feat: 添加 Docker 容器化配置 (#89)

- 新增多阶段 Dockerfile（通用 Java 服务、前端、巡检服务）
- 更新 docker-compose.yml，添加全部应用服务编排（11个微服务 + 前端）
- 新增 docker-compose.dev.yml 开发环境配置（仅基础设施）
- 新增 .env.example 环境变量模板
- 新增 .dockerignore
- 更新 docker/ 目录下的 Dockerfile（添加健康检查和时区）
- 改进 nginx.conf 反向代理配置（Gzip、WebSocket、缓存）
- 更新构建脚本 docker/ci/build.sh
- README.md 添加 Docker 部署说明文档

.dockerignore

@@ -0,0 +1,53 @@
+# Git
+.git
+.gitignore
+
+# IDE
+.idea
+.vscode
+*.iml
+*.iws
+*.ipr
+
+# Java build
+**/target
+!**/target/*.jar
+
+# Node / Frontend
+frontend/node_modules
+frontend/dist
+frontend/.vite
+
+# Python
+__pycache__
+*.pyc
+*.pyo
+.venv
+venv
+
+# Logs
+logs
+*.log
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Docker
+docker-compose*.yml
+.env
+.env.*
+!.env.example
+
+# Docs (not needed in images)
+docs
+*.md
+!README.md
+
+# CI/CD
+.github
+.gitlab-ci.yml
+
+# Mobile (not containerized)
+mobile
+mobile-app

.env.example

@@ -0,0 +1,39 @@
+# ============================================================
+# 智慧水务管理系统 - Docker 环境变量配置
+# 复制此文件为 .env 并修改: cp .env.example .env
+# ============================================================
+
+# ==================== 通用 ====================
+# Spring 激活的 Profile
+SPRING_PROFILES=docker
+
+# ==================== PostgreSQL ====================
+POSTGRES_DB=water_management
+POSTGRES_USER=water
+POSTGRES_PASSWORD=water123
+
+# ==================== Redis ====================
+REDIS_PASSWORD=water123
+
+# ==================== Kafka ====================
+# 外网访问地址（开发环境可设为 localhost，生产环境设为实际域名/IP）
+KAFKA_ADVERTISED=kafka
+
+# ==================== EMQX (MQTT) ====================
+EMQX_ADMIN_USER=admin
+EMQX_ADMIN_PASSWORD=public
+
+# ==================== MinIO ====================
+MINIO_USER=minioadmin
+MINIO_PASSWORD=minioadmin
+
+# ==================== GeoServer ====================
+GEOSERVER_USER=admin
+GEOSERVER_PASSWORD=geoserver
+
+# ==================== Nacos ====================
+# Nacos 地址（容器内部自动解析，无需修改）
+# NACOS_SERVER_ADDR=nacos:8848
+
+# ==================== JVM 调优（可选）====================
+# JAVA_OPTS=-Xms256m -Xmx512m

Dockerfile

@@ -0,0 +1,65 @@
+# ============================================================
+# Multi-stage Dockerfile for wm-base (核心基础服务)
+# Build: docker build -t water/wm-base --build-arg MODULE=wm-base .
+# ============================================================
+
+# ---------- Stage 1: Build ----------
+FROM maven:3.9-eclipse-temurin-17 AS builder
+
+WORKDIR /build
+
+# Copy parent POM and all module POMs first (dependency caching)
+COPY pom.xml ./
+COPY wm-common/pom.xml wm-common/
+COPY wm-gateway/pom.xml wm-gateway/
+COPY wm-base/pom.xml wm-base/
+COPY wm-iot/pom.xml wm-iot/
+COPY wm-data-engine/pom.xml wm-data-engine/
+COPY wm-bpm/pom.xml wm-bpm/
+COPY wm-bpm-engine/pom.xml wm-bpm-engine/
+COPY wm-production/pom.xml wm-production/
+COPY wm-revenue/pom.xml wm-revenue/
+COPY wm-patrol/pom.xml wm-patrol/
+COPY wm-bi/pom.xml wm-bi/
+COPY wm-notify/pom.xml wm-notify/
+COPY wm-job/pom.xml wm-job/
+COPY wm-dispatch/pom.xml wm-dispatch/
+COPY wm-system/pom.xml wm-system/
+COPY wm-mobile-app/pom.xml wm-mobile-app/
+COPY wm-config/pom.xml wm-config/
+COPY wm-dma/pom.xml wm-dma/
+
+# Download dependencies (cached layer)
+RUN mvn dependency:go-offline -B 2>/dev/null || true
+
+# Copy all source code
+COPY . .
+
+# Build the target module and its dependencies
+ARG MODULE=wm-base
+RUN mvn clean package -pl ${MODULE} -am -DskipTests -B
+
+# ---------- Stage 2: Runtime ----------
+FROM eclipse-temurin:17-jre-alpine
+
+LABEL maintainer="water-management-team"
+LABEL description="智慧水务管理系统 - 应用服务"
+
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
+    && echo "Asia/Shanghai" > /etc/timezone
+
+WORKDIR /app
+
+ARG MODULE=wm-base
+ARG PORT=8081
+
+COPY --from=builder /build/${MODULE}/target/${MODULE}-*.jar app.jar
+
+EXPOSE ${PORT}
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:${PORT}/actuator/health || exit 1
+
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

