feat: 初始化考培练系统项目

- 从服务器拉取完整代码
- 按框架规范整理项目结构
- 配置 Drone CI 测试环境部署
- 包含后端(FastAPI)、前端(Vue3)、管理端

技术栈: Vue3 + TypeScript + FastAPI + MySQL

deploy/docker/docker-compose.admin.yml

@@ -0,0 +1,115 @@
+# 考培练系统 SaaS 超级管理后台 Docker Compose 配置
+# 
+# 启动命令：
+#   cd /root/aiedu && docker compose -f docker-compose.admin.yml up -d
+#
+# 重新构建后端：
+#   docker compose -f docker-compose.admin.yml build --no-cache kaopeilian-admin-backend
+#
+# 服务说明：
+#   - kaopeilian-admin-frontend: 管理后台前端 (端口 3030)
+#   - kaopeilian-admin-backend: 管理后台后端 (端口 8030)
+#
+# 域名：admin.kpl.ireborn.com.cn
+#
+# 注意：敏感配置从 .env.admin 文件读取
+
+name: kaopeilian-admin
+
+services:
+  # ============================================
+  # 管理后台前端
+  # ============================================
+  kaopeilian-admin-frontend:
+    build:
+      context: ./kaopeilian-admin-frontend
+      dockerfile: Dockerfile
+    image: kaopeilian-admin-frontend:1.0.0
+    container_name: kaopeilian-admin-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "127.0.0.1:3030:80"  # 仅本地访问，通过 Nginx 反向代理
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - kaopeilian-network
+    depends_on:
+      kaopeilian-admin-backend:
+        condition: service_started
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 256M
+        reservations:
+          cpus: '0.1'
+          memory: 64M
+
+  # ============================================
+  # 管理后台后端（开发环境 - 热重载）
+  # ============================================
+  kaopeilian-admin-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile.admin
+    image: kaopeilian-admin-backend:1.0.0
+    container_name: kaopeilian-admin-backend
+    restart: unless-stopped
+    env_file:
+      - .env.admin
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "127.0.0.1:8030:8000"  # 仅本地访问，通过 Nginx 反向代理
+    volumes:
+      # 代码热重载 - 挂载整个 app 目录
+      - ./kaopeilian-backend/app:/app/app:rw
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    # 开发模式命令 - 启用热重载
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload", "--reload-dir", "/app/app"]
+    networks:
+      - kaopeilian-network
+      - prod-network
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 60s
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+    deploy:
+      resources:
+        limits:
+          cpus: '1'
+          memory: 1G
+        reservations:
+          cpus: '0.25'
+          memory: 256M
+
+networks:
+  kaopeilian-network:
+    external: true
+    name: kaopeilian-network
+  prod-network:
+    external: true
+    name: prod-network

deploy/docker/docker-compose.dev.yml

@@ -0,0 +1,186 @@
+# 考培练系统开发环境 Docker Compose 配置
+name: kaopeilian-dev
+
+services:
+  # 前端开发服务
+  frontend-dev:
+    build:
+      context: ./kaopeilian-frontend
+      dockerfile: Dockerfile.dev
+    container_name: kaopeilian-frontend-dev
+    restart: unless-stopped
+    ports:
+      - "3001:3001"
+    environment:
+      - NODE_ENV=development
+      - VITE_APP_ENV=development
+      - VITE_API_BASE_URL=""
+      - VITE_WS_BASE_URL=""
+      - VITE_USE_MOCK_DATA=false
+      - VITE_ENABLE_DEVTOOLS=true
+      - VITE_ENABLE_REQUEST_LOG=true
+      - CHOKIDAR_USEPOLLING=true  # 支持Docker中的文件监听
+      - WATCHPACK_POLLING=true    # 支持热重载
+    volumes:
+      # 挂载源代码实现热重载（关键配置）
+      - ./kaopeilian-frontend:/app
+      - kaopeilian_frontend_node_modules:/app/node_modules  # 使用命名卷
+      - ./kaopeilian-frontend/logs:/app/logs
+    networks:
+      - kaopeilian-dev-network
+    depends_on:
+      backend-dev:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3001/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  # 后端开发服务
