refactor: 优化 Docker 部署配置

- 后端使用 uv 管理依赖，镜像内包含所有依赖
- 前端使用生产构建 + serve 提供静态文件
- 添加 WeasyPrint 完整系统依赖
- 修复 PDF 报告 Logo 显示问题
- 添加 .dockerignore 优化构建
- 更新部署文档和 GitHub Actions 工作流
- 前端端口从 5173 改为 3000

Author: lintsinghua

.github/workflows/release.yml

@@ -115,10 +115,11 @@ jobs:
           # 打包 Docker 配置文件
           tar -czf release/xcodereviewer-docker-${{ steps.version.outputs.VERSION }}.tar.gz \
             docker-compose.yml \
-            Dockerfile \
-            nginx.conf \
             backend/Dockerfile \
+            backend/.dockerignore \
             frontend/Dockerfile \
+            frontend/.dockerignore \
+            frontend/docker-entrypoint.sh \
             backend/env.example \
             frontend/.env.example
           
@@ -206,12 +207,12 @@ jobs:
       - name: 设置 Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      # 16. 构建并推送前端 Docker 镜像（生产环境 Nginx）
+      # 16. 构建并推送前端 Docker 镜像
       - name: 构建并推送前端 Docker 镜像
         uses: docker/build-push-action@v5
         with:
-          context: .
-          file: ./Dockerfile
+          context: ./frontend
+          file: ./frontend/Dockerfile
           push: true
           platforms: linux/amd64,linux/arm64
           tags: |

Dockerfile

@@ -95,7 +95,7 @@ cp backend/env.example backend/.env
 docker-compose up -d
 ```
 
-🎉 **搞定！** 打开 http://localhost:5173 开始体验吧！
+🎉 **搞定！** 打开 http://localhost:3000 开始体验吧！
 
 ### 演示账户
 

README.md

@@ -0,0 +1,12 @@
+.venv
+__pycache__
+*.pyc
+.git
+.gitignore
+*.md
+.env
+.vscode
+.DS_Store
+uploads/
+.mypy_cache
+.ruff_cache

backend/.dockerignore

@@ -4,37 +4,45 @@ WORKDIR /app
 
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
-ENV PIP_NO_CACHE_DIR=1
-ENV PIP_DISABLE_PIP_VERSION_CHECK=1
+# 清除代理设置，避免容器内网络问题
+ENV http_proxy=
+ENV https_proxy=
+ENV HTTP_PROXY=
+ENV HTTPS_PROXY=
 
 # 安装系统依赖（包含 WeasyPrint 所需的库和中文字体支持）
-RUN for i in 1 2 3; do \
+RUN rm -f /etc/apt/apt.conf.d/proxy.conf 2>/dev/null || true && \
+    unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY all_proxy ALL_PROXY && \
     apt-get update && \
     apt-get install -y --no-install-recommends \
         gcc \
         libpq-dev \
-        # WeasyPrint 依赖
+        curl \
+        # WeasyPrint 完整依赖
         libpango-1.0-0 \
         libpangoft2-1.0-0 \
+        libpangocairo-1.0-0 \
         libcairo2 \
-        libgdk-pixbuf2.0-0 \
+        libgdk-pixbuf-2.0-0 \
         libffi-dev \
+        libglib2.0-0 \
         shared-mime-info \
         # 字体支持（中文）
         fonts-noto-cjk \
         fonts-noto-cjk-extra \
         fontconfig \
-        && fc-cache -fv \
-        && rm -rf /var/lib/apt/lists/* \
-        && break || sleep 5; \
-    done
+    && fc-cache -fv \
+    && rm -rf /var/lib/apt/lists/*
+
+# 安装 uv
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
 
 # 复制依赖文件
-COPY pyproject.toml .
-COPY requirements.txt .
+COPY pyproject.toml uv.lock ./
 
-# 安装 Python 依赖
-RUN pip install --no-cache-dir -r requirements.txt
+# 使用 uv 安装依赖（确保无代理）
+RUN unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY all_proxy ALL_PROXY && \
+    uv sync --frozen --no-dev
 
 # 复制应用代码
 COPY . .

backend/Dockerfile

@@ -375,13 +375,18 @@ def _get_logo_base64(cls) -> str:
         """读取并编码 Logo 图片"""
         try:
             current_dir = os.path.dirname(os.path.abspath(__file__))
-            # 回退三级到项目根目录: services -> app -> backend -> root
-            project_root = os.path.abspath(os.path.join(current_dir, '../../../'))
-            logo_path = os.path.join(project_root, 'frontend/public/images/logo_nobg.png')
-            
-            if os.path.exists(logo_path):
-                with open(logo_path, "rb") as image_file:
-                    return base64.b64encode(image_file.read()).decode('utf-8')
+            # 尝试多个可能的路径
+            possible_paths = [
+                # Docker 容器内路径
+                os.path.join(current_dir, '../../static/images/logo_nobg.png'),
+                # 本地开发路径
+                os.path.abspath(os.path.join(current_dir, '../../../frontend/public/images/logo_nobg.png')),
+            ]
+            
+            for logo_path in possible_paths:
+                if os.path.exists(logo_path):
+                    with open(logo_path, "rb") as image_file:
+                        return base64.b64encode(image_file.read()).decode('utf-8')
         except Exception as e:
             print(f"Error loading logo: {e}")
             return ""

backend/app/services/report_generator.py

@@ -18,11 +18,10 @@ services:
       - xcodereviewer-network
 
   backend:
-    build: 
+    build:
       context: ./backend
     volumes:
-      - ./backend:/app
-      - ./backend/uploads:/app/uploads
+      - backend_uploads:/app/uploads
     ports:
       - "8000:8000"
     env_file:
@@ -32,23 +31,19 @@ services:
     depends_on:
       db:
         condition: service_healthy
-    command: sh -c "alembic upgrade head && uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload"
+    command: sh -c ".venv/bin/alembic upgrade head && .venv/bin/uvicorn app.main:app --host 0.0.0.0 --port 8000"
     networks:
       - xcodereviewer-network
 
   frontend:
     build:
       context: ./frontend
-    volumes:
-      - ./frontend:/app
-      - /app/node_modules
     ports:
-      - "5173:5173"
+      - "3000:3000"
     environment:
-      - VITE_API_BASE_URL=http://backend:8000/api/v1
+      - VITE_API_BASE_URL=http://localhost:8000/api/v1
     depends_on:
       - backend
-    command: npm run dev -- --host
     networks:
       - xcodereviewer-network
 
@@ -58,3 +53,4 @@ networks:
 
 volumes:
   postgres_data:
+  backend_uploads: