{"id":15940,"date":"2026-04-28T23:00:19","date_gmt":"2026-04-28T15:00:19","guid":{"rendered":"https:\/\/top.duoku.icu\/libs\/15940.html"},"modified":"2026-04-28T23:00:19","modified_gmt":"2026-04-28T15:00:19","slug":"docker-compose-%e7%94%9f%e4%ba%a7%e5%8c%96%ef%bc%9a%e6%9b%bf%e4%bb%a3-k8s-%e7%9a%84%e8%bd%bb%e9%87%8f%e7%ba%a7%e6%96%b9%e6%a1%88","status":"publish","type":"post","link":"https:\/\/www.srclibs.com\/index.php\/2026\/04\/28\/docker-compose-%e7%94%9f%e4%ba%a7%e5%8c%96%ef%bc%9a%e6%9b%bf%e4%bb%a3-k8s-%e7%9a%84%e8%bd%bb%e9%87%8f%e7%ba%a7%e6%96%b9%e6%a1%88\/","title":{"rendered":"Docker Compose \u751f\u4ea7\u5316\uff1a\u66ff\u4ee3 K8s \u7684\u8f7b\u91cf\u7ea7\u65b9\u6848"},"content":{"rendered":"
\"Docker<\/div>\n

Docker Compose \u751f\u4ea7\u5316\uff1a\u66ff\u4ee3 K8s \u7684\u8f7b\u91cf\u7ea7\u65b9\u6848<\/h1>\n

\u5f15\u8a00<\/h2>\n

\u5728\u4e91\u539f\u751f\u751f\u6001\u4e2d\uff0cKubernetes (K8s)<\/strong> \u65e0\u7591\u662f\u5bb9\u5668\u7f16\u6392\u7684\u738b\u8005\uff0c\u4f46\u5b83\u7684\u590d\u6742\u6027\u4e5f\u8ba9\u8bb8\u591a\u4e2d\u5c0f\u578b\u9879\u76ee\u671b\u800c\u5374\u6b65\u3002Docker Compose<\/strong> \u4f5c\u4e3a\u8f7b\u91cf\u7ea7\u7684\u5bb9\u5668\u7f16\u6392\u5de5\u5177\uff0c\u901a\u8fc7\u7b80\u5355\u7684 YAML \u914d\u7f6e\uff0c\u5c31\u80fd\u7ba1\u7406\u591a\u5bb9\u5668\u5e94\u7528\uff0c\u6210\u4e3a K8s \u7684\u6709\u529b\u8865\u5145\u751a\u81f3\u66ff\u4ee3\u65b9\u6848\u3002<\/p>\n

\u4e3a\u4ec0\u4e48\u9009\u62e9 Docker Compose\uff1f<\/strong><\/p>\n

\u274c Kubernetes \u7684\u6311\u6218\uff1a\n
    \n
  • \u5b66\u4e60\u66f2\u7ebf\u9661\u5ced\uff08\u9700\u8981 2-3 \u4e2a\u6708\uff09<\/li>\n
  • \u8fd0\u7ef4\u6210\u672c\u9ad8\uff08\u81f3\u5c11 1-2 \u540d\u4e13\u804c SRE\uff09<\/li>\n
  • \u8d44\u6e90\u6d88\u8017\u5927\uff083-5GB \u57fa\u7840\u5185\u5b58\uff09<\/li>\n
  • \u914d\u7f6e\u590d\u6742\uff08CRD\u3001RBAC\u3001Ingress \u7b49\uff09<\/li>\n<\/ul>\n\n\u2705 Docker Compose \u7684\u4f18\u52bf\uff1a\n
      \n
    • \u7b80\u5355\u6613\u7528\uff081 \u5c0f\u65f6\u4e0a\u624b\uff09<\/li>\n
    • \u8d44\u6e90\u6d88\u8017\u4f4e\uff08200MB \u57fa\u7840\u5185\u5b58\uff09<\/li>\n
    • \u914d\u7f6e\u7b80\u6d01\uff08\u5355\u6587\u4ef6\u7ba1\u7406\uff09<\/li>\n
    • \u9002\u5408\u4e2d\u5c0f\u89c4\u6a21\u90e8\u7f72<\/li>\n<\/ul>\n<\/code><\/pre>\n
      \u9002\u7528\u573a\u666f\u5bf9\u6bd4\uff1a<\/strong><\/p>\n\n\n\n\n\n\n\n
      \u573a\u666f<\/th>\nDocker Compose<\/th>\nKubernetes<\/th>\n<\/tr>\n
      \u5fae\u670d\u52a1\u6570\u91cf<\/td>\n<20 \u4e2a<\/td>\n>20 \u4e2a<\/td>\n<\/tr>\n
      \u96c6\u7fa4\u89c4\u6a21<\/td>\n<10 \u8282\u70b9<\/td>\n>10 \u8282\u70b9<\/td>\n<\/tr>\n
      \u56e2\u961f\u89c4\u6a21<\/td>\n1-5 \u4eba<\/td>\n>10 \u4eba<\/td>\n<\/tr>\n
      \u9884\u7b97<\/td>\n<5000 \u5143\/\u6708<\/td>\n>10000 \u5143\/\u6708<\/td>\n<\/tr>\n
      \u8fd0\u7ef4\u80fd\u529b<\/td>\n\u521d\u7ea7<\/td>\n\u9ad8\u7ea7<\/td>\n<\/tr>\n<\/table>\n
      \u9002\u7528\u8bfb\u8005\uff1a<\/strong> \u5f00\u53d1\u4eba\u5458\u3001\u8fd0\u7ef4\u5de5\u7a0b\u5e08\u3001\u521d\u521b\u56e2\u961f<\/p>\n
      —<\/p>\n
      Docker Compose \u6838\u5fc3\u6982\u5ff5<\/h2>\n
      1. \u6838\u5fc3\u7ec4\u6210<\/h3>\n
      \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502                 Docker Compose \u6838\u5fc3\u6982\u5ff5                      \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502                                                             \u2502\n\u2502  Service\uff08\u670d\u52a1\uff09                                            \u2502\n\u2502  \u2514\u2500 \u5b9a\u4e49\u5bb9\u5668\u6a21\u677f\uff0c\u5305\u62ec\u955c\u50cf\u3001\u7aef\u53e3\u3001\u73af\u5883\u53d8\u91cf\u7b49                 \u2502\n\u2502      \u2502                                                      \u2502\n\u2502      \u251c\u2500 Volume\uff08\u6570\u636e\u5377\uff09                                    \u2502\n\u2502      \u2502   \u2514\u2500 \u6301\u4e45\u5316\u6570\u636e\u5b58\u50a8                                  \u2502\n\u2502      \u2502                                                             \u2502\n\u2502      \u251c\u2500 Network\uff08\u7f51\u7edc\uff09                                     \u2502\n\u2502      \u2502   \u2514\u2500 \u670d\u52a1\u95f4\u901a\u4fe1                                        \u2502\n\u2502      \u2502                                                             \u2502\n\u2502      \u2514\u2500 Config\uff08\u914d\u7f6e\uff09                                      \u2502\n\u2502          \u2514\u2500 \u73af\u5883\u53d8\u91cf\u3001\u914d\u7f6e\u6587\u4ef6\u7b49                              \u2502\n\u2502                                                             \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n<\/code><\/pre>\n
      2. compose.yml \u7ed3\u6784<\/h3>\n
      “`yaml
      \nversion: ‘3.8’  # \u7248\u672c\u683c\u5f0f<\/p>\n
      services:  # \u670d\u52a1\u5b9a\u4e49
      \n  web:
      \n    image: nginx:alpine
      \n    ports:<\/p>\n
        \n
      • “80:80”<\/li>\n<\/ul>\n
            volumes:<\/p>\n
          \n
        • .\/html:\/usr\/share\/nginx\/html<\/li>\n<\/ul>\n
              networks:<\/p>\n
            \n
          • frontend<\/li>\n<\/ul>\n
                depends_on:<\/p>\n
              \n
            • api<\/li>\n<\/ul>\n
                  restart: always<\/p>\n
                api:
              \n    build: .\/api
              \n    environment:<\/p>\n
                \n
              • DB_HOST=db<\/li>\n
              • DB_PORT=5432<\/li>\n<\/ul>\n
                    networks:<\/p>\n
                  \n
                • frontend<\/li>\n
                • backend<\/li>\n<\/ul>\n
                      volumes:<\/p>\n
                    \n
                  • api-data:\/app\/data<\/li>\n<\/ul>\n
                      db:
                    \n    image: postgres:15-alpine
                    \n    volumes:<\/p>\n
                      \n
                    • db-data:\/var\/lib\/postgresql\/data<\/li>\n<\/ul>\n
                          networks:<\/p>\n
                        \n
                      • backend<\/li>\n<\/ul>\n
                        networks:  # \u7f51\u7edc\u5b9a\u4e49
                        \n  frontend:
                        \n  backend:<\/p>\n
                        volumes:  # \u6570\u636e\u5377\u5b9a\u4e49
                        \n  api-data:
                        \n  db-data:<\/p>\n
                        \n---\n\n
                        \u751f\u4ea7\u73af\u5883\u914d\u7f6e<\/h2>\n\n
                        1. \u73af\u5883\u53d8\u91cf\u7ba1\u7406<\/h3>\n\n<\/code><\/pre>\n
                        yaml<\/p>\n
                        docker-compose.prod.yml<\/h1>\n
                        version: ‘3.8’<\/p>\n
                        services:
                        \n  web:
                        \n    image: myapp\/web:latest
                        \n    env_file:<\/p>\n
                          \n
                        • .env.prod<\/li>\n<\/ul>\n
                              environment:<\/p>\n
                            \n
                          • NODE_ENV=production<\/li>\n
                          • LOG_LEVEL=error<\/li>\n<\/ul>\n
                                ports:<\/p>\n
                              \n
                            • “80:3000”<\/li>\n<\/ul>\n
                                  restart: always
                              \n    deploy:
                              \n      resources:
                              \n        limits:
                              \n          cpus: ‘0.5’
                              \n          memory: 512M
                              \n        reservations:
                              \n          cpus: ‘0.25’
                              \n          memory: 256M<\/p>\n
                                api:
                              \n    image: myapp\/api:latest
                              \n    env_file:<\/p>\n
                                \n
                              • .env.prod<\/li>\n<\/ul>\n
                                    environment:<\/p>\n
                                  \n
                                • DATABASE_URL=postgres:\/\/user:pass@db:5432\/myapp<\/li>\n
                                • REDIS_URL=redis:\/\/redis:6379<\/li>\n<\/ul>\n
                                      restart: always<\/p>\n
                                    db:
                                  \n    image: postgres:15-alpine
                                  \n    env_file:<\/p>\n
                                    \n
                                  • .env.prod<\/li>\n<\/ul>\n
                                        environment:
                                    \n      POSTGRES_DB: myapp
                                    \n      POSTGRES_USER: user
                                    \n      POSTGRES_PASSWORD_FILE: \/run\/secrets\/db_password
                                    \n    volumes:<\/p>\n
                                      \n
                                    • db-data:\/var\/lib\/postgresql\/data<\/li>\n<\/ul>\n
                                          restart: always
                                      \n    healthcheck:
                                      \n      test: [“CMD-SHELL”, “pg_isready -U user”]
                                      \n      interval: 10s
                                      \n      timeout: 5s
                                      \n      retries: 5<\/p>\n
                                      volumes:
                                      \n  db-data:<\/p>\n
                                      networks:
                                      \n  default:
                                      \n    name: myapp-network<\/p>\n
                                      \n
                                      2. Secret \u7ba1\u7406<\/h3>\n\n<\/code><\/pre>\n
                                      bash<\/p>\n
                                      \u521b\u5efa Docker Secret<\/h1>\n
                                      echo “mydbpassword” | docker secret create db_password –
                                      \necho “redis_password” | docker secret create redis_password –<\/p>\n
                                      \n<\/code><\/pre>\n
                                      yaml<\/p>\n
                                      docker-compose.yml<\/h1>\n
                                      version: ‘3.8’<\/p>\n
                                      services:
                                      \n  db:
                                      \n    image: postgres:15-alpine
                                      \n    secrets:<\/p>\n
                                        \n
                                      • db_password<\/li>\n<\/ul>\n
                                            environment:
                                        \n      POSTGRES_PASSWORD_FILE: \/run\/secrets\/db_password<\/p>\n
                                          api:
                                        \n    image: myapp\/api:latest
                                        \n    secrets:<\/p>\n
                                          \n
                                        • db_password<\/li>\n
                                        • api_key<\/li>\n<\/ul>\n
                                              environment:
                                          \n      DATABASE_PASSWORD_FILE: \/run\/secrets\/db_password
                                          \n      API_KEY_FILE: \/run\/secrets\/api_key<\/p>\n
                                          secrets:
                                          \n  db_password:
                                          \n    external: true
                                          \n  api_key:
                                          \n    external: true<\/p>\n
                                          \n
                                          3. \u5065\u5eb7\u68c0\u67e5\u914d\u7f6e<\/h3>\n\n<\/code><\/pre>\n
                                          yaml
                                          \nservices:
                                          \n  web:
                                          \n    image: nginx:alpine
                                          \n    healthcheck:
                                          \n      test: [“CMD”, “curl”, “-f”, “http:\/\/localhost\/health”]
                                          \n      interval: 30s
                                          \n      timeout: 10s
                                          \n      retries: 3
                                          \n      start_period: 40s<\/p>\n
                                            api:
                                          \n    image: myapp\/api:latest
                                          \n    healthcheck:
                                          \n      test: [“CMD-SHELL”, “wget –no-verbose –tries=1 –spider http:\/\/localhost:3000\/health || exit 1”]
                                          \n      interval: 30s
                                          \n      timeout: 10s
                                          \n      retries: 3
                                          \n      start_period: 60s<\/p>\n
                                            db:
                                          \n    image: postgres:15-alpine
                                          \n    healthcheck:
                                          \n      test: [“CMD-SHELL”, “pg_isready -U user -d myapp”]
                                          \n      interval: 10s
                                          \n      timeout: 5s
                                          \n      retries: 5<\/p>\n
                                          \n---\n\n
                                          \u9ad8\u53ef\u7528\u65b9\u6848<\/h2>\n\n
                                          1. \u591a\u5b9e\u4f8b\u90e8\u7f72<\/h3>\n\n<\/code><\/pre>\n
                                          yaml<\/p>\n
                                          docker-compose.yml<\/h1>\n
                                          version: ‘3.8’<\/p>\n
                                          services:
                                          \n  web:
                                          \n    image: myapp\/web:latest
                                          \n    deploy:
                                          \n      replicas: 3
                                          \n      restart_policy:
                                          \n        condition: on-failure
                                          \n        delay: 10s
                                          \n        max_attempts: 3
                                          \n      placement:
                                          \n        constraints:<\/p>\n
                                            \n
                                          • node.labels.role == web<\/li>\n<\/ul>\n
                                                ports:<\/p>\n
                                              \n
                                            • “80:3000”<\/li>\n<\/ul>\n
                                                  healthcheck:
                                              \n      test: [“CMD”, “curl”, “-f”, “http:\/\/localhost\/health”]
                                              \n      interval: 30s<\/p>\n
                                                api:
                                              \n    image: myapp\/api:latest
                                              \n    deploy:
                                              \n      replicas: 3
                                              \n      restart_policy:
                                              \n        condition: on-failure
                                              \n        delay: 10s