+  backend-dev:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile.dev
+    container_name: kaopeilian-backend-dev
+    restart: unless-stopped
+    ports:
+      - "8000:8000"
+    environment:
+      - PYTHONPATH=/app
+      - DEBUG=true
+      - ENV=development
+      - "DATABASE_URL=mysql+aiomysql://root:nj861021@mysql-dev:3306/kaopeilian?charset=utf8mb4"
+      - REDIS_URL=redis://redis-dev:6379/0
+      - MYSQL_HOST=mysql-dev
+      - MYSQL_PORT=3306
+      - MYSQL_USER=root
+      - "MYSQL_PASSWORD=nj861021"
+      - MYSQL_DATABASE=kaopeilian
+      - REDIS_HOST=redis-dev
+      - REDIS_PORT=6379
+      - REDIS_DB=0
+      - PYTHONUNBUFFERED=1  # 确保日志实时输出
+      - CORS_ORIGINS=["http://localhost:3000","http://localhost:3001","http://localhost:5173","http://127.0.0.1:3000","http://127.0.0.1:3001","http://127.0.0.1:5173"]
+      # 完全禁用代理（覆盖 Docker Desktop 的代理配置）
+      - HTTP_PROXY=
+      - HTTPS_PROXY=
+      - http_proxy=
+      - https_proxy=
+      - NO_PROXY=
+      - no_proxy=
+    volumes:
+      # 挂载源代码实现热重载（关键配置）
+      - ./kaopeilian-backend:/app:rw
+      - ./kaopeilian-backend/uploads:/app/uploads:rw
+      - ./kaopeilian-backend/logs:/app/logs:rw
+      # 排除虚拟环境目录，避免冲突
+      - /app/venv
+    networks:
+      - kaopeilian-dev-network
+    depends_on:
+      mysql-dev:
+        condition: service_healthy
+      redis-dev:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  # 开发数据库
+  mysql-dev:
+    image: mysql:8.0.43
+    container_name: kaopeilian-mysql-dev
+    restart: unless-stopped
+    ports:
+      - "3306:3306"
+    environment:
+      MYSQL_ROOT_PASSWORD: nj861021
+      MYSQL_DATABASE: kaopeilian
+      MYSQL_CHARACTER_SET_SERVER: utf8mb4
+      MYSQL_COLLATION_SERVER: utf8mb4_unicode_ci
+    volumes:
+      - mysql_dev_data:/var/lib/mysql
+      - ./kaopeilian-backend/scripts/init_database_unified.sql:/docker-entrypoint-initdb.d/init.sql:ro
+      - ./kaopeilian-backend/mysql.cnf:/etc/mysql/conf.d/mysql.cnf:ro
+    command: --default-authentication-plugin=mysql_native_password
+    networks:
+      - kaopeilian-dev-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-pnj861021"]
+      timeout: 20s
+      retries: 10
+      start_period: 30s
+
+  # 开发 Redis 缓存
+  redis-dev:
+    image: redis:7.2-alpine
+    container_name: kaopeilian-redis-dev
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_dev_data:/data
+    networks:
+      - kaopeilian-dev-network
+    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # phpMyAdmin 数据库管理界面（可选）
+  phpmyadmin:
+    image: phpmyadmin/phpmyadmin:latest
+    container_name: kaopeilian-phpmyadmin-dev
+    restart: unless-stopped
+    ports:
+      - "8080:80"
+    environment:
+      PMA_HOST: mysql-dev
+      PMA_PORT: 3306
+      PMA_USER: root
+      PMA_PASSWORD: nj861021
+    networks:
+      - kaopeilian-dev-network
+    depends_on:
+      mysql-dev:
+        condition: service_healthy
+    profiles:
+      - admin  # 使用 profile 控制是否启动
+
+  # 邮件测试服务（开发环境用于测试邮件发送）
+  mailhog:
+    image: mailhog/mailhog:latest
+    container_name: kaopeilian-mailhog-dev
+    restart: unless-stopped
+    ports:
+      - "1025:1025"  # SMTP 端口
+      - "8025:8025"  # Web UI 端口
+    networks:
+      - kaopeilian-dev-network
+    profiles:
+      - mail  # 使用 profile 控制是否启动
+
+# 开发网络
+networks:
+  kaopeilian-dev-network:
+    driver: bridge
+    name: kaopeilian-dev-network
+
+# 开发数据卷
+volumes:
+  mysql_dev_data:
+    driver: local
+    name: kaopeilian-mysql-dev-data
