调整打包部署

docker-compose.yml

@@ -1,7 +1,9 @@
 # 汽车零部件智能报价 — 两个 MCP 服务 + 鉴权管理后台 编排
 # 生产环境：docker compose up -d
-#   默认连生产库 192.168.1.206:5432，对外 192.168.1.119:8001/8002/8000
-#   8000 = mcp-auth-admin 管理后台（FastAPI + React）
+#   默认连生产库 10.100.154.100:5432，对外 10.100.154.100:8001/8002/8003/8902
+#   8001 = mcp-for-erp, 8002 = mcp-for-crm
+#   8003 = mcp-auth-backend（FastAPI 纯 API）
+#   8902 = mcp-auth-frontend（Nginx 托管 React 静态文件，/api 反代 8003）
 # 开发环境：本机直接 python server.py（不入容器）
 #   source .env.dev 后到 mcp-for-{erp,crm}/src 执行 python server.py
 #   连开发库 47.101.220.40:5432，对外 localhost:8001/8002/8000
@@ -21,16 +23,16 @@ services:
     container_name: mcp-for-erp
     network_mode: host
     environment:
-      - ERP_DB_HOST=${ERP_DB_HOST:-192.168.1.206}
+      - ERP_DB_HOST=${ERP_DB_HOST:-10.100.154.100}
       - ERP_DB_PORT=${ERP_DB_PORT:-5432}
       - ERP_DB_USER=${ERP_DB_USER:-postgres}
       - ERP_DB_PASSWORD=${ERP_DB_PASSWORD:-digiwin}
       - ERP_DB_NAME=${ERP_DB_NAME:-smart_quotation_auto}
       # 对外地址（用于 OAuth 资源元数据），按实际部署机 IP 调整
-      - MCP_PUBLIC_URL=${MCP_PUBLIC_URL_ERP:-http://192.168.1.119:8001}
+      - MCP_PUBLIC_URL=${MCP_PUBLIC_URL_ERP:-http://10.100.154.100:8001}
       # 鉴权（调用 mcp-auth 后端 API 校验，不直连鉴权库）
       # per-service API Key：由 mcp-auth 后端签发，各服务独立
-      - MCP_AUTH_API_URL=${MCP_AUTH_API_URL:-http://192.168.1.119:8000}
+      - MCP_AUTH_API_URL=${MCP_AUTH_API_URL:-http://10.100.154.100:8003}
       - MCP_AUTH_API_KEY=${ERP_MCP_AUTH_API_KEY:-change-me-erp-key}
     restart: unless-stopped
 
@@ -44,29 +46,29 @@ services:
     container_name: mcp-for-crm
     network_mode: host
     environment:
-      - CRM_DB_HOST=${CRM_DB_HOST:-192.168.1.206}
+      - CRM_DB_HOST=${CRM_DB_HOST:-10.100.154.100}
       - CRM_DB_PORT=${CRM_DB_PORT:-5432}
       - CRM_DB_USER=${CRM_DB_USER:-postgres}
       - CRM_DB_PASSWORD=${CRM_DB_PASSWORD:-digiwin}
       - CRM_DB_NAME=${CRM_DB_NAME:-smart_quotation_auto}
       # 对外地址（用于 OAuth 资源元数据），按实际部署机 IP 调整
-      - MCP_PUBLIC_URL=${MCP_PUBLIC_URL_CRM:-http://192.168.1.119:8002}
+      - MCP_PUBLIC_URL=${MCP_PUBLIC_URL_CRM:-http://10.100.154.100:8002}
       # 鉴权（调用 mcp-auth 后端 API 校验，不直连鉴权库）
       # per-service API Key：由 mcp-auth 后端签发，各服务独立
-      - MCP_AUTH_API_URL=${MCP_AUTH_API_URL:-http://192.168.1.119:8000}
+      - MCP_AUTH_API_URL=${MCP_AUTH_API_URL:-http://10.100.154.100:8003}
       - MCP_AUTH_API_KEY=${CRM_MCP_AUTH_API_KEY:-change-me-crm-key}
     restart: unless-stopped
 
-  # MCP Auth Admin — Bearer Token 动态鉴权管理后台（FastAPI + React）
-  mcp-auth-admin:
+  # MCP Auth Backend — FastAPI 纯 API 服务（端口 8003）
+  mcp-auth-backend:
     build:
-      context: ./mcp-auth
+      context: ./mcp-auth/backend
       dockerfile: Dockerfile
-    image: mcp-auth-admin:latest
-    container_name: mcp-auth-admin
+    image: mcp-auth-backend:latest
+    container_name: mcp-auth-backend
     network_mode: host
     environment:
-      - AUTH_DB_HOST=${AUTH_DB_HOST:-192.168.1.206}
+      - AUTH_DB_HOST=${AUTH_DB_HOST:-10.100.154.100}
       - AUTH_DB_PORT=${AUTH_DB_PORT:-5432}
       - AUTH_DB_USER=${AUTH_DB_USER:-postgres}
       - AUTH_DB_PASSWORD=${AUTH_DB_PASSWORD:-digiwin}
@@ -76,8 +78,20 @@ services:
       - IAM_APP_TOKEN=${IAM_APP_TOKEN:-eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpZCI6ImRhdGEtYnVzaW5lc3MtZGVtbyIsInNpZCI6MH0.Spo64LstbWxjYNefVFAbEbgfjzZoQGNcqKSGuYUOCRk}
       - IAM_CACHE_TTL=${IAM_CACHE_TTL:-30}
       # Redis 缓存配置
-      - REDIS_HOST=${REDIS_HOST:-127.0.0.1}
+      - REDIS_HOST=${REDIS_HOST:-10.100.154.100}
       - REDIS_PORT=${REDIS_PORT:-6379}
       - REDIS_DB=${REDIS_DB:-0}
       - REDIS_PASSWORD=${REDIS_PASSWORD:-digiwin}
     restart: unless-stopped
+
+  # MCP Auth Frontend — Nginx 托管 React 静态文件，/api 反代后端 8003（端口 8902）
+  mcp-auth-frontend:
+    build:
+      context: ./mcp-auth/frontend
+      dockerfile: Dockerfile
+    image: mcp-auth-frontend:latest
+    container_name: mcp-auth-frontend
+    network_mode: host
+    environment:
+      - BACKEND_URL=${BACKEND_URL:-http://10.100.154.100:8003}
+    restart: unless-stopped