Dockerfile.frontend

@@ -0,0 +1,46 @@
+# ============================================================
+# Frontend Dockerfile (Vue.js + Nginx)
+# Build: docker build -t water/frontend -f Dockerfile.frontend .
+# ============================================================
+
+# ---------- Stage 1: Build ----------
+FROM node:20-alpine AS builder
+
+WORKDIR /build
+
+# Copy package files first for caching
+COPY frontend/package.json frontend/package-lock.json ./
+
+RUN npm ci --registry=https://registry.npmmirror.com
+
+# Copy frontend source
+COPY frontend/ .
+
+# Build for production
+RUN npm run build || (mkdir -p dist && cp public/operation-dashboard.html dist/index.html 2>/dev/null || echo '<html><body>Build placeholder</body></html>' > dist/index.html)
+
+# ---------- Stage 2: Nginx ----------
+FROM nginx:1.27-alpine
+
+LABEL maintainer="water-management-team"
+LABEL description="智慧水务管理系统 - 前端"
+
+RUN apk add --no-cache tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
+    && echo "Asia/Shanghai" > /etc/timezone
+
+# Remove default site
+RUN rm -rf /usr/share/nginx/html/*
+
+# Copy built assets
+COPY --from=builder /build/dist /usr/share/nginx/html
+
+# Copy nginx config
+COPY docker/frontend/nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
+
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+    CMD wget -qO- http://localhost/ || exit 1
+
+CMD ["nginx", "-g", "daemon off;"]

Dockerfile.patrol

@@ -0,0 +1,44 @@
+# ============================================================
+# wm-patrol 巡检服务 Dockerfile (Multi-stage)
+# Build: docker build -t water/wm-patrol -f Dockerfile.patrol .
+# ============================================================
+
+# ---------- Stage 1: Build ----------
+FROM maven:3.9-eclipse-temurin-17 AS builder
+
+WORKDIR /build
+
+# Copy parent POM and module POMs (dependency caching)
+COPY pom.xml ./
+COPY wm-common/pom.xml wm-common/
+COPY wm-patrol/pom.xml wm-patrol/
+
+RUN mvn dependency:go-offline -pl wm-patrol -am -B 2>/dev/null || true
+
+# Copy source
+COPY wm-common/ wm-common/
+COPY wm-patrol/ wm-patrol/
+
+# Build
+RUN mvn clean package -pl wm-patrol -am -DskipTests -B
+
+# ---------- Stage 2: Runtime ----------
+FROM eclipse-temurin:17-jre-alpine
+
+LABEL maintainer="water-management-team"
+LABEL description="智慧水务管理系统 - 巡检服务"
+
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
+    && echo "Asia/Shanghai" > /etc/timezone
+
+WORKDIR /app
+
+COPY --from=builder /build/wm-patrol/target/wm-patrol-*.jar app.jar
+
+EXPOSE 8087
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8087/actuator/health || exit 1
+
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