+  redis_dev_data:
+    driver: local
+    name: kaopeilian-redis-dev-data
+  kaopeilian_frontend_node_modules:
+    driver: local
+    name: kaopeilian-frontend-node-modules

deploy/docker/docker-compose.kpl.yml

@@ -0,0 +1,207 @@
+# 瑞小美团队开发环境 Docker Compose 配置
+# 域名：kpl.ireborn.com.cn
+# 支持热重载，与演示系统完全隔离
+#
+# ⚠️ 敏感配置（API Key 等）请在 .env.kpl 文件中设置
+# 启动命令：docker compose --env-file .env.kpl -f docker-compose.kpl.yml up -d
+
+name: kpl-dev
+
+services:
+  # 前端开发服务
+  kpl-frontend-dev:
+    build:
+      context: ./kaopeilian-frontend
+      dockerfile: Dockerfile.dev
+    container_name: kpl-frontend-dev
+    restart: unless-stopped
+    ports:
+      - "3002:3001"
+    environment:
+      - NODE_ENV=development
+      - VITE_APP_ENV=development
+      - VITE_API_BASE_URL=https://kpl.ireborn.com.cn
+      - VITE_WS_BASE_URL=wss://kpl.ireborn.com.cn
+      - VITE_USE_MOCK_DATA=false
+      - VITE_ENABLE_DEVTOOLS=true
+      - VITE_ENABLE_REQUEST_LOG=true
+      - CHOKIDAR_USEPOLLING=true  # 支持Docker中的文件监听
+      - WATCHPACK_POLLING=true    # 支持热重载
+    volumes:
+      # 挂载源代码实现热重载（关键配置）
+      - ./kaopeilian-frontend:/app
+      - kpl_frontend_node_modules:/app/node_modules  # 使用命名卷
+      - ./kaopeilian-frontend/logs:/app/logs
+    networks:
+      - kpl-dev-network
+    depends_on:
+      kpl-backend-dev:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3001/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  # 后端开发服务
+  kpl-backend-dev:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile.dev
+    container_name: kpl-backend-dev
+    restart: unless-stopped
+    ports:
+      - "8001:8000"
+    environment:
+      - PYTHONPATH=/app
+      - DEBUG=true
+      - ENV=development
+      - "DATABASE_URL=mysql+aiomysql://root:nj861021@kpl-mysql-dev:3306/kaopeilian?charset=utf8mb4"
+      - REDIS_URL=redis://kpl-redis-dev:6379/0
+      - MYSQL_HOST=kpl-mysql-dev
+      - MYSQL_PORT=3306
+      - MYSQL_USER=root
+      - "MYSQL_PASSWORD=nj861021"
+      - MYSQL_DATABASE=kaopeilian
+      - REDIS_HOST=kpl-redis-dev
+      - REDIS_PORT=6379
+      - REDIS_DB=0
+      - PYTHONUNBUFFERED=1  # 确保日志实时输出
+      - CORS_ORIGINS=["https://kpl.ireborn.com.cn","http://localhost:3002","http://127.0.0.1:3002"]
+      # Coze OAuth配置
+      - COZE_OAUTH_CLIENT_ID=1114009328887
+      - COZE_OAUTH_PUBLIC_KEY_ID=GGs9pw0BDHx2k9vGGehUyRgKV-PyUWLBncDs-YNNN_I
+      - COZE_OAUTH_PRIVATE_KEY_PATH=/app/secrets/coze_private_key.pem
+      - COZE_PRACTICE_BOT_ID=7560643598174683145
+      # Coze 播课工作流配置（瑞小美专用）
+      - COZE_BROADCAST_WORKFLOW_ID=7561161554420482088
+      - COZE_BROADCAST_SPACE_ID=7474971491470688296
+      - COZE_BROADCAST_BOT_ID=7560643598174683145
+      # 完全禁用代理（覆盖 Docker Desktop 的代理配置）
+      - HTTP_PROXY=
+      - HTTPS_PROXY=
+      - http_proxy=
+      - https_proxy=
+      - NO_PROXY=
+      - no_proxy=
+      # AI 服务配置（遵循瑞小美 AI 接入规范）
+      # 注意：API Key 应从 .env 文件或密钥管理服务获取
+      - AI_PRIMARY_API_KEY=${AI_PRIMARY_API_KEY:-}
+      - AI_ANTHROPIC_API_KEY=${AI_ANTHROPIC_API_KEY:-}
+      - AI_PRIMARY_BASE_URL=https://4sapi.com/v1
+      - AI_FALLBACK_API_KEY=${AI_FALLBACK_API_KEY:-}
+      - AI_FALLBACK_BASE_URL=https://openrouter.ai/api/v1
+      # 默认模型：遵循"优先最强"原则，使用 Claude Opus 4.5
+      - AI_DEFAULT_MODEL=claude-opus-4-5-20251101-thinking
+      - AI_TIMEOUT=120
+    volumes:
+      # 挂载源代码实现热重载（关键配置）
+      - ./kaopeilian-backend:/app:rw
+      - /data/kaopeilian/uploads/kpl:/app/uploads:rw  # 迁移到数据盘
+      - ./kaopeilian-backend/logs:/app/logs:rw
