running

docker-compose.prod.yml

@@ -36,6 +36,10 @@ services:
     build:
       context: .
       dockerfile: Dockerfile
+    # 容器内访问「宿主机上监听的 RTSP」（假流 / MediaMTX 等）需要解析 host.docker.internal。
+    # Linux 默认无该主机名；host-gateway 解析为宿主机在容器网桥上的地址（Docker 20.10+）。
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-postgres}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD}
@@ -61,6 +65,21 @@ services:
       HIKVISION_USER: ${HIKVISION_USER:-}
       HIKVISION_PASSWORD: ${HIKVISION_PASSWORD:-}
       HIKVISION_PREVIEW_RTSP_TEMPLATE: ${HIKVISION_PREVIEW_RTSP_TEMPLATE:-}
+      # OpenCV/FFmpeg 拉 RTSP：TCP 在容器 NAT/防火墙场景下比 UDP 更可靠；可用 .env 覆盖为空禁用
+      OPENCV_FFMPEG_CAPTURE_OPTIONS: ${OPENCV_FFMPEG_CAPTURE_OPTIONS:-rtsp_transport;tcp}
+      # 语音待确认：TTS/ASR 需百度；resolve 上传 WAV 还需 MinIO（见 .env.example）
+      BAIDU_APP_ID: ${BAIDU_APP_ID:-}
+      BAIDU_API_KEY: ${BAIDU_API_KEY:-}
+      BAIDU_SECRET_KEY: ${BAIDU_SECRET_KEY:-}
+      BAIDU_ASR_DEV_PID: ${BAIDU_ASR_DEV_PID:-1537}
+      MINIO_ENDPOINT: ${MINIO_ENDPOINT:-}
+      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-}
+      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-}
+      MINIO_BUCKET: ${MINIO_BUCKET:-operation-room-voice}
+      MINIO_SECURE: ${MINIO_SECURE:-false}
+      MINIO_REGION: ${MINIO_REGION:-}
+      DEMO_CORS_ENABLED: ${DEMO_CORS_ENABLED:-false}
+      DEMO_CORS_ORIGINS: ${DEMO_CORS_ORIGINS:-*}
     ports:
       - "${API_PORT:-38080}:8000"
     depends_on: