docker-swarm-review

Revert "docker-swarm-review"
This reverts commit 49d2697ef4c5047934a642b0df656c5112d37509.
2026-05-13 15:27:39 +08:00 · 2026-05-13 15:27:26 +08:00 · 2026-05-13 15:27:25 +08:00 · 2026-03-02 12:38:07 +08:00 · 2025-08-21 18:57:57 +08:00 · 2025-05-08 21:24:56 +08:00
190 changed files with 19367 additions and 197 deletions
--- a/.DS_Store
+++ b/.DS_Store
--- a/README.md
+++ b/README.md
@@ -37,6 +37,11 @@ mysql -uroot -pgkxl650 zd_rescue <  ./zd_rescue.sql


 nohup mysql -uroot -pgkxl650 zd_rescue --max_allowed_packet=16777216 --net_buffer_length=16384 <  ./zd_rescue.sql > ./mysql.log  2>&1 &
+
+
+change master to master_host='192.168.10.10',master_user='repl',master_password='nczl@sino_db',master_log_file='mysql-bin.006898',master_log_pos=155;
+
+
 ```

 ## rabbitmq
--- a/ai/openai-test.py
+++ b/ai/openai-test.py
@@ -0,0 +1,5 @@
+
+from transformers import AutoTokenizer, AutoModelForSeq2SeqLM
+
+tokenizer = AutoTokenizer.from_pretrained("/opt/local/openai/whisper-large-v2")
+model = AutoModelForSeq2SeqLM.from_pretrained("bigscience/T0_3B")
--- a/ai/配置服务器.md
+++ b/ai/配置服务器.md
@@ -0,0 +1,7 @@
+1. 安装anaconda，维护python版本
+
+https://www.anaconda.com/download/success
+
+
+```wget https://repo.anaconda.com/archive/Anaconda3-2024.10-1-Linux-x86_64.sh```
+
--- a/builder-docker/.DS_Store
+++ b/builder-docker/.DS_Store
--- a/builder-docker/fastdfs/docker-compose-old.yml
+++ b/builder-docker/fastdfs/docker-compose-old.yml
@@ -0,0 +1,46 @@
+version: '3'
+services:
+  tracker:
+    image: harbor.sino-assist.com/season/fastdfs:1.2
+    container_name: tracker
+    network_mode: host
+    restart: always
+    volumes:
+      - "./tracker_data:/fastdfs/tracker/data"
+    # ports: 
+      # - "22122:22122"
+    command: "tracker" 
+ 
+  storage:
+    image: harbor.sino-assist.com/season/fastdfs:1.2
+    container_name: storage
+    network_mode: host
+    # links: 
+    #   - tracker
+    restart: always
+    volumes:
+      - "./storage.conf:/fdfs_conf/storage.conf"
+      - "./storage_base_path:/fastdfs/storage/data"
+      - "./store_path0:/fastdfs/store_path"  
+    #ports: 
+      # - "23000:23000"
+    environment:
+      TRACKER_SERVER: "192.168.1.204:22122"
+    command: "storage"
+ 
+  nginx:
+    image: harbor.sino-assist.com/season/fastdfs:1.2
+    container_name: fdfs-nginx
+    network_mode: host
+    restart: always
+    volumes:
+      - "./nginx.conf:/etc/nginx/conf/nginx.conf"
+      - "./store_path0:/fastdfs/store_path"
+    # links: 
+    #   - tracker
+    # ports: 
+      # - "8088:8088"
+    environment:
+      TRACKER_SERVER: "192.168.1.204:22122"
+    command: "nginx"
+
--- a/builder-docker/fastdfs/docker-compose.yml
+++ b/builder-docker/fastdfs/docker-compose.yml
@@ -1,46 +1,28 @@
 version: '3'
 services:
  tracker:
-    image: season/fastdfs:1.2
    container_name: tracker
+    image: ygqygq2/fastdfs-nginx:latest
+    command: tracker
    network_mode: host
-    restart: always
    volumes:
-      - "./tracker_data:/fastdfs/tracker/data"
-    # ports: 
-      # - "22122:22122"
-    command: "tracker" 
- 
-  storage:
-    image: season/fastdfs:1.2
-    container_name: storage
+      - /data/tracker:/var/fdfs
+    ports:
+      - 22122:22122
+  storage0:
+    container_name: storage0
+    image: ygqygq2/fastdfs-nginx:latest
+    command: storage
    network_mode: host
-    # links: 
-    #   - tracker
-    restart: always
-    volumes:
-      - "./storage.conf:/fdfs_conf/storage.conf"
-      - "./storage_base_path:/fastdfs/storage/data"
-      - "./store_path0:/fastdfs/store_path"  
-    #ports: 
-      # - "23000:23000"
+    extra_hosts:
+      - "tracker:192.168.1.204"
    environment:
-      TRACKER_SERVER: "192.168.1.206:22122"
-    command: "storage"
- 
-  nginx:
-    image: season/fastdfs:1.2
-    container_name: fdfs-nginx
-    network_mode: host
-    restart: always
+      - TRACKER_SERVER=tracker:22122
    volumes:
-      - "./nginx.conf:/etc/nginx/conf/nginx.conf"
-      - "./store_path0:/fastdfs/store_path"
-    # links: 
-    #   - tracker
-    # ports: 
-      # - "8088:8088"
-    environment:
-      TRACKER_SERVER: "192.168.1.206:22122"
-    command: "nginx"
+      - ./data/storage0:/var/fdfs
+      - 8080:8080
+    depends_on:
+      - tracker

+
+## https://github.com/ygqygq2/fastdfs-nginx
--- a/builder-docker/fastdfs/storage.conf
+++ b/builder-docker/fastdfs/storage.conf
@@ -111,7 +111,7 @@ subdir_count_per_path=256

 # tracker_server can ocur more than once, and tracker_server format is
 #  "host:port", host can be hostname or ip address
-tracker_server=192.168.209.121:22122
+# tracker_server=192.168.209.121:22122

 #standard log level as syslog, case insensitive, value list:
 ### emerg for emergency
--- a/builder-docker/java11/skywalking-agent/.DS_Store
+++ b/builder-docker/java11/skywalking-agent/.DS_Store
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-hikaricp-3.x-4.x-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-hikaricp-3.x-4.x-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-commons-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-commons-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-mybatis-3.x-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-mybatis-3.x-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-shardingsphere-5.0.0-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-shardingsphere-5.0.0-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threading-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threading-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threadpool-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threadpool-plugin-8.15.0.jar
--- a/builder-docker/jenkins/Dockerfile
+++ b/builder-docker/jenkins/Dockerfile
@@ -7,7 +7,7 @@ ADD gradle-8.7 /opt/gradle-8.7

 RUN curl -fsSL https://deb.nodesource.com/setup_16.x | bash -

-RUN apt-get install -y nodejs git vim curl sshpass
+RUN apt-get install -y nodejs git vim curl sshpass pigz


 # ADD node-v18.20.2-linux-x64 /usr/local/node-v18.20.2-linux-x64
--- a/builder-docker/jenkins/gradle-8.7/lib/kotlin-compiler-embeddable-1.9.22.jar
+++ b/builder-docker/jenkins/gradle-8.7/lib/kotlin-compiler-embeddable-1.9.22.jar
--- a/builder-docker/jenkins/node-v18.20.2-linux-x64/bin/node
+++ b/builder-docker/jenkins/node-v18.20.2-linux-x64/bin/node
--- a/docker-3.124/support/data/nginx/conf.d/yudao.conf
+++ b/docker-3.124/support/data/nginx/conf.d/yudao.conf
@@ -0,0 +1,11 @@
+server { ## 前端项目
+    listen       80;
+    ## server_name  admin.iocoder.cn; ## 重要！！！修改成你的前端域名
+
+    location / { ## 前端项目
+        root   /usr/share/nginx/html/yudao-ui-admin;
+        index  index.html index.htm;
+        try_files $uri $uri/ /index.html;
+    }
+
+}a
--- a/docker-3.124/support/data/nginx/conf/nginx.conf
+++ b/docker-3.124/support/data/nginx/conf/nginx.conf
@@ -0,0 +1,31 @@
+user  nginx;
+worker_processes  1;
+
+events {
+    worker_connections  1024;
+}
+
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+    sendfile        on;
+    keepalive_timeout  65;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+#    access_log  /var/log/nginx/access.log  main;
+
+    gzip on;
+    gzip_min_length 1k;     # 设置允许压缩的页面最小字节数
+    gzip_buffers 4 16k;     # 用来存储 gzip 的压缩结果
+    gzip_http_version 1.1;  # 识别 HTTP 协议版本
+    gzip_comp_level 2;      # 设置 gzip 的压缩比 1-9。1 压缩比最小但最快，而 9 相反
+    gzip_types text/plain application/x-javascript text/css application/xml application/javascript; # 指定压缩类型
+    gzip_proxied any;       # 无论后端服务器的 headers 头返回什么信息，都无条件启用压缩
+
+    include /etc/nginx/conf.d/*.conf; ## 加载该目录下的其它 Nginx 配置文件
+}
--- a/docker-3.124/support/data/redis/conf/redis.conf
+++ b/docker-3.124/support/data/redis/conf/redis.conf
@@ -0,0 +1,28 @@
+# redis 密码
+requirepass gkxl650
+
+# key 监听器配置
+# notify-keyspace-events Ex
+
+# 配置持久化文件存储路径
+dir /redis/data
+# 配置rdb
+# 15分钟内有至少1个key被更改则进行快照
+save 900 1
+# 5分钟内有至少10个key被更改则进行快照
+save 300 10
+# 1分钟内有至少10000个key被更改则进行快照
+save 60 10000
+# 开启压缩
+rdbcompression yes
+# rdb文件名 用默认的即可
+dbfilename dump.rdb
+
+# 开启aof
+appendonly yes
+# 文件名
+appendfilename "appendonly.aof"
+# 持久化策略,no:不同步,everysec:每秒一次,always:总是同步,速度比较慢
+# appendfsync always
+appendfsync everysec
+# appendfsync no
--- a/docker-3.124/support/docker-compose.yml
+++ b/docker-3.124/support/docker-compose.yml
@@ -0,0 +1,49 @@
+version: '3'
+networks:
+  sa-net:
+services:
+  mysql:
+    image: mysql:8.0.33
+    container_name: mysql
+    environment:
+      # 时区上海
+      TZ: Asia/Shanghai
+      # root 密码
+      MYSQL_ROOT_PASSWORD: gkxl650
+      # 初始化数据库(后续的初始化sql会在这个库执行)
+      # MYSQL_DATABASE: 
+    ports:
+      - "3306:3306"
+    volumes:
+      # 数据挂载
+      - ./data/mysql/data/:/var/lib/mysql/
+      # 配置挂载
+      - ./data/mysql/conf/:/etc/mysql/conf.d/
+    command:
+      # 将mysql8.0默认密码策略 修改为 原先 策略 (mysql8.0对其默认策略做了更改 会导致密码无法匹配)
+      --default-authentication-plugin=mysql_native_password
+      --character-set-server=utf8mb4
+      --collation-server=utf8mb4_general_ci
+      --explicit_defaults_for_timestamp=true
+      --lower_case_table_names=1
+    privileged: true
+    networks:
+      - sa-net
+  redis:
+    image: redis:6.2.12
+    container_name: redis
+    ports:
+      - "6379:6379"
+    environment:
+      # 时区上海
+      TZ: Asia/Shanghai
+    volumes:
+      # 配置文件
+      - ./data/redis/conf:/redis/config:rw
+      # 数据文件
+      - ./data/redis/data/:/redis/data/:rw
+    command: "redis-server /redis/config/redis.conf"
+    privileged: true
+    networks:
+      - sa-net
+  
--- a/docker-compose-3.111/snoarqube/docker-compose.yml
+++ b/docker-compose-3.111/snoarqube/docker-compose.yml
@@ -0,0 +1,37 @@
+
+services:
+  postgresql:
+    image: docker.io/bitnami/postgresql:latest
+    ports:
+      - '5432:5432'
+    volumes:
+      - './data/postgresql:/bitnami/postgresql'
+    environment:
+      # ALLOW_EMPTY_PASSWORD is recommended only for development.
+      - ALLOW_EMPTY_PASSWORD=yes
+      - POSTGRESQL_USERNAME=bn_sonarqube
+      - POSTGRESQL_DATABASE=bitnami_sonarqube
+      - POSTGRESQL_PASSWORD=bn_sonarqube
+      - TZ=Asia/Shanghai
+  sonarqube:
+    image: docker.io/bitnami/sonarqube:25
+    ports:
+      - '9010:9000'
+    volumes:
+      - './data/sonarqube/sonarqube:/bitnami/sonarqube'
+      - './data/sonarqube/data:/opt/bitnami/sonarqube/data'
+      - './data/sonarqube/extensions:/opt/bitnami/sonarqube/extensions'
+      - './data/sonarqube/temp:/opt/bitnami/sonarqube/temp'
+      - './data/sonarqube/logs:/opt/bitnami/sonarqube/logs'
+    depends_on:
+      - postgresql
+    environment:
+      # ALLOW_EMPTY_PASSWORD is recommended only for development.