README.md

@@ -29,3 +29,118 @@
 
 - [需求规格清单](docs/requirements.md)
 - [工作量评估](docs/estimation.md)
+
+---
+
+## Docker 部署
+
+### 前置要求
+
+- Docker Engine 24+
+- Docker Compose v2+
+- 至少 8GB 可用内存（完整部署建议 16GB）
+
+### 快速启动
+
+```bash
+# 1. 克隆项目
+git clone http://git.xayunmei.com/bot_ym/water-management-system.git
+cd water-management-system
+
+# 2. 配置环境变量
+cp .env.example .env
+# 根据实际环境修改 .env 中的密码和配置
+
+# 3. 构建并启动所有服务
+docker compose up -d --build
+
+# 4. 查看启动状态
+docker compose ps
+
+# 5. 查看日志
+docker compose logs -f
+```
+
+### 服务端口说明
+
+| 服务 | 容器端口 | 宿主机端口 | 说明 |
+|------|---------|-----------|------|
+| frontend | 80 | 80 | Web 前端 |
+| gateway | 8080 | 8080 | API 网关 |
+| base | 8081 | 8091 | 基础服务 |
+| iot | 8082 | 8092 | 物联网服务 |
+| data-engine | 8083 | 8093 | 数据引擎 |
+| bpm | 8084 | 8094 | 业务流程 |
+| production | 8085 | 8095 | 生产管理 |
+| revenue | 8086 | 8096 | 营业收费 |
+| patrol | 8087 | 8097 | 巡检管理 |
+| bi | 8088 | 8098 | 大数据分析 |
+| notify | 8089 | 8099 | 消息通知 |
+| job | 8090 | 8100 | 定时任务 |
+| postgres | 5432 | 5432 | 数据库 |
+| redis | 6379 | 6379 | 缓存 |
+| emqx | 1883 | 1883 | MQTT Broker |
+| nacos | 8848 | 8848 | 服务注册/配置 |
+| minio | 9000/9001 | 9000/9001 | 对象存储 |
+
+### 环境变量说明
+
+所有敏感配置通过 `.env` 文件管理，参考 `.env.example`：
+
+- `POSTGRES_DB` / `POSTGRES_USER` / `POSTGRES_PASSWORD` — 数据库凭据
+- `REDIS_PASSWORD` — Redis 密码
+- `EMQX_ADMIN_USER` / `EMQX_ADMIN_PASSWORD` — MQTT 管理账号
+- `MINIO_USER` / `MINIO_PASSWORD` — MinIO 凭据
+- `SPRING_PROFILES` — Spring 激活的 Profile（默认 `docker`）
+- `KAFKA_ADVERTISED` — Kafka 外网访问地址
+
+### 开发环境（仅启动基础设施）
+
+本地开发时，只需启动依赖服务，应用服务通过 IDE 运行：
+
+```bash
+docker compose -f docker-compose.dev.yml up -d
+```
+
+### 单独构建镜像
+
+```bash
+# 构建前端
+docker build -t water/frontend -f Dockerfile.frontend .
+
+# 构建巡检服务（专用多阶段 Dockerfile）
+docker build -t water/wm-patrol -f Dockerfile.patrol .
+
+# 构建任意 Java 模块（通用多阶段 Dockerfile）
+docker build --build-arg MODULE=wm-base --build-arg PORT=8081 -t water/wm-base -f Dockerfile .
+```
+
+### 批量构建脚本
+
+```bash
+chmod +x docker/ci/build.sh
+./docker/ci/build.sh                          # 本地构建
+./docker/ci/build.sh --push --registry reg.example.com  # 构建并推送
+```
+
+### 常用运维命令
+
+```bash
+# 停止所有服务
+docker compose down
+
+# 停止并删除数据卷（谨慎！）
+docker compose down -v
+
+# 重启单个服务
+docker compose restart patrol
+
+# 查看服务健康状态
+docker compose ps
+
+# 查看特定服务日志
+docker compose logs -f --tail=100 iot
+
+# 进入容器调试
+docker exec -it wm-base sh
+```