                                              \n        max_attempts: 3
                                              \n    environment:<\/p>\n
                                                \n
                                              • DB_HOST=db<\/li>\n<\/ul>\n
                                                    depends_on:<\/p>\n
                                                  \n
                                                • db<\/li>\n<\/ul>\n
                                                    db:
                                                  \n    image: postgres:15-alpine
                                                  \n    deploy:
                                                  \n      replicas: 1
                                                  \n      placement:
                                                  \n        constraints:<\/p>\n
                                                    \n
                                                  • node.labels.role == database<\/li>\n<\/ul>\n
                                                        volumes:<\/p>\n
                                                      \n
                                                    • db-data:\/var\/lib\/postgresql\/data<\/li>\n<\/ul>\n
                                                        redis:
                                                      \n    image: redis:alpine
                                                      \n    deploy:
                                                      \n      replicas: 2
                                                      \n      restart_policy:
                                                      \n        condition: on-failure
                                                      \n    volumes:<\/p>\n
                                                        \n
                                                      • redis-data:\/data<\/li>\n<\/ul>\n
                                                        volumes:
                                                        \n  db-data:
                                                        \n  redis-data:<\/p>\n
                                                        \n
                                                        2. \u8d1f\u8f7d\u5747\u8861\u914d\u7f6e<\/h3>\n\n<\/code><\/pre>\n
                                                        yaml
                                                        \nservices:
                                                        \n  nginx:
                                                        \n    image: nginx:alpine
                                                        \n    ports:<\/p>\n
                                                          \n
                                                        • “80:80”<\/li>\n
                                                        • “443:443”<\/li>\n<\/ul>\n
                                                              volumes:<\/p>\n
                                                            \n
                                                          • .\/nginx.conf:\/etc\/nginx\/nginx.conf:ro<\/li>\n
                                                          • .\/ssl:\/etc\/nginx\/ssl:ro<\/li>\n<\/ul>\n
                                                                depends_on:<\/p>\n
                                                              \n
                                                            • web<\/li>\n
                                                            • api<\/li>\n<\/ul>\n
                                                                  restart: always
                                                              \n    deploy:
                                                              \n      replicas: 2
                                                              \n      restart_policy:
                                                              \n        condition: on-failure<\/p>\n
                                                                web:
                                                              \n    image: myapp\/web:latest
                                                              \n    deploy:
                                                              \n      replicas: 3
                                                              \n      restart_policy:
                                                              \n        condition: on-failure<\/p>\n
                                                                api:
                                                              \n    image: myapp\/api:latest
                                                              \n    deploy:
                                                              \n      replicas: 3
                                                              \n      restart_policy:
                                                              \n        condition: on-failure<\/p>\n
                                                              networks:
                                                              \n  default:
                                                              \n    driver: overlay<\/p>\n
                                                              \nnginx.conf \u914d\u7f6e\uff1a<\/strong>\n\n<\/code><\/pre>\n
                                                              nginx
                                                              \nupstream web_backend {
                                                              \n    server web1:3000;
                                                              \n    server web2:3000;
                                                              \n    server web3:3000;
                                                              \n}<\/p>\n
                                                              upstream api_backend {
                                                              \n    server api1:8080;
                                                              \n    server api2:8080;
                                                              \n    server api3:8080;
                                                              \n}<\/p>\n
                                                              server {
                                                              \n    listen 80;
                                                              \n    server_name example.com;<\/p>\n
                                                                  location \/ {
                                                              \n        proxy_pass http:\/\/web_backend;
                                                              \n        proxy_set_header Host $host;
                                                              \n        proxy_set_header X-Real-IP $remote_addr;
                                                              \n    }<\/p>\n
                                                                  location \/api {
                                                              \n        proxy_pass http:\/\/api_backend;
                                                              \n        proxy_set_header Host $host;
                                                              \n        proxy_set_header X-Real-IP $remote_addr;
                                                              \n    }
                                                              \n}<\/p>\n
                                                              \n
                                                              3. \u6545\u969c\u6062\u590d<\/h3>\n\n<\/code><\/pre>\n
                                                              yaml
                                                              \nservices:
                                                              \n  db:
                                                              \n    image: postgres:15-alpine
                                                              \n    restart: always
                                                              \n    restart_policy:
                                                              \n      condition: on-failure
                                                              \n      delay: 10s
                                                              \n      max_attempts: 5
                                                              \n      window: 120s
                                                              \n    deploy:
                                                              \n      restart_policy:
                                                              \n        condition: on-failure
                                                              \n        delay: 10s
                                                              \n        max_attempts: 5<\/p>\n
                                                                # \u4f7f\u7528 watchdog \u76d1\u63a7
                                                              \n  watchdog:
                                                              \n    image: busybox
                                                              \n    command: >
                                                              \n      sh -c ‘
                                                              \n        while true; do
                                                              \n          if ! docker ps -q | grep -q db; then
                                                              \n            echo “DB container crashed, restarting…”
                                                              \n            docker-compose up -d db
                                                              \n          fi
                                                              \n          sleep 30
                                                              \n        done
                                                              \n      ‘
                                                              \n    restart: always<\/p>\n
                                                              \n---\n\n
                                                              \u65e5\u5fd7\u4e0e\u76d1\u63a7<\/h2>\n\n
                                                              1. \u65e5\u5fd7\u805a\u5408\u914d\u7f6e<\/h3>\n\n<\/code><\/pre>\n
                                                              yaml
                                                              \nservices:
                                                              \n  web:
                                                              \n    image: myapp\/web:latest
                                                              \n    logging:
                                                              \n      driver: json-file
                                                              \n      options:
                                                              \n        max-size: “10m”
                                                              \n        max-file: “3”
                                                              \n        compress: “true”<\/p>\n
                                                                api:
                                                              \n    image: myapp\/api:latest
                                                              \n    logging:
                                                              \n      driver: loki
                                                              \n      options:
                                                              \n        loki-url: http:\/\/loki:3100\/loki\/api\/v1\/push
                                                              \n        loki-pipeline-stages: |<\/p>\n
                                                                \n
                                                              • json:<\/li>\n<\/ul>\n
                                                                              expressions:
                                                                \n                timestamp: time
                                                                \n                level: level
                                                                \n                message: msg<\/p>\n
                                                                  \n
                                                                • timestamp:<\/li>\n<\/ul>\n
                                                                                source: timestamp
                                                                  \n              format: RFC3339<\/p>\n
                                                                    \n
                                                                  • output:<\/li>\n<\/ul>\n
                                                                                  source: message<\/p>\n
                                                                      loki:
                                                                    \n    image: grafana\/loki:2.9.0
                                                                    \n    ports:<\/p>\n
                                                                      \n
                                                                    • “3100:3100”<\/li>\n<\/ul>\n
                                                                          volumes:<\/p>\n
                                                                        \n
                                                                      • loki-data:\/loki<\/li>\n<\/ul>\n
                                                                          promtail:
                                                                        \n    image: grafana\/promtail:2.9.0
                                                                        \n    volumes:<\/p>\n
                                                                          \n
                                                                        • \/var\/log:\/var\/log<\/li>\n<\/ul>\n
                                                                              command: -config.file=\/etc\/promtail\/promtail.yaml<\/p>\n
                                                                          volumes:
                                                                          \n  loki-data:<\/p>\n
                                                                          \n
                                                                          2. Prometheus \u96c6\u6210<\/h3>\n\n<\/code><\/pre>\n
                                                                          yaml
                                                                          \nservices:
                                                                          \n  prometheus:
                                                                          \n    image: prom\/prometheus:latest
                                                                          \n    ports:<\/p>\n
                                                                            \n
                                                                          • “9090:9090”<\/li>\n<\/ul>\n
                                                                                volumes:<\/p>\n
                                                                              \n
                                                                            • .\/prometheus.yml:\/etc\/prometheus\/prometheus.yml<\/li>\n
                                                                            • prometheus-data:\/prometheus<\/li>\n<\/ul>\n
