From c8e13742f130ba0633bb566394761fab521efee9 Mon Sep 17 00:00:00 2001
From: txai-dev <txai-dev@yzrcloud.cn>
Date: Sun, 13 Sep 2026 00:43:42 +0800
Subject: [PATCH] =?UTF-8?q?ops:=20=E6=95=B0=E6=8D=AE=E6=8C=81=E4=B9=85?=
 =?UTF-8?q?=E5=8C=96=E6=8C=82=E8=BD=BD=EF=BC=88logs/certs=20=E5=AE=BF?=
 =?UTF-8?q?=E4=B8=BB=E6=9C=BA=E7=BB=91=E5=AE=9A=EF=BC=89+=20=E5=85=A8?=
 =?UTF-8?q?=E5=AE=B9=E5=99=A8=E5=86=85=E5=AD=98=E9=99=90=E9=A2=9D=E4=B8=8E?=
 =?UTF-8?q?=E6=97=A5=E5=BF=97=E8=BD=AE=E8=BD=AC=EF=BC=8Cmongo=20WiredTiger?=
 =?UTF-8?q?=20=E7=BC=93=E5=AD=98=20256M?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitignore              |  1 +
 docker-compose.prod.yml | 34 +++++++++++++++++++++++++++++++---
 2 files changed, 32 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 3ae6ae9..f2587c3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,3 +27,4 @@ Thumbs.db
 client/src/.share-done
 admin/node_modules/
 admin/dist/
+server/data/
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 3034591..3ddf1f0 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -1,19 +1,31 @@
 # 生产独立编排：docker compose -f docker-compose.prod.yml up -d
+# 资源基线：宿主机 3.6G 内存，六容器合计限额 ~1.2G，其余留给系统/nginx/ai-art
 services:
   mongodb:
     image: mongo:7
     restart: unless-stopped
+    # WiredTiger 缓存压到 256M，配合容器限额防内存膨胀
+    command: ["--wiredTigerCacheSizeGB", "0.25"]
+    mem_limit: 512m
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
     volumes:
       - mongo_data:/data/db
-    environment:
-      - MONGO_INITDB_ROOT_USERNAME=${MONGO_USER:-wdkj}
-      - MONGO_INITDB_ROOT_PASSWORD=${MONGO_PASS:?need MONGO_PASS}
 
   dimension-server:
     image: dim-server:v1.3.1
     restart: unless-stopped
     depends_on:
       - mongodb
+    mem_limit: 384m
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
     ports:
       - "127.0.0.1:3001:3001"
     environment:
@@ -27,10 +39,20 @@ services:
       - COST_PER_WORK=${COST_PER_WORK:-10}
       - FREE_DAILY_QUOTA=${FREE_DAILY_QUOTA:-20}
       - MEMBER_DAILY_QUOTA=${MEMBER_DAILY_QUOTA:-60}
+    volumes:
+      # 运行数据持久化到宿主机（日志/微信支付证书），容器重建不丢
+      - ./server/data/logs:/app/logs
+      - ./server/data/certs:/app/certs
 
   dimension-admin:
     image: nginx:alpine
     restart: unless-stopped
+    mem_limit: 64m
+    logging:
+      driver: json-file
+      options:
+        max-size: "5m"
+        max-file: "2"
     volumes:
       - ./deploy/dist/admin:/usr/share/nginx/html:ro
       - ./deploy/nginx/admin.conf:/etc/nginx/conf.d/default.conf:ro
@@ -40,6 +62,12 @@ services:
   dimension-h5:
     image: nginx:alpine
     restart: unless-stopped
+    mem_limit: 64m
+    logging:
+      driver: json-file
+      options:
+        max-size: "5m"
+        max-file: "2"
     volumes:
       - ./deploy/dist/h5:/usr/share/nginx/html:ro
       - ./deploy/nginx/h5.conf:/etc/nginx/conf.d/default.conf:ro