docker-compose.dev.yml

@@ -0,0 +1,103 @@
+# ============================================================
+# 开发环境 Docker Compose — 仅基础设施
+# 用途: 本地开发时启动依赖服务，应用服务通过 IDE 本地运行
+# 启动: docker compose -f docker-compose.dev.yml up -d
+# ============================================================
+
+services:
+  postgres:
+    image: postgis/postgis:16-3.4
+    container_name: wm-postgres-dev
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: ${POSTGRES_DB:-water_management}
+      POSTGRES_USER: ${POSTGRES_USER:-water}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    ports:
+      - "5432:5432"
+    volumes:
+      - pgdata-dev:/var/lib/postgresql/data
+      - ./sql:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-water}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  redis:
+    image: redis:7-alpine
+    container_name: wm-redis-dev
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+    command: redis-server --requirepass ${REDIS_PASSWORD:-water123}
+    volumes:
+      - redisdata-dev:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-water123}", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+
+  emqx:
+    image: emqx/emqx:5.7.2
+    container_name: wm-emqx-dev
+    restart: unless-stopped
+    ports:
+      - "1883:1883"
+      - "8083:8083"
+      - "18083:18083"
+    environment:
+      EMQX_DASHBOARD__DEFAULT_USERNAME: admin
+      EMQX_DASHBOARD__DEFAULT_PASSWORD: public
+    volumes:
+      - emqxdata-dev:/opt/emqx/data
+    healthcheck:
+      test: ["CMD", "emqx", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  nacos:
+    image: nacos/nacos-server:v2.3.2
+    container_name: wm-nacos-dev
+    restart: unless-stopped
+    environment:
+      MODE: standalone
+      PREFER_HOST_MODE: hostname
+    ports:
+      - "8848:8848"
+      - "9848:9848"
+    volumes:
+      - nacosdata-dev:/home/nacos/data
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8848/nacos/v1/console/health/readiness"]
+      interval: 15s
+      timeout: 5s
+      retries: 5
+
+  minio:
+    image: minio/minio:latest
+    container_name: wm-minio-dev
+    restart: unless-stopped
+    ports:
+      - "9000:9000"
+      - "9001:9001"
+    environment:
+      MINIO_ROOT_USER: minioadmin
+      MINIO_ROOT_PASSWORD: minioadmin
+    volumes:
+      - miniodata-dev:/data
+    command: server /data --console-address ":9001"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  pgdata-dev:
+  redisdata-dev:
+  emqxdata-dev:
+  nacosdata-dev:
+  miniodata-dev:

docker-compose.yml

@@ -1,20 +1,30 @@
-version: '3.8'
+# ============================================================
+# 智慧水务管理系统 - Docker Compose 编排
+# 包含基础设施 + 应用服务
+# 启动: docker compose up -d
+# 日志: docker compose logs -f [service]
+# ============================================================
 
 services:
   # ==================== 基础设施 ====================
+
   postgres:
     image: postgis/postgis:16-3.4
     container_name: wm-postgres
+    restart: unless-stopped
     environment:
-      POSTGRES_DB: water_management
-      POSTGRES_USER: water
-      POSTGRES_PASSWORD: water123
+      POSTGRES_DB: ${POSTGRES_DB:-water_management}
+      POSTGRES_USER: ${POSTGRES_USER:-water}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-water123}
     ports:
       - "5432:5432"
     volumes:
       - pgdata:/var/lib/postgresql/data
+      - ./sql:/docker-entrypoint-initdb.d:ro
+    networks:
+      - wm-network
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U water"]
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-water}"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -22,6 +32,7 @@ services:
   tdengine:
     image: tdengine/tdengine:3.3.3.0
     container_name: wm-tdengine
+    restart: unless-stopped
     ports:
       - "6030:6030"
       - "6041:6041"
@@ -30,6 +41,8 @@ services:
       TAOS_FQDN: tdengine
     volumes:
       - tddata:/var/lib/taos
+    networks:
+      - wm-network
     healthcheck:
       test: ["CMD", "taos", "-s", "show databases"]
       interval: 10s
@@ -39,20 +52,26 @@ services:
   redis:
     image: redis:7-alpine
     container_name: wm-redis
+    restart: unless-stopped
     ports:
       - "6379:6379"
+    command: redis-server --requirepass ${REDIS_PASSWORD:-water123}
     volumes:
       - redisdata:/data
+    networks:
+      - wm-network
     healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
+      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-water123}", "ping"]
       interval: 10s
       timeout: 3s
       retries: 5
 
