私有化 · Docker 部署

[Nginx] →  [Evose Web] → [Evose API]
                ↓
   [MySQL]   [PostgreSQL+pgvector]   [Redis]   [对象存储]

# 验证 Docker
docker --version       # ≥ 20.10
docker compose version # v2
 
# 工作目录
mkdir -p /opt/evose && cd /opt/evose

tar -xzf evose-edition-*.tar.gz
cd evose-edition

evose-edition/
├── docker-compose.yml      # 编排
├── .env.example            # 环境变量模板
├── config/                 # 配置
└── scripts/                # 运维脚本

cp .env.example .env

# 域名(用反向代理 + HTTPS)
EVOSE_DOMAIN=evose.example.com
 
# 数据库密码(随机)
DB_PASSWORD=$(openssl rand -hex 16)
REDIS_PASSWORD=$(openssl rand -hex 16)
 
# 加密密钥(凭据 / 数据加密)
SECRET_KEY=$(openssl rand -hex 32)
 
# 初始管理员
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=<至少 12 位强密码>
 
# 至少一个 LLM 接入
LLM_PROVIDER=openai                       # openai / anthropic / azure / openai-compatible
OPENAI_API_KEY=<key>
OPENAI_BASE_URL=https://api.openai.com/v1
 
# 文件存储
STORAGE_TYPE=local                        # local / s3 / oss
STORAGE_PATH=/opt/evose/data/files

# 拉镜像
docker compose pull
 
# 启动
docker compose up -d
 
# 看初始化
docker compose logs -f evose-init
# 看到 "Initialization complete" 后即可继续
 
# 健康检查
docker compose ps                         # 全部 healthy

server {
    listen 443 ssl http2;
    server_name evose.example.com;
 
    ssl_certificate     /path/to/cert.pem;
    ssl_certificate_key /path/to/key.pem;
 
    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto https;
    }
}

server {
    listen 80;
    server_name evose.example.com;
    return 301 https://$host$request_uri;
}

# MySQL
docker compose exec mysql mysqldump -u root -p evose > backup.sql
 
# PostgreSQL(知识库向量)
docker compose exec postgres pg_dump -U postgres evose_kb > kb-backup.sql
 
# 文件
tar -czf files-backup.tar.gz /opt/evose/data/files