+      - ALLOW_EMPTY_PASSWORD=yes
+      - SONARQUBE_DATABASE_HOST=postgresql
+      - SONARQUBE_DATABASE_PORT_NUMBER=5432
+      - SONARQUBE_DATABASE_USER=bn_sonarqube
+      - SONARQUBE_DATABASE_NAME=bitnami_sonarqube
+      - SONARQUBE_DATABASE_PASSWORD=bn_sonarqube
+      - TZ=Asia/Shanghai
+
--- a/docker-compose-3.111/snoarqube/test
+++ b/docker-compose-3.111/snoarqube/test
@@ -0,0 +1,36 @@
+services:
+  sonarqube:
+    image: sonarqube:community
+    hostname: sonarqube
+    container_name: sonarqube
+    read_only: true
+    depends_on:
+      db:
+        condition: service_healthy
+    environment:
+      SONAR_JDBC_URL: jdbc:postgresql://db:5432/sonar
+      SONAR_JDBC_USERNAME: sonar
+      SONAR_JDBC_PASSWORD: sonar
+    volumes:
+      - ./data/sonarqube/data:/opt/sonarqube/data
+      - ./data/sonarqube/extensions:/opt/sonarqube/extensions
+      - ./data/sonarqube/logs:/opt/sonarqube/logs
+      - ./data/sonarqube/temp:/opt/sonarqube/temp
+    ports:
+      - "9010:9000"
+  db:
+    image: postgres:17
+    healthcheck:
+      test: [ "CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}" ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    hostname: postgresql
+    container_name: postgresql
+    environment:
+      POSTGRES_USER: sonar
+      POSTGRES_PASSWORD: sonar
+      POSTGRES_DB: sonar
+    volumes:
+      - ./data/postgresql:/var/lib/postgresql
+      - ./data/postgresql_data:/var/lib/postgresql/data
--- a/docker-compose-3.129/Untitled-12.seqdiag
+++ b/docker-compose-3.129/Untitled-12.seqdiag
@@ -0,0 +1,25 @@
+```mermaid
+sequenceDiagram
+    participant 服务商系统
+    participant 中道系统
+    
+    服务商系统->>中道系统: 提交司机信息（/provider/driver-info）
+    中道系统-->>服务商系统: 返回受理结果
+    
+    alt 数据校验失败
+        中道系统-->>服务商系统: code=2001
+    else 校验通过
+        中道系统->>中道系统: 状态变更为「认证中」
+        
+        loop 核验流程
+            中道系统->>中道系统: 人工审核/系统核验
+        end
+        
+        中道系统->>服务商系统: POST核验通知（/provider/verification-notify）
+        
+        alt 核验成功
+            服务商系统->>服务商系统: 锁定认证字段
+        else 核验失败/过期
+            服务商系统->>服务商系统: 开放对应修改权限
+        end
+    end
--- a/docker-compose-3.129/funasr/docker-compose.yml
+++ b/docker-compose-3.129/funasr/docker-compose.yml
@@ -0,0 +1,17 @@
+networks:
+  funasr:
+    external: false
+services:
+  server:
+    image:  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-online-cpu-0.1.11
+    networks:
+      - funasr
+    ports:
+      - 10096:10095
+    privileged: true
+    environment:
+      - TZ=Asia/Shanghai
+    volumes:
+      - ./funasr-runtime-resources/models://workspace/models
+
+
--- a/docker-compose-3.129/kong/docker-compose.yml
+++ b/docker-compose-3.129/kong/docker-compose.yml
@@ -0,0 +1,94 @@
+version: '2'
+networks:
+  kong-net:
+    driver: bridge
+services:
+  kong-database:
+    image: postgres:9.6
+    container_name: kong-database
+    restart: always
+    networks:
+      - kong-net
+    environment:
+      POSTGRES_USER: kong
+      POSTGRES_DB: kong
+      POSTGRES_PASSWORD: kong
+    ports:
+      - "5432:5432"
+#kong数据库的初始化
+  kong-migration:
+    container_name: kong-migration
+    image: kong:latest
+    command: "kong migrations bootstrap"
+    networks:
+      - kong-net
+    restart: on-failure
+    environment:
+      KONG_PG_HOST: kong-database
+      KONG_DATABASE: postgres
+      KONG_PG_USER: kong
+      KONG_PG_PASSWORD: kong
+      KONG_CASSANDRA_CONTACT_POINTS: kong-database
+    links:
+      - kong-database
+    depends_on:
+      - kong-database
+
+  # 启动kong
+  kong:
+    container_name: kong
+    image: kong:latest
+    restart: always
+    networks:
+      - kong-net
+    environment:
+      TZ: Asia/Shanghai
+      KONG_DATABASE: postgres
+      KONG_PG_HOST: kong-database
+      KONG_PG_USER: kong
+      KONG_PG_PASSWORD: kong
+      KONG_CASSANDRA_CONTACT_POINTS: kong-database
+      KONG_PROXY_ACCESS_LOG: /dev/stdout
+      KONG_ADMIN_ACCESS_LOG: /dev/stdout
+      KONG_PROXY_ERROR_LOG: /dev/stderr
+      KONG_ADMIN_ERROR_LOG: /dev/stderr
+      KONG_ADMIN_LISTEN: 0.0.0.0:8001, 0.0.0.0:8444
+    depends_on:
+      - kong-migration
+      - kong-database
+    ports:
+      - "8001:8001"
+      - "8000:8000"
+      - "8443:8443"
+      - "8444:8444"
+#konga数据库的初始化
+  konga-prepare:
+    container_name: konga-prepare
+    image: pantsel/konga:latest
+    command: "-c prepare -a postgres -u postgresql://kong:kong@kong-database:5432/konga"
+    networks:
+      - kong-net
+    restart: on-failure
+    links:
+      - kong-database
+    depends_on:
+      - kong
+      - kong-database
+#postgres数据库存储数据
+  konga:
+    container_name: konga
+    image: pantsel/konga:latest
+    restart: always
+    networks:
+      - kong-net
+    environment:
+      DB_ADAPTER: postgres
+      DB_HOST: kong-database
+      DB_USER: kong
+      DB_DATABASE: konga
+      DB_PASSWORD: kong
+    depends_on:
+      - kong
+      - kong-database
+    ports:
+      - "1337:1337"
--- a/docker-compose-3.129/readme.MD
+++ b/docker-compose-3.129/readme.MD
@@ -0,0 +1,41 @@
+1. tts服务 https://github.com/remsky/Kokoro-FastAPI
+
+git clone https://github.com/remsky/Kokoro-FastAPI.git
+cd Kokoro-FastAPI
+
+cd docker/gpu  # For GPU support
+# or cd docker/cpu  # For CPU support
+docker compose up --build
+
+# Models will auto-download, but if needed you can manually download:
+python docker/scripts/download_model.py --output api/src/models/v1_0
+
+# Or run directly via UV:
+./start-gpu.sh  # For GPU support
+./start-cpu.sh  # For CPU support
+
+
+
+2. ASR服务   https://github.com/modelscope/FunASR/blob/main/runtime/docs/SDK_advanced_guide_offline_en_zh.md
+
+镜像启动
+通过下述命令拉取并启动FunASR runtime-SDK的docker镜像：
+
+sudo docker pull \
+  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-en-cpu-0.1.7
+mkdir -p ./funasr-runtime-resources/models
+sudo docker run -p 10097:10095 -it --privileged=true \
+  -v $PWD/funasr-runtime-resources/models:/workspace/models \
+  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-en-cpu-0.1.7
+服务端启动
+docker启动之后，启动 funasr-wss-server服务程序：
+
+cd FunASR/runtime
+nohup bash run_server.sh \
+  --download-model-dir /workspace/models \
+  --vad-dir damo/speech_fsmn_vad_zh-cn-16k-common-onnx \
+  --model-dir damo/speech_paraformer-large_asr_nat-en-16k-common-vocab10020-onnx  \
+  --punc-dir damo/punc_ct-transformer_cn-en-common-vocab471067-large-onnx  > log.txt 2>&1 &
+
+# 如果您想关闭ssl，增加参数：--certfile 0
+服务端详细参数介绍可参考服务端用法详解
--- a/docker-compose-3.129/test.md
+++ b/docker-compose-3.129/test.md
@@ -0,0 +1,115 @@
+### 测试人员试用期考试题目
+
+---
+
+#### 一、选择题（每题5分，共10题）
+
+1. **（技术）以下哪种测试方法主要用于验证软件是否符合需求文档中的功能描述？**  
+   A. 白盒测试  
+   B. 黑盒测试  
+   C. 灰盒测试  
+   D. 单元测试  
+
+2. **（经验）在测试过程中发现一个偶现的缺陷，但无法稳定复现，此时应如何处理？**  
+   A. 直接忽略该缺陷  
+   B. 记录缺陷并注明“偶现”  
+   C. 要求开发立即修复  
+   D. 不提交缺陷报告  
+
+3. **（规范）以下哪种命名方式符合测试用例的规范要求？**  
+   A. Test_Case_1  
+   B. TC_Login_ValidCredentials  
+   C. Case123  
+   D. LoginTest  
+
+4. **（技术）以下哪项是性能测试工具？**  
+   A. JIRA  
+   B. Selenium  
+   C. JMeter  
+   D. Postman  
+
+5. **（经验）测试用例设计中，等价类划分法的核心目的是：**  
+   A. 减少测试用例数量  
+   B. 覆盖所有可能的输入组合  
+   C. 仅测试边界值  
+   D. 验证用户界面  
+
+6. **（规范）测试文档中，以下哪项内容属于测试计划的必要组成部分？**  
+   A. 缺陷统计表  
+   B. 测试范围与目标  
+   C. 测试用例详细步骤  
+   D. 开发人员名单  
+
+7. **（技术）自动化测试脚本的维护成本较高的主要原因是：**  
+   A. 脚本语言复杂  
+   B. 需求频繁变更导致脚本失效  
+   C. 测试人员能力不足  
+   D. 开发工具限制  
+
+8. **（经验）在敏捷开发模式下，测试人员的主要职责不包括：**  
+   A. 参与需求评审  
+   B. 编写用户手册  
+   C. 执行每日构建测试  
+   D. 设计测试用例  
+
+9. **（规范）以下哪种行为违反了缺陷管理规范？**  
+   A. 缺陷描述中包含复现步骤和实际结果  
+   B. 将多个相似缺陷合并为一个报告  
+   C. 缺陷状态标记为“已关闭”后不再验证  
+   D. 使用优先级和严重程度区分缺陷  
+
+10. **（技术）以下哪项是安全测试的典型场景？**  
+    A. 验证用户登录功能  
+    B. 检测SQL注入漏洞  
+    C. 测量系统响应时间  
+    D. 检查界面布局兼容性  
+
+---
+
+#### 二、填空题（每题3分，共5题）
+
+1. **（技术）测试用例的三大核心组成部分是：______、测试步骤、预期结果。**  
+2. **（规范）测试计划中应明确测试的______、资源分配、风险评估和交付物。**  
+3. **（经验）BUG的生命周期通常包括新建、______、修复、验证、关闭。**  
+4. **（技术）性能测试中，TPS的全称是______。**  
+5. **（规范）代码审查时，应重点关注______、可维护性和潜在风险。**  
+
+---
+
+#### 三、简答题（每题5分，共7题）
+
+1. **（技术）请简述黑盒测试与白盒测试的核心区别。**  
+2. **（经验）如何设计一个高覆盖率的登录功能测试用例？**  
+3. **（规范）测试人员在提交缺陷报告时需包含哪些关键信息？**  
+4. **（技术）什么是回归测试？在什么情况下需要执行回归测试？**  
+5. **（经验）当开发人员不认可你提交的缺陷时，应如何处理？**  
+6. **（规范）测试用例评审的参与方通常包括哪些角色？**  
+7. **（技术）请列举3种常见的接口测试工具。**  
+
+---
+
+### 标准答案
+
+#### 一、选择题  
+1. B  2. B  3. B  4. C  5. A  
+6. B  7. B  8. B  9. C  10. B  
+
+#### 二、填空题  
+1. 用例编号/名称  
+2. 测试范围  
+3. 确认/分配  
+4. Transactions Per Second（每秒事务数）  
+5. 代码逻辑  
+
+#### 三、简答题  
+1. **黑盒测试**关注功能是否符合需求，不关注内部代码；**白盒测试**基于代码结构设计用例，验证逻辑正确性。  
+2. 设计用例需覆盖：有效/无效用户名密码、空输入、特殊字符、密码加密、错误提示、多次失败锁定等场景。  
+3. 缺陷标题、复现步骤、实际结果、预期结果、环境信息、截图/日志、严重程度、优先级。  
+4. **回归测试**用于验证代码修改未引入新缺陷。需执行的情况：需求变更、缺陷修复、版本迭代后。  
+5. 提供更详细的复现步骤和日志；沟通需求文档或设计规范；若仍有争议，可请团队负责人或产品经理仲裁。  
+6. 测试人员、开发人员、产品经理、项目经理。  
+7. Postman、JMeter、SoapUI、Swagger（任选3个）。  
+
+--- 
+
+试卷设计覆盖技术能力、实际经验和规范意识，适用于评估测试人员的综合能力。
--- a/docker-swarm-review/10.5x环境配置记录/0.使用阿里云的源.md
+++ b/docker-swarm-review/10.5x环境配置记录/0.使用阿里云的源.md
@@ -0,0 +1,15 @@
+更换yum源为阿里云的yum源，因为后续Centos7可能也会停止官方的yum源支持，所以需要手动更换
+
+备份官方yum源配置文件：
+
+cp /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.bak
+
+下载阿里云yum源配置文件：
+
+curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
+
+4、清除缓存生产新的缓存
+
+yum clean all
+
+yum makecache
--- a/docker-swarm-review/10.5x环境配置记录/1.
+++ b/docker-swarm-review/10.5x环境配置记录/1.
@@ -0,0 +1,92 @@
+1、卸载旧版本
+执行如下指令对旧版本进行卸载：
+
+sudo yum remove docker \
+ docker-client \
+ docker-client-latest \
+ docker-common \
+ docker-latest \
+ docker-latest-logrotate \
+ docker-logrotate \
+ docker-engine
+执行完毕后，如果输入docker version发现docker依然还存在，则说明当前机器上存在的是历史版本，输入如下指令进行卸载即可：
+
+sudo yum remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin docker-ce-rootless-extras
+
+在卸载完毕后，也要对之前的数据进行清理（这里是默认路径，如果自己更改过的话，则需要清理自己更改后的数据所在路径）:
+
+sudo rm -rf /var/lib/docker
+sudo rm -rf /var/lib/containerd
+
+2、配置仓库
+这里我们可以借助yum-config-manager这个工具来实现仓库的配置，在利用之前，先下载一个yum工具包
+
+sudo yum install -y yum-utils
+
+在安装完毕后，输入如下指令进行配置：
+
+sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
+
+接下来为了提高安装速度，我们进行配置使用国内源，输入如下指令：
+
+ ### sed -i 's@//download.docker.com@//mirrors.ustc.edu.cn/docker-ce@g' /etc/yum.repos.d/docker-ce.repo
+
+  sed -i 's@//download.docker.com@//mirrors.aliyun.com/docker-ce@g' /etc/yum.repos.d/docker-ce.repo
+
+
+3、安装
+输入如下指令，进行docker安装：
+
+sudo yum install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin  d 
+
+设置日志大小
+
+vim /etc/docker/daemon.json
+<!-- 
+{
+    "log-opts": {"max-size":"1g", "max-file":"3"},
+    "registry-mirrors": ["https://dockerproxy.net"]
+} -->
+
+{
+    "log-opts": {"max-size":"1g", "max-file":"3"},
+    "registry-mirrors": ["https://docker.hlmirror.com"]
+}
+
+systemctl reload docker 
+
+
+4、启动docker
+安装完毕后，进行启动，先输入如下指令加载配置：
+
+    sudo systemctl daemon-reload
+
+接下来启动服务：
+
+sudo systemctl start docker
+
+启动完毕后我们可以输入如下指令，查看是否已经启动：
+
+systemctl status docker
+
+systemctl enable docker
+
+5. 停用firewalld
+
+```
+[root@ZD-CRM1 ~]# systemctl stop  firewalld
+[root@ZD-CRM1 ~]# systemctl disable firewalld
+```
+
+
+6. ulimit 
+
+ulimit -SHn 65536
+
+
+vim /etc/security/limits.conf 
+
+
+* soft nofile 65535
+* hard nofile 65535
+
--- a/docker-swarm-review/10.5x环境配置记录/2.
+++ b/docker-swarm-review/10.5x环境配置记录/2.
@@ -0,0 +1,28 @@
+1. 10.51上执行 docker swarm init
+```
+[root@ZD-CRM1 ~]# docker swarm init
+Swarm initialized: current node (pbbaiutisn0vsvwt8tfxwusev) is now a manager.
+
+To add a worker to this swarm, run the following command:
+
+    docker swarm join --token SWMTKN-1-2jliqh8rns5afbnzrrwr036p7c0kkj38188290at4xb35zgctg-ek7ku7qskkfiu2pl0dmu8q5v6 192.168.10.51:2377
+
+To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.
+```
+
+2. 其他机器执行上面的 docker swarm join 
+
+```
+  docker swarm join --token SWMTKN-1-2jliqh8rns5afbnzrrwr036p7c0kkj38188290at4xb35zgctg-ek7ku7qskkfiu2pl0dmu8q5v6 192.168.10.51:2377
+
+```
+
+3. 10.51上查看集群情况
+
+```
+[root@ZD-CRM1 ~]# docker node ls
+ID                            HOSTNAME   STATUS    AVAILABILITY   MANAGER STATUS   ENGINE VERSION
+pbbaiutisn0vsvwt8tfxwusev *   ZD-CRM1    Ready     Active         Leader           25.0.1
+je9g46e68diiryiz1cddd7765     ZD-CRM2    Ready     Active                          25.0.1
+fqim3l4inkscd4px8jzi9j7nc     ZD-CRM3    Ready     Active                          25.0.1
+```
--- a/docker-swarm-review/10.5x环境配置记录/3.
+++ b/docker-swarm-review/10.5x环境配置记录/3.