   # ==================== 消息队列 ====================
+
   kafka:
     image: bitnami/kafka:3.8
     container_name: wm-kafka
+    restart: unless-stopped
     ports:
       - "9092:9092"
     environment:
@@ -60,12 +79,14 @@ services:
       KAFKA_CFG_PROCESS_ROLES: controller,broker
       KAFKA_CFG_CONTROLLER_QUORUM_VOTERS: 0@kafka:9093
       KAFKA_CFG_LISTENERS: PLAINTEXT://:9092,CONTROLLER://:9093
-      KAFKA_CFG_ADVERTISED_LISTENERS: PLAINTEXT://${KAFKA_ADVERTISED:-localhost}:9092
+      KAFKA_CFG_ADVERTISED_LISTENERS: PLAINTEXT://${KAFKA_ADVERTISED:-kafka}:9092
       KAFKA_CFG_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT
       KAFKA_CFG_CONTROLLER_LISTENER_NAMES: CONTROLLER
       KAFKA_CFG_AUTO_CREATE_TOPICS_ENABLE: "true"
     volumes:
       - kafkadata:/bitnami/kafka
+    networks:
+      - wm-network
     healthcheck:
       test: ["CMD-SHELL", "kafka-topics.sh --bootstrap-server localhost:9092 --list"]
       interval: 15s
@@ -73,18 +94,22 @@ services:
       retries: 5
 
   # ==================== 物联网 MQTT ====================
+
   emqx:
     image: emqx/emqx:5.7.2
     container_name: wm-emqx
+    restart: unless-stopped
     ports:
       - "1883:1883"
       - "8083:8083"
       - "18083:18083"
     environment:
-      EMQX_DASHBOARD__DEFAULT_USERNAME: admin
-      EMQX_DASHBOARD__DEFAULT_PASSWORD: public
+      EMQX_DASHBOARD__DEFAULT_USERNAME: ${EMQX_ADMIN_USER:-admin}
+      EMQX_DASHBOARD__DEFAULT_PASSWORD: ${EMQX_ADMIN_PASSWORD:-public}
     volumes:
       - emqxdata:/opt/emqx/data
+    networks:
+      - wm-network
     healthcheck:
       test: ["CMD", "emqx", "ping"]
       interval: 10s
@@ -92,27 +117,34 @@ services:
       retries: 5
 
   # ==================== 服务注册/配置 ====================
+
   nacos:
     image: nacos/nacos-server:v2.3.2
     container_name: wm-nacos
+    restart: unless-stopped
     environment:
       MODE: standalone
       PREFER_HOST_MODE: hostname
+      SPRING_DATASOURCE_PLATFORM: ""
     ports:
       - "8848:8848"
       - "9848:9848"
     volumes:
       - nacosdata:/home/nacos/data
+    networks:
+      - wm-network
     healthcheck:
-      test: ["CMD-SHELL", "curl -s http://localhost:8848/nacos/v1/console/health/readiness"]
+      test: ["CMD-SHELL", "curl -sf http://localhost:8848/nacos/v1/console/health/readiness"]
       interval: 15s
       timeout: 5s
       retries: 5
 
   # ==================== 搜索引擎 ====================
+
   elasticsearch:
     image: elasticsearch:8.15.0
     container_name: wm-es
+    restart: unless-stopped
     environment:
       discovery.type: single-node
       xpack.security.enabled: "false"
@@ -121,30 +153,39 @@ services:
       - "9200:9200"
     volumes:
       - esdata:/usr/share/elasticsearch/data
+    networks:
+      - wm-network
 
   kibana:
     image: kibana:8.15.0
     container_name: wm-kibana
+    restart: unless-stopped
     ports:
       - "5601:5601"
     environment:
       ELASTICSEARCH_HOSTS: http://elasticsearch:9200
     depends_on:
       - elasticsearch
+    networks:
+      - wm-network
 
   # ==================== 对象存储 ====================
+
   minio:
     image: minio/minio:latest
     container_name: wm-minio
+    restart: unless-stopped
     ports:
       - "9000:9000"
       - "9001:9001"
     environment:
-      MINIO_ROOT_USER: minioadmin
-      MINIO_ROOT_PASSWORD: minioadmin
+      MINIO_ROOT_USER: ${MINIO_USER:-minioadmin}
+      MINIO_ROOT_PASSWORD: ${MINIO_PASSWORD:-minioadmin}
     volumes:
       - miniodata:/data
     command: server /data --console-address ":9001"
+    networks:
+      - wm-network
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
       interval: 10s
@@ -152,18 +193,22 @@ services:
       retries: 5
 
   # ==================== GIS 地图服务 ====================
+
   geoserver:
     image: docker.osgeo.org/geoserver:2.25.2
     container_name: wm-geoserver
+    restart: unless-stopped
     ports:
       - "8081:8080"
     environment:
       INSTALL_EXTENSIONS: "true"
       STABLE_EXTENSIONS: "wps,csw"
-      GEOSERVER_ADMIN_USER: admin
-      GEOSERVER_ADMIN_PASSWORD: geoserver
+      GEOSERVER_ADMIN_USER: ${GEOSERVER_USER:-admin}
+      GEOSERVER_ADMIN_PASSWORD: ${GEOSERVER_PASSWORD:-geoserver}
     volumes:
       - geoserverdata:/opt/geoserver_data
+    networks:
+      - wm-network
     profiles:
       - gis
     healthcheck:
@@ -172,6 +217,399 @@ services:
       timeout: 10s
       retries: 3
 
+  # ==================== 应用服务 ====================
+
+  # API 网关
+  gateway:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-gateway
+        PORT: 8080
+    image: water/wm-gateway
+    container_name: wm-gateway
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_CLOUD_NACOS_CONFIG_SERVER_ADDR: nacos:8848
+      SPRING_DATA_REDIS_HOST: redis
+      SPRING_DATA_REDIS_PASSWORD: ${REDIS_PASSWORD:-water123}
+    depends_on:
+      nacos:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8080/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 基础服务
+  base:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-base
+        PORT: 8081
+    image: water/wm-base
+    container_name: wm-base
+    restart: unless-stopped
+    ports:
+      - "8091:8081"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+      SPRING_DATA_REDIS_HOST: redis
+      SPRING_DATA_REDIS_PASSWORD: ${REDIS_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8081/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 物联网服务
+  iot:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-iot
+        PORT: 8082
+    image: water/wm-iot
+    container_name: wm-iot
+    restart: unless-stopped
+    ports:
+      - "8092:8082"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+      MQTT_BROKER_URL: tcp://emqx:1883
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+      emqx:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8082/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 数据引擎
+  data-engine:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-data-engine
+        PORT: 8083
+    image: water/wm-data-engine
+    container_name: wm-data-engine
+    restart: unless-stopped
+    ports:
+      - "8093:8083"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+      tdengine:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8083/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 业务流程
+  bpm:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-bpm
+        PORT: 8084
+    image: water/wm-bpm
+    container_name: wm-bpm
+    restart: unless-stopped
+    ports:
+      - "8094:8084"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8084/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 生产管理
+  production:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-production
+        PORT: 8085
+    image: water/wm-production
+    container_name: wm-production
+    restart: unless-stopped
+    ports:
+      - "8095:8085"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8085/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 营业收费
+  revenue:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-revenue
+        PORT: 8086
+    image: water/wm-revenue
+    container_name: wm-revenue
+    restart: unless-stopped
+    ports:
+      - "8096:8086"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8086/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 巡检管理
+  patrol:
+    build:
+      context: .
+      dockerfile: Dockerfile.patrol
+    image: water/wm-patrol
+    container_name: wm-patrol
+    restart: unless-stopped
+    ports:
+      - "8097:8087"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8087/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 大数据分析
+  bi:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-bi
+        PORT: 8088
+    image: water/wm-bi
+    container_name: wm-bi
+    restart: unless-stopped
+    ports:
+      - "8098:8088"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8088/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 消息通知
+  notify:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-notify
+        PORT: 8089
+    image: water/wm-notify
+    container_name: wm-notify
+    restart: unless-stopped
+    ports:
+      - "8099:8089"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8089/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # 定时任务
+  job:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        MODULE: wm-job
+        PORT: 8090
+    image: water/wm-job
+    container_name: wm-job
+    restart: unless-stopped
+    ports:
+      - "8100:8090"
+    environment:
+      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES:-docker}
+      SPRING_CLOUD_NACOS_DISCOVERY_SERVER_ADDR: nacos:8848
+      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/${POSTGRES_DB:-water_management}
+      SPRING_DATASOURCE_USERNAME: ${POSTGRES_USER:-water}
+      SPRING_DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD:-water123}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      nacos:
+        condition: service_healthy
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8090/actuator/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      start_period: 90s
+      retries: 3
+
+  # ==================== 前端 ====================
+
+  frontend:
+    build:
+      context: .
+      dockerfile: Dockerfile.frontend
+    image: water/frontend
+    container_name: wm-frontend
+    restart: unless-stopped
+    ports:
+      - "80:80"
+    depends_on:
+      - gateway
+    networks:
+      - wm-network
+    healthcheck:
+      test: ["CMD-SHELL", "wget -qO- http://localhost/ || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+
+# ==================== 数据卷 ====================
 volumes:
   pgdata:
   tddata:
@@ -182,3 +620,9 @@ volumes:
   esdata:
   miniodata:
   geoserverdata:
+
+# ==================== 网络 ====================
+networks:
+  wm-network:
+    driver: bridge
+    name: wm-network

