加固部署隔离与备份来源契约（07-26-internal-ops-recovery-baseline）

deploy/trialrun/docker-compose.yml

@@ -3,16 +3,13 @@ version: "3.8"
 services:
   db:
     image: postgres:16-alpine
-    container_name: hyb-oa-trialrun-db
     restart: unless-stopped
     environment:
       POSTGRES_DB: ${POSTGRES_DB}
       POSTGRES_USER: ${POSTGRES_USER}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
-    ports:
-      - "5432:5432"
     volumes:
-      - ./data/postgres:/var/lib/postgresql/data
+      - ${POSTGRES_DATA_DIR:-./data/postgres}:/var/lib/postgresql/data
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
       interval: 10s
@@ -21,7 +18,6 @@ services:
 
   minio:
     image: minio/minio:RELEASE.2025-01-20T14-49-07Z
-    container_name: hyb-oa-trialrun-minio
     restart: unless-stopped
     profiles: ["minio"]
     environment:
@@ -36,7 +32,6 @@ services:
 
   minio_init:
     image: minio/mc:RELEASE.2025-08-13T08-35-41Z
-    container_name: hyb-oa-trialrun-minio-init
     profiles: ["minio"]
     depends_on:
       - minio
@@ -58,7 +53,6 @@ services:
       args:
         BUILD_SHA: ${BUILD_SHA:?set BUILD_SHA to the approved full commit}
         VITE_BUILD_SHA: ${VITE_BUILD_SHA:?set VITE_BUILD_SHA to the matching short commit}
-    container_name: hyb-oa-trialrun-server
     restart: unless-stopped
     depends_on:
       db:
@@ -71,7 +65,7 @@ services:
     ports:
       - "127.0.0.1:${APP_HOST_PORT:-3000}:3000"
     volumes:
-      - ./data/storage:${STORAGE_DIR}
+      - ${STORAGE_HOST_DIR:-./data/storage}:${STORAGE_DIR}
 
   worker:
     build:
@@ -80,7 +74,6 @@ services:
       args:
         BUILD_SHA: ${BUILD_SHA:?set BUILD_SHA to the approved full commit}
         VITE_BUILD_SHA: ${VITE_BUILD_SHA:?set VITE_BUILD_SHA to the matching short commit}
-    container_name: hyb-oa-trialrun-worker
     restart: unless-stopped
     profiles: ["worker"]
     depends_on:
@@ -95,7 +88,7 @@ services:
       SERVE_CLIENT_DIST: "false"
       JOBS_ENABLED: "true"
     volumes:
-      - ./data/storage:${STORAGE_DIR}
+      - ${STORAGE_HOST_DIR:-./data/storage}:${STORAGE_DIR}
 
   init:
     build:
@@ -104,7 +97,6 @@ services:
       args:
         BUILD_SHA: ${BUILD_SHA:?set BUILD_SHA to the approved full commit}
         VITE_BUILD_SHA: ${VITE_BUILD_SHA:?set VITE_BUILD_SHA to the matching short commit}
-    container_name: hyb-oa-trialrun-init
     depends_on:
       db:
         condition: service_healthy
@@ -114,7 +106,7 @@ services:
       NODE_ENV: production
       BUILD_SHA: ${BUILD_SHA:?set BUILD_SHA to the approved full commit}
     volumes:
-      - ./data/storage:${STORAGE_DIR}
+      - ${STORAGE_HOST_DIR:-./data/storage}:${STORAGE_DIR}
     entrypoint: ["sh", "-c"]
     command: >
       cd /app/server