fix(docker): remove exposed ports for db and redis services (#25)

* fix(docker): remove exposed ports for db and redis services

* fix(config): add APP_ENV config

* fix(limiter): fix import error

Author: amakerlife

docker-compose.yml

@@ -12,8 +12,6 @@ services:
       - .env
     volumes:
       - ./pg_data:/var/lib/postgresql/data
-    ports:
-      - "5432:5432"
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U zhixuelite -d zhixuelite"]
       interval: 5s
@@ -24,8 +22,6 @@ services:
   redis:
     image: redis:8-alpine
     restart: unless-stopped
-    ports:
-      - "6379:6379"
     command: ["redis-server", "--save", "", "--appendonly", "no", "--maxmemory", "64mb", "--maxmemory-policy", "volatile-lru"]
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]

src/ZhiXueLite/app/__init__.py

@@ -59,12 +59,17 @@ def create_app():
 
     Session(app)
 
+    if limiter.enabled and config.RATELIMIT_STORAGE_URI == "memory://" and app.config["APP_ENV"] == "production":
+        app.logger.warning(
+            "Using in-memory rate limit storage in production is not recommended. "
+            "That may lead to unexpected behavior when running multiple instances of the application. "
+            "Consider using Redis.")
     limiter.init_app(app)
 
     # 初始化缓存
     cache = Cache(app, config={
-        'CACHE_TYPE': 'SimpleCache',
-        'CACHE_DEFAULT_TIMEOUT': 300  # 5 分钟
+        "CACHE_TYPE": "SimpleCache",
+        "CACHE_DEFAULT_TIMEOUT": 600  # 10 分钟
     })
 
     # 自定义频率限制错误处理器
@@ -185,7 +190,7 @@ def ping():
 
     @app.route("/statistics", methods=["GET"])
     def get_statistics():
-        """获取系统统计信息（公开端点，缓存 5 分钟）"""
+        """获取系统统计信息"""
         cached_stats = cache.get("statistics_data")
         if cached_stats is not None:
             return jsonify({
@@ -217,7 +222,7 @@ def get_statistics():
     @app.cli.command("init-db")
     def init_db_command():
         """清除所有数据"""
-        if not app.config["DEBUG"]:
+        if app.config["APP_ENV"] == "production":
             print("This command is strongly discouraged in production environments.")
         with app.app_context():
             if input("Are you sure you want to drop ALL tables? (y/N): ").lower() == "y":

src/ZhiXueLite/app/config.py

@@ -66,6 +66,7 @@ def validate(cls):
 
 class DevelopmentConfig(Config):
     DEBUG = True
+    APP_ENV = "development"
     SECRET_KEY = os.environ.get("DEV_SECRET_KEY", "dev")
     SQLALCHEMY_DATABASE_URI = os.environ.get("DEV_DATABASE_URL", "")
 
@@ -75,6 +76,7 @@ class DevelopmentConfig(Config):
 
 class ProductionConfig(Config):
     DEBUG = False
+    APP_ENV = "production"
     SECRET_KEY = os.environ.get("PROD_SECRET_KEY", "")
     SQLALCHEMY_DATABASE_URI = os.environ.get("PROD_DATABASE_URL", "")
 
@@ -86,6 +88,7 @@ class TestingConfig(Config):
     """测试环境配置"""
     TESTING = True
     DEBUG = True
+    APP_ENV = "testing"
     SECRET_KEY = os.environ.get("SECRET_KEY", "test-secret-key")
     SQLALCHEMY_DATABASE_URI = os.environ.get("DATABASE_URL", "sqlite:///:memory:")
     # SQLite 不支持连接池配置