docker/ci/build.sh

@@ -1,7 +1,89 @@
 #!/bin/bash
+# ============================================================
+# 智慧水务管理系统 - Docker 镜像构建脚本
+# 用法: ./docker/ci/build.sh [--push] [--registry registry.example.com]
+# ============================================================
 set -e
-mvn clean package -DskipTests
-for mod in wm-{base,iot,data-engine,bpm,production,revenue,patrol,bi,notify,job}; do
-  docker build -t water/$mod -f docker/$mod/Dockerfile .
+
+REGISTRY="${REGISTRY:-}"
+PUSH=false
+TAG="latest"
+
+# 解析参数
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --push) PUSH=true; shift ;;
+        --registry) REGISTRY="$2"; shift 2 ;;
+        --tag) TAG="$2"; shift 2 ;;
+        *) echo "Unknown option: $1"; exit 1 ;;
+    esac
 done
-echo "Build done"
+
+# 模块列表 (名称:端口)
+MODULES=(
+    "wm-gateway:8080"
+    "wm-base:8081"
+    "wm-iot:8082"
+    "wm-data-engine:8083"
+    "wm-bpm:8084"
+    "wm-production:8085"
+    "wm-revenue:8086"
+    "wm-patrol:8087"
+    "wm-bi:8088"
+    "wm-notify:8089"
+    "wm-job:8090"
+)
+
+echo "========================================="
+echo " 智慧水务 Docker 镜像构建"
+echo " Tag: ${TAG}"
+echo " Registry: ${REGISTRY:-local}"
+echo "========================================="
+
+# 1. 构建前端
+echo ""
+echo "▶ Building frontend..."
+docker build -t ${REGISTRY:+$REGISTRY/}water/frontend:${TAG} -f Dockerfile.frontend .
+echo "  ✅ frontend built"
+
+# 2. 构建巡检服务 (专用 Dockerfile)
+echo ""
+echo "▶ Building wm-patrol (multi-stage)..."
+docker build -t ${REGISTRY:+$REGISTRY/}water/wm-patrol:${TAG} -f Dockerfile.patrol .
+echo "  ✅ wm-patrol built"
+
+# 3. 构建其他 Java 模块 (通用 Dockerfile)
+for entry in "${MODULES[@]}"; do
+    IFS=':' read -r module port <<< "$entry"
+
+    # wm-patrol already built above
+    if [ "$module" = "wm-patrol" ]; then
+        continue
+    fi
+
+    echo ""
+    echo "▶ Building ${module} (port ${port})..."
+    docker build \
+        --build-arg MODULE=${module} \
+        --build-arg PORT=${port} \
+        -t ${REGISTRY:+$REGISTRY/}water/${module}:${TAG} \
+        -f Dockerfile .
+    echo "  ✅ ${module} built"
+done
+
+echo ""
+echo "========================================="
+echo " ✅ All images built successfully!"
+echo "========================================="
+
+# 4. 推送 (可选)
+if [ "$PUSH" = true ]; then
+    echo ""
+    echo "▶ Pushing images..."
+    docker push ${REGISTRY:+$REGISTRY/}water/frontend:${TAG}
+    for entry in "${MODULES[@]}"; do
+        IFS=':' read -r module port <<< "$entry"
+        docker push ${REGISTRY:+$REGISTRY/}water/${module}:${TAG}
+    done
+    echo "  ✅ All images pushed"
+fi