@@ -0,0 +1,101 @@
+
+## 基础配置
+
+### 1. 初始化网路 review
+  docker network create \
+    --driver=overlay \
+    --subnet=10.17.0.0/16 \
+    --scope swarm \
+    --attachable \
+    review
+
+### 2. [portainer](../portainer) 管理工具
+   
+  docker stack deploy --compose-file docker-compose.yml portainer
+
+  管理界面： https://192.168.10.51:9443
+
+  页面出现报错，docker service update portainer_agent --force
+
+
+### 3. [monitor](../monitor)
+
+  用于 grafana 监控
+
+  管理界面： 192.168.10.51:3000
+  admin gkxl2024#@
+
+## 软件包 
+
+部署方法均参见文件夹内readme，变量在对于的env文件。
+
+### 1. [rabbitmq](../rabbitmq) 
+  管理界面： 192.168.10.51:15672
+  
+  内部：review_rabbitmq_stats:5672,review_rabbitmq_queue1:5672,review_rabbitmq_queue2:5672
+  
+  stomp-url：192.168.10.51:15674
+
+### 2. [xxl-job-adin](../xxl-job-admin)
+
+  管理界面： 192.168.10.51:9991
+  
+  内部：review-xxl-job-admin:8080
+
+
+### 3. [nacos](../nacos-cluser)
+
+  管理界面： http://192.168.10.51:25848/nacos/
+
+
+### 4. [redis](../redis-review-50)
+
+  端口：192.168.10.51:6379
+
+  内部：review_redis_redis-sentinel:16379
+
+### 5. [elasticsearch](../elasticsearch)
+
+  管理界面： 192.168.10.51:5601
+
+  外部端口： 192.168.10.51:9200
+
+  内部端口： review-es-elasticsearch:9200
+
+### 6. [log](../log)
+
+  无管理界面，仅需要加载对于的volumes：review-log
+
+### 7. [elasticsearch](../mysql-repl-tool)
+
+  管理界面： 192.168.10.51:5601
+
+  外部端口： 192.168.10.51:9200
+  
+  内部端口： review-es-elasticsearch:9200
+
+### 8. [skywalking](../skywalking)
+
+  管理界面： 192.168.10.51:18080
+
+  内部端口： review-skywalking-oap:11800
+
+
+### 8. [mysql](../mysql-repl-tool)
+
+  用于 [nacos](../nacos-cluser/mysql-schema.sql)，xxl-job
+
+  管理界面： 192.168.10.51:25306
+
+  内部端口： review-tool-mysql-master:3306  review-tool-mysql-salve:3306
+
+
+## 其余服务
+
+[clickhouse](../clickhouse) 应用于服务 3.123
+
+[datart](../datart)  依赖的服务，其中mysql服务bi正在使用，在3.123上
+
+[jenkins](../jenkins) 3.120上专门用于部署
+
+[canal](../canal) 用于数据同步只clickhouse，在3.120
--- a/docker-swarm-review/10.5x环境配置记录/portainer_template.json
+++ b/docker-swarm-review/10.5x环境配置记录/portainer_template.json
@@ -0,0 +1,105 @@
+{
+    "version": "3",
+    "templates": [
+        {
+            "id": 52,
+            "type": 2,
+            "title": "nacos cluser",
+            "description": "nacos集群",
+            "categories": ["开发组件"],
+            "platform": "linux",
+            "logo": "",
+            "repository": {
+              "url": "https://git.sino-assist.com/sa-charts/",
+              "stackfile": "docker-swarm/nacos-cluser/cluster-docker-compose.yml"
+            },
+            "env": [
+              {
+                "name": "NAMESPACE",
+                "label": "NAMESPACE",
+                "default": "review"
+              },
+              {
+                "name": "NACOS_VERSION",
+                "label": "NACOS_VERSION",
+                "default": "v2.3.0"
+              },
+              {
+                "name": "NODE_PORT_11",
+                "label": "NODE_PORT_11",
+                "default": "21848"
+              },
+              {
+                "name": "NODE_PORT_12",
+                "label": "NODE_PORT_12",
+                "default": "22848"
+              },
+              {
+                "name": "NODE_PORT_13",
+                "label": "NODE_PORT_13",
+                "default": "22849"
+              },
+              {
+                "name": "NODE_PORT_21",
+                "label": "NODE_PORT_21",
+                "default": "23848"
+              },
+              {
+                "name": "NODE_PORT_22",
+                "label": "NODE_PORT_22",
+                "default": "24848"
+              },
+              {
+                "name": "NODE_PORT_23",
+                "label": "NODE_PORT_23",
+                "default": "24849"
+              },
+              {
+                "name": "NODE_PORT_31",
+                "label": "NODE_PORT_31",
+                "default": "25848"
+              },
+              {
+                "name": "NODE_PORT_32",
+                "label": "NODE_PORT_32",
+                "default": "26848"
+              },
+              {
+                "name": "NODE_PORT_33",
+                "label": "NODE_PORT_33",
+                "default": "26849"
+              },
+              {
+                "name": "MYSQL_SERVICE_HOST",
+                "label": "MYSQL_SERVICE_HOST",
+                "default": "review-tool-mysql-master"
+              },
+              {
+                "name": "MYSQL_SERVICE_USER",
+                "label": "MYSQL_SERVICE_USER",
+                "default": "zd_tool"
+              },
+              {
+                "name": "MYSQL_SERVICE_PASSWORD",
+                "label": "MYSQL_SERVICE_PASSWORD",
+                "default": "gkxl2024#@"
+              },
+              {
+                "name": "NACOS_AUTH_IDENTITY_KEY",
+                "label": "NACOS_AUTH_IDENTITY_KEY",
+                "default": "nacos"
+              },
+              {
+                "name": "NACOS_AUTH_IDENTITY_VALUE",
+                "label": "NACOS_AUTH_IDENTITY_VALUE",
+                "default": "gkxl2024#@"
+              },
+              {
+                "name": "NACOS_AUTH_TOKEN",
+                "label": "NACOS_AUTH_TOKEN",
+                "default": "OTg1NjRzZnJ0Z2RmZzIwMjQ1NTU1NTExZWZnZGVmZGVz"
+              }
+            ]
+          }
+    ]
+}
--- a/docker-swarm-review/10.5x环境配置记录/前期处理.md
+++ b/docker-swarm-review/10.5x环境配置记录/前期处理.md
@@ -0,0 +1,2 @@
+1. redis的数据需要全部切换为无状态
+2. 
--- a/docker-swarm-review/Dockerfile
+++ b/docker-swarm-review/Dockerfile
@@ -0,0 +1,30 @@
+FROM harbor.sino-assist.com/marsal1212/java11:latest as builder
+
+ENV active_profile ''
+ENV nacos_address ''
+ENV nacos_password ''
+ENV project_name ''
+ENV namespace ''
+ENV params '-Dserver.port=8080'
+ARG FILE_JAR
+
+ENV TZ=Asia/Shanghai
+RUN cp /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
+
+WORKDIR application
+
+COPY $FILE_JAR application.jar
+RUN java -Djarmode=layertools -jar application.jar extract
+
+
+FROM harbor.sino-assist.com/marsal1212/java11:latest
+WORKDIR application
+VOLUME /tmp
+COPY --from=builder application/dependencies/ ./
+COPY --from=builder application/spring-boot-loader/ ./
+COPY --from=builder application/snapshot-dependencies/ ./
+COPY --from=builder application/application/ ./
+#ENTRYPOINT ["java", "org.springframework.boot.loader.JarLauncher"]
+
+ENTRYPOINT java -javaagent:/skywalking-agent/skywalking-agent.jar -DSW_AGENT_NAMESPACE=$namespace -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name  -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address $params -Dfile.encoding=UTF-8  org.springframework.boot.loader.JarLauncher
+#ENTRYPOINT java -javaagent:/skywalking-agent/skywalking-agent.jar -DSW_AGENT_NAMESPACE=$namespace -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name  -Dserver.port=8080 -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address  -Dfile.encoding=UTF-8  org.springframework.boot.loader.JarLauncher
--- a/docker-swarm-review/build.gradle
+++ b/docker-swarm-review/build.gradle
@@ -0,0 +1,338 @@
+import java.time.Instant
+import java.time.format.DateTimeFormatter
+
+plugins {
+    id 'org.springframework.boot' version '2.7.18' apply false
+    id 'io.spring.dependency-management' version '1.1.0' apply false
+    id 'com.github.shalousun.smart-doc' version '2.6.9' apply false
+    id "org.sonarqube" version "4.0.0.2929"
+    id 'com.google.cloud.tools.jib' version '3.3.2' apply false
+}
+
+ext { // 自定义扩展 字段 这里定义版本信息
+    jjwtVersion = '0.11.1'
+    mapstructPlusVersion = '1.2.4'
+    jacksonVersion = '2.17.1'
+    woodstoxVersion = '6.6.2'
+    lombokVersion = '1.18.32'
+    guavaVersion = '33.2.0-jre'
+    slf4jVersion = '1.7.36'
+    log4jVersion = '1.2.17'
+    springCloudVersion = '2021.0.9'
+    springCloudAlibabaVersion = '2021.0.6.0'
+    springBootVersion = '2.7.18'
+    junitVersion = '5.9.3'
+    skywalkingVersion = '8.15.0'
+    canalVersion = '1.1.5'
+    mysqlVersion = '8.0.27'
+    colaVersion = '4.0.1'
+    pagehelperVersion = '1.4.7'
+    smartDocVersion = '2.6.9'
+    hibernateValidatorVersion = '8.0.1.Final'
+    javaxAnnotationVersion = '1.3.2'
+    prometheusVersion = '1.10.4'
+    minioVersion = '8.5.4'
+    easyexcelVersion = '3.3.1'
+    hutoolVersion = '5.8.18'
+    zxingVersion = '3.4.0'
+    shardingsphereVersion = '5.2.1'
+    snakeyamlVersion = '1.33'
+    oauth2AuthorizationServerVersion = '0.4.1'
+    springSecurityVersion = '5.8.2'
+    wxJavaVersion = '4.4.0'
+    bootAdminVersion = '2.7.15'
+    fastjsonVersion = '1.2.83'
+    curvesapiVersion = '1.06'
+    jeepayVersion = '1.5.0'
+}
+
+
+
+//配置所有项目公共内容
+allprojects {
+    group 'com.sa'
+    version '1.1-SNAPSHOT'
+
+    //配置仓库
+    repositories {
+        maven {
+            url 'https://maven.aliyun.com/repository/public'
+        }
+        maven {
+            url 'https://oss.sonatype.org/content/groups/public/'
+        }
+        maven {
+            url 'https://maven.sino-assist.com/repository/thirdparty/'
+        }
+        mavenLocal()
+        mavenCentral()
+    }
+}
+
+
+def pomProjects = ['starters', 'infra-config', 'job', 'interface', 'infra', 'infra', 'admin', 'search', 'doc', 'commons', 'ns']
+
+def bootRunProjects = [
+        'data-search', 'gps-data', 'data-statistics', 'data-report', 'boot-admin',
+        'zgs-manager', 'return-order', 'aggregation',  'api-gate', 'sa-uaa', 'supplier-setting',
+        'finance-connector', 'sa-gateway', 'export-app', 'sa-response', 'sa-api',
+        'sa-app', 'sa-admin', 'gps-pass', 'file-oss', 'supplier-app','call-center','toc-user-client','supplier-manage'
+]
+
+static def getMainClass(project) {
+    if (project.hasProperty('mainClassName')) {
+        return project.mainClassName
+    } else {
+        return null
+    }
+}
+
+//配置子工程
+subprojects {
+
+    if (!pomProjects.contains(it.name)) {
+        apply plugin: "io.spring.dependency-management"
+        apply plugin: "java"
+
+        // 设置编码格式
+        tasks.withType(JavaCompile).configureEach {
+            options.encoding = "UTF-8"
+            java {
+                sourceCompatibility = "8"
+                targetCompatibility = "8"
+            }
+        }
+
+        dependencyManagement {
+            resolutionStrategy {
+                cacheChangingModulesFor 0, 'seconds'
+            }
+            imports {
+                mavenBom "com.alibaba.cloud:spring-cloud-alibaba-dependencies:${springCloudAlibabaVersion}"
+                mavenBom "org.springframework.cloud:spring-cloud-dependencies:${springCloudVersion}"
+                mavenBom "org.springframework.boot:spring-boot-dependencies:${springBootVersion}"
+                mavenBom "com.fasterxml.jackson:jackson-bom:${jacksonVersion}"
+//                mavenBom "org.springframework.security:spring-security-bom:${springSecurityVersion}"
+            }
+
+            dependencies {
+                dependency "org.slf4j:slf4j-api:${slf4jVersion}"
+                dependency "log4j:log4j:${log4jVersion}"
+                dependency "com.alibaba.otter:canal.client:${canalVersion}"
+                dependency "com.alibaba.otter:canal.protocol:${canalVersion}"
+                dependency "mysql:mysql-connector-java:${mysqlVersion}"
+                dependency "com.github.pagehelper:pagehelper-spring-boot-starter:${pagehelperVersion}"
+                dependency "com.github.shalousun:smart-doc:${smartDocVersion}"
+                dependency "org.hibernate:hibernate-validator:${hibernateValidatorVersion}"
+                dependency "javax.annotation:javax.annotation-api:${javaxAnnotationVersion}"
+                dependency "org.projectlombok:lombok:${lombokVersion}"
+                dependency "io.micrometer:micrometer-registry-prometheus:${prometheusVersion}"
+                dependency "io.minio:minio:${minioVersion}"
+                dependency "com.alibaba:easyexcel:${easyexcelVersion}"
+                dependency "com.alibaba:easyexcel-core:${easyexcelVersion}"
+                dependency "cn.hutool:hutool-core:${hutoolVersion}"
+                dependency "cn.hutool:hutool-all:${hutoolVersion}"
+                dependency "com.alibaba:fastjson:${fastjsonVersion}"
+                dependency "com.google.zxing:core:${zxingVersion}"
+                dependency "com.google.zxing:javase:${zxingVersion}"
+                dependency "org.yaml:snakeyaml:${snakeyamlVersion}"
+                dependency "org.apache.shardingsphere:shardingsphere-jdbc-core-spring-boot-starter:${shardingsphereVersion}"
+                dependency "org.springframework.security:spring-security-oauth2-authorization-server:${oauth2AuthorizationServerVersion}"
+                dependency "com.github.binarywang:weixin-java-pay:${wxJavaVersion}"
+                dependency "com.github.binarywang:weixin-java-miniapp:${wxJavaVersion}"
+                dependency "de.codecentric:spring-boot-admin-starter-client:${bootAdminVersion}"
+                dependency "com.github.binarywang:weixin-java-mp:${wxJavaVersion}"
+                dependency "com.jeequan:jeepay-sdk-java:${jeepayVersion}"
+                dependency "com.google.guava:guava:${guavaVersion}"
+                dependency "org.apache.skywalking:apm-toolkit-logback-1.x:${skywalkingVersion}"
+                dependency "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-smile:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.datatype:jackson-datatype-jdk8:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:${jacksonVersion}"
+                dependency "com.fasterxml.jackson.module:jackson-module-parameter-names:${jacksonVersion}"
+                dependency "com.fasterxml.woodstox:woodstox-core:${woodstoxVersion}"
+                dependency "com.github.virtuald:curvesapi:${curvesapiVersion}"
+                dependency "com.google.errorprone:error_prone_annotations:2.11.0"
+                dependency "com.google.protobuf:protobuf-java:3.17.1"
+                dependency "com.nimbusds:nimbus-jose-jwt:9.24.4"
+                dependency "com.squareup.okhttp3:okhttp:4.9.3"
+                dependency "com.squareup.okio:okio:2.8.0"
+                dependency "commons-codec:commons-codec:1.15"
+                dependency "commons-collections:commons-collections:3.2.2"
+                dependency "commons-fileupload:commons-fileupload:1.4"
+                dependency "commons-logging:commons-logging:1.2"
+                dependency "commons-io:commons-io:2.11.0"
+                dependency "commons-lang:commons-lang:2.6"
+                dependency 'commons-beanutils:commons-beanutils:1.9.4'
+                dependency "net.java.dev.jna:jna:5.10.0"
+                dependency "org.apache.commons:commons-pool2:2.11.1"
+                dependency "org.apache.commons:commons-compress:1.23.0"
+                dependency "org.apache.httpcomponents:httpclient:4.5.14"
+                dependency "org.apache.httpcomponents:httpmime:4.5.14"
+                dependency "org.apache.groovy:groovy:4.0.21"
+                dependency "org.apache.poi:poi:4.1.2"
+                dependency "org.apache.poi:poi-ooxml:4.1.2"
+                dependency "org.apache.poi:poi-ooxml-schemas:4.1.2"
+                dependency "org.apache.poi:poi-scratchpad:4.1.2"
+                dependency "org.bouncycastle:bcprov-jdk15on:1.70"
+                dependency "org.bouncycastle:bcpkix-jdk15on:1.70"
+                dependency "org.mybatis:mybatis:3.5.14"
+                dependency "org.mybatis:mybatis-spring:2.1.2"
+                dependency "org.ow2.ams:asm:9.3"
+                dependency "org.objenesis:objenesis:3.2"
+                dependency "org.beust:jcommander:1.82"
+
+
+            }
+        }
+        dependencies {
+            compileOnly "com.google.guava:guava"
+            compileOnly "cn.hutool:hutool-all"
+
+            compileOnly "org.projectlombok:lombok:${lombokVersion}"
+            annotationProcessor "org.projectlombok:lombok:${lombokVersion}"
+
+            testCompileOnly "org.projectlombok:lombok:${lombokVersion}"
+            testAnnotationProcessor "org.projectlombok:lombok:${lombokVersion}"
+
+            compileOnly "io.github.linpeilie:mapstruct-plus:${mapstructPlusVersion}"
+            annotationProcessor "io.github.linpeilie:mapstruct-plus-processor:${mapstructPlusVersion}"
+
+            testCompileOnly "io.github.linpeilie:mapstruct-plus:${mapstructPlusVersion}"
+            testAnnotationProcessor "io.github.linpeilie:mapstruct-plus-processor:${mapstructPlusVersion}"
+        }
+    }
+
+    if (it.name.contains("-starter")) {
+        apply plugin: "java-library"
+    }
+
+    if (bootRunProjects.contains(it.name)) {
+        apply plugin: "java"
+        apply plugin: "idea"
+        apply plugin: "org.springframework.boot"
+        apply plugin: 'com.github.shalousun.smart-doc'
+        apply plugin: 'com.google.cloud.tools.jib'
+
+        smartdoc {
+            configFile = file("src/main/resources/smart-doc.json")
+            exclude 'org.springframework.boot:spring-boot-starter-tomcat'
+            exclude 'org.springframework.boot.*'
+            exclude 'com.xuxueli:xxl-job-core:*'
+            exclude 'com.alibaba:easyexcel-core:*'
+            exclude 'org.apache.*'
+        }
+
+        //配置子模块依赖
+        dependencies {
+            implementation "org.apache.skywalking:apm-toolkit-logback-1.x"
+
+            testImplementation 'org.springframework.boot:spring-boot-starter-test'
+            testImplementation "org.junit.jupiter:junit-jupiter-api:${junitVersion}"
+            testRuntimeOnly "org.junit.jupiter:junit-jupiter-engine:${junitVersion}"
+        }
+
+        sourceSets {
+            main {
+                resources {
+                    srcDirs("${rootProject.projectDir}/doc/spring-cloud-config")
+                }
+            }
+        }
+
+        test {
+            useJUnitPlatform()
+        }
+
+
+
+        jib{
+            String imageName = "harbor.sino-assist.com/marsal1212/java11:latest"
+
+            from{
+                image = imageName
+            }
+            to{
+                image = "harbor.sino-assist.com/sa-server/${project.name}:${project.properties.get('docker_version')}"
+            }
+
+            container{
+                environment = [active_profile:'dev', nacos_address:'', nacos_password:'nacos', project_name:"", namespace:"", params: "", nativeIp: "", limitMemory: "1G", reservationsMemory: "1G"]
+                creationTime = DateTimeFormatter.ISO_INSTANT.format(Instant.now())
+                entrypoint = ["/bin/sh", "-c",
+                              'java -javaagent:/skywalking-agent/skywalking-agent.jar -Dskywalking.trace.ignore_path=/actuator,/actuator/* ' +
+                                      ' -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name ' +
+                                      ' -DSW_AGENT_INSTANCE_NAME=$project_name:${nativeIp}  -Dspring.cloud.nacos.discovery.metadata.ip=${nativeIp} ' +
+                                      ' -Dspring.devtools.add-properties=false -Xms${reservationsMemory} -Xmx${limitMemory}' +
+                                      ' -Dserver.port=8080 -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace ' +
+                                      ' -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address $params -Dfile.encoding=UTF-8 ' +
+                                      ' -cp @/app/jib-classpath-file @/app/jib-main-class-file'
+                ]
+            }
+        }
+
+        afterEvaluate {
+
+            bootJar {
+                layered {
+                    application {
+                        intoLayer("spring-boot-loader") {
+                            include "org/springframework/boot/loader/**"
+                        }
+                        intoLayer("application")
+                    }
+                    dependencies {
+                        intoLayer("application") {
+                            includeProjectDependencies()
+                        }
+                        intoLayer("snapshot-dependencies") {
+                            include "*:*:*SNAPSHOT*"
+                        }
+                        intoLayer("dependencies")
+                    }
+                    layerOrder = ["dependencies", "spring-boot-loader", "snapshot-dependencies", "application"]
+                }
+            }
+        }
+    }
+}
+
+
+// 在文件底部更新gradle wrapper的版本
+task updateWrapper(type: UpdateWrapper) {
+    gradleVersion = '8.7'
+}
+
+// 自定义任务用于更新wrapper
+class UpdateWrapper extends DefaultTask {
+    @Input
+    String gradleVersion
+
+    @TaskAction
+    void update() {
+        File wrapperDir = new File(project.getProjectDir(), "gradle/wrapper")
+        File propertiesFile = new File(wrapperDir, "gradle-wrapper.properties")
+
+        Properties properties = new Properties()
+        propertiesFile.withInputStream { input ->
+            properties.load(input)
+        }
+
+        properties.setProperty("distributionUrl", "https://services.gradle.org/distributions/gradle-$gradleVersion-bin.zip")
+        properties.setProperty("distributionSha256Sum", "some-sha-sum") // 这里填写正确的SHA-256校验和
+
+        propertiesFile.withOutputStream { output ->
+            properties.store(output, null)
+        }
+
+        File wrapperJar = new File(wrapperDir, "gradle-wrapper.jar")
+        if (wrapperJar.exists()) {
+            wrapperJar.delete()
+        }
+    }
+}
--- a/docker-swarm-review/canal/README
+++ b/docker-swarm-review/canal/README
@@ -0,0 +1,9 @@
+
+# crm1环境下  部署canal
+
+docker network create --driver overlay   review
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_canal
+
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_canal
--- a/docker-swarm-review/canal/docker-compose.yml
+++ b/docker-swarm-review/canal/docker-compose.yml
@@ -0,0 +1,33 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  db:
+    image: canal/canal-server:v1.1.5
+    environment:
+      - TZ=Asia/Shanghai
+      - canal.instance.master.address=${canal_instance_master_address}
+      - canal.instance.dbUsername=${canal_instance_dbUsername}
+      - canal.instance.dbPassword=${canal_instance_dbPassword}
+      - canal.instance.gtidon=false
+      - canal.instance.connectionCharset=UTF-8
+      - canal.instance.tsdb.enable=true
+      - canal.instance.enableDruid=false
+      - canal.instance.filter.regex=${canal_instance_filter_regex}
+      - canal.instance.parser.parallel=true
+      - canal.serverMode=rabbitMQ
+      - canal.mq.topic=${canal_mq_topic}
+      - rabbitmq.host=${rabbitmq_host}
+      - rabbitmq.exchange=${rabbitmq_exchange}
+      - rabbitmq.username=${rabbitmq_username}
+      - rabbitmq.password=${rabbitmq_password}
+      - rabbitmq.virtual.host=${rabbitmq_virtual_host}
+    deploy:
+      update_config:
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_canal==1
--- a/docker-swarm-review/canal/env_crm1
+++ b/docker-swarm-review/canal/env_crm1
@@ -0,0 +1,11 @@
+NAMESPACE=crm1
+canal_instance_master_address=crm_mysql_db:3306
+canal_instance_dbUsername=root
+canal_instance_dbPassword=gkxl650
+canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
+canal_mq_topic=canal_mysql_bin
+rabbitmq_host=crm1_rabbitmq_stats:5672
+rabbitmq_exchange=canal_exchange
+rabbitmq_username=root
+rabbitmq_password=gkxl650
+rabbitmq_virtual_host=canal
--- a/docker-swarm-review/canal/env_review
+++ b/docker-swarm-review/canal/env_review
@@ -0,0 +1,11 @@
+NAMESPACE=review
+canal_instance_master_address=192.168.3.123:3306
+canal_instance_dbUsername=repl
+canal_instance_dbPassword=nczl@sino_db
+canal_instance_filter_regex=zd_rescue.user_order_20.*,zd_rescue.task_order_20.*,zd_rescue.task_order_cost_20.*,zd_rescue.supplier_account_record_20.*,zd_rescue.customer_order_account_20.*,zd_rescue.customer_order_relation_20.*,zd_rescue.order_lowest_record
+canal_mq_topic=canal_mysql_bin
+rabbitmq_host=review-rabbitmq-stats:5672
+rabbitmq_exchange=canal_exchange
+rabbitmq_username=root
+rabbitmq_password=gkxl650
+rabbitmq_virtual_host=review
--- a/docker-swarm-review/clickhouse/README
+++ b/docker-swarm-review/clickhouse/README
@@ -0,0 +1,7 @@
+
+# crm1环境下  部署clickhouse
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_clickhouse
+
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_clickhouse
--- a/docker-swarm-review/clickhouse/docker-compose.yml
+++ b/docker-swarm-review/clickhouse/docker-compose.yml
@@ -0,0 +1,36 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  db:
+    image: docker.io/bitnami/clickhouse:23
+    ports:
+      - '${NODE_PORT}:8123'
+    environment:
+      - TZ=Asia/Shanghai
+      - CLICKHOUSE_ADMIN_USER=${CLICKHOUSE_ADMIN_USER}
+      - CLICKHOUSE_ADMIN_PASSWORD=${CLICKHOUSE_ADMIN_PASSWORD}
+    volumes:
+      - 'data_db:/bitnami/clickhouse'
+      - 'data_config:/opt/bitnami/clickhouse/etc'
+    deploy:
+      update_config:
+        order: start-first
+      resources:
+        limits:
+            cpus: "8"
+            memory: 24G
+        reservations:
+            cpus: "2"
+            memory: 12G
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_clickhouse==1
+volumes:
+  data_db:
+    driver: local
+  data_config:
+    driver: local
--- a/docker-swarm-review/clickhouse/env_crm1
+++ b/docker-swarm-review/clickhouse/env_crm1
@@ -0,0 +1,4 @@
+NAMESPACE=crm1
+NODE_PORT=8123
+CLICKHOUSE_ADMIN_USER=default
+CLICKHOUSE_ADMIN_PASSWORD=gkxl650
--- a/docker-swarm-review/clickhouse/env_review
+++ b/docker-swarm-review/clickhouse/env_review
@@ -0,0 +1,4 @@
+NAMESPACE=review
+NODE_PORT=8123
+CLICKHOUSE_ADMIN_USER=default
+CLICKHOUSE_ADMIN_PASSWORD=gkxl650
--- a/docker-swarm-review/datart/README
+++ b/docker-swarm-review/datart/README
@@ -0,0 +1,10 @@
+
+# crm1环境下  部署redis sentinel
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_redis
+
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_datart
+
+
+java -Dspring.profiles.active=review -Xms512M -Dsa.nacos.namespace=review -Dspring.cloud.nacos.config.server-addr=192.168.10.12:8848 -Dspring.cloud.nacos.discovery.server-addr=192.168.10.12:8848 -Dfile.encoding=UTF-8 -jar /zd/gps/zhongdao-gps.jar
--- a/docker-swarm-review/datart/docker-compose.yml
+++ b/docker-swarm-review/datart/docker-compose.yml
@@ -0,0 +1,89 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  redis:
+    image: 'bitnami/redis:7.0.11'
+    environment:
+      - TZ=Asia/Shanghai
+      - REDIS_REPLICATION_MODE=master
+      - REDIS_PASSWORD=${REDIS_PASSWORD}
+    ports:
+      - '${REDIS_PORT}:6379'
+    deploy:
+      update_config:
+        order: start-first
+      resources:
+        limits:
+            cpus: "1"
+            memory: 1G
+        reservations:
+            cpus: "0.1"
+            memory: 200M
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_datart==1
+  db:
+    image: docker.io/bitnami/mysql:8.0
+    ports:
+      - '${MYSQL_PORT}:3306'
+    environment:
+      - TZ=Asia/Shanghai
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+      - MYSQL_DATABASE=${MYSQL_DATABASE}
+      - MYSQL_ENABLE_SLOW_QUERY=0
+      - MYSQL_LONG_QUERY_TIME=10
+      - MYSQL_USER=${MYSQL_USER}
+      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
+      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
+    volumes:
+      - 'mysql:/bitnami/mysql/data'
+    healthcheck:
+      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
+      interval: 15s
+      timeout: 5s
+      retries: 6
+    configs:
+      - source: my_conf
+        target: /opt/bitnami/mysql/conf/my_custom.cnf
+    deploy:
+      resources:
+        limits:
+            cpus: "2"
+            memory: 2G
+        reservations:
+            cpus: "0.1"
+            memory: 500M
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_datart==1
+  chrome:
+    image: 'selenium/standalone-chrome:latest'
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - '${CHROME_PORT}:4444'
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 6G
+        reservations:
+          cpus: "1"
+          memory: 2G
+      update_config:
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_datart==1
+volumes:
+  mysql:
+    driver: local
+
+configs:
+  my_conf:
+    file: ./my.conf
+
--- a/docker-swarm-review/datart/env_crm1
+++ b/docker-swarm-review/datart/env_crm1
@@ -0,0 +1,9 @@
+NAMESPACE=crm1
+REDIS_PORT=16379
+REDIS_PASSWORD=gkxl650
+MYSQL_PORT=13306
+MYSQL_ROOT_PASSWORD=gkxl650
+MYSQL_DATABASE=datart
+MYSQL_USER=datart
+MYSQL_PASSWORD=gkxl650
+CHROME_PORT=14444
--- a/docker-swarm-review/datart/env_review
+++ b/docker-swarm-review/datart/env_review
@@ -0,0 +1,9 @@
+NAMESPACE=review
+REDIS_PORT=16379
+REDIS_PASSWORD=gkxl650
+MYSQL_PORT=13306
+MYSQL_ROOT_PASSWORD=gkxl650
+MYSQL_DATABASE=datart
+MYSQL_USER=datart
+MYSQL_PASSWORD=gkxl650
+CHROME_PORT=14444
--- a/docker-swarm-review/datart/my.conf
+++ b/docker-swarm-review/datart/my.conf
@@ -0,0 +1,6 @@
+[mysqld]
+max_allowed_packet=64M
+sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
+log-bin=mysql-bin # 开启 binlog
+binlog-format=ROW # 选择 ROW 模式
+server_id=123
--- a/docker-swarm-review/elasticsearch/README
+++ b/docker-swarm-review/elasticsearch/README
@@ -0,0 +1,9 @@
+
+# crm1环境下  部署 单机 es
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_es   --with-registry-auth
+
+
+# review环境下  部署 单机 es 仅用于日志
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_log_es   --with-registry-auth
--- a/docker-swarm-review/elasticsearch/docker-compose.yml
+++ b/docker-swarm-review/elasticsearch/docker-compose.yml
@@ -0,0 +1,48 @@
+version: '3.8'
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  elasticsearch:
+    image: docker.io/bitnami/elasticsearch:8.13.4
+    hostname: ${NAMESPACE}-es-elasticsearch
+    ports:
+      - '${NODE_PORT}:9200'
+      - '${NODE_PORT_2}:9300'
+    environment:
+      - TZ=Asia/Shanghai
+      - ELASTICSEARCH_HEAP_SIZE=8192m
+    volumes:
+      - '/mnt/data/volumes/elasticsearch:/bitnami/elasticsearch/data'
+      - '/mnt/data/volumes/elasticsearch-plugins:/opt/bitnami/elasticsearch/plugins'
+    deploy:
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_es==1
+  kibana:
+    image: docker.io/bitnami/kibana:8.13.4
+    hostname: ${NAMESPACE}-es-kibana
+    ports:
+      - "${NODE_PORT_KIBANA}:5601"
+    volumes:
+      - "/mnt/data/volumes/kibana/data:/bitnami/kibana/data"
+      - "/mnt/data/volumes/kibana/config:/opt/bitnami/kibana/config"
+    environment:
+      - TZ=Asia/Shanghai
+      - KIBANA_ELASTICSEARCH_URL=${NAMESPACE}-es-elasticsearch
+    depends_on:
+      - elasticsearch
+    deploy:
+      update_config:
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_es==1
+# volumes:
+#   data_db:
+#     driver: local
+#   kibana_data:
+#     driver: local
+
+
--- a/docker-swarm-review/elasticsearch/env_crm1
+++ b/docker-swarm-review/elasticsearch/env_crm1
@@ -0,0 +1,4 @@
+NAMESPACE=crm1
+NODE_PORT=9200
+NODE_PORT_2=9300
+NODE_PORT_KIBANA=5601
--- a/docker-swarm-review/elasticsearch/env_review
+++ b/docker-swarm-review/elasticsearch/env_review
@@ -0,0 +1,4 @@
+NAMESPACE=review
+NODE_PORT=9200
+NODE_PORT_2=9300
+NODE_PORT_KIBANA=5601
--- a/docker-swarm-review/elasticsearch/kibana.yml
+++ b/docker-swarm-review/elasticsearch/kibana.yml
@@ -0,0 +1,191 @@
+# For more configuration options see the configuration guide for Kibana in
+# https://www.elastic.co/guide/index.html
+
+# =================== System: Kibana Server ===================
+# Kibana is served by a back end server. This setting specifies the port to use.
+#server.port: 5601
+
+# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
+# The default is 'localhost', which usually means remote machines will not be able to connect.
+# To allow connections from remote users, set this parameter to a non-loopback address.
+#server.host: "localhost"
+
+# Enables you to specify a path to mount Kibana at if you are running behind a proxy.
+# Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
+# from requests it receives, and to prevent a deprecation warning at startup.
+# This setting cannot end in a slash.
+#server.basePath: ""
+
+# Specifies whether Kibana should rewrite requests that are prefixed with
+# `server.basePath` or require that they are rewritten by your reverse proxy.
+# Defaults to `false`.
+#server.rewriteBasePath: false
+
+# Specifies the public URL at which Kibana is available for end users. If
+# `server.basePath` is configured this URL should end with the same basePath.
+#server.publicBaseUrl: ""
+
+# The maximum payload size in bytes for incoming server requests.
+#server.maxPayload: 1048576
+
+# The Kibana server's name. This is used for display purposes.
+#server.name: "your-hostname"
+
+# =================== System: Kibana Server (Optional) ===================
+# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
+# These settings enable SSL for outgoing requests from the Kibana server to the browser.
+#server.ssl.enabled: false
+#server.ssl.certificate: /path/to/your/server.crt
+#server.ssl.key: /path/to/your/server.key
+
+# =================== System: Elasticsearch ===================
+# The URLs of the Elasticsearch instances to use for all your queries.
+#elasticsearch.hosts: ["http://localhost:9200"]
+
+# If your Elasticsearch is protected with basic authentication, these settings provide
+# the username and password that the Kibana server uses to perform maintenance on the Kibana
+# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
+# is proxied through the Kibana server.
+#elasticsearch.username: "kibana_system"
+#elasticsearch.password: "pass"
+
+# Kibana can also authenticate to Elasticsearch via "service account tokens".
+# Service account tokens are Bearer style tokens that replace the traditional username/password based configuration.
+# Use this token instead of a username/password.
+# elasticsearch.serviceAccountToken: "my_token"
+
+# Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
+# the elasticsearch.requestTimeout setting.
+#elasticsearch.pingTimeout: 1500
+
+# Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
+# must be a positive integer.
+#elasticsearch.requestTimeout: 30000
+
+# The maximum number of sockets that can be used for communications with elasticsearch.
+# Defaults to `Infinity`.
+#elasticsearch.maxSockets: 1024
+
+# Specifies whether Kibana should use compression for communications with elasticsearch
+# Defaults to `false`.
+#elasticsearch.compression: false
+
+# List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
+# headers, set this value to [] (an empty list).
+#elasticsearch.requestHeadersWhitelist: [ authorization ]
+
+# Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
+# by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
+#elasticsearch.customHeaders: {}
+
+# Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
+#elasticsearch.shardTimeout: 30000
+
+# =================== System: Elasticsearch (Optional) ===================
+# These files are used to verify the identity of Kibana to Elasticsearch and are required when
+# xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
+#elasticsearch.ssl.certificate: /path/to/your/client.crt
+#elasticsearch.ssl.key: /path/to/your/client.key
+
+# Enables you to specify a path to the PEM file for the certificate
+# authority for your Elasticsearch instance.
+#elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
+
+# To disregard the validity of SSL certificates, change this setting's value to 'none'.
+#elasticsearch.ssl.verificationMode: full
+
+# =================== System: Logging ===================
+# Set the value of this setting to off to suppress all logging output, or to debug to log everything. Defaults to 'info'
+#logging.root.level: debug
+
+# Enables you to specify a file where Kibana stores log output.
+#logging.appenders.default:
+#  type: file
+#  fileName: /var/logs/kibana.log
+#  layout:
+#    type: json
+
+# Example with size based log rotation
+#logging.appenders.default:
+#  type: rolling-file
+#  fileName: /var/logs/kibana.log
+#  policy:
+#    type: size-limit
+#    size: 256mb
+#  strategy:
+#    type: numeric
+#    max: 10
+#  layout:
+#    type: json
+
+# Logs queries sent to Elasticsearch.
+#logging.loggers:
+#  - name: elasticsearch.query
+#    level: debug
+
+# Logs http responses.
+#logging.loggers:
+#  - name: http.server.response
+#    level: debug
+
+# Logs system usage information.
+#logging.loggers:
+#  - name: metrics.ops
+#    level: debug
+
+# Enables debug logging on the browser (dev console)
+#logging.browser.root:
+#  level: debug
+
+# =================== System: Other ===================
+# The path where Kibana stores persistent data not saved in Elasticsearch. Defaults to data
+#path.data: data
+
+# Specifies the path where Kibana creates the process ID file.
+#pid.file: /run/kibana/kibana.pid
+
+# Set the interval in milliseconds to sample system and process performance
+# metrics. Minimum is 100ms. Defaults to 5000ms.
+#ops.interval: 5000
+
+# Specifies locale to be used for all localizable strings, dates and number formats.
+# Supported languages are the following: English (default) "en", Chinese "zh-CN", Japanese "ja-JP", French "fr-FR".
+i18n.locale: "zh-CN"
+# =================== Frequently used (Optional)===================
+
+# =================== Saved Objects: Migrations ===================
+# Saved object migrations run at startup. If you run into migration-related issues, you might need to adjust these settings.
+
+# The number of documents migrated at a time.
+# If Kibana can't start up or upgrade due to an Elasticsearch `circuit_breaking_exception`,
+# use a smaller batchSize value to reduce the memory pressure. Defaults to 1000 objects per batch.
+#migrations.batchSize: 1000
+
+# The maximum payload size for indexing batches of upgraded saved objects.
+# To avoid migrations failing due to a 413 Request Entity Too Large response from Elasticsearch.
+# This value should be lower than or equal to your Elasticsearch cluster’s `http.max_content_length`
+# configuration option. Default: 100mb
+#migrations.maxBatchSizeBytes: 100mb
+
+# The number of times to retry temporary migration failures. Increase the setting
+# if migrations fail frequently with a message such as `Unable to complete the [...] step after
+# 15 attempts, terminating`. Defaults to 15
+#migrations.retryAttempts: 15
+
+# =================== Search Autocomplete ===================
+# Time in milliseconds to wait for autocomplete suggestions from Elasticsearch.
+# This value must be a whole number greater than zero. Defaults to 1000ms
+#unifiedSearch.autocomplete.valueSuggestions.timeout: 1000
+
+# Maximum number of documents loaded by each shard to generate autocomplete suggestions.
+# This value must be a whole number greater than zero. Defaults to 100_000
+#unifiedSearch.autocomplete.valueSuggestions.terminateAfter: 100000
+path:
+  data: /bitnami/kibana/data
+pid:
+  file: /opt/bitnami/kibana/tmp/kibana.pid
+server:
+  host: 0.0.0.0
+  port: 5601
+elasticsearch:
+  hosts: http://review-es-elasticsearch:9200
--- a/docker-swarm-review/elasticsearch/node.options
+++ b/docker-swarm-review/elasticsearch/node.options
@@ -0,0 +1,15 @@
+## Node command line options
+## See `node --help` and `node --v8-options` for available options
+## Please note you should specify one option per line
+
+## max size of old space in megabytes
+#--max-old-space-size=4096
+
+## do not terminate process on unhandled promise rejection
+ --unhandled-rejections=warn
+
+## restore < Node 16 default DNS lookup behavior
+--dns-result-order=ipv4first
+
+## enable OpenSSL 3 legacy provider
+--openssl-legacy-provider
--- a/docker-swarm-review/fastdfs/docker-compose.yml
+++ b/docker-swarm-review/fastdfs/docker-compose.yml
@@ -0,0 +1,28 @@
+version: '3'
+services:
+  tracker:
+    container_name: tracker
+    image: harbor.sino-assist.com/ygqygq2/fastdfs-nginx:latest
+    command: tracker
+    network_mode: host
+    volumes:
+      - /data/tracker:/var/fdfs
+    ports:
+      - 22122:22122
+  storage0:
+    container_name: storage0
+    image: harbor.sino-assist.com/ygqygq2/fastdfs-nginx:latest
+    command: storage
+    network_mode: host
+    extra_hosts:
+      - "tracker:192.168.3.125"
+    environment:
+      - TRACKER_SERVER=tracker:22122
+    volumes:
+      - /data/storage0:/var/fdfs
+      - ./conf.d:/nginx_conf/conf.d
+    depends_on:
+      - tracker
+
+
+## https://github.com/ygqygq2/fastdfs-nginx
--- a/docker-swarm-review/jenkins/README
+++ b/docker-swarm-review/jenkins/README
@@ -0,0 +1,9 @@
+
+# crm1环境下  部署canal
+
+docker network create --driver overlay   review
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_canal
+
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_canal
--- a/docker-swarm-review/jenkins/docker-compose.yml
+++ b/docker-swarm-review/jenkins/docker-compose.yml
@@ -0,0 +1,16 @@
+version: '3.8'
+networks:
+  jenkins:
+    external: false
+services:
+  jenkins:
+    image: harbor.sino-assist.com/marsal1212/jenkins:latest
+    environment:
+      - TZ=Asia/Shanghai
+    networks:
+      - 'jenkins'
+    volumes:
+      - './jenkins_home:/var/jenkins_home'
+    ports:
+      - 8081:8080
+
--- a/docker-swarm-review/jenkins/env_crm1
+++ b/docker-swarm-review/jenkins/env_crm1
@@ -0,0 +1,11 @@
+NAMESPACE=crm1
+canal_instance_master_address=crm_mysql_db:3306
+canal_instance_dbUsername=root
+canal_instance_dbPassword=gkxl650
+canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
+canal_mq_topic=canal_mysql_bin
+rabbitmq_host=crm1_rabbitmq_stats:5672
+rabbitmq_exchange=canal_exchange
+rabbitmq_username=root
+rabbitmq_password=gkxl650
+rabbitmq_virtual_host=canal
--- a/docker-swarm-review/jenkins/env_review
+++ b/docker-swarm-review/jenkins/env_review
@@ -0,0 +1,11 @@
+NAMESPACE=review
+canal_instance_master_address=192.168.10.10:3306
+canal_instance_dbUsername=repl
+canal_instance_dbPassword=nczl@sino_db
+canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
+canal_mq_topic=canal_mysql_bin
+rabbitmq_host=192.168.3.110:5672
+rabbitmq_exchange=canal_exchange
+rabbitmq_username=root
+rabbitmq_password=gkxl650
+rabbitmq_virtual_host=review
--- a/docker-swarm-review/log/README
+++ b/docker-swarm-review/log/README
@@ -0,0 +1,15 @@
+
+# es index生命周期参考 https://developer.aliyun.com/article/793119，为索引配置索引模板即可，索引模板中添加ilm
+# {
+#   "index": {
+#     "lifecycle": {
+#       "name": "90-days-default"
+#     }
+#   }
+# }
+
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_log   --with-registry-auth
+
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_log   --with-registry-auth
--- a/docker-swarm-review/log/docker-compose.yml
+++ b/docker-swarm-review/log/docker-compose.yml
@@ -0,0 +1,52 @@
+version: '3.8'
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  logstash:
+    image: docker.elastic.co/logstash/logstash:8.13.4
+    hostname: ${NAMESPACE}-log-logstash
+    ports:
+      - '${NODE_PORT}:5044'
+    environment:
+      - TZ=Asia/Shanghai
+    configs:
+      - source: logstash_conf
+        target: /usr/share/logstash/pipeline/my.conf
+    logging:
+      driver: json-file
+      options:
+        max-size: "500m"
+        max-file: "3"
+    deploy:
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_es==1
+  filebeat:
+    image: docker.elastic.co/beats/filebeat:8.13.4
+    volumes:
+      - "kibana_data:/bitnami/kibana"
+    environment:
+      - TZ=Asia/Shanghai
+      - LOGSTASH_URL=${NAMESPACE}-log-logstash:5044
+      - KIBANA_HOSTS=${NAMESPACE}-es-kibana
+    configs:
+      - source: filebeat_conf
+        target: /usr/share/filebeat/filebeat.yml
+    volumes:
+      - ${NAMESPACE}_logs:/logs
+    deploy:
+      update_config:
+        order: start-first
+      mode: global
+      placement:
+        constraints: [node.platform.os == linux]
+configs:
+  logstash_conf:
+    file: ./logstash.conf
+  filebeat_conf:
+    file: ./filebeat.yml
+volumes:
+  ${NAMESPACE}_logs:
+    external: true
--- a/docker-swarm-review/log/env_crm1
+++ b/docker-swarm-review/log/env_crm1
@@ -0,0 +1,2 @@
+NAMESPACE=crm1
+NODE_PORT=5045
--- a/docker-swarm-review/log/env_review
+++ b/docker-swarm-review/log/env_review
@@ -0,0 +1,2 @@
+NAMESPACE=review
+NODE_PORT=5044
--- a/docker-swarm-review/log/filebeat.yml
+++ b/docker-swarm-review/log/filebeat.yml
@@ -0,0 +1,16 @@
+filebeat.inputs: 
+- type: filestream 
+  id: new-sino-log
+  paths:
+    - "/logs/*/*.log"
+  parsers:
+  - multiline:
+      type: pattern
+      pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
+      negate: true
+      match: after
+ 
+setup.kibana.host: "${KIBANA_HOSTS:kibana:5601}"
+ 
+output.logstash:
+  hosts: '${LOGSTASH_URL:logstash:5044}'
--- a/docker-swarm-review/log/jvm.options
+++ b/docker-swarm-review/log/jvm.options
@@ -0,0 +1,90 @@
+## JVM configuration
+
+# Xms represents the initial size of total heap space
+# Xmx represents the maximum size of total heap space
+
+-Xms1g
+-Xmx1g
+
+################################################################
+## Expert settings
+################################################################
+##
+## All settings below this section are considered
+## expert settings. Don't tamper with them unless
+## you understand what you are doing
+##
+################################################################
+
+## GC configuration
+11-13:-XX:+UseConcMarkSweepGC
+11-13:-XX:CMSInitiatingOccupancyFraction=75
+11-13:-XX:+UseCMSInitiatingOccupancyOnly
+
+## Locale
+# Set the locale language
+#-Duser.language=en
+
+# Set the locale country
+#-Duser.country=US
+
+# Set the locale variant, if any
+#-Duser.variant=
+
+## basic
+
+# set the I/O temp directory
+#-Djava.io.tmpdir=$HOME
+
+# set to headless, just in case
+-Djava.awt.headless=true
+
+# ensure UTF-8 encoding by default (e.g. filenames)
+-Dfile.encoding=UTF-8
+
+# use our provided JNA always versus the system one
+#-Djna.nosys=true
+
+# Turn on JRuby invokedynamic
+-Djruby.compile.invokedynamic=true
+
+## heap dumps
+
+# generate a heap dump when an allocation from the Java heap fails
+# heap dumps are created in the working directory of the JVM
+-XX:+HeapDumpOnOutOfMemoryError
+
+# specify an alternative path for heap dumps
+# ensure the directory exists and has sufficient space
+#-XX:HeapDumpPath=${LOGSTASH_HOME}/heapdump.hprof
+
+## GC logging
+#-Xlog:gc*,gc+age=trace,safepoint:file=@loggc@:utctime,pid,tags:filecount=32,filesize=64m
+
+# log GC status to a file with time stamps
+# ensure the directory exists
+#-Xloggc:${LS_GC_LOG_FILE}
+
+# Entropy source for randomness
+-Djava.security.egd=file:/dev/urandom
+
+# Copy the logging context from parent threads to children
+-Dlog4j2.isThreadContextMapInheritable=true
+
+# FasterXML/jackson defaults
+#
+# Sets the maximum string length (in chars or bytes, depending on input context).