+      - ./kaopeilian-backend/secrets:/app/secrets:ro
+      # 排除虚拟环境目录，避免冲突
+      - /app/venv
+    networks:
+      - kpl-dev-network
+    depends_on:
+      kpl-mysql-dev:
+        condition: service_healthy
+      kpl-redis-dev:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  # 开发数据库
+  kpl-mysql-dev:
+    image: mysql:8.0.43
+    container_name: kpl-mysql-dev
+    restart: unless-stopped
+    ports:
+      - "3308:3306"
+    environment:
+      MYSQL_ROOT_PASSWORD: nj861021
+      MYSQL_DATABASE: kaopeilian
+      MYSQL_CHARACTER_SET_SERVER: utf8mb4
+      MYSQL_COLLATION_SERVER: utf8mb4_unicode_ci
+      TZ: Asia/Shanghai
+    volumes:
+      - kpl_mysql_dev_data:/var/lib/mysql
+      - ./kaopeilian-backend/scripts/init_database_unified.sql:/docker-entrypoint-initdb.d/init.sql:ro
+      - ./kaopeilian-backend/mysql.cnf:/etc/mysql/conf.d/mysql.cnf:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: --default-authentication-plugin=mysql_native_password
+    networks:
+      - kpl-dev-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-pnj861021"]
+      timeout: 20s
+      retries: 10
+      start_period: 30s
+
+  # 开发 Redis 缓存
+  kpl-redis-dev:
+    image: redis:7.2-alpine
+    container_name: kpl-redis-dev
+    restart: unless-stopped
+    ports:
+      - "6380:6379"
+    environment:
+      - TZ=Asia/Shanghai
+    volumes:
+      - kpl_redis_dev_data:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - kpl-dev-network
+    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # phpMyAdmin 数据库管理界面（可选）
+  kpl-phpmyadmin:
+    image: phpmyadmin/phpmyadmin:latest
+    container_name: kpl-phpmyadmin-dev
+    restart: unless-stopped
+    ports:
+      - "8081:80"
+    environment:
+      PMA_HOST: kpl-mysql-dev
+      PMA_PORT: 3306
+      PMA_USER: root
+      PMA_PASSWORD: nj861021
+    networks:
+      - kpl-dev-network
+    depends_on:
+      kpl-mysql-dev:
+        condition: service_healthy
+    profiles:
+      - admin  # 使用 profile 控制是否启动
+
+# 开发网络
+networks:
+  kpl-dev-network:
+    external: true
+    name: kpl-dev-network
+
+# 开发数据卷
+volumes:
+  kpl_mysql_dev_data:
+    driver: local
+    name: kpl-mysql-dev-data
+  kpl_redis_dev_data:
+    driver: local
+    name: kpl-redis-dev-data
+  kpl_frontend_node_modules:
+    driver: local
+    name: kpl-frontend-node-modules
+

deploy/docker/docker-compose.prod-multi.yml

@@ -0,0 +1,482 @@
+# 多客户生产环境 Docker Compose 配置
+# 共享MySQL实例，独立前端/后端/Redis容器
+# 
+# 重要说明：
+# - 所有租户前端共享同一个 dist 目录: /root/aiedu/kaopeilian-frontend/dist
+# - 编译一次前端，所有租户自动更新（无需重新构建镜像）
+# - 更新前端步骤：cd /root/aiedu/kaopeilian-frontend && npm run build
+# - 后端API地址由nginx反向代理根据域名自动路由，前端无需区分
+#
+name: prod-multi
+
+services:
+  # ============================================
+  # 共享MySQL数据库服务
+  # ============================================
+  prod-mysql:
+    image: mysql:8.0.43
+    container_name: prod-mysql
+    restart: unless-stopped
+    environment:
+      TZ: Asia/Shanghai
+      MYSQL_ROOT_PASSWORD: ProdMySQL2025!@#
+      MYSQL_CHARACTER_SET_SERVER: utf8mb4
+      MYSQL_COLLATION_SERVER: utf8mb4_unicode_ci
+    ports:
+      - "3309:3306"
+    volumes:
+      - /data/mysql-data:/var/lib/mysql
+      - ./kaopeilian-backend/mysql.cnf:/etc/mysql/conf.d/mysql.cnf:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: --default-authentication-plugin=mysql_native_password
+    networks:
+      - prod-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-pProdMySQL2025!@#"]
+      timeout: 20s
+      retries: 10
+      start_period: 30s
+
+  # ============================================