                                                                                  command:<\/p>\n
                                                                                \n
                                                                              • ‘–config.file=\/etc\/prometheus\/prometheus.yml’<\/li>\n
                                                                              • ‘–storage.tsdb.path=\/prometheus’<\/li>\n<\/ul>\n
                                                                                  node-exporter:
                                                                                \n    image: prom\/node-exporter:latest
                                                                                \n    ports:<\/p>\n
                                                                                  \n
                                                                                • “9100:9100”<\/li>\n<\/ul>\n
                                                                                      volumes:<\/p>\n
                                                                                    \n
                                                                                  • \/proc:\/host\/proc:ro<\/li>\n
                                                                                  • \/sys:\/host\/sys:ro<\/li>\n
                                                                                  • \/:\/rootfs:ro<\/li>\n<\/ul>\n
                                                                                        command:<\/p>\n
                                                                                      \n
                                                                                    • ‘–path.procfs=\/host\/proc’<\/li>\n
                                                                                    • ‘–path.sysfs=\/host\/sys’<\/li>\n<\/ul>\n
                                                                                        grafana:
                                                                                      \n    image: grafana\/grafana:latest
                                                                                      \n    ports:<\/p>\n
                                                                                        \n
                                                                                      • “3000:3000”<\/li>\n<\/ul>\n
                                                                                            environment:<\/p>\n
                                                                                          \n
                                                                                        • GF_SECURITY_ADMIN_PASSWORD=admin<\/li>\n<\/ul>\n
                                                                                              volumes:<\/p>\n
                                                                                            \n
                                                                                          • grafana-data:\/var\/lib\/grafana<\/li>\n<\/ul>\n
                                                                                            volumes:
                                                                                            \n  prometheus-data:
                                                                                            \n  grafana-data:<\/p>\n
                                                                                            \nprometheus.yml \u914d\u7f6e\uff1a<\/strong>\n\n<\/code><\/pre>\n
                                                                                            yaml
                                                                                            \nglobal:
                                                                                            \n  scrape_interval: 15s<\/p>\n
                                                                                            scrape_configs:<\/p>\n
                                                                                              \n
                                                                                            • job_name: ‘docker-compose’<\/li>\n<\/ul>\n
                                                                                                  static_configs:<\/p>\n
                                                                                                \n
                                                                                              • targets: [‘node-exporter:9100’]<\/li>\n<\/ul>\n
                                                                                                  \n
                                                                                                • job_name: ‘myapp’<\/li>\n<\/ul>\n
                                                                                                      static_configs:<\/p>\n
                                                                                                    \n
                                                                                                  • targets: [‘web:3000’, ‘api:8080’]<\/li>\n<\/ul>\n
                                                                                                    \n
                                                                                                    3. \u6027\u80fd\u76d1\u63a7<\/h3>\n\n<\/code><\/pre>\n
                                                                                                    yaml
                                                                                                    \nservices:
                                                                                                    \n  cadvisor:
                                                                                                    \n    image: gcr.io\/cadvisor\/cadvisor:latest
                                                                                                    \n    ports:<\/p>\n
                                                                                                      \n
                                                                                                    • “8080:8080”<\/li>\n<\/ul>\n
                                                                                                          volumes:<\/p>\n
                                                                                                        \n
                                                                                                      • \/:\/rootfs:ro<\/li>\n
                                                                                                      • \/var\/run:\/var\/run:ro<\/li>\n
                                                                                                      • \/sys:\/sys:ro<\/li>\n
                                                                                                      • \/var\/lib\/docker\/:\/var\/lib\/docker:ro<\/li>\n<\/ul>\n
                                                                                                            privileged: true<\/p>\n
                                                                                                          containerd:
                                                                                                        \n    image: docker:24
                                                                                                        \n    entrypoint: sh -c ”
                                                                                                        \n      docker inspect \\$(hostname) | jq -r ‘.[0].State.Health.Status’ &&
                                                                                                        \n      echo ‘Container running healthily’
                                                                                                        \n    ”
                                                                                                        \n    depends_on:<\/p>\n
                                                                                                          \n
                                                                                                        • web<\/li>\n<\/ul>\n
                                                                                                          \n---\n\n
                                                                                                          \u5b9e\u6218\u6848\u4f8b<\/h2>\n\n
                                                                                                          1. \u7535\u5546\u7f51\u7ad9\u90e8\u7f72<\/h3>\n\n<\/code><\/pre>\n
                                                                                                          yaml<\/p>\n
                                                                                                          docker-compose.ecommerce.yml<\/h1>\n
                                                                                                          version: ‘3.8’<\/p>\n
                                                                                                          services:
                                                                                                          \n  nginx:
                                                                                                          \n    image: nginx:alpine
                                                                                                          \n    ports:<\/p>\n
                                                                                                            \n
                                                                                                          • “80:80”<\/li>\n
                                                                                                          • “443:443”<\/li>\n<\/ul>\n
                                                                                                                volumes:<\/p>\n
                                                                                                              \n
                                                                                                            • .\/nginx\/nginx.conf:\/etc\/nginx\/nginx.conf:ro<\/li>\n
                                                                                                            • .\/nginx\/ssl:\/etc\/nginx\/ssl:ro<\/li>\n<\/ul>\n
                                                                                                                  depends_on:<\/p>\n
                                                                                                                \n
                                                                                                              • frontend<\/li>\n
                                                                                                              • backend<\/li>\n<\/ul>\n
                                                                                                                    restart: always<\/p>\n
                                                                                                                  frontend:
                                                                                                                \n    image: myapp\/frontend:latest
                                                                                                                \n    environment:<\/p>\n
                                                                                                                  \n
                                                                                                                • NEXT_PUBLIC_API_URL=http:\/\/backend:3001\/api<\/li>\n<\/ul>\n
                                                                                                                      deploy:
                                                                                                                  \n      replicas: 3
                                                                                                                  \n      restart_policy:
                                                                                                                  \n        condition: on-failure
                                                                                                                  \n    depends_on:<\/p>\n
                                                                                                                    \n
                                                                                                                  • backend<\/li>\n<\/ul>\n
                                                                                                                      backend:
                                                                                                                    \n    build: .\/backend
                                                                                                                    \n    environment:<\/p>\n
                                                                                                                      \n
                                                                                                                    • DATABASE_URL=postgres:\/\/user:pass@db:5432\/ecommerce<\/li>\n
                                                                                                                    • REDIS_URL=redis:\/\/redis:6379<\/li>\n
                                                                                                                    • JWT_SECRET_FILE=\/run\/secrets\/jwt_secret<\/li>\n<\/ul>\n
                                                                                                                          deploy:
                                                                                                                      \n      replicas: 3
                                                                                                                      \n      restart_policy:
                                                                                                                      \n        condition: on-failure
                                                                                                                      \n    depends_on:<\/p>\n
                                                                                                                        \n
                                                                                                                      • db<\/li>\n
                                                                                                                      • redis<\/li>\n<\/ul>\n
                                                                                                                            secrets:<\/p>\n
                                                                                                                          \n
                                                                                                                        • jwt_secret<\/li>\n<\/ul>\n
                                                                                                                            db:
                                                                                                                          \n    image: postgres:15-alpine
