From f0e37c5e76ac41f52c29c4aaa5cd344eb4415bfc Mon Sep 17 00:00:00 2001
From: Kevin <kevin@brighteng.org>
Date: Sat, 9 May 2026 13:22:10 +0800
Subject: [PATCH] fix porduction docker file

---
 api/docker-compose.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/api/docker-compose.yml b/api/docker-compose.yml
index f177042..b3e6368 100644
--- a/api/docker-compose.yml
+++ b/api/docker-compose.yml
@@ -4,8 +4,7 @@ services:
     image: m.daocloud.io/docker.io/pgvector/pgvector:pg17
     container_name: life-echo-postgres
     ports:
-      # 宿主机端口随机，避免与本机其它 PostgreSQL 冲突；查询: docker compose port postgres 5432
-      - "127.0.0.1::5432"
+      - "127.0.0.1:5432:5432"  # 仅绑定 localhost，通过 SSH 隧道访问
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-postgres}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
@@ -57,10 +56,10 @@ services:
       dockerfile: Dockerfile
     image: life-echo-api:latest
     container_name: life-echo-api-prod
-    # 独立 Caddy 反代；绑定本机回环。未设置 LIFE_ECHO_API_HOST_PORT 时宿主机端口随机，避免与机上其它服务冲突。
-    # 需固定端口时（例如 Caddyfile）：在 .env 设置 LIFE_ECHO_API_HOST_PORT=8000；随机时查询: docker compose port api 8000
+    # 独立 Caddy（宿主机或其它 compose）经 HTTPS 反代；仅绑定本机回环，避免与机上其它项目端口直接对公网。
+    # 若与 Cosmetic 等共用主机且 8000 已被占用，在 .env 中设置 LIFE_ECHO_API_HOST_PORT=其它端口并在 Caddyfile 中一致。
     ports:
-      - "127.0.0.1:${LIFE_ECHO_API_HOST_PORT:-}:8000"
+      - "127.0.0.1:${LIFE_ECHO_API_HOST_PORT:-8000}:8000"
     env_file:
       - .env
     environment: