chore: 优化 Docker 配置，添加生产环境部署脚本和文档

docker-compose.yml

@@ -1,31 +1,85 @@
+version: '3.8'
+
 services:
+  # 后端服务
   backend:
-    build: ./backend
-    # 使用 gunicorn 替代 runserver，提高稳定性，并捕获标准输出1
-    command: sh -c "python manage.py collectstatic --noinput && python manage.py migrate && gunicorn --bind 0.0.0.0:8000 --access-logfile - --error-logfile - config.wsgi:application"
+    build:
+      context: ./backend
+      dockerfile: Dockerfile
+    container_name: scoring_backend
+    restart: always
     volumes:
-      - ./backend:/app
       - ./backend/media:/app/media
+      - ./backend/static:/app/static
     ports:
       - "8000:8000"
     environment:
-      - DB_NAME=market
-      - DB_USER=market
-      - DB_PASSWORD=123market
-      - DB_HOST=6.6.6.66
-      - DB_PORT=5432
+      - DEBUG=False
+      - SECRET_KEY=${SECRET_KEY:-your-secret-key-change-this}
+      - DB_NAME=${DB_NAME:-scoring_system}
+      - DB_USER=${DB_USER:-postgres}
+      - DB_PASSWORD=${DB_PASSWORD:-password}
+      - DB_HOST=${DB_HOST:-localhost}
+      - DB_PORT=${DB_PORT:-5432}
+      - WECHAT_APPID=${WECHAT_APPID}
+      - WECHAT_SECRET=${WECHAT_SECRET}
+      - WECHAT_MCHID=${WECHAT_MCHID}
+      - WECHAT_API_KEY=${WECHAT_API_KEY}
+      - ALIYUN_ACCESS_KEY_ID=${ALIYUN_ACCESS_KEY_ID}
+      - ALIYUN_ACCESS_KEY_SECRET=${ALIYUN_ACCESS_KEY_SECRET}
+      - ALIYUN_OSS_ENDPOINT=${ALIYUN_OSS_ENDPOINT}
+      - ALIYUN_OSS_BUCKET_NAME=${ALIYUN_OSS_BUCKET_NAME}
+      - ALIYUN_TINGWU_APP_KEY=${ALIYUN_TINGWU_APP_KEY}
+      - DASHSCOPE_API_KEY=${DASHSCOPE_API_KEY}
+    networks:
+      - scoring_network
+    healthcheck:
+      test: ["CMD", "python", "-c", "import requests; requests.get('http://localhost:8000/api/health/')"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
 
+  # 前端服务 (Nginx)
   frontend:
     build:
       context: ./frontend
+      dockerfile: Dockerfile
       args:
         - VITE_API_URL=/api
-    # volumes:
-    #   - ./frontend:/app
-    #   - /app/node_modules
+    container_name: scoring_frontend
+    restart: always
     ports:
-      - "15173:15173"
-    environment:
-      - VITE_API_URL=http://localhost:8000/api
+      - "80:80"
     depends_on:
+      backend:
+        condition: service_healthy
+    networks:
+      - scoring_network
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
+  # Nginx 反向代理 (可选，用于负载均衡和 SSL)
+  nginx:
+    image: nginx:alpine
+    container_name: scoring_nginx
+    restart: always
+    ports:
+      - "443:443"
+    volumes:
+      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx/ssl:/etc/nginx/ssl:ro
+    depends_on:
+      - frontend
       - backend
+    networks:
+      - scoring_network
+    profiles:
+      - ssl  # 只在需要 SSL 时启动
+
+networks:
+  scoring_network:
+    driver: bridge