+# This limit is not exact and an exception will happen at sizes greater than this limit.
+# Some text values that are a little bigger than the limit may be treated as valid but no
+# text values with sizes less than or equal to this limit will be treated as invalid.
+# This value should be higher than `logstash.jackson.stream-read-constraints.max-number-length`.
+# The jackson library defaults to 20000000 or 20MB, whereas Logstash defaults to 200MB or 200000000 characters.
+-Dlogstash.jackson.stream-read-constraints.max-string-length=200000000
+#
+# Sets the maximum number length (in chars or bytes, depending on input context).
+# The jackson library defaults to 1000, whereas Logstash defaults to 10000.
+-Dlogstash.jackson.stream-read-constraints.max-number-length=10000
+#
+# Sets the maximum nesting depth. The depth is a count of objects and arrays that have not
+# been closed, `{` and `[` respectively.
+#-Dlogstash.jackson.stream-read-constraints.max-nesting-depth=1000
--- a/docker-swarm-review/log/logstash.conf
+++ b/docker-swarm-review/log/logstash.conf
@@ -0,0 +1,36 @@
+filter {
+    grok {
+        match => { "message" => "%{TIMESTAMP_ISO8601:oldtimestamp}\s+\[%{DATA:service}\]\s+\[TID:%{NOTSPACE:tid}\]\s+\[%{DATA:thread}\]\s+%{LOGLEVEL:loglevel}\s+%{NOTSPACE:class}\s+-%{GREEDYDATA:oldmessage}"}
+    }
+
+    
+    date {
+      match => ["oldtimestamp", "ISO8601"] 
+      target => "@timestamp" 
+    }
+    mutate {
+      replace => { "message" => "%{oldmessage}" }
+      remove_field => [ "oldmessage","oldtimestamp","agent","host","input","log.flags","log.flags.keyword","tags" ]
+    }
+}
+
+
+output {
+  if [service] {  
+    elasticsearch {
+        hosts => [ "review-es-elasticsearch:9200" ]
+        index => "sslog-%{[service]}"
+        action => "create"
+        ilm_enabled => false
+    }
+  }else{
+    elasticsearch {
+        hosts => [ "review-es-elasticsearch:9200" ]
+        index => "sslog-default"
+        action => "create"
+        ilm_enabled => false
+    }
+  }
+}
+
+
--- a/docker-swarm-review/minio/README
+++ b/docker-swarm-review/minio/README
@@ -0,0 +1,18 @@
+
+# es index生命周期参考 https://developer.aliyun.com/article/793119，为索引配置索引模板即可，索引模板中添加ilm
+# {
+#   "index": {
+#     "lifecycle": {
+#       "name": "90-days-default"
+#     }
+#   }
+# }
+
+
+docker network create \
+--driver overlay \
+  review
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_log   --with-registry-auth
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - minio   --with-registry-auth
--- a/docker-swarm-review/minio/docker-compose.yml
+++ b/docker-swarm-review/minio/docker-compose.yml
@@ -0,0 +1,35 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  minio:
+    image: docker.io/bitnami/minio:2023
+    hostname: ${NAMESPACE}-minio
+    ports:
+      - '${NODE_PORT}:9000'
+      - '${NODE_PORT_1}:9001'
+    environment:
+      # 时区上海
+      TZ: Asia/Shanghai
+      # 管理后台用户名
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+      # 管理后台密码，最小8个字符
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+    volumes:
+      - 'data:/data'
+    deploy:
+      update_config:
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_minio==1
+volumes:
+  data:
+    driver: local
+
+
+
+
--- a/docker-swarm-review/minio/env_crm1
+++ b/docker-swarm-review/minio/env_crm1
@@ -0,0 +1,5 @@
+NAMESPACE=crm1
+NODE_PORT=9000
+NODE_PORT_1=9001
+MINIO_ROOT_USER=minioadmin
+MINIO_ROOT_PASSWORD=gkxl###650
--- a/docker-swarm-review/minio/env_review
+++ b/docker-swarm-review/minio/env_review
@@ -0,0 +1,5 @@
+NAMESPACE=review
+NODE_PORT=9000
+NODE_PORT_1=9001
+MINIO_ROOT_USER=minioadmin
+MINIO_ROOT_PASSWORD=gkxl###650
--- a/docker-swarm-review/mongodb/README
+++ b/docker-swarm-review/mongodb/README
@@ -0,0 +1,12 @@
+
+# crm1环境下  部署集群mongodb
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file -  crm1_mongodb
+
+
+
+# crm1环境下  部署集群mongodb rs
+
+
+
+docker stack deploy --compose-file docker-stack-rs.yml review_mongodb  --with-registry-auth
--- a/docker-swarm-review/mongodb/docker-compose.yml
+++ b/docker-swarm-review/mongodb/docker-compose.yml
@@ -0,0 +1,25 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  db:
+    image: docker.io/bitnami/mongodb:6.0
+    ports:
+      - '${NODE_PORT}:27017'
+    environment:
+      - TZ=Asia/Shanghai
+      - MONGODB_ROOT_USER=root
+      - MONGODB_ROOT_PASSWORD=123456
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+    volumes:
+      - '/mnt/data/volumes/mongodb:/bitnami/mongodb'
+    deploy:
+      update_config:
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_mongodb==1
+
--- a/docker-swarm-review/mongodb/docker-stack-rs.yml
+++ b/docker-swarm-review/mongodb/docker-stack-rs.yml
@@ -0,0 +1,64 @@
+# Copyright Broadcom, Inc. All Rights Reserved.
+# SPDX-License-Identifier: APACHE-2.0
+
+version: '3.8'
+networks:
+  default:
+    name: review
+    external: true
+services:
+  primary:
+    image: docker.io/bitnami/mongodb:7.0
+    hostname: mongodb-primary
+    ports:
+      - 27015:27017
+    environment:
+      - TZ=Asia/Shanghai
+      - MONGODB_ADVERTISED_HOSTNAME=mongodb-primary
+      - MONGODB_REPLICA_SET_MODE=primary
+      - MONGODB_ROOT_PASSWORD=123456
+      - MONGODB_REPLICA_SET_KEY=replicasetkey123
+    volumes:
+      - '/mnt/data/volumes/mongodb/primary:/bitnami/mongodb'
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints: [node.hostname == ZD-CRM5]
+  secondary:
+    image: docker.io/bitnami/mongodb:7.0
+    hostname: mongodb-secondary
+    ports:
+      - 27016:27017
+    depends_on:
+      - mongodb-primary
+    environment:
+      - TZ=Asia/Shanghai
+      - MONGODB_ADVERTISED_HOSTNAME=mongodb-secondary
+      - MONGODB_REPLICA_SET_MODE=secondary
+      - MONGODB_INITIAL_PRIMARY_HOST=mongodb-primary
+      - MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=123456
+      - MONGODB_REPLICA_SET_KEY=replicasetkey123
+    volumes:
+      - '/mnt/data/volumes/mongodb/secondary:/bitnami/mongodb'
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints: [node.hostname == ZD-CRM6]
+  arbiter:
+    image: docker.io/bitnami/mongodb:7.0
+    depends_on:
+      - mongodb-primary
+    environment:
+      - TZ=Asia/Shanghai
+      - MONGODB_ADVERTISED_HOSTNAME=mongodb-arbiter
+      - MONGODB_REPLICA_SET_MODE=arbiter
+      - MONGODB_INITIAL_PRIMARY_HOST=mongodb-primary
+      - MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=password123
+      - MONGODB_REPLICA_SET_KEY=replicasetkey123
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints: [node.hostname == ZD-CRM3]
--- a/docker-swarm-review/mongodb/env_crm1
+++ b/docker-swarm-review/mongodb/env_crm1
@@ -0,0 +1,3 @@
+NAMESPACE=crm1
+NODE_PORT=27017
+MONGODB_DATABASE=gps_data
--- a/docker-swarm-review/mongodb/env_review
+++ b/docker-swarm-review/mongodb/env_review
@@ -0,0 +1,3 @@
+NAMESPACE=review
+NODE_PORT=27017
+MONGODB_DATABASE=gps_data
--- a/docker-swarm-review/monitor/README
+++ b/docker-swarm-review/monitor/README
@@ -0,0 +1,19 @@
+
+env $(cat ./env_review | xargs) envsubst < ./docker-stack.yml | docker stack deploy --compose-file - monitor
+
+docker stack deploy --compose-file docker-compose.yml monitor   --with-registry-auth
+
+
+docker run \
+    -p 9090:9090 \
+    -v /opt/support/prometheus.yml:/etc/prometheus/prometheus.yml \
+    prom/prometheus:v2.52.0
+
+docker service create --name cadvisor -l prometheus-job=cadvisor \
+    --mode=global --publish target=8080,mode=host \
+    --mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock,ro \
+    --mount type=bind,src=/,dst=/rootfs,ro \
+    --mount type=bind,src=/var/run,dst=/var/run \
+    --mount type=bind,src=/sys,dst=/sys,ro \
+    --mount type=bind,src=/var/lib/docker,dst=/var/lib/docker,ro \
+    spcodes/cadvisor:v0.49.1 -docker_only
--- a/docker-swarm-review/monitor/docker-compose.yml
+++ b/docker-swarm-review/monitor/docker-compose.yml
@@ -0,0 +1,70 @@
+version: '3.8'
+ 
+services:
+  prometheus:
+    image: prom/prometheus:v2.52.0
+    ports:
+      - "9090:9090"
+    configs:
+      - source: prometheus_conf
+        target: /etc/prometheus/prometheus.yml
+    command:
+      - --config.file=/etc/prometheus/prometheus.yml
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    deploy:
+      mode: replicated
+      placement:
+        constraints: [node.hostname == ZD-CRM2]
+      replicas: 1
+ 
+  # alertmanager:
+  #   image: prom/alertmanager:v0.27.0
+  #   ports:
+  #     - "9093:9093"
+  #   volumes:
+  #     - ./alertmanager.yml:/etc/alertmanager/alertmanager.yml
+  #   command:
+  #     - --config.file=/etc/alertmanager/alertmanager.yml
+  #   deploy:
+  #     mode: replicated
+  #     replicas: 1
+ 
+  # node-exporter:
+  #   image: prom/node-exporter:v1.8.1
+  #   volumes:
+  #     - /proc:/host/proc:ro
+  #     - /sys:/host/sys:ro
+  #     - /:/rootfs:ro
+  #   deploy:
+  #     mode: global
+  #     placement:
+  #       constraints: [node.role == manager]
+  cadvisor:
+    image: spcodes/cadvisor:v0.49.1
+    ports:
+      - 8180:8080
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /:/rootfs:ro
+      - /var/run:/var/run:rw
+      - /sys:/sys:ro
+      - /var/lib/docker/:/var/lib/docker:ro
+    deploy:
+      mode: global
+  grafana:
+    image: grafana/grafana:11.0.0
+    ports:
+      - 23000:3000
+    volumes:
+      - /opt/data/grafana/:/var/lib/grafana:ro
+    deploy:
+      mode: replicated
+      placement:
+        constraints: [node.hostname == ZD-CRM2]
+      replicas: 1
+configs:
+  prometheus_conf:
+#    file: ./prometheus.yml
+     external: true
+     name: monitor_prometheus_conf_v2
--- a/docker-swarm-review/monitor/docker-stack.yml
+++ b/docker-swarm-review/monitor/docker-stack.yml
@@ -0,0 +1,125 @@
+version: "3.8"
+
+services:
+  grafana:
+    image: portainer/template-swarm-monitoring:grafana-9.5.2
+    ports:
+      - target: 3000
+        published: 3000
+        protocol: tcp
+        mode: ingress
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+      placement:
+        constraints:
+          - node.role == manager
+          - node.labels.monitoring == true
+    volumes:
+      - type: volume
+        source: grafana-data
+        target: /var/lib/grafana
+    environment:
+      - GF_SECURITY_ADMIN_USER=${GRAFANA_USER}
+      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
+      - GF_USERS_ALLOW_SIGN_UP=false
+    networks:
+      - net    
+
+  prometheus:
+    image: portainer/template-swarm-monitoring:prometheus-v2.44.0
+    command:
+      - '--config.file=/etc/prometheus/prometheus.yml'
+      - '--log.level=error'
+      - '--storage.tsdb.path=/prometheus'
+      - '--storage.tsdb.retention.time=7d'
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+      placement:
+        constraints:
+          - node.role == manager
+          - node.labels.monitoring == true
+    volumes:
+      - type: volume
+        source: prometheus-data
+        target: /prometheus
+    networks:
+      - net
+
+  cadvisor:
+    image: spcodes/cadvisor:v0.49.1
+    command: -logtostderr -docker_only
+    deploy:
+      mode: global
+      resources:
+        limits:
+          memory: 128M
+        reservations:
+          memory: 64M
+    volumes:
+      - type: bind
+        source: /
+        target: /rootfs
+        read_only: true
+      - type: bind
+        source: /var/run
+        target: /var/run
+        read_only: true
+      - type: bind
+        source: /sys
+        target: /sys
+        read_only: true
+      - type: bind
+        source: /var/lib/docker
+        target: /var/lib/docker
+        read_only: true
+      - type: bind
+        source: /dev/disk
+        target: /dev/disk
+        read_only: true                        
+    networks:
+      - net
+
+  node-exporter:
+    image: prom/node-exporter:v1.5.0
+    command:
+      - '--path.sysfs=/host/sys'
+      - '--path.procfs=/host/proc'
+      - '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($$|/)'
+      - '--no-collector.ipvs'
+    deploy:
+      mode: global
+      resources:
+        limits:
+          memory: 128M
+        reservations:
+          memory: 64M
+    volumes:
+      - type: bind
+        source: /
+        target: /rootfs
+        read_only: true
+      - type: bind
+        source: /proc
+        target: /host/proc
+        read_only: true
+      - type: bind
+        source: /sys
+        target: /host/sys
+        read_only: true
+    networks:
+      - net
+
+volumes:
+  grafana-data:
+  prometheus-data:
+
+networks:
+  net:
+    driver: host
+
+
+
--- a/docker-swarm-review/monitor/prometheus.yml
+++ b/docker-swarm-review/monitor/prometheus.yml
@@ -0,0 +1,30 @@
+scrape_configs:
+  # Make Prometheus scrape itself for metrics.