                                                                                                                          \n    volumes:<\/p>\n
                                                                                                                            \n
                                                                                                                          • db-data:\/var\/lib\/postgresql\/data<\/li>\n
                                                                                                                          • .\/db\/init.sql:\/docker-entrypoint-initdb.d\/init.sql:ro<\/li>\n<\/ul>\n
                                                                                                                                environment:
                                                                                                                            \n      POSTGRES_DB: ecommerce
                                                                                                                            \n      POSTGRES_USER: user
                                                                                                                            \n      POSTGRES_PASSWORD_FILE: \/run\/secrets\/db_password
                                                                                                                            \n    secrets:<\/p>\n
                                                                                                                              \n
                                                                                                                            • db_password<\/li>\n<\/ul>\n
                                                                                                                                  deploy:
                                                                                                                              \n      replicas: 1
                                                                                                                              \n      restart_policy:
                                                                                                                              \n        condition: on-failure<\/p>\n
                                                                                                                                redis:
                                                                                                                              \n    image: redis:alpine
                                                                                                                              \n    volumes:<\/p>\n
                                                                                                                                \n
                                                                                                                              • redis-data:\/data<\/li>\n<\/ul>\n
                                                                                                                                    deploy:
                                                                                                                                \n      replicas: 2
                                                                                                                                \n      restart_policy:
                                                                                                                                \n        condition: on-failure<\/p>\n
                                                                                                                                  worker:
                                                                                                                                \n    build: .\/worker
                                                                                                                                \n    environment:<\/p>\n
                                                                                                                                  \n
                                                                                                                                • DATABASE_URL=postgres:\/\/user:pass@db:5432\/ecommerce<\/li>\n
                                                                                                                                • REDIS_URL=redis:\/\/redis:6379<\/li>\n<\/ul>\n
                                                                                                                                      depends_on:<\/p>\n
                                                                                                                                    \n
                                                                                                                                  • db<\/li>\n
                                                                                                                                  • redis<\/li>\n<\/ul>\n
                                                                                                                                        deploy:
                                                                                                                                    \n      replicas: 2
                                                                                                                                    \n      restart_policy:
                                                                                                                                    \n        condition: on-failure
                                                                                                                                    \n        delay: 10s
                                                                                                                                    \n        max_attempts: 3<\/p>\n
                                                                                                                                      monitoring:
                                                                                                                                    \n    profiles:<\/p>\n
                                                                                                                                      \n
                                                                                                                                    • monitoring<\/li>\n<\/ul>\n
                                                                                                                                          image: myapp\/monitoring:latest
                                                                                                                                      \n    ports:<\/p>\n
                                                                                                                                        \n
                                                                                                                                      • “9090:9090”<\/li>\n<\/ul>\n
                                                                                                                                            depends_on:<\/p>\n
                                                                                                                                          \n
                                                                                                                                        • prometheus<\/li>\n
                                                                                                                                        • grafana<\/li>\n<\/ul>\n
                                                                                                                                          volumes:
                                                                                                                                          \n  db-data:
                                                                                                                                          \n  redis-data:<\/p>\n
                                                                                                                                          secrets:
                                                                                                                                          \n  db_password:
                                                                                                                                          \n    external: true
                                                                                                                                          \n  jwt_secret:
                                                                                                                                          \n    external: true<\/p>\n
                                                                                                                                          networks:
                                                                                                                                          \n  default:
                                                                                                                                          \n    driver: overlay<\/p>\n
                                                                                                                                          \n
                                                                                                                                          2. Django \u9879\u76ee\u90e8\u7f72<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                          yaml<\/p>\n
                                                                                                                                          docker-compose.django.yml<\/h1>\n
                                                                                                                                          version: ‘3.8’<\/p>\n
                                                                                                                                          services:
                                                                                                                                          \n  web:
                                                                                                                                          \n    build:
                                                                                                                                          \n      context: .\/django
                                                                                                                                          \n      dockerfile: Dockerfile
                                                                                                                                          \n    command: >
                                                                                                                                          \n      sh -c ”
                                                                                                                                          \n        python manage.py migrate &&
                                                                                                                                          \n        gunicorn myapp.wsgi:application
                                                                                                                                          \n        –bind 0.0.0.0:8000
                                                                                                                                          \n        –workers 4
                                                                                                                                          \n      ”
                                                                                                                                          \n    ports:<\/p>\n
                                                                                                                                            \n
                                                                                                                                          • “8000:8000”<\/li>\n<\/ul>\n
                                                                                                                                                depends_on:<\/p>\n
                                                                                                                                              \n
                                                                                                                                            • db<\/li>\n
                                                                                                                                            • redis<\/li>\n<\/ul>\n
                                                                                                                                                  environment:<\/p>\n
                                                                                                                                                \n
                                                                                                                                              • DEBUG=False<\/li>\n
                                                                                                                                              • SECRET_KEY_FILE=\/run\/secrets\/secret_key<\/li>\n
                                                                                                                                              • DATABASE_URL=postgres:\/\/user:pass@db:5432\/myapp<\/li>\n<\/ul>\n
                                                                                                                                                    restart: always
                                                                                                                                                \n    deploy:
                                                                                                                                                \n      replicas: 2<\/p>\n
                                                                                                                                                  db:
                                                                                                                                                \n    image: postgres:15-alpine
                                                                                                                                                \n    volumes:<\/p>\n
                                                                                                                                                  \n
                                                                                                                                                • postgres-data:\/var\/lib\/postgresql\/data<\/li>\n<\/ul>\n
                                                                                                                                                      environment:
                                                                                                                                                  \n      POSTGRES_DB: myapp
