R26-1 R26-2 R26-3: 修复 env 注入并补部署校验与 smoke

deploy/trialrun/docker-compose.yml

@@ -40,6 +40,8 @@ services:
     profiles: ["minio"]
     depends_on:
       - minio
+    env_file:
+      - ./.env
     entrypoint: ["sh", "-c"]
     command: |
       set -e
@@ -58,52 +60,10 @@ services:
     depends_on:
       db:
         condition: service_healthy
+    env_file:
+      - ./.env
     environment:
       NODE_ENV: production
-      METRICS_ENABLED: ${METRICS_ENABLED}
-      APP_ORIGIN: ${APP_ORIGIN}
-      JWT_SECRET: ${JWT_SECRET}
-      FIELD_ENCRYPTION_KEY: ${FIELD_ENCRYPTION_KEY}
-      OIDC_ENABLED: ${OIDC_ENABLED}
-      OIDC_ISSUER_URL: ${OIDC_ISSUER_URL}
-      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
-      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
-      OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI}
-      OIDC_SCOPES: ${OIDC_SCOPES}
-      DATABASE_URL: ${DATABASE_URL}
-      STORAGE_DIR: ${STORAGE_DIR}
-      STORAGE_DRIVER: ${STORAGE_DRIVER}
-      S3_ENDPOINT: ${S3_ENDPOINT}
-      S3_REGION: ${S3_REGION}
-      S3_BUCKET: ${S3_BUCKET}
-      S3_ACCESS_KEY_ID: ${S3_ACCESS_KEY_ID}
-      S3_SECRET_ACCESS_KEY: ${S3_SECRET_ACCESS_KEY}
-      S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE}
-      HOST: ${HOST}
-      PORT: ${PORT}
-      COOKIE_SECURE: ${COOKIE_SECURE}
-      SERVE_CLIENT_DIST: ${SERVE_CLIENT_DIST}
-      CLIENT_DIST_DIR: ${CLIENT_DIST_DIR}
-
-      RATE_LIMIT_ENABLED: ${RATE_LIMIT_ENABLED}
-      RATE_LIMIT_LOGIN_MAX: ${RATE_LIMIT_LOGIN_MAX}
-      RATE_LIMIT_LOGIN_WINDOW: ${RATE_LIMIT_LOGIN_WINDOW}
-
-      OCR_PROVIDER: ${OCR_PROVIDER}
-      OCR_MAX_ATTEMPTS: ${OCR_MAX_ATTEMPTS}
-      OCR_POLL_CRON: ${OCR_POLL_CRON}
-      OCR_BATCH_SIZE: ${OCR_BATCH_SIZE}
-      OCR_LOCK_TTL_SECONDS: ${OCR_LOCK_TTL_SECONDS}
-      OCR_TIMEOUT_MS: ${OCR_TIMEOUT_MS}
-      TENCENT_SECRET_ID: ${TENCENT_SECRET_ID}
-      TENCENT_SECRET_KEY: ${TENCENT_SECRET_KEY}
-      TENCENT_OCR_REGION: ${TENCENT_OCR_REGION}
-
-      DELEGATION_REVOKE_CRON: ${DELEGATION_REVOKE_CRON}
-
-      JOB_DRIVER: ${JOB_DRIVER}
-      JOBS_ENABLED: ${JOBS_ENABLED}
-      PG_BOSS_SCHEMA: ${PG_BOSS_SCHEMA}
     ports:
       - "3000:3000"
     volumes:
@@ -119,46 +79,13 @@ services:
     depends_on:
       db:
         condition: service_healthy
+    env_file:
+      - ./.env
     command: ["npm", "run", "worker"]
     environment:
       NODE_ENV: production
-      METRICS_ENABLED: ${METRICS_ENABLED}
-      APP_ORIGIN: ${APP_ORIGIN}
-      JWT_SECRET: ${JWT_SECRET}
-      FIELD_ENCRYPTION_KEY: ${FIELD_ENCRYPTION_KEY}
-      OIDC_ENABLED: ${OIDC_ENABLED}
-      OIDC_ISSUER_URL: ${OIDC_ISSUER_URL}
-      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
-      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
-      OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI}
-      OIDC_SCOPES: ${OIDC_SCOPES}
-      DATABASE_URL: ${DATABASE_URL}
-      STORAGE_DIR: ${STORAGE_DIR}
-      STORAGE_DRIVER: ${STORAGE_DRIVER}
-      S3_ENDPOINT: ${S3_ENDPOINT}
-      S3_REGION: ${S3_REGION}
-      S3_BUCKET: ${S3_BUCKET}
-      S3_ACCESS_KEY_ID: ${S3_ACCESS_KEY_ID}
-      S3_SECRET_ACCESS_KEY: ${S3_SECRET_ACCESS_KEY}
-      S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE}
       SERVE_CLIENT_DIST: "false"
-      CLIENT_DIST_DIR: ${CLIENT_DIST_DIR}
-
-      OCR_PROVIDER: ${OCR_PROVIDER}
-      OCR_MAX_ATTEMPTS: ${OCR_MAX_ATTEMPTS}
-      OCR_POLL_CRON: ${OCR_POLL_CRON}
-      OCR_BATCH_SIZE: ${OCR_BATCH_SIZE}
-      OCR_LOCK_TTL_SECONDS: ${OCR_LOCK_TTL_SECONDS}
-      OCR_TIMEOUT_MS: ${OCR_TIMEOUT_MS}
-      TENCENT_SECRET_ID: ${TENCENT_SECRET_ID}
-      TENCENT_SECRET_KEY: ${TENCENT_SECRET_KEY}
-      TENCENT_OCR_REGION: ${TENCENT_OCR_REGION}
-
-      DELEGATION_REVOKE_CRON: ${DELEGATION_REVOKE_CRON}
-
-      JOB_DRIVER: ${JOB_DRIVER}
       JOBS_ENABLED: "true"
-      PG_BOSS_SCHEMA: ${PG_BOSS_SCHEMA}
     volumes:
       - ./data/storage:${STORAGE_DIR}
 
@@ -170,52 +97,16 @@ services:
     depends_on:
       db:
         condition: service_healthy
+    env_file:
+      - ./.env
     environment:
       NODE_ENV: production
-      METRICS_ENABLED: ${METRICS_ENABLED}
-      APP_ORIGIN: ${APP_ORIGIN}
-      JWT_SECRET: ${JWT_SECRET}
-      FIELD_ENCRYPTION_KEY: ${FIELD_ENCRYPTION_KEY}
-      OIDC_ENABLED: ${OIDC_ENABLED}
-      OIDC_ISSUER_URL: ${OIDC_ISSUER_URL}
-      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
-      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
-      OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI}
-      OIDC_SCOPES: ${OIDC_SCOPES}
-      DATABASE_URL: ${DATABASE_URL}
-      STORAGE_DIR: ${STORAGE_DIR}
-      STORAGE_DRIVER: ${STORAGE_DRIVER}
-      S3_ENDPOINT: ${S3_ENDPOINT}
-      S3_REGION: ${S3_REGION}
-      S3_BUCKET: ${S3_BUCKET}
-      S3_ACCESS_KEY_ID: ${S3_ACCESS_KEY_ID}
-      S3_SECRET_ACCESS_KEY: ${S3_SECRET_ACCESS_KEY}
-      S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE}
-      SERVE_CLIENT_DIST: ${SERVE_CLIENT_DIST}
-      CLIENT_DIST_DIR: ${CLIENT_DIST_DIR}
-      OCR_PROVIDER: ${OCR_PROVIDER}
-      OCR_POLL_CRON: ${OCR_POLL_CRON}
-      OCR_BATCH_SIZE: ${OCR_BATCH_SIZE}
-      OCR_LOCK_TTL_SECONDS: ${OCR_LOCK_TTL_SECONDS}
-      OCR_MAX_ATTEMPTS: ${OCR_MAX_ATTEMPTS}
-      OCR_TIMEOUT_MS: ${OCR_TIMEOUT_MS}
-      TENCENT_SECRET_ID: ${TENCENT_SECRET_ID}
-      TENCENT_SECRET_KEY: ${TENCENT_SECRET_KEY}
-      TENCENT_OCR_REGION: ${TENCENT_OCR_REGION}
-      DELEGATION_REVOKE_CRON: ${DELEGATION_REVOKE_CRON}
-      JOB_DRIVER: ${JOB_DRIVER}
-      JOBS_ENABLED: ${JOBS_ENABLED}
-      PG_BOSS_SCHEMA: ${PG_BOSS_SCHEMA}
-
-      TRIALRUN_ADMIN_EMAIL: ${TRIALRUN_ADMIN_EMAIL}
-      TRIALRUN_ADMIN_PHONE: ${TRIALRUN_ADMIN_PHONE}
-      TRIALRUN_ADMIN_PASSWORD: ${TRIALRUN_ADMIN_PASSWORD}
     volumes:
       - ./data/storage:${STORAGE_DIR}
     entrypoint: ["sh", "-c"]
     command: >
-      "cd /app/server
+      cd /app/server
       && npm run prisma:migrate:deploy
       && npm run seed:config
-      && npm run seed:trialrun"
+      && npm run seed:trialrun
     restart: "no"