私有部署（Docker）

services:
  # 主服务：后端 API + 前端 + 内置 MCP（对外暴露的唯一服务）
  asktable:
    image: registry.cn-shanghai.aliyuncs.com/datamini/asktable-all-in-one:latest  # 中国大陆；海外用 datamini/asktable-all-in-one:latest
    container_name: asktable
    depends_on:
      - asktable-pg
      - asktable-redis
      - asktable-atbox
    ports:
      - "8000:80"
    privileged: true
    environment:
      TZ: Asia/Shanghai
      AT_REGION: cn                       # cn 或 global；部署后保持不变
      DATABASE_HOST: asktable-pg
      DATABASE_PORT: 5432
      DATABASE_USER: asktable
      DATABASE_PASSWORD: asktable          # 【建议修改】
      DATABASE_DB: asktable
      REDIS_URL: redis://asktable-redis:6379
      ATBOX_URL: http://asktable-atbox:5300
      # Workbook 独立数据库：同实例同角色，独立 database（PG 无跨库查询 → 硬隔离）
      WORKBOOK_PG_DSN: postgresql://asktable:asktable@asktable-pg:5432/asktable_workbook
    volumes:
      - ./asktable_data:/asktable

  # PostgreSQL 17（pgvector）：主数据库（元数据、配置、字段向量）
  asktable-pg:
    image: registry.cn-shanghai.aliyuncs.com/dminfra/pgvector:pg17
    container_name: asktable-pg
    restart: unless-stopped
    command: ["postgres", "-c", "max_connections=100"]
    environment:
      POSTGRES_USER: asktable
      POSTGRES_PASSWORD: asktable          # 【建议修改】与 DATABASE_PASSWORD 保持一致
      POSTGRES_DB: asktable
    volumes:
      - ./postgres_data:/var/lib/postgresql/data
    configs:
      # 仅在数据卷为空的全新部署首次执行一次，建 workbook 独立库
      - source: workbook-initdb
        target: /docker-entrypoint-initdb.d/01-create-workbook-db.sql

  # Redis 7.4：任务队列
  asktable-redis:
    image: registry.cn-shanghai.aliyuncs.com/dminfra/redis:7.4.4
    container_name: asktable-redis
    restart: unless-stopped
    command: redis-server --appendonly yes
    volumes:
      - ./redis_data:/data

  # Python 沙箱：隔离执行智能体生成的不可信 Python。
  # 下面标「安全」的是沙箱本体，请勿删改；标「可调」的资源上限可按机器调整。
  asktable-atbox:
    image: registry.cn-shanghai.aliyuncs.com/datamini/asktable-atbox:latest  # 中国大陆；海外用 datamini/asktable-atbox:latest
    container_name: asktable-atbox
    restart: unless-stopped
    environment:
      TZ: Asia/Shanghai
      ATBOX_MAX_WORKERS: 8          # 可调：并发 worker 数
      ATBOX_DEFAULT_TIMEOUT: 30s    # 可调：默认执行超时
      ATBOX_MAX_TIMEOUT: 120s       # 可调：最大执行超时
      ATBOX_ENABLE_NETWORK: "0"     # 安全：沙箱内禁用网络
    # 安全：只读 rootfs + 临时可写区（/var/atbox/root/tmp 是 chroot 工作目录），两者配套，勿删
    read_only: true
    tmpfs:
      - /var/atbox/root/tmp:rw,noexec,nosuid,nodev,mode=1777,size=512m
      - /tmp:rw,noexec,nosuid,nodev,mode=1777,size=64m
    # 安全：丢弃全部 capability，只加回 chroot + 降 UID 所需的最小集，勿改
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETUID
      - SETGID
      - SYS_CHROOT
    security_opt:
      - no-new-privileges:true      # 安全：禁止提权
    pids_limit: 128                 # 可调：进程数上限（防 fork 炸弹）
    mem_limit: 1g                   # 可调：内存上限
    cpus: 1.0                       # 可调：CPU 上限

configs:
  # 内联建库 SQL，需 Docker Compose v2.23.1+（configs.content 支持）
  workbook-initdb:
    content: |
      CREATE DATABASE asktable_workbook;