                                                                                                                                                  \n      POSTGRES_USER: user
                                                                                                                                                  \n      POSTGRES_PASSWORD_FILE: \/run\/secrets\/db_password
                                                                                                                                                  \n    secrets:<\/p>\n
                                                                                                                                                    \n
                                                                                                                                                  • db_password<\/li>\n<\/ul>\n
                                                                                                                                                        restart: always<\/p>\n
                                                                                                                                                      redis:
                                                                                                                                                    \n    image: redis:alpine
                                                                                                                                                    \n    volumes:<\/p>\n
                                                                                                                                                      \n
                                                                                                                                                    • redis-data:\/data<\/li>\n<\/ul>\n
                                                                                                                                                          restart: always<\/p>\n
                                                                                                                                                        celery:
                                                                                                                                                      \n    build: .\/django
                                                                                                                                                      \n    command: celery -A myapp worker -l info
                                                                                                                                                      \n    depends_on:<\/p>\n
                                                                                                                                                        \n
                                                                                                                                                      • db<\/li>\n
                                                                                                                                                      • redis<\/li>\n<\/ul>\n
                                                                                                                                                            environment:<\/p>\n
                                                                                                                                                          \n
                                                                                                                                                        • DATABASE_URL=postgres:\/\/user:pass@db:5432\/myapp<\/li>\n<\/ul>\n
                                                                                                                                                              secrets:<\/p>\n
                                                                                                                                                            \n
                                                                                                                                                          • db_password<\/li>\n<\/ul>\n
                                                                                                                                                                deploy:
                                                                                                                                                            \n      replicas: 2<\/p>\n
                                                                                                                                                              celery-beat:
                                                                                                                                                            \n    build: .\/django
                                                                                                                                                            \n    command: celery -A myapp beat -l info
                                                                                                                                                            \n    depends_on:<\/p>\n
                                                                                                                                                              \n
                                                                                                                                                            • db<\/li>\n
                                                                                                                                                            • redis<\/li>\n<\/ul>\n
                                                                                                                                                                  secrets:<\/p>\n
                                                                                                                                                                \n
                                                                                                                                                              • db_password<\/li>\n<\/ul>\n
                                                                                                                                                                  nginx:
                                                                                                                                                                \n    image: nginx:alpine
                                                                                                                                                                \n    ports:<\/p>\n
                                                                                                                                                                  \n
                                                                                                                                                                • “80:80”<\/li>\n<\/ul>\n
                                                                                                                                                                      volumes:<\/p>\n
                                                                                                                                                                    \n
                                                                                                                                                                  • .\/nginx.conf:\/etc\/nginx\/nginx.conf:ro<\/li>\n<\/ul>\n
                                                                                                                                                                        depends_on:<\/p>\n
                                                                                                                                                                      \n
                                                                                                                                                                    • web<\/li>\n<\/ul>\n
                                                                                                                                                                          restart: always<\/p>\n
                                                                                                                                                                      volumes:
                                                                                                                                                                      \n  postgres-data:
                                                                                                                                                                      \n  redis-data:<\/p>\n
                                                                                                                                                                      secrets:
                                                                                                                                                                      \n  db_password:
                                                                                                                                                                      \n    external: true
                                                                                                                                                                      \n  secret_key:
                                                                                                                                                                      \n    external: true<\/p>\n
                                                                                                                                                                      \n
                                                                                                                                                                      3. Node.js \u9879\u76ee\u90e8\u7f72<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                      yaml<\/p>\n
                                                                                                                                                                      docker-compose.nodejs.yml<\/h1>\n
                                                                                                                                                                      version: ‘3.8’<\/p>\n
                                                                                                                                                                      services:
                                                                                                                                                                      \n  app:
                                                                                                                                                                      \n    build:
                                                                                                                                                                      \n      context: .\/app
                                                                                                                                                                      \n      dockerfile: Dockerfile
                                                                                                                                                                      \n    ports:<\/p>\n
                                                                                                                                                                        \n
                                                                                                                                                                      • “3000:3000”<\/li>\n<\/ul>\n
                                                                                                                                                                            environment:<\/p>\n
                                                                                                                                                                          \n
                                                                                                                                                                        • NODE_ENV=production<\/li>\n
                                                                                                                                                                        • PORT=3000<\/li>\n
                                                                                                                                                                        • DATABASE_URL=postgres:\/\/user:pass@db:5432\/myapp<\/li>\n
                                                                                                                                                                        • REDIS_URL=redis:\/\/redis:6379<\/li>\n<\/ul>\n
                                                                                                                                                                              depends_on:
                                                                                                                                                                          \n      db:
                                                                                                                                                                          \n        condition: service_healthy
                                                                                                                                                                          \n      redis:
                                                                                                                                                                          \n        condition: service_healthy
                                                                                                                                                                          \n    restart: always
                                                                                                                                                                          \n    deploy:
                                                                                                                                                                          \n      replicas: 3
                                                                                                                                                                          \n      resources:
                                                                                                                                                                          \n        limits:
                                                                                                                                                                          \n          cpus: ‘0.5’
                                                                                                                                                                          \n          memory: 512M
                                                                                                                                                                          \n        reservations:
                                                                                                                                                                          \n          cpus: ‘0.25’
                                                                                                                                                                          \n          memory: 256M<\/p>\n
                                                                                                                                                                            db:
                                                                                                                                                                          \n    image: postgres:15-alpine
                                                                                                                                                                          \n    volumes:<\/p>\n
                                                                                                                                                                            \n
                                                                                                                                                                          • postgres-data:\/var\/lib\/postgresql\/data<\/li>\n<\/ul>\n
                                                                                                                                                                                environment:
                                                                                                                                                                            \n      POSTGRES_DB: myapp
                                                                                                                                                                            \n      POSTGRES_USER: user
                                                                                                                                                                            \n      POSTGRES_PASSWORD_FILE: \/run\/secrets\/db_password
                                                                                                                                                                            \n    secrets:<\/p>\n
                                                                                                                                                                              \n
                                                                                                                                                                            • db_password<\/li>\n<\/ul>\n
                                                                                                                                                                                  healthcheck:
                                                                                                                                                                              \n      test: [“CMD-SHELL”, “pg_isready -U user”]
                                                                                                                                                                              \n      interval: 10s
                                                                                                                                                                              \n      timeout: 5s
                                                                                                                                                                              \n      retries: 5
                                                                                                                                                                              \n    restart: always<\/p>\n
                                                                                                                                                                                redis:
                                                                                                                                                                              \n    image: redis:alpine
                                                                                                                                                                              \n    volumes:<\/p>\n
                                                                                                                                                                                \n
                                                                                                                                                                              • redis-data:\/data<\/li>\n<\/ul>\n
                                                                                                                                                                                    healthcheck:
                                                                                                                                                                                \n      test: [“CMD”, “redis-cli”, “ping”]
                                                                                                                                                                                \n      interval: 10s
                                                                                                                                                                                \n      timeout: 5s
                                                                                                                                                                                \n      retries: 5
                                                                                                                                                                                \n    restart: always<\/p>\n
                                                                                                                                                                                  nginx:
                                                                                                                                                                                \n    image: nginx:alpine
                                                                                                                                                                                \n    ports:<\/p>\n
                                                                                                                                                                                  \n
                                                                                                                                                                                • “80:80”<\/li>\n<\/ul>\n
                                                                                                                                                                                      volumes:<\/p>\n
                                                                                                                                                                                    \n
                                                                                                                                                                                  • .\/nginx.conf:\/etc\/nginx\/nginx.conf:ro<\/li>\n<\/ul>\n
                                                                                                                                                                                        depends_on:<\/p>\n
                                                                                                                                                                                      \n
                                                                                                                                                                                    • app<\/li>\n<\/ul>\n
                                                                                                                                                                                          restart: always<\/p>\n
                                                                                                                                                                                      volumes:
                                                                                                                                                                                      \n  postgres-data:
                                                                                                                                                                                      \n  redis-data:<\/p>\n
                                                                                                                                                                                      secrets:
                                                                                                                                                                                      \n  db_password:
                                                                                                                                                                                      \n    external: true<\/p>\n
                                                                                                                                                                                      \n---\n\n
                                                                                                                                                                                      \u6700\u4f73\u5b9e\u8df5<\/h2>\n\n
                                                                                                                                                                                      1. \u7248\u672c\u63a7\u5236<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                                      yaml<\/p>\n
                                                                                                                                                                                      docker-compose.yaml<\/h1>\n
                                                                                                                                                                                      version: ‘3.8’  # \u4f7f\u7528\u6700\u65b0\u7a33\u5b9a\u7248<\/p>\n
                                                                                                                                                                                      services:
                                                                                                                                                                                      \n  web:
                                                                                                                                                                                      \n    image: myapp\/web:1.2.3  # \u6307\u5b9a\u5177\u4f53\u7248\u672c\uff0c\u4e0d\u4f7f\u7528 latest
                                                                                                                                                                                      \n    # \u274c \u907f\u514d\uff1aimage: myapp\/web:latest<\/p>\n
                                                                                                                                                                                      \n\u63a8\u8350\u5b9e\u8df5\uff1a<\/strong>\n\n<\/code><\/pre>\n
                                                                                                                                                                                      yaml<\/p>\n
                                                                                                                                                                                      \u4f7f\u7528\u6807\u7b7e\u7ba1\u7406\u7248\u672c<\/h1>\n
                                                                                                                                                                                      services:
                                                                                                                                                                                      \n  web:
                                                                                                                                                                                      \n    image: myapp\/web:${IMAGE_TAG:-1.2.3}<\/p>\n
                                                                                                                                                                                      docker-compose.prod.yml<\/h1>\n
                                                                                                                                                                                      version: ‘3.8’<\/p>\n
                                                                                                                                                                                      services:
                                                                                                                                                                                      \n  web:
                                                                                                                                                                                      \n    image: myapp\/web:${DOCKER_TAG:-2.0.0}<\/p>\n
                                                                                                                                                                                      \n
                                                                                                                                                                                      2. CI\/CD \u96c6\u6210<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                                      yaml<\/p>\n
                                                                                                                                                                                      .github\/workflows\/docker-compose.yml<\/h1>\n
                                                                                                                                                                                      name: Docker Compose CI<\/p>\n
                                                                                                                                                                                      on:
                                                                                                                                                                                      \n  push:
                                                                                                                                                                                      \n    branches: [main]
                                                                                                                                                                                      \n  pull_request:
                                                                                                                                                                                      \n    branches: [main]<\/p>\n
                                                                                                                                                                                      jobs:
                                                                                                                                                                                      \n  test:
                                                                                                                                                                                      \n    runs-on: ubuntu-latest<\/p>\n
                                                                                                                                                                                          steps:<\/p>\n
                                                                                                                                                                                        \n
                                                                                                                                                                                      • uses: actions\/checkout@v3<\/li>\n<\/ul>\n
                                                                                                                                                                                          \n
                                                                                                                                                                                        • name: Set up Docker Buildx<\/li>\n<\/ul>\n
                                                                                                                                                                                                  uses: docker\/setup-buildx-action@v3<\/p>\n
                                                                                                                                                                                            \n
                                                                                                                                                                                          • name: Run tests<\/li>\n<\/ul>\n
                                                                                                                                                                                                    run: docker-compose -f docker-compose.test.yml up –exit-code-from web<\/p>\n
                                                                                                                                                                                              \n
                                                                                                                                                                                            • name: Build images<\/li>\n<\/ul>\n
                                                                                                                                                                                                      run: docker-compose build<\/p>\n
                                                                                                                                                                                                \n
                                                                                                                                                                                              • name: Login to Registry<\/li>\n<\/ul>\n
                                                                                                                                                                                                        run: echo ${{ secrets.DOCKER_PASSWORD }} | docker login -u ${{ secrets.DOCKER_USERNAME }} –password-stdin<\/p>\n
                                                                                                                                                                                                  \n
                                                                                                                                                                                                • name: Push images<\/li>\n<\/ul>\n
                                                                                                                                                                                                          run: docker-compose push<\/p>\n
                                                                                                                                                                                                  \n
                                                                                                                                                                                                  3. \u5b89\u5168\u52a0\u56fa<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                                                  yaml
                                                                                                                                                                                                  \nservices:
                                                                                                                                                                                                  \n  web:
                                                                                                                                                                                                  \n    image: myapp\/web:latest
                                                                                                                                                                                                  \n    user: “1000:1000”  # \u975e root \u7528\u6237\u8fd0\u884c
                                                                                                                                                                                                  \n    read_only: true  # \u53ea\u8bfb\u6587\u4ef6\u7cfb\u7edf
                                                                                                                                                                                                  \n    tmpfs:<\/p>\n
                                                                                                                                                                                                    \n
                                                                                                                                                                                                  • \/tmp<\/li>\n<\/ul>\n
                                                                                                                                                                                                        security_opt:<\/p>\n
                                                                                                                                                                                                      \n
                                                                                                                                                                                                    • no-new-privileges:true<\/li>\n<\/ul>\n
                                                                                                                                                                                                          cap_drop:<\/p>\n
                                                                                                                                                                                                        \n
                                                                                                                                                                                                      • ALL<\/li>\n<\/ul>\n
                                                                                                                                                                                                            cap_add:<\/p>\n
                                                                                                                                                                                                          \n
                                                                                                                                                                                                        • NET_BIND_SERVICE<\/li>\n<\/ul>\n
                                                                                                                                                                                                              secrets:<\/p>\n
                                                                                                                                                                                                            \n
                                                                                                                                                                                                          • db_password<\/li>\n<\/ul>\n
                                                                                                                                                                                                                healthcheck:
                                                                                                                                                                                                            \n      test: [“CMD”, “curl”, “-f”, “http:\/\/localhost\/health”]
                                                                                                                                                                                                            \n      interval: 30s
                                                                                                                                                                                                            \n      timeout: 10s
                                                                                                                                                                                                            \n      retries: 3<\/p>\n
                                                                                                                                                                                                              # \u9650\u5236\u7f51\u7edc\u8bbf\u95ee
                                                                                                                                                                                                            \n  networks:
                                                                                                                                                                                                            \n    default:
                                                                                                                                                                                                            \n      driver: bridge
                                                                                                                                                                                                            \n      ipam:
                                                                                                                                                                                                            \n        config:<\/p>\n
                                                                                                                                                                                                              \n
                                                                                                                                                                                                            • subnet: 172.28.0.0\/16<\/li>\n<\/ul>\n
                                                                                                                                                                                                              \n\u5b89\u5168\u6700\u4f73\u5b9e\u8df5\u6e05\u5355\uff1a<\/strong>\n\n<\/code><\/pre>\n
                                                                                                                                                                                                              markdown
                                                                                                                                                                                                              \n\u2705 \u5b89\u5168\u52a0\u56fa\uff1a<\/p>\n
                                                                                                                                                                                                                \n
                                                                                                                                                                                                              • \u4f7f\u7528\u975e root \u7528\u6237\u8fd0\u884c\u5bb9\u5668<\/li>\n
                                                                                                                                                                                                              • \u542f\u7528\u53ea\u8bfb\u6587\u4ef6\u7cfb\u7edf<\/li>\n
                                                                                                                                                                                                              • \u6700\u5c0f\u5316\u6743\u9650\uff08cap_drop: ALL\uff09<\/li>\n
                                                                                                                                                                                                              • \u4f7f\u7528 Docker Secrets \u7ba1\u7406\u654f\u611f\u6570\u636e<\/li>\n
                                                                                                                                                                                                              • \u9650\u5236\u5bb9\u5668\u8d44\u6e90\uff08CPU\u3001\u5185\u5b58\uff09<\/li>\n
                                                                                                                                                                                                              • \u5b9a\u671f\u626b\u63cf\u955c\u50cf\u6f0f\u6d1e<\/li>\n<\/ul>\n
                                                                                                                                                                                                                \u2705 \u7f51\u7edc\u9694\u79bb\uff1a<\/p>\n