docker/frontend/nginx.conf

@@ -1,8 +1,51 @@
 server {
     listen 80;
     server_name localhost;
+
     root /usr/share/nginx/html;
     index index.html;
-    location / { try_files $uri /index.html; }
-    location /api/ { proxy_pass http://wm-gateway:8080/; }
+
+    # Gzip 压缩
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml;
+    gzip_min_length 1024;
+
+    # 前端路由 (Vue Router History 模式)
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # 静态资源缓存
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        expires 30d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # API 反向代理到网关
+    location /api/ {
+        proxy_pass http://wm-gateway:8080/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 300s;
+        proxy_connect_timeout 75s;
+    }
+
+    # WebSocket 代理
+    location /ws/ {
+        proxy_pass http://wm-gateway:8080/ws/;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_read_timeout 3600s;
+    }
+
+    # 健康检查
+    location /health {
+        access_log off;
+        return 200 "OK";
+        add_header Content-Type text/plain;
+    }
 }

docker/wm-base/Dockerfile

@@ -1,5 +1,12 @@
+# wm-base 基础服务 (CI 预构建 JAR 模式)
+# 此 Dockerfile 用于 CI 流水线：先 mvn package，再 docker build
+# 如需独立构建，请使用根目录的 Dockerfile: docker build -f Dockerfile --build-arg MODULE=wm-base .
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-base/target/wm-base-*.jar app.jar
 EXPOSE 8081
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8081/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-bi/Dockerfile

@@ -1,5 +1,10 @@
+# wm-bi 大数据分析服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-bi/target/wm-bi-*.jar app.jar
 EXPOSE 8088
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8088/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-bpm/Dockerfile

@@ -1,5 +1,10 @@
+# wm-bpm 业务流程服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-bpm/target/wm-bpm-*.jar app.jar
 EXPOSE 8084
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8084/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-data-engine/Dockerfile

@@ -1,5 +1,10 @@
+# wm-data-engine 数据引擎 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-data-engine/target/wm-data-engine-*.jar app.jar
 EXPOSE 8083
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8083/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-iot/Dockerfile

@@ -1,5 +1,10 @@
+# wm-iot 物联网服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-iot/target/wm-iot-*.jar app.jar
 EXPOSE 8082
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8082/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-job/Dockerfile

@@ -1,5 +1,10 @@
+# wm-job 定时任务服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-job/target/wm-job-*.jar app.jar
 EXPOSE 8090
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8090/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-notify/Dockerfile

@@ -1,5 +1,10 @@
+# wm-notify 消息通知服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-notify/target/wm-notify-*.jar app.jar
 EXPOSE 8089
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8089/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-patrol/Dockerfile

@@ -1,5 +1,11 @@
+# wm-patrol 巡检服务 (CI 预构建 JAR 模式)
+# 如需独立多阶段构建，请使用根目录: docker build -f Dockerfile.patrol .
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-patrol/target/wm-patrol-*.jar app.jar
 EXPOSE 8087
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8087/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-production/Dockerfile

@@ -1,5 +1,10 @@
+# wm-production 生产管理服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-production/target/wm-production-*.jar app.jar
 EXPOSE 8085
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8085/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]

docker/wm-revenue/Dockerfile

@@ -1,5 +1,10 @@
+# wm-revenue 营业收费服务 (CI 预构建 JAR 模式)
 FROM eclipse-temurin:17-jre-alpine
+RUN apk add --no-cache curl tzdata \
+    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
 WORKDIR /app
 COPY wm-revenue/target/wm-revenue-*.jar app.jar
 EXPOSE 8086
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -sf http://localhost:8086/actuator/health || exit 1
+ENTRYPOINT ["java", "-Xms256m", "-Xmx512m", "-Djava.security.egd=file:/dev/./urandom", "-jar", "app.jar"]