+  # 华尔倍丽 (hua.ireborn.com.cn)
+  # ============================================
+  hua-frontend:
+    # 使用共享的前端镜像，挂载统一的dist目录
+    image: kaopeilian-frontend:shared
+    container_name: hua-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "3010:80"
+    volumes:
+      - /root/aiedu/kaopeilian-frontend/dist:/usr/share/nginx/html:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      - hua-backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  hua-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    image: prod-multi-hua-backend:latest
+    container_name: hua-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.hua
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8010:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/prod-envs/uploads-hua:/app/uploads
+      - /data/prod-envs/logs-hua:/app/logs
+      - /data/prod-envs/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      prod-mysql:
+        condition: service_healthy
+      hua-redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  hua-redis:
+    image: redis:7.2-alpine
+    container_name: hua-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6390:6379"
+    volumes:
+      - /data/redis-data/hua:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # ============================================
+  # 杨扬宠物 (yy.ireborn.com.cn)
+  # ============================================
+  yy-frontend:
+    # 使用共享的前端镜像，挂载统一的dist目录
+    image: kaopeilian-frontend:shared
+    container_name: yy-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "3011:80"
+    volumes:
+      - /root/aiedu/kaopeilian-frontend/dist:/usr/share/nginx/html:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      - yy-backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  yy-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    image: prod-multi-yy-backend:latest
+    container_name: yy-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.yy
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8011:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/prod-envs/uploads-yy:/app/uploads
+      - /data/prod-envs/logs-yy:/app/logs
+      - /data/prod-envs/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      prod-mysql:
+        condition: service_healthy
+      yy-redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  yy-redis:
+    image: redis:7.2-alpine
+    container_name: yy-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6391:6379"
+    volumes:
+      - /data/redis-data/yy:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # ============================================
+  # 武汉禾丽 (hl.ireborn.com.cn)
+  # ============================================
+  hl-frontend:
+    # 使用共享的前端镜像，挂载统一的dist目录
+    image: kaopeilian-frontend:shared
+    container_name: hl-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "3012:80"
+    volumes:
+      - /root/aiedu/kaopeilian-frontend/dist:/usr/share/nginx/html:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      - hl-backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  hl-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    image: prod-multi-hl-backend:latest
+    container_name: hl-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.hl
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8012:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/prod-envs/uploads-hl:/app/uploads
+      - /data/prod-envs/logs-hl:/app/logs
+      - /data/prod-envs/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      prod-mysql:
+        condition: service_healthy
