# 項目結構
.
├── docker-compose.yml
├── .env.staging
├── .env.prod
└── config/
    ├── app-config.dev.yaml
    └── app-config.prod.yaml

# 開發(fā)環(huán)境（默認.env）
docker compose up
# 預發(fā)布環(huán)境
docker compose --env-file .env.staging up
# 生產(chǎn)環(huán)境
docker compose -f docker-compose.yml -f docker-compose.prod.yml up

services:
  app:
    image: myapp:${APP_VERSION:-latest}
    volumes:
      - ./config/app-config.${ENV_MODE:-dev}.yaml:/app/config.yaml
    environment:
      ENV_MODE: ${ENV_MODE}

ENV_MODE=prod docker compose up

services:
  nginx:
    image: nginx:alpine
    volumes:
      - type: bind
        source: ./nginx
        target: /etc/nginx
        consistency: delegated  # 提升Mac/Win性能
    command: [sh, -c, "nginx -g 'daemon off;' && inotifywait -m /etc/nginx | xargs -n1 nginx -s reload"]

# docker-compose.yml
version: '3.8'
secrets:
  db_password:
    file: ./secrets/db_password.txt
services:
  db:
    image: postgres:15-alpine
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
    secrets:
      - db_password

# 生成隨機密碼
openssl rand -base64 32 > secrets/db_password.txt
chmod 600 secrets/db_password.txt

# 安全審查命令
docker compose config | grep -E 'password|secret|key'
# 輸出示例
services:
  db:
    environment:
      POSTGRES_PASSWORD: very_strong_password

# 優(yōu)先級從高到低：
# 1. Shell環(huán)境變量
# 2. --env-file指定文件
# 3 Compose文件environment定義
# 4 .env文件
services:
  app:
    environment:
      LOG_LEVEL: ${LOG_LEVEL:-info}  # 默認值語法

# base配置（docker-compose.base.yml）
x-common: &common
  logging:
    driver: json-file
    options:
      max-size: "10m"
# 環(huán)境擴展（docker-compose.prod.yml）
services:
  app:
    <<: *common
    deploy:
      replicas: 3

# 驗證Compose文件語法
docker compose config
# 顯示解析后完整配置
docker compose convert
# 查看環(huán)境變量實際值
docker compose run app env

# 查看運行時環(huán)境變量
docker exec -it app printenv
# 驗證配置文件掛載
docker exec -it app ls -l /app/config.yaml
# 跟蹤配置變更
docker compose logs -f app | grep 'Config Reloaded'

# 配置命名規(guī)范
config/
├── v1.0/
│   ├── app-config.yaml
│   └── db-config.yaml
└── v1.1/
    ├── app-config.yaml
    └── new-feature.yaml
# 版本回滾操作
docker compose -f docker-compose.yml -f config/v1.0/app-config.yml up