refactor(stack): default 模式改为 php think run，原 Docker 部署拆分为 docker-serve 模式

- source/stack/default/ 重命名为 docker-serve，保留 Dockerfile/docker-compose/CI/run.sh - 新 default 模式仅提供 CI 文件（流水线中自动切换 docker-serve 再构建） - 更新 stack.json 增加 docker-serve 模式声明 - 更新 README.md 同步模式说明
2026-07-06 18:12:50 +08:00 · 2026-05-27 20:49:13 +08:00
parent 7ecbd03730
commit 28337c9694
7 changed files with 176 additions and 8 deletions
--- a/source/stack/docker-serve/.gitea/workflows/build-and-deploy.yml
+++ b/source/stack/docker-serve/.gitea/workflows/build-and-deploy.yml
@@ -0,0 +1,149 @@
+name: build-and-deploy
+
+on:
+  push:
+  workflow_dispatch:
+
+env:
+  REMOTE_APP_DIR: /data/projects/ulthon_admin/docker
+  PACKAGE_NAME: ulthon_admin_release.tar.gz
+  COMPOSE_PROJECT_NAME: ulthon_admin
+  DB_HOSTNAME: host.docker.internal
+
+jobs:
+  deploy_host15:
+    name: 直传代码并部署到 Host15
+    runs-on: main
+    container:
+      image: ulthon/debian-php82-composer-node20-act:20260503082548
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: 生成 .env
+        shell: bash
+        env:
+          MYSQL_PASSWORD: ${{ secrets.MYSQL_PASSWORD }}
+          DB_HOSTNAME: ${{ env.DB_HOSTNAME }}
+        run: |
+          set -euo pipefail
+          cp .example.env .env
+
+          awk -v host="$DB_HOSTNAME" -v newpwd="$MYSQL_PASSWORD" '
+          BEGIN { has_host = 0; has_pwd = 0 }
+          $0 ~ /^HOSTNAME=/ {
+              print "HOSTNAME=" host
+              has_host = 1
+              next
+          }
+          $0 ~ /^PASSWORD=/ {
+              print "PASSWORD=" newpwd
+              has_pwd = 1
+              next
+          }
+          { print }
+          END {
+              if (!has_host) print "HOSTNAME=" host
+              if (!has_pwd) print "PASSWORD=" newpwd
+          }' .env > .env.tmp
+
+          mv .env.tmp .env
+
+      - name: 打包发布文件
+        shell: bash
+        env:
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+        run: |
+          set -euo pipefail
+
+          composer config -g repos.packagist composer https://nexus.hl7.top:1243/repository/composer-proxy/
+          composer install --no-dev --no-interaction --prefer-dist --optimize-autoloader
+
+          TMP_PACKAGE="/tmp/${PACKAGE_NAME}"
+          rm -f "$TMP_PACKAGE" "$PACKAGE_NAME"
+
+          tar -czf "$TMP_PACKAGE" \
+            --exclude="$PACKAGE_NAME" \
+            --exclude-vcs \
+            --exclude="./runtime/*" \
+            --exclude="./.trae/*" \
+            --exclude="./source/clients/uniapp/node_modules/*" \
+            .
+          cp -f "$TMP_PACKAGE" "$PACKAGE_NAME"
+
+      - name: 创建远端目录
+        uses: appleboy/ssh-action@v0.1.10
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          envs: REMOTE_APP_DIR
+          script: |
+            set -euo pipefail
+            mkdir -p "${REMOTE_APP_DIR}/incoming"
+            mkdir -p "${REMOTE_APP_DIR}/releases"
+
+      - name: 上传发布包与 compose
+        uses: appleboy/scp-action@v0.1.7
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          source: "${{ env.PACKAGE_NAME }},docker-compose.yaml"
+          target: "${{ env.REMOTE_APP_DIR }}/incoming"
+          overwrite: true
+
+      - name: 远端解压并启动
+        uses: appleboy/ssh-action@v0.1.10
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+          COMPOSE_PROJECT_NAME: ${{ env.COMPOSE_PROJECT_NAME }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          timeout: 120s
+          command_timeout: 60m
+          envs: REMOTE_APP_DIR,PACKAGE_NAME,COMPOSE_PROJECT_NAME,GITHUB_RUN_ID
+          script: |
+            set -euo pipefail
+
+            RELEASE_DIR="${REMOTE_APP_DIR}/releases/${GITHUB_RUN_ID}"
+            PACKAGE_PATH="${REMOTE_APP_DIR}/incoming/${PACKAGE_NAME}"
+            COMPOSE_PATH="${REMOTE_APP_DIR}/incoming/docker-compose.yaml"
+
+            rm -rf "${RELEASE_DIR}"
+            mkdir -p "${RELEASE_DIR}"
+
