 /v1/health、unless-stopped、json-file
10m×3、外部 1panel-network 复用 1Panel MySQL/Redis、SERVER_IMAGE/
WEB_IMAGE 环境变量化镜像 tag（回滚杠杆）。
- .env.production.example-cn/-ov：生产变量全量清单（cn 25 键/ov 24 键，
DB/Redis/OSS/SYNC/AUTH/限速/域名分组注释，源自 services+packages
process.env 全量审计）；.gitignore 放行 example，真实 .env.production-*
永不入库。
- infra/deploy/README-1Panel.md：镜像导入双路径（save tar 导入 / 仓库 pull）、
MySQL 建库授权 SQL（utf8mb4_0900_bin，<8.0.30 回退 utf8mb4_bin——D12）、
Redis 连接、1Panel 编排、OpenResty 反代+证书、migrate-deploy 一次性容器、
首次部署顺序（DB→迁移→ov 栈→cn 栈→seed→冒烟）。
- 根 package.json pnpm.onlyBuiltDependencies 增补 sharp/prisma/@prisma/
engines/@prisma/client（镜像构建所需 install 脚本白名单）。
本地验证：两镜像构建成功（server 988MB / web 97.7MB）；compose config 校验
通过；server 镜像内逐服务 require（sharp/argon2/双 Prisma client/bullmq/
ioredis）与双引擎 so.node、migrate-deploy 角色、无 .env 泄漏均实测；web 镜像
容器实测路由（viewer 回退/admin 子路径/assets 与 embed immutable/WS 代理路径
502 语义）全通过。未起真实栈（无真实 DB，符合准备件边界）。
Co-Authored-By: Claude Code <noreply@anthropic.com>
|
2026-09-21 01:39:55 +08:00 |
|