+  - job_name: 'prometheus'
+    static_configs:
+    - targets: ['localhost:9090']
+
+  # Create a job for Docker Swarm containers.
+  - job_name: 'dockerswarm'
+    dockerswarm_sd_configs:
+      - host: unix:///var/run/docker.sock
+        role: nodes
+    relabel_configs:
+      # Fetch metrics on port 9323.
+      - source_labels: [__meta_dockerswarm_node_address]
+        target_label: __address__
+        replacement: $1:9323
+      # Set hostname as instance label
+      - source_labels: [__meta_dockerswarm_node_hostname]
+        target_label: instance
+      # Only keep containers that should be running.
+      - source_labels: [__meta_dockerswarm_task_desired_state]
+        regex: running
+        action: keep
+      # Only keep containers that have a `prometheus-job` label.
+      - source_labels: [__meta_dockerswarm_service_label_prometheus_job]
+        regex: .+
+        action: keep
+      # Use the prometheus-job Swarm label as Prometheus job label.
+      - source_labels: [__meta_dockerswarm_service_label_prometheus_job]
+        target_label: job
--- a/docker-swarm-review/mysql-repl-tool/README.md
+++ b/docker-swarm-review/mysql-repl-tool/README.md
@@ -0,0 +1,50 @@
+生产环境用于nacos xxl-job的专用数据库
+
+
+
+# review环境下  部署 附属工具类服务使用的mysql
+
+env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_tool_mysql
+
+[mysqladmin]
+user=
+
+[mysqld]
+skip_name_resolve
+explicit_defaults_for_timestamp
+basedir=/opt/bitnami/mysql
+port=3306
+tmpdir=/opt/bitnami/mysql/tmp
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
+max_allowed_packet=16M
+bind_address=0.0.0.0
+log_error=/opt/bitnami/mysql/logs/mysqld.log
+slow_query_log=0
+slow_query_log_file=/opt/bitnami/mysql/logs/mysqld.log
+long_query_time=10
+character_set_server=utf8mb4
+collation_server=utf8mb4_unicode_ci
+plugin_dir=/opt/bitnami/mysql/lib/plugin
+
+[client]
+port=3306
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+default_character_set=utf8mb4
+plugin_dir=/opt/bitnami/mysql/lib/plugin
+
+[manager]
+port=3306
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
+
+
+---- 实际版本
+
+[mysqld]
+max_connections=500
+max_allowed_packet=64M
+sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
+log-bin=mysql-bin # 开启 binlog
+binlog-format=ROW # 选择 ROW 模式
+server_id=209
--- a/docker-swarm-review/mysql-repl-tool/docker-compose.yml
+++ b/docker-swarm-review/mysql-repl-tool/docker-compose.yml
@@ -0,0 +1,92 @@
+version: '3.8'
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  mysql-master:
+    image: docker.io/bitnami/mysql:8.0
+    hostname: ${NAMESPACE}-tool-mysql-master
+    ports:
+      - '${NODE_PORT_MASTER}:3306'
+    volumes:
+      - 'mysql_repl_master_data:/bitnami/mysql/data'
+    environment:
+      - MYSQL_REPLICATION_MODE=master
+      - MYSQL_REPLICATION_USER=repl_user
+      - MYSQL_REPLICATION_PASSWORD=${MYSQL_REPLICATION_PASSWORD}
+      # - MYSQL_DATABASE=my_database
+      # ALLOW_EMPTY_PASSWORD is recommended only for development.
+      - MYSQL_USER=${MYSQL_USER}
+      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
+      - MYSQL_ENABLE_SLOW_QUERY=0
+      - MYSQL_LONG_QUERY_TIME=10
+    configs:
+      - source: custome_config_master
+        target: /opt/bitnami/mysql/conf/my_custom.cnf
+    healthcheck:
+      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
+      interval: 15s
+      timeout: 5s
+      retries: 6
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints: [node.hostname == ZD-BAK-APP1]
+  mysql-slave:
+    image: docker.io/bitnami/mysql:8.0
+    hostname: ${NAMESPACE}-tool-mysql-slave
+    ports:
+      - '${NODE_PORT_SLAVE}:3306'
+    volumes:
+      - 'mysql_repl_slave_data:/bitnami/mysql/data'
+    depends_on:
+      - mysql-master
+    environment:
+      - MYSQL_REPLICATION_MODE=slave
+      - MYSQL_REPLICATION_USER=repl_user
+      - MYSQL_REPLICATION_PASSWORD=${MYSQL_REPLICATION_PASSWORD}
+      # - MYSQL_DATABASE=my_database
+      - MYSQL_MASTER_HOST=mysql-master
+      - MYSQL_MASTER_PORT_NUMBER=3306
+      - MYSQL_MASTER_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+      - MYSQL_USER=${MYSQL_USER}
+      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
+      - MYSQL_ENABLE_SLOW_QUERY=0
+      - MYSQL_LONG_QUERY_TIME=10
+      # ALLOW_EMPTY_PASSWORD is recommended only for development.
+      # - ALLOW_EMPTY_PASSWORD=yes
+      # In case of missing binary files on master, use `true` to reset those binary files. Creating a previous backup is recommended.
+      - MYSQL_REPLICATION_SLAVE_DUMP=false
+    healthcheck:
+      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
+      interval: 30s
+      timeout: 10s
+      retries: 6
+      start_period: 180s
+    configs:
+      - source: custome_config_slave
+        target: /opt/bitnami/mysql/conf/my_custom.cnf
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints: [node.hostname == ZD-BAK-APP2]
+volumes:
+  mysql_repl_master_data:
+    driver: local
+  mysql_repl_slave_data:
+    driver: local
+
+configs:
+  custome_config_master:
+    external: true
+    name: ${CUSTOME_CONFIG_MASTER}
+  custome_config_slave:
+    external: true
+    name: ${CUSTOME_CONFIG_SLAVE}
--- a/docker-swarm-review/mysql-repl-tool/env_review
+++ b/docker-swarm-review/mysql-repl-tool/env_review
@@ -0,0 +1,9 @@
+NAMESPACE=review
+NODE_PORT_MASTER=25306
+NODE_PORT_SLAVE=25307
+MYSQL_USER=zd_tool
+MYSQL_PASSWORD=gkxl2024#@
+MYSQL_ROOT_PASSWORD=gkxl2024#@
+MYSQL_REPLICATION_PASSWORD=gkxl2024#@
+CUSTOME_CONFIG_MASTER=review_tool_mysql_master_conf_v1
+CUSTOME_CONFIG_SLAVE=review_tool_mysql_slave_conf_v1
--- a/docker-swarm-review/mysql/README
+++ b/docker-swarm-review/mysql/README
@@ -0,0 +1,36 @@
+
+# crm1环境下  部署 mysql
+
+env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_mysql
+
+[mysqladmin]
+user=
+
+[mysqld]
+skip_name_resolve
+explicit_defaults_for_timestamp
+basedir=/opt/bitnami/mysql
+port=3306
+tmpdir=/opt/bitnami/mysql/tmp
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
+max_allowed_packet=16M
+bind_address=0.0.0.0
+log_error=/opt/bitnami/mysql/logs/mysqld.log
+slow_query_log=0
+slow_query_log_file=/opt/bitnami/mysql/logs/mysqld.log
+long_query_time=10
+character_set_server=utf8mb4
+collation_server=utf8mb4_unicode_ci
+plugin_dir=/opt/bitnami/mysql/lib/plugin
+
+[client]
+port=3306
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+default_character_set=utf8mb4
+plugin_dir=/opt/bitnami/mysql/lib/plugin
+
+[manager]
+port=3306
+socket=/opt/bitnami/mysql/tmp/mysql.sock
+pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
--- a/docker-swarm-review/mysql/docker-compose.yml
+++ b/docker-swarm-review/mysql/docker-compose.yml
@@ -0,0 +1,42 @@
+version: '3.8'
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  db:
+    image: docker.io/bitnami/mysql:8.0
+    ports:
+      - '${NODE_PORT}:3306'
+    environment:
+      - TZ=Asia/Shanghai
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+      - MYSQL_DATABASE=${MYSQL_DATABASE}
+      - MYSQL_ENABLE_SLOW_QUERY=0
+      - MYSQL_LONG_QUERY_TIME=10
+      - MYSQL_USER=${MYSQL_USER}
+      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
+      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
+    volumes:
+      - 'data_db:/bitnami/mysql/data'
+    healthcheck:
+      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
+      interval: 15s
+      timeout: 5s
+      retries: 6
+    configs:
+      - source: custome_config
+        target: /opt/bitnami/mysql/conf/my_custom.cnf
+    deploy:
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_mysql==1
+volumes:
+  data_db:
+    driver: local
+configs:
+  custome_config:
+    external: true
+    name: ${CUSTOME_CONFIG}
+
+
--- a/docker-swarm-review/mysql/env_review
+++ b/docker-swarm-review/mysql/env_review
@@ -0,0 +1,7 @@
+NAMESPACE=review
+NODE_PORT=3306
+MYSQL_USER=gkxl650
+MYSQL_PASSWORD=gkxl650
+MYSQL_ROOT_PASSWORD=gkxl650
+MYSQL_DATABASE=zd_rescue
+CUSTOME_CONFIG=review_mysql_conf_v1
--- a/docker-swarm-review/nacos-cluser/README
+++ b/docker-swarm-review/nacos-cluser/README
@@ -0,0 +1,10 @@
+
+# crm1环境下  部署单机nacos
+
+env $(cat ./env_crm1 | xargs) envsubst < ./standalone-derby.yml | docker stack deploy --compose-file - crm1_nacos
+
+
+
+# review环境下  部署单机nacos
+
+env $(cat ./env_review | xargs) envsubst < ./cluster-docker-compose.yml | docker stack deploy --compose-file - review_nacos
--- a/docker-swarm-review/nacos-cluser/cluster-docker-compose.yml
+++ b/docker-swarm-review/nacos-cluser/cluster-docker-compose.yml
@@ -0,0 +1,103 @@
+version: '3.8'
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  nacos1:
+    image: nacos/nacos-server:${NACOS_VERSION}
+    hostname: ${NAMESPACE}-nacos1
+    ports:
+      - ${NODE_PORT_11}:8848
+      - ${NODE_PORT_12}:9848
+      - ${NODE_PORT_13}:9849
+    volumes:
+      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
+      SPRING_DATASOURCE_PLATFORM: mysql
+      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
+      MYSQL_SERVICE_DB_NAME: nacos
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
+      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
+      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
+      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
+      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
+    deploy:
+      replicas: 1       #部署时，指定部署一个副本
+      placement:
+        constraints: [node.hostname == ZD-BAK-APP1]
+      restart_policy:
+        condition: on-failure
+  nacos2:
+    image: nacos/nacos-server:${NACOS_VERSION}
+    hostname: ${NAMESPACE}-nacos2
+    ports:
+      - ${NODE_PORT_21}:8848
+      - ${NODE_PORT_22}:9848
+      - ${NODE_PORT_23}:9849
+    volumes:
+      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
+      SPRING_DATASOURCE_PLATFORM: mysql
+      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
+      MYSQL_SERVICE_DB_NAME: nacos
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
+      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
+      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
+      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
+      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
+    deploy:
+      replicas: 1       #部署时，指定部署一个副本
+      placement:
+        constraints: [node.hostname == ZD-BAK-APP2]
+      restart_policy:
+        condition: on-failure
+
+  nacos3:
+    image: nacos/nacos-server:${NACOS_VERSION}
+    hostname: ${NAMESPACE}-nacos3
+    ports:
+      - ${NODE_PORT_31}:8848
+      - ${NODE_PORT_32}:9848
+      - ${NODE_PORT_33}:9849
+    volumes:
+      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
+      SPRING_DATASOURCE_PLATFORM: mysql
+      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
+      MYSQL_SERVICE_DB_NAME: nacos
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
+      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
+      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
+      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
+      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
+    deploy:
+      replicas: 1       #部署时，指定部署一个副本
+      placement:
+        constraints: [node.hostname == zd-bak-app3]
+      restart_policy:
+        condition: on-failure
+
+volumes:
+  nacos_cluster_log:
+    driver: local
+
+
--- a/docker-swarm-review/nacos-cluser/env_crm1
+++ b/docker-swarm-review/nacos-cluser/env_crm1
@@ -0,0 +1,5 @@
+NAMESPACE=crm1
+NACOS_VERSION=v2.2.2
+NODE_PORT=8848
+NODE_PORT_2=9848
+NACOS_SERVER_IP=192.168.1.209
--- a/docker-swarm-review/nacos-cluser/env_review
+++ b/docker-swarm-review/nacos-cluser/env_review
@@ -0,0 +1,17 @@
+NAMESPACE=review
+NACOS_VERSION=v2.3.0
+NODE_PORT_11=21848
+NODE_PORT_12=22848
+NODE_PORT_13=22849
+NODE_PORT_21=23848
+NODE_PORT_22=24848
+NODE_PORT_23=24849
+NODE_PORT_31=25848
+NODE_PORT_32=26848
+NODE_PORT_33=26849
+MYSQL_SERVICE_HOST=review-tool-mysql-master
+MYSQL_SERVICE_USER=zd_tool
+MYSQL_SERVICE_PASSWORD=gkxl2024#@
+NACOS_AUTH_IDENTITY_KEY=nacos
+NACOS_AUTH_IDENTITY_VALUE=gkxl2024#@
+NACOS_AUTH_TOKEN=OTg1NjRzZnJ0Z2RmZzIwMjQ1NTU1NTExZWZnZGVmZGVz
--- a/docker-swarm-review/nacos-cluser/mysql-schema.sql
+++ b/docker-swarm-review/nacos-cluser/mysql-schema.sql
@@ -0,0 +1,213 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/******************************************/
+/*   表名称 = config_info                  */
+/******************************************/
+CREATE TABLE `config_info` (
+  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) DEFAULT NULL COMMENT 'group_id',
+  `content` longtext NOT NULL COMMENT 'content',
+  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  `src_user` text COMMENT 'source user',
+  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
+  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
+  `c_desc` varchar(256) DEFAULT NULL COMMENT 'configuration description',
+  `c_use` varchar(64) DEFAULT NULL COMMENT 'configuration usage',
+  `effect` varchar(64) DEFAULT NULL COMMENT '配置生效的描述',
+  `type` varchar(64) DEFAULT NULL COMMENT '配置的类型',
+  `c_schema` text COMMENT '配置的模式',
+  `encrypted_data_key` text NOT NULL COMMENT '密钥',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_configinfo_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info';
+
+/******************************************/
+/*   表名称 = config_info_aggr             */
+/******************************************/
+CREATE TABLE `config_info_aggr` (
+  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
+  `datum_id` varchar(255) NOT NULL COMMENT 'datum_id',
+  `content` longtext NOT NULL COMMENT '内容',
+  `gmt_modified` datetime NOT NULL COMMENT '修改时间',
+  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_configinfoaggr_datagrouptenantdatum` (`data_id`,`group_id`,`tenant_id`,`datum_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='增加租户字段';
+
+
+/******************************************/
+/*   表名称 = config_info_beta             */
+/******************************************/
+CREATE TABLE `config_info_beta` (
+  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
+  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
+  `content` longtext NOT NULL COMMENT 'content',
+  `beta_ips` varchar(1024) DEFAULT NULL COMMENT 'betaIps',
+  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  `src_user` text COMMENT 'source user',
+  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
+  `encrypted_data_key` text NOT NULL COMMENT '密钥',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_configinfobeta_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_beta';
+
+/******************************************/
+/*   表名称 = config_info_tag              */
+/******************************************/
+CREATE TABLE `config_info_tag` (
+  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