+            tar -xzf "${PACKAGE_PATH}" -C "${RELEASE_DIR}"
+
+            if [ -f "${COMPOSE_PATH}" ]; then
+              cp -f "${COMPOSE_PATH}" "${RELEASE_DIR}/docker-compose.yaml"
+            fi
+
+            cd "${RELEASE_DIR}"
+            export COMPOSE_PROJECT_NAME
+
+            docker compose down || true
+            docker compose up -d --build --remove-orphans
+
+            docker compose ps
+            docker compose exec -T ulthon_admin test -f /var/www/html/vendor/autoload.php
+            docker compose exec -T ulthon_admin php -r "require '/var/www/html/vendor/autoload.php'; echo 'autoload-ok'.PHP_EOL;"
+            docker compose logs --tail=80 ulthon_admin
+
+            ln -sfn "${RELEASE_DIR}" "${REMOTE_APP_DIR}/current"
+
+            ls -1dt "${REMOTE_APP_DIR}/releases"/* 2>/dev/null | tail -n +6 | xargs -r rm -rf
--- a/source/stack/docker-serve/Dockerfile
+++ b/source/stack/docker-serve/Dockerfile
@@ -0,0 +1,34 @@
+ARG BASE_IMAGE=ulthon/ulthon_admin-base:latest
+FROM ${BASE_IMAGE}
+
+# 设置工作目录
+WORKDIR /var/www/html
+
+# 预先拷贝 composer 文件并安装依赖，利用 Docker 缓存
+COPY composer.json composer.lock /var/www/html/
+RUN composer install --no-dev --no-interaction --no-scripts --no-autoloader
+
+# 将当前目录下的文件拷贝到工作目录
+COPY . /var/www/html
+
+# 生成自动加载文件
+RUN composer dump-autoload --optimize --no-dev --classmap-authoritative
+
+VOLUME /var/www/html/runtime
+VOLUME /var/www/html/public/storage
+VOLUME /var/www/html/public/build
+VOLUME /var/www/html/storage
+
+# 挂载主目录，也可以选择直接挂载主目录，可以把上面的几个指定的目录删掉
+# VOLUME ["/var/www/html"]
+
+# 暴露 Nginx 端口
+EXPOSE 8000
+
+RUN chmod +x /var/www/html/source/docker/run.sh
+
+# 启动 Nginx PHP 然后阻塞
+ENTRYPOINT ["/bin/bash", "/var/www/html/source/docker/run.sh"]
+
+CMD ["server"]
+
--- a/source/stack/docker-serve/docker-compose.yaml
+++ b/source/stack/docker-serve/docker-compose.yaml
@@ -0,0 +1,22 @@
+
+name: ulthon_admin
+
+
+services:
+    ulthon_admin:
+        # 正式环境中，您应当构建一个完整镜像，使用镜像名称或id运行，不要使用dockerfile
+        # image: ulthon/ulthon_admin:v1
+        build:
+            context: . # Dockerfile 所在的目录
+            dockerfile: Dockerfile # Dockerfile 的名称
+        restart: always
+        ports:
+            - "8000:8000" # HTTP
+        volumes:
+            - ./:/var/www/html  # 直接分发代码可以去掉注释并将下面的目录增加注释
+            # - ./runtime:/var/www/html/runtime
+            # - ./public/storage:/var/www/html/public/storage
+            # - ./public/build:/var/www/html/public/build
+            # - ./storage:/var/www/html/storage
+        extra_hosts:
+            - "host.docker.internal:host-gateway"
--- a/source/stack/docker-serve/source/docker/run.sh
+++ b/source/stack/docker-serve/source/docker/run.sh
@@ -0,0 +1,37 @@
+#!/bin/bash
+
+# 将代码中的nginx复制到nginx配置文件中
+cp /var/www/html/source/docker/nginx.conf /etc/nginx/sites-available/default
+ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
+
+# 将代码中的php配置文件复制到php配置文件中
+cp /var/www/html/source/docker/zz-phprun.ini /usr/local/etc/php/conf.d
+cp /var/www/html/source/docker/zz-phpfpm.conf /usr/local/etc/php-fpm.d
+
+
+# 设置目录权限，确保挂载卷后依然有效
+mkdir -p /var/www/html/runtime && chmod -R 777 /var/www/html/runtime
+mkdir -p /var/www/html/public/storage && chmod -R 777 /var/www/html/public/storage
+mkdir -p /var/www/html/public/build && chmod -R 777 /var/www/html/public/build
+mkdir -p /var/www/html/storage && chmod -R 777 /var/www/html/storage
+mkdir -p /var/www/html/memoryspace && chown -R www-data:www-data /var/www/html/memoryspace
+
+
+# 运行redis
+# nohup redis-server --requirepass "" &
+
+# 输出参数
+echo "参数为：$@"
+
+# TODO：增加自动批量运行并阻塞的脚本，比如：group default ，会调用auto.sh的default的部分，最终阻塞，auth.sh的default部分，可能会运行一系列的命令，比如清空缓存，踢人下线，重置密码
+
+if [ "$1" = "server" ] || [ "$1" = "" ]; then
+    # 运行定时任务 TODO:以指定用户运行
+    su - www-data -c "nohup php /var/www/html/think timer --local --quit &"
+    # 运行nginx
+    service nginx start
+    # 运行php-fpm
+    php-fpm
+else
+    php "/var/www/html/""$@"
+fi