mirror of
https://github.com/Awuqing/BackupX.git
synced 2026-08-28 19:47:27 +08:00
Wu Qing
5827074334
支持受限网络、正向代理、私有 CA 与 SSH 堡垒机部署 Agent。 加固 Docker、systemd、Nginx、安装器、Release 校验与可信代理边界，并完善命令队列索引、前端安装向导及中英文运维文档。
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
# BackupX Docker Compose
|
|
#
|
|
# 快速启动：docker compose up -d
|
|
# 访问地址：http://localhost:8340
|
|
#
|
|
# 生产环境建议在 .env 中固定 BACKUPX_IMAGE 版本，并通过 HTTPS 反向代理暴露服务。
|
|
|
|
services:
|
|
backupx:
|
|
image: ${BACKUPX_IMAGE:-awuqing/backupx:latest}
|
|
# build: .
|
|
container_name: backupx
|
|
restart: unless-stopped
|
|
init: true
|
|
stop_grace_period: 30s
|
|
ports:
|
|
- "${BACKUPX_BIND_ADDRESS:-0.0.0.0}:${BACKUPX_PORT:-8340}:8340"
|
|
volumes:
|
|
- backupx-data:/app/data
|
|
# 挂载需要备份的宿主机目录（按需添加，:ro 表示只读）：
|
|
# - /var/www:/mnt/www:ro
|
|
# - /etc/nginx:/mnt/nginx-conf:ro
|
|
# - /home/user/data:/mnt/data:ro
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
# 仅用于旧数据卷迁移与降权；应用进程随后以 backupx 运行。
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- SETGID
|
|
- SETUID
|
|
environment:
|
|
TZ: ${TZ:-Asia/Shanghai}
|
|
# 远程 Agent 连接 Master 时，配置为所有节点可达的稳定 HTTPS URL：
|
|
# BACKUPX_SERVER_EXTERNAL_URL: https://backup.example.com
|
|
# BACKUPX_LOG_LEVEL: debug
|
|
# BACKUPX_BACKUP_MAX_CONCURRENT: "4"
|
|
healthcheck:
|
|
test: ["CMD", "su-exec", "backupx:backupx", "wget", "-q", "-T", "3", "-O", "/dev/null", "http://127.0.0.1:8340/ready"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
volumes:
|
|
backupx-data:
|