+      hl-redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  hl-redis:
+    image: redis:7.2-alpine
+    container_name: hl-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6392:6379"
+    volumes:
+      - /data/redis-data/hl:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # ============================================
+  # 芯颜定制 (xy.ireborn.com.cn)
+  # ============================================
+  xy-frontend:
+    # 使用共享的前端镜像，挂载统一的dist目录
+    image: kaopeilian-frontend:shared
+    container_name: xy-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "3013:80"
+    volumes:
+      - /root/aiedu/kaopeilian-frontend/dist:/usr/share/nginx/html:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      - xy-backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  xy-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    image: prod-multi-xy-backend:latest
+    container_name: xy-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.xy
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8013:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/prod-envs/uploads-xy:/app/uploads
+      - /data/prod-envs/logs-xy:/app/logs
+      - /data/prod-envs/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      prod-mysql:
+        condition: service_healthy
+      xy-redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  xy-redis:
+    image: redis:7.2-alpine
+    container_name: xy-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6393:6379"
+    volumes:
+      - /data/redis-data/xy:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # ============================================
+  # 飞沃 (fw.ireborn.com.cn)
+  # ============================================
+  fw-frontend:
+    # 使用共享的前端镜像，挂载统一的dist目录
+    # 这样只需编译一次前端，所有租户自动更新
+    image: kaopeilian-frontend:shared
+    container_name: fw-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "3014:80"
+    volumes:
+      - /root/aiedu/kaopeilian-frontend/dist:/usr/share/nginx/html:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      - fw-backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  fw-backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    image: prod-multi-fw-backend:latest
+    container_name: fw-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.fw
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8014:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/prod-envs/uploads-fw:/app/uploads
+      - /data/prod-envs/logs-fw:/app/logs
+      - /data/prod-envs/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - prod-network
+      - kaopeilian-network
+    depends_on:
+      prod-mysql:
+        condition: service_healthy
+      fw-redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  fw-redis:
+    image: redis:7.2-alpine
+    container_name: fw-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6394:6379"
+    volumes:
+      - /data/redis-data/fw:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - prod-network
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+# 网络配置
+networks:
+  prod-network:
+    driver: bridge
+    name: prod-network
+  kaopeilian-network:
+    external: true
+    name: kaopeilian-network
+
+
+

deploy/docker/docker-compose.yml

@@ -0,0 +1,178 @@
+# 考培练系统完整部署配置
+version: '3.8'
+
+services:
+  # MySQL数据库服务
+  mysql:
+    image: mysql:8.0.43
+    container_name: kaopeilian-mysql
+    restart: unless-stopped
+    environment:
+      TZ: Asia/Shanghai
+      MYSQL_ROOT_PASSWORD: Kaopeilian2025!@#
+      MYSQL_DATABASE: kaopeilian
+      MYSQL_CHARACTER_SET_SERVER: utf8mb4
+      MYSQL_COLLATION_SERVER: utf8mb4_unicode_ci
+    ports:
+      - "3307:3306"
+    volumes:
+      - mysql_data:/var/lib/mysql
+      - ./考培练系统规划/数据库-里程碑备份/7-完成数据分析模块-20251016_075159.sql:/docker-entrypoint-initdb.d/init.sql
+      - ./kaopeilian-backend/mysql.cnf:/etc/mysql/conf.d/mysql.cnf
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: --default-authentication-plugin=mysql_native_password
+    networks:
+      - kaopeilian-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      timeout: 20s
+      retries: 10
+
+  # 后端API服务
+  backend:
+    build:
+      context: ./kaopeilian-backend
+      dockerfile: Dockerfile
+    container_name: kaopeilian-backend
+    restart: unless-stopped
+    env_file:
+      - ./kaopeilian-backend/.env.production
+    environment:
+      - TZ=Asia/Shanghai
+      - PYTHONPATH=/app
+    ports:
+      - "8000:8000"
+    volumes:
+      - ./kaopeilian-backend/app:/app/app  # 代码热重载
+      - /data/kaopeilian/uploads/demo:/app/uploads  # 迁移到数据盘
+      - ./kaopeilian-backend/logs:/app/logs
+      - ./kaopeilian-backend/secrets:/app/secrets:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
+    networks:
+      - kaopeilian-network
+    depends_on:
+      mysql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+  # 前端服务
+  frontend:
+    build:
+      context: ./kaopeilian-frontend
+      dockerfile: Dockerfile
+      target: production
+      args:
+        - NODE_ENV=production
+        - VITE_API_BASE_URL=https://aiedu.ireborn.com.cn
+        - VITE_WS_BASE_URL=wss://aiedu.ireborn.com.cn
+        - VITE_USE_MOCK_DATA=false
+    container_name: kaopeilian-frontend
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    volumes:
+      - ./kaopeilian-frontend/docker/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./kaopeilian-frontend/docker/default.conf:/etc/nginx/conf.d/default.conf:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - kaopeilian-network
+    depends_on:
+      - backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  # Redis缓存服务
+  redis:
+    image: redis:7.2-alpine
+    container_name: kaopeilian-redis
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_data:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - kaopeilian-network
+    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+  # Nginx反向代理和SSL终止
+  nginx:
+    image: nginx:1.25-alpine
+    container_name: kaopeilian-nginx
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Shanghai
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx/conf.d:/etc/nginx/conf.d:ro
+      - /etc/letsencrypt:/etc/letsencrypt:ro
+      - /var/www/certbot:/var/www/certbot:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/timezone:/etc/timezone:ro
+    networks:
+      - kaopeilian-network
+      - kpl-dev-network
+    depends_on:
+      - frontend
+      - backend
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
+  # SSL证书续期服务
+  certbot:
+    image: certbot/certbot:latest
+    container_name: kaopeilian-certbot
+    restart: "no"
+    volumes:
+      - /etc/letsencrypt:/etc/letsencrypt
+      - /var/www/certbot:/var/www/certbot
+    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
+    profiles:
+      - ssl
+
+# 网络配置
+networks:
+  kaopeilian-network:
+    driver: bridge
+    name: kaopeilian-network
+  kpl-dev-network:
+    external: true
+    name: kpl-dev-network
+
+# 数据卷配置
+volumes:
+  redis_data:
+    driver: local
+    name: kaopeilian-redis-data
+  mysql_data:
+    driver: local
+    name: kaopeilian-mysql-data