+  `tag_id` varchar(128) NOT NULL COMMENT 'tag_id',
+  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
+  `content` longtext NOT NULL COMMENT 'content',
+  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  `src_user` text COMMENT 'source user',
+  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_configinfotag_datagrouptenanttag` (`data_id`,`group_id`,`tenant_id`,`tag_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_tag';
+
+/******************************************/
+/*   表名称 = config_tags_relation         */
+/******************************************/
+CREATE TABLE `config_tags_relation` (
+  `id` bigint(20) NOT NULL COMMENT 'id',
+  `tag_name` varchar(128) NOT NULL COMMENT 'tag_name',
+  `tag_type` varchar(64) DEFAULT NULL COMMENT 'tag_type',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
+  `nid` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'nid, 自增长标识',
+  PRIMARY KEY (`nid`),
+  UNIQUE KEY `uk_configtagrelation_configidtag` (`id`,`tag_name`,`tag_type`),
+  KEY `idx_tenant_id` (`tenant_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_tag_relation';
+
+/******************************************/
+/*   表名称 = group_capacity               */
+/******************************************/
+CREATE TABLE `group_capacity` (
+  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
+  `group_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Group ID，空字符表示整个集群',
+  `quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
+  `usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
+  `max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
+  `max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数，，0表示使用默认值',
+  `max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
+  `max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_group_id` (`group_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='集群、各Group容量信息表';
+
+/******************************************/
+/*   表名称 = his_config_info              */
+/******************************************/
+CREATE TABLE `his_config_info` (
+  `id` bigint(20) unsigned NOT NULL COMMENT 'id',
+  `nid` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT 'nid, 自增标识',
+  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
+  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
+  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
+  `content` longtext NOT NULL COMMENT 'content',
+  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  `src_user` text COMMENT 'source user',
+  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
+  `op_type` char(10) DEFAULT NULL COMMENT 'operation type',
+  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
+  `encrypted_data_key` text NOT NULL COMMENT '密钥',
+  PRIMARY KEY (`nid`),
+  KEY `idx_gmt_create` (`gmt_create`),
+  KEY `idx_gmt_modified` (`gmt_modified`),
+  KEY `idx_did` (`data_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='多租户改造';
+
+
+/******************************************/
+/*   表名称 = tenant_capacity              */
+/******************************************/
+CREATE TABLE `tenant_capacity` (
+  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
+  `tenant_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Tenant ID',
+  `quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
+  `usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
+  `max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
+  `max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数',
+  `max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
+  `max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
+  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_tenant_id` (`tenant_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='租户容量信息表';
+
+
+CREATE TABLE `tenant_info` (
+  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
+  `kp` varchar(128) NOT NULL COMMENT 'kp',
+  `tenant_id` varchar(128) default '' COMMENT 'tenant_id',
+  `tenant_name` varchar(128) default '' COMMENT 'tenant_name',
+  `tenant_desc` varchar(256) DEFAULT NULL COMMENT 'tenant_desc',
+  `create_source` varchar(32) DEFAULT NULL COMMENT 'create_source',
+  `gmt_create` bigint(20) NOT NULL COMMENT '创建时间',
+  `gmt_modified` bigint(20) NOT NULL COMMENT '修改时间',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_tenant_info_kptenantid` (`kp`,`tenant_id`),
+  KEY `idx_tenant_id` (`tenant_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='tenant_info';
+
+CREATE TABLE `users` (
+	`username` varchar(50) NOT NULL PRIMARY KEY COMMENT 'username',
+	`password` varchar(500) NOT NULL COMMENT 'password',
+	`enabled` boolean NOT NULL COMMENT 'enabled'
+);
+
+CREATE TABLE `roles` (
+	`username` varchar(50) NOT NULL COMMENT 'username',
+	`role` varchar(50) NOT NULL COMMENT 'role',
+	UNIQUE INDEX `idx_user_role` (`username` ASC, `role` ASC) USING BTREE
+);
+
+CREATE TABLE `permissions` (
+    `role` varchar(50) NOT NULL COMMENT 'role',
+    `resource` varchar(255) NOT NULL COMMENT 'resource',
+    `action` varchar(8) NOT NULL COMMENT 'action',
+    UNIQUE INDEX `uk_role_permission` (`role`,`resource`,`action`) USING BTREE
+);
+
+INSERT INTO users (username, password, enabled) VALUES ('nacos', '$2a$10$EuWPZHzz32dJN7jexM34MOeYirDdFAZm2kuWj7VEOJhhZkDrxfvUu', TRUE);
+
+INSERT INTO roles (username, role) VALUES ('nacos', 'ROLE_ADMIN');
--- a/docker-swarm-review/nacos-cluser/standalone-derby.yml
+++ b/docker-swarm-review/nacos-cluser/standalone-derby.yml
@@ -0,0 +1,38 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  server:
+    hostname: ${NAMESPACE}_nacos_server
+    image: nacos/nacos-server:${NACOS_VERSION}
+    environment:
+      - PREFER_HOST_MODE=hostname
+      - NACOS_SERVER_IP=${NACOS_SERVER_IP}
+      - MODE=standalone
+      - NACOS_AUTH_ENABLE=true
+      - NACOS_AUTH_IDENTITY_KEY=bndmsdsad
+      - NACOS_AUTH_IDENTITY_VALUE=wepqweq#dasld
+      - NACOS_AUTH_TOKEN=SecretKey012345678901234567890123456587012345678901234567890123456789
+    ports:
+      - target: 8848
+        published: ${NODE_PORT}
+        protocol: tcp
+        mode: host  # 解析：默认是ingress就是通过swarm的负载均衡模式，无论通过集群节点的映射端口都能访问到业务容器，此种方式类似于k8s的NodePort的svc服务暴露方式，而host则属于，业务容器运行在哪个节点，则就通过节点地址+映射端口访问对应的业务容器。
+      - target: 9848
+        published: ${NODE_PORT_2}
+        protocol: tcp
+        mode: host 
+    volumes:
+      - data_server:/home/nacos/
+    deploy:
+      update_config:
+        order: stop-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_nacos_server==1
+volumes:
+  data_server:
+    driver: local
--- a/docker-swarm-review/nacos/README
+++ b/docker-swarm-review/nacos/README
@@ -0,0 +1,5 @@
+
+# crm1环境下  部署单机nacos
+
+env $(cat ./env_crm1 | xargs) envsubst < ./standalone-derby.yml | docker stack deploy --compose-file - crm1_nacos
+
--- a/docker-swarm-review/nacos/cluser.yml
+++ b/docker-swarm-review/nacos/cluser.yml
@@ -0,0 +1,155 @@
+version: '3.8'
+
+services:
+
+
+
+  nacos1:
+    container_name: nacos1
+    image: nacos/nacos-server:latest
+    hostname: nacos1
+    restart: always
+    ports:
+      - target: 8848
+        published: 8848
+        protocol: tcp
+        mode: host  #采用host模式（默认为ingress，配置较灵活，根据自己的需求也可调整为ingress，本案例防止nacos 采用 swarm集群调度，所以改为host模式，两台服务器之间通过内网及nacos端口访问，通过nginx配置对外服务）
+    volumes:
+      - cluster1_logs:/home/nacos/logs  #配置docker存储日志的卷
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848
+      NACOS_SERVER_IP: 192.168.3.75
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
+      MYSQL_SERVICE_HOST: mysql
+      MYSQL_SERVICE_DB_NAME: nacos_devtest
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: nacos
+      MYSQL_SERVICE_PASSWORD: 123456
+    deploy:
+      replicas: 1       #部署时，指定部署一个副本
+      placement:
+        constraints:
+          - node.labels.env==docker-server-1
+      restart_policy:
+        condition: on-failure
+    depends_on:
+    - mysql
+    networks:
+       - srm
+
+
+
+  nacos2:
+    container_name: nacos2
+    image: nacos/nacos-server:latest
+    restart: always
+    hostname: nacos2
+    ports:
+      - target: 8848
+        published: 8848
+        protocol: tcp
+        mode: host
+    volumes:
+        - cluster2_logs:/home/nacos/logs
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848
+      NACOS_SERVER_IP: 192.168.3.94
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'
+      MYSQL_SERVICE_HOST: mysql
+      MYSQL_SERVICE_DB_NAME: nacos_devtest
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: nacos
+      MYSQL_SERVICE_PASSWORD: 123456
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.labels.env==docker-server-2
+      restart_policy:
+        condition: on-failure
+    depends_on:
+    - mysql
+    networks:
+       - srm
+
+
+
+  nacos3:
+    container_name: nacos3
+    image: nacos/nacos-server:latest
+    restart: always
+    hostname: nacos3
+    ports:
+      - target: 8848
+        published: 8848
+        protocol: tcp
+        mode: host
+    volumes:
+        - cluster3_logs:/home/nacos/logs
+    environment:
+      MODE: cluster
+      PREFER_HOST_MODE: hostname
+      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848 
+      NACOS_SERVER_IP: 192.168.3.142
+      NACOS_SERVER_PORT: 8848
+      NACOS_AUTH_ENABLE: 'true'
+      MYSQL_SERVICE_HOST: mysql
+      MYSQL_SERVICE_DB_NAME: nacos_devtest
+      MYSQL_SERVICE_PORT: 3306
+      MYSQL_SERVICE_USER: nacos
+      MYSQL_SERVICE_PASSWORD: 123456
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.labels.env==docker-server-3
+      restart_policy:
+        condition: on-failure
+    depends_on:
+    - mysql
+    networks:
+       - srm
+
+
+  mysql:
+    image: mysql:5.7.33
+    restart: always
+    container_name: mysql
+    hostname: mysql
+    ports:
+      - 3306:3306
+    volumes:
+      - /data/software/nacos/mysql/data:/var/lib/mysql
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/my.cnf:/etc/mysql/mysql.conf.d/my.cnf
+    environment:
+      TZ: Asia/Shanghai
+      MYSQL_ROOT_PASSWORD: sonar
+      MYSQL_DATABASE: nacos_devtest
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.labels.env==docker-server-1
+      restart_policy:
+        condition: on-failure
+    networks:
+       - srm
+
+volumes:
+  cluster1_logs:
+  cluster2_logs:
+  cluster3_logs:
+
+
+networks:
+  srm:
+    external: true
+
+#https://blog.51cto.com/u_12898848/4054447
--- a/docker-swarm-review/nacos/env_crm1
+++ b/docker-swarm-review/nacos/env_crm1
@@ -0,0 +1,5 @@
+NAMESPACE=crm1
+NACOS_VERSION=v2.2.2
+NODE_PORT=8848
+NODE_PORT_2=9848
+NACOS_SERVER_IP=192.168.1.209
--- a/docker-swarm-review/nacos/standalone-derby.yml
+++ b/docker-swarm-review/nacos/standalone-derby.yml
@@ -0,0 +1,38 @@
+version: '3.8'
+
+networks:
+  default:
+    name: ${NAMESPACE}
+    external: true
+services:
+  server:
+    hostname: ${NAMESPACE}_nacos_server
+    image: nacos/nacos-server:${NACOS_VERSION}
+    environment:
+      - PREFER_HOST_MODE=hostname
+      - NACOS_SERVER_IP=${NACOS_SERVER_IP}
+      - MODE=standalone
+      - NACOS_AUTH_ENABLE=true
+      - NACOS_AUTH_IDENTITY_KEY=bndmsdsad
+      - NACOS_AUTH_IDENTITY_VALUE=wepqweq#dasld
+      - NACOS_AUTH_TOKEN=SecretKey012345678901234567890123456587012345678901234567890123456789
+    ports:
+      - target: 8848
+        published: ${NODE_PORT}
+        protocol: tcp
+        mode: host  # 解析：默认是ingress就是通过swarm的负载均衡模式，无论通过集群节点的映射端口都能访问到业务容器，此种方式类似于k8s的NodePort的svc服务暴露方式，而host则属于，业务容器运行在哪个节点，则就通过节点地址+映射端口访问对应的业务容器。
+      - target: 9848
+        published: ${NODE_PORT_2}
+        protocol: tcp
+        mode: host 
+    volumes:
+      - data_server:/home/nacos/
+    deploy:
+      update_config:
+        order: stop-first
+      placement:
+        constraints:
+          - node.labels.${NAMESPACE}_nacos_server==1
+volumes:
+  data_server:
+    driver: local
--- a/docker-swarm-review/nginx-proxy-simple/crm1.conf
+++ b/docker-swarm-review/nginx-proxy-simple/crm1.conf
@@ -0,0 +1,68 @@
+
+server {
+  listen 8080;
+  server_name api1.sino-assist.com api2.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://ss208_sa-gateway_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location ~ .*actuator.* {
+        deny all;
+  }
+
+}
+
+
+server {
+  listen 8080;
+  server_name crm1.sino-assist.com crm2.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://crm1_ss_sa-cc_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /nacos/ {
+  	proxy_pass  http://crm1_nacos_server:8848/nacos/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location /xxl-job-admin {
+  	proxy_pass  http://crm1_xxl_job_server:8080/xxl-job-admin;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /boot-admin/ {
+  	proxy_pass  http://ss209_boot-admin_svc:8080/boot-admin/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+
+  }
+  location /mq/ {
+  	proxy_pass  http://crm1_rabbitmq_stats:15672/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+}
--- a/docker-swarm-review/nginx-proxy-simple/deploy.sh
+++ b/docker-swarm-review/nginx-proxy-simple/deploy.sh
@@ -0,0 +1,53 @@
+#!/bin/bash
+
+# 在 192.168.3.132 上执行
+
+# 1. 创建配置目录
+mkdir -p /data/nginx-proxy
+
+# 2. 写入 nginx 配置
+cat > /data/nginx-proxy/nginx.conf << 'EOF'
+worker_processes auto;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+    sendfile      on;
+    keepalive_timeout 65;
+    client_max_body_size 100M;
+
+    server {
+        listen 8080;
+
+        # 前端
+        location / {
+            proxy_pass http://192.168.3.132:8081/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+        # 后端网关
+        location ~ ^/(common|order|supplier|contract|base|export-app|auth|user|system|api|ws|return|returnVehicle|returnOrder|supplierManage|agg-api|zgs|gps|data-search)/ {
+            proxy_pass http://192.168.3.132:28092;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+    }
+}
+EOF
+
+# 3. 启动 nginx 容器
+docker run -d \
+  --name nginx-proxy \
+  --restart always \
+  -p 8080:8080 \
+  -v /data/nginx-proxy/nginx.conf:/etc/nginx/nginx.conf:ro \
+  nginx:alpine
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
yumengcheng	5074e9cc42	docker-swarm-review	2026-05-13 15:27:39 +08:00
yumengcheng	da02c6a994	Revert "docker-swarm-review" This reverts commit 49d2697ef4c5047934a642b0df656c5112d37509.	2026-05-13 15:27:26 +08:00
yumengcheng	95a34b2f89	docker-swarm-review	2026-05-13 15:27:25 +08:00
wangyuhang	33daa2864b	新的es进行	2026-03-02 12:38:07 +08:00
marsal	984fa247d7	new	2025-08-21 18:57:57 +08:00
marsal	bdd2b461dc	mysql backup	2025-05-08 21:24:56 +08:00
marsal	15dd2396d6	mysql backup	2025-05-08 21:24:40 +08:00
marsal	b2eb2928d8	swarm	2024-10-21 13:29:47 +08:00
marsal	74efe62045	nacos	2024-06-05 13:40:07 +08:00
marsal	5aa3536ae7	nacos portainer	2024-06-05 13:38:58 +08:00
marsal	9f2bd6db5f	json	2024-06-05 13:24:35 +08:00