fix: restore reviewable migration evidence

2026-07-10 18:26:48 +08:00
commit d1bbb5370c
42 changed files with 6419 additions and 0 deletions
@@ -0,0 +1,65 @@
+services:
+  tokenthief:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: tokenthief:0.1.0
+    container_name: tokenthief
+    restart: unless-stopped
+    depends_on:
+      thief_clickhouse:
+        condition: service_healthy
+    ports:
+      - "${LISTEN_PORT:-8080}:8080"
+    environment:
+      LISTEN_ADDR: ":8080"
+      UPSTREAM_URL: "${UPSTREAM_URL:?set UPSTREAM_URL}"
+      UPSTREAM_TLS_INSECURE_SKIP_VERIFY: "${UPSTREAM_TLS_INSECURE_SKIP_VERIFY:-false}"
+      CLICKHOUSE_URL: "${CLICKHOUSE_URL:?set CLICKHOUSE_URL with URL-encoded credentials}"
+      MAX_BODY_BYTES: "${MAX_BODY_BYTES:-1048576}"
+      LOG_QUEUE_SIZE: "${LOG_QUEUE_SIZE:-256}"
+      LOG_QUEUE_BYTES: "${LOG_QUEUE_BYTES:-67108864}"
+      LOG_BATCH_SIZE: "${LOG_BATCH_SIZE:-50}"
+      LOG_BATCH_INTERVAL: "${LOG_BATCH_INTERVAL:-2s}"
+      LOG_WORKERS: "${LOG_WORKERS:-2}"
+      FILTER_FILE: "/etc/tokenthief/filter.yaml"
+      DB_RECONNECT_INTERVAL: "${DB_RECONNECT_INTERVAL:-10s}"
+      READ_TIMEOUT: "${READ_TIMEOUT:-30s}"
+      WRITE_TIMEOUT: "${WRITE_TIMEOUT:-10m}"
+      IDLE_TIMEOUT: "${IDLE_TIMEOUT:-5m}"
+      UPSTREAM_TIMEOUT: "${UPSTREAM_TIMEOUT:-30s}"
+      UPSTREAM_RESPONSE_TIMEOUT: "${UPSTREAM_RESPONSE_TIMEOUT:-30s}"
+      UPSTREAM_STREAM_IDLE_TIMEOUT: "${UPSTREAM_STREAM_IDLE_TIMEOUT:-2m}"
+      TRUSTED_PROXIES: "${TRUSTED_PROXIES:-}"
+      TZ: "${TZ:-Asia/Shanghai}"
+    volumes:
+      - ./filter.yaml:/etc/tokenthief/filter.yaml:ro
+    networks:
+      - tokenthief
+
+  thief_clickhouse:
+    image: clickhouse/clickhouse-server:25.3.3.42-alpine
+    container_name: tokenthief-clickhouse
+    restart: unless-stopped
+    environment:
+      CLICKHOUSE_USER: "${CLICKHOUSE_USER:-tokenthief}"
+      CLICKHOUSE_PASSWORD: "${CLICKHOUSE_PASSWORD:?set a strong CLICKHOUSE_PASSWORD}"
+      CLICKHOUSE_DB: "${CLICKHOUSE_DB:-tokenthief}"
+      TZ: "${TZ:-Asia/Shanghai}"
+    volumes:
+      - clickhouse_data:/var/lib/clickhouse
+    healthcheck:
+      test: ["CMD-SHELL", "clickhouse-client --user \"$${CLICKHOUSE_USER}\" --password \"$${CLICKHOUSE_PASSWORD}\" --database \"$${CLICKHOUSE_DB}\" --query 'SELECT 1'"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 10s
+    networks:
+      - tokenthief
+
+volumes:
+  clickhouse_data:
+
+networks:
+  tokenthief:
+    driver: bridge