                                                                                                                                                                                                                  \n
                                                                                                                                                                                                                • \u4f7f\u7528\u81ea\u5b9a\u4e49\u7f51\u7edc<\/li>\n
                                                                                                                                                                                                                • \u9650\u5236\u7aef\u53e3\u66b4\u9732<\/li>\n
                                                                                                                                                                                                                • \u914d\u7f6e\u7f51\u7edc\u7b56\u7565<\/li>\n<\/ul>\n
                                                                                                                                                                                                                  \u2705 \u7248\u672c\u7ba1\u7406\uff1a<\/p>\n
                                                                                                                                                                                                                    \n
                                                                                                                                                                                                                  • \u56fa\u5b9a\u955c\u50cf\u7248\u672c<\/li>\n
                                                                                                                                                                                                                  • \u7981\u7528 latest \u6807\u7b7e<\/li>\n
                                                                                                                                                                                                                  • \u4f7f\u7528\u8bed\u4e49\u5316\u7248\u672c<\/li>\n<\/ul>\n
                                                                                                                                                                                                                    \n---\n\n
                                                                                                                                                                                                                    \u603b\u7ed3<\/h2>\n\n
                                                                                                                                                                                                                    \u6838\u5fc3\u8981\u70b9\u56de\u987e<\/h3>\n\n\u2705 Docker Compose \u4f18\u52bf<\/strong>\uff1a\u7b80\u5355\u3001\u8f7b\u91cf\u3001\u6613\u7528  \n\u2705 \u6838\u5fc3\u6982\u5ff5<\/strong>\uff1aService\u3001Volume\u3001Network\u3001Config  \n\u2705 \u751f\u4ea7\u914d\u7f6e<\/strong>\uff1a\u73af\u5883\u53d8\u91cf\u3001Secret\u3001\u5065\u5eb7\u68c0\u67e5  \n\u2705 \u9ad8\u53ef\u7528<\/strong>\uff1a\u591a\u5b9e\u4f8b\u3001\u8d1f\u8f7d\u5747\u8861\u3001\u6545\u969c\u6062\u590d  \n\u2705 \u65e5\u5fd7\u76d1\u63a7<\/strong>\uff1aPrometheus\u3001Grafana\u3001Loki  \n\u2705 \u6700\u4f73\u5b9e\u8df5<\/strong>\uff1a\u7248\u672c\u63a7\u5236\u3001CI\/CD\u3001\u5b89\u5168\u52a0\u56fa  \n\n
                                                                                                                                                                                                                    Docker Compose vs K8s \u5bf9\u6bd4<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                                                                    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
                                                                                                                                                                                                                    \n\u2502  \u9009\u62e9\u6307\u5357                                                \u2502
                                                                                                                                                                                                                    \n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524
                                                                                                                                                                                                                    \n\u2502  \u9009\u62e9 Docker Compose \u5982\u679c\uff1a                              \u2502
                                                                                                                                                                                                                    \n\u2502  \u2705 \u56e2\u961f\u89c4\u6a21 < 10 \u4eba                                      \u2502\n\u2502  \u2705 \u670d\u52a1\u6570\u91cf < 20 \u4e2a                                      \u2502\n\u2502  \u2705 \u9884\u7b97\u6709\u9650                                             \u2502\n\u2502  \u2705 \u8fd0\u7ef4\u80fd\u529b\u6709\u9650                                         \u2502\n\u2502  \u2705 \u90e8\u7f72\u5728\u5355\u8282\u70b9\u6216\u5c11\u6570\u8282\u70b9                              \u2502\n\u2502                                                          \u2502\n\u2502  \u9009\u62e9 Kubernetes \u5982\u679c\uff1a                                  \u2502\n\u2502  \u2705 \u56e2\u961f\u89c4\u6a21 > 10 \u4eba                                     \u2502
                                                                                                                                                                                                                    \n\u2502  \u2705 \u670d\u52a1\u6570\u91cf > 20 \u4e2a                                     \u2502
                                                                                                                                                                                                                    \n\u2502  \u2705 \u9700\u8981\u5f39\u6027\u4f38\u7f29                                         \u2502
                                                                                                                                                                                                                    \n\u2502  \u2705 \u591a\u533a\u57df\/\u591a\u4e91\u90e8\u7f72                                      \u2502
                                                                                                                                                                                                                    \n\u2502  \u2705 \u590d\u6742\u7684\u670d\u52a1\u7f51\u683c\u9700\u6c42                                   \u2502
                                                                                                                                                                                                                    \n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<\/p>\n
                                                                                                                                                                                                                    \n
                                                                                                                                                                                                                    \u63a8\u8350\u5de5\u4f5c\u6d41<\/h3>\n\n<\/code><\/pre>\n
                                                                                                                                                                                                                    Docker Compose \u751f\u4ea7\u90e8\u7f72\u6d41\u7a0b\uff1a<\/p>\n
                                                                                                                                                                                                                      \n
                                                                                                                                                                                                                    1. \u672c\u5730\u5f00\u53d1<\/li>\n<\/ul>\n
                                                                                                                                                                                                                         \u251c\u2500 docker-compose.yml (\u5f00\u53d1\u73af\u5883)
                                                                                                                                                                                                                      \n   \u251c\u2500 docker-compose.dev.yml (\u5f00\u53d1\u914d\u7f6e)
                                                                                                                                                                                                                      \n   \u2514\u2500 \u672c\u5730\u6d4b\u8bd5<\/p>\n
                                                                                                                                                                                                                        \n
                                                                                                                                                                                                                      1. \u6d4b\u8bd5\u73af\u5883<\/li>\n<\/ul>\n
                                                                                                                                                                                                                           \u251c\u2500 docker-compose.test.yml
                                                                                                                                                                                                                        \n   \u251c\u2500 \u81ea\u52a8\u5316\u6d4b\u8bd5
                                                                                                                                                                                                                        \n   \u2514\u2500 \u6027\u80fd\u6d4b\u8bd5<\/p>\n
                                                                                                                                                                                                                          \n
                                                                                                                                                                                                                        1. \u751f\u4ea7\u90e8\u7f72<\/li>\n<\/ul>\n
                                                                                                                                                                                                                             \u251c\u2500 docker-compose.prod.yml
                                                                                                                                                                                                                          \n   \u251c\u2500 \u591a\u5b9e\u4f8b\u90e8\u7f72
                                                                                                                                                                                                                          \n   \u251c\u2500 \u5065\u5eb7\u68c0\u67e5
                                                                                                                                                                                                                          \n   \u2514\u2500 \u76d1\u63a7\u544a\u8b66<\/p>\n
                                                                                                                                                                                                                            \n
                                                                                                                                                                                                                          1. \u6301\u7eed\u4f18\u5316<\/li>\n<\/ul>\n
                                                                                                                                                                                                                               \u251c\u2500 \u8d44\u6e90\u76d1\u63a7
                                                                                                                                                                                                                            \n   \u251c\u2500 \u6027\u80fd\u8c03\u4f18
                                                                                                                                                                                                                            \n   \u2514\u2500 \u5b9a\u671f\u66f4\u65b0
                                                                                                                                                                                                                            \n“`<\/p>\n
                                                                                                                                                                                                                            —<\/p>\n
                                                                                                                                                                                                                            *\u672c\u6587\u6863\u6700\u540e\u66f4\u65b0\u65f6\u95f4\uff1a2026 \u5e74 04 \u6708 28 \u65e5*
                                                                                                                                                                                                                            \n*\u4f5c\u8005\uff1acreator | \u9002\u7528 Docker 24.x + Compose 2.x*<\/p>\n
                                                                                                                                                                                                                            ![](https:\/\/img.freepik.com\/free-vector\/docker-compose-production-deployment-concept-illustration_114360-12345.jpg)<\/p>\n","protected":false},"excerpt":{"rendered":"
                                                                                                                                                                                                                            Docker Compose \u751f\u4ea7\u5316\uff1a\u66ff\u4ee3 K8s \u7684\u8f7b\u91cf\u7ea7\u65b9\u6848 \u5f15\u8a00 \u5728\u4e91\u539f\u751f\u751f\u6001\u4e2d\uff0cKubernetes …<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-15940","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/posts\/15940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/comments?post=15940"}],"version-history":[{"count":0,"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/posts\/15940\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/media?parent=15940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/categories?post=15940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.srclibs.com\/index.php\/wp-json\/wp\/v2\/tags?post=15940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}