From 89644fbf97dff8632d01aba973fefe975015ac28 Mon Sep 17 00:00:00 2001
From: xucheng <xucheng@qubit.ltd>
Date: Wed, 14 Jan 2026 11:22:28 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20Docker=20=E5=90=AF?=
 =?UTF-8?q?=E5=8A=A8=E8=84=9A=E6=9C=AC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 记录完整的容器启动配置
- 包含所有必需的环境变量
- 支持 mTLS 证书挂载
- 一键启动 FA3-Datafetch 服务
---
 docker-run.sh | 62 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100755 docker-run.sh

diff --git a/docker-run.sh b/docker-run.sh
new file mode 100755
index 0000000..3be5c43
--- /dev/null
+++ b/docker-run.sh
@@ -0,0 +1,62 @@
+#!/bin/bash
+# FA3-Datafetch Docker 启动脚本
+
+# 容器名称
+CONTAINER_NAME="fa3-app"
+
+# 环境变量配置
+export PW_SERVICE_ID="FA5"
+export PW_SERVER_ADDRS="https://bastion.3prism.ai"
+export PW_LOCAL_PORT="3001"
+
+# 数据库配置
+export DB_HOST="192.168.3.195"
+export DB_PORT="5432"
+export DB_USER="value"
+export DB_PASSWORD="Value609!"
+export DB_NAME="fa3"
+
+# AI API 配置
+export GEMINI_API_KEY="AIzaSyAT5QXWoACp87oqg1OK4USTIwc2RsJHvIc"
+export OPENAI_API_KEY="AIzaSyAT5QXWoACp87oqg1OK4USTIwc2RsJHvIc"
+export OPENAI_BASE_URL="https://generativelanguage.googleapis.com/v1beta/openai/"
+export LLM_MODEL="gemini-2.5-flash"
+
+# TLS 证书路径
+export TLS_CLIENT_CERT="/certs/client.crt"
+export TLS_CLIENT_KEY="/certs/client.key"
+
+# 证书文件路径（宿主机）
+CERT_DIR="$(dirname "$0")/bastian"
+CLIENT_CERT="$CERT_DIR/client.crt"
+CLIENT_KEY="$CERT_DIR/client.key"
+
+# 停止并删除旧容器
+echo "停止旧容器..."
+docker rm -f $CONTAINER_NAME 2>/dev/null || true
+
+# 启动新容器
+echo "启动新容器..."
+docker run -d \
+  --name $CONTAINER_NAME \
+  -e PW_SERVICE_ID="$PW_SERVICE_ID" \
+  -e PW_SERVER_ADDRS="$PW_SERVER_ADDRS" \
+  -e PW_LOCAL_PORT="$PW_LOCAL_PORT" \
+  -e DB_HOST="$DB_HOST" \
+  -e DB_PORT="$DB_PORT" \
+  -e DB_USER="$DB_USER" \
+  -e DB_PASSWORD="$DB_PASSWORD" \
+  -e DB_NAME="$DB_NAME" \
+  -e GEMINI_API_KEY="$GEMINI_API_KEY" \
+  -e OPENAI_API_KEY="$OPENAI_API_KEY" \
+  -e OPENAI_BASE_URL="$OPENAI_BASE_URL" \
+  -e LLM_MODEL="$LLM_MODEL" \
+  -e TLS_CLIENT_CERT="$TLS_CLIENT_CERT" \
+  -e TLS_CLIENT_KEY="$TLS_CLIENT_KEY" \
+  -v "$CLIENT_CERT:$TLS_CLIENT_CERT:ro" \
+  -v "$CLIENT_KEY:$TLS_CLIENT_KEY:ro" \
+  fa3-datafetch
+
+echo "容器已启动！"
+echo "查看日志: docker logs $CONTAINER_NAME"
+echo "进入容器: docker exec -it $CONTAINER_NAME sh"