services: database: image: postgres:16-alpine container_name: unidesk-database restart: unless-stopped expose: - "5432" environment: POSTGRES_USER: "${UNIDESK_DATABASE_USER}" POSTGRES_PASSWORD: "${UNIDESK_DATABASE_PASSWORD}" POSTGRES_DB: "${UNIDESK_DATABASE_NAME}" command: - "postgres" - "-c" - "config_file=/etc/postgresql/postgresql.conf" - "-c" - "hba_file=/etc/postgresql/pg_hba.conf" - "-c" - "logging_collector=on" - "-c" - "log_directory=/var/log/unidesk/${UNIDESK_LOG_DAY}" - "-c" - "log_filename=${UNIDESK_LOG_PREFIX}_database.log" - "-c" - "log_connections=on" - "-c" - "log_disconnections=on" volumes: - unidesk_pgdata_10gb:/var/lib/postgresql/data - ./src/components/database/init:/docker-entrypoint-initdb.d:ro - ./src/components/database/config/postgresql.conf:/etc/postgresql/postgresql.conf:ro - ./src/components/database/config/pg_hba.conf:/etc/postgresql/pg_hba.conf:ro - ${UNIDESK_LOG_DIR}:/var/log/unidesk healthcheck: test: ["CMD-SHELL", "pg_isready -U ${UNIDESK_DATABASE_USER} -d ${UNIDESK_DATABASE_NAME}"] interval: 5s timeout: 3s retries: 20 backend-core: build: context: . dockerfile: src/components/backend-core/Dockerfile container_name: unidesk-backend-core restart: unless-stopped depends_on: - database ports: - "${UNIDESK_PROVIDER_INGRESS_PORT}:8081" expose: - "8080" environment: PORT: "8080" PROVIDER_PORT: "8081" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}" HEARTBEAT_TIMEOUT_MS: "${UNIDESK_HEARTBEAT_TIMEOUT_MS}" TASK_PENDING_TIMEOUT_MS: "${UNIDESK_TASK_PENDING_TIMEOUT_MS:-600000}" DATABASE_VOLUME_NAME: "${UNIDESK_DATABASE_VOLUME}" DATABASE_VOLUME_SIZE: "${UNIDESK_DATABASE_VOLUME_SIZE}" PGDATA_BACKUP_STAGING_DIR: "/data/baidu-netdisk-staging" BAIDU_NETDISK_INTERNAL_URL: "http://baidu-netdisk:4244" MICROSERVICES_JSON: "${UNIDESK_MICROSERVICES_JSON:-[]}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_backend-core.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk - ./.state/baidu-netdisk/staging:/data/baidu-netdisk-staging healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 todo-note: build: context: /root/todo_note dockerfile: Dockerfile container_name: todo-note-backend restart: unless-stopped depends_on: - database expose: - "4211" environment: HOST: "0.0.0.0" PORT: "4211" TODO_NOTE_BACKEND_ONLY: "1" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" TODO_NOTE_LOGS_DIR: "logs" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_todo-note.jsonl" TODO_NOTE_LOG_PATH: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_todo-note.jsonl" TODO_NOTE_REMINDER_CLAUDEQQ_ENABLED: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_ENABLED:-true}" TODO_NOTE_REMINDER_CLAUDEQQ_BASE_URL: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_BASE_URL:-http://backend-core:8080/api/microservices/claudeqq/proxy}" TODO_NOTE_REMINDER_CLAUDEQQ_TARGET_TYPE: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_TARGET_TYPE:-private}" TODO_NOTE_REMINDER_CLAUDEQQ_USER_ID: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_USER_ID:-645275593}" TODO_NOTE_REMINDER_CLAUDEQQ_GROUP_ID: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_GROUP_ID:-}" TODO_NOTE_REMINDER_LEAD_MINUTES: "${UNIDESK_TODO_NOTE_REMINDER_LEAD_MINUTES:-10}" TODO_NOTE_REMINDER_SCAN_INTERVAL_MS: "${UNIDESK_TODO_NOTE_REMINDER_SCAN_INTERVAL_MS:-30000}" TODO_NOTE_REMINDER_CLAUDEQQ_TIMEOUT_MS: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_TIMEOUT_MS:-15000}" TODO_NOTE_REMINDER_CLAUDEQQ_SEND_ATTEMPTS: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_SEND_ATTEMPTS:-3}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4211/api/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 code-queue: build: context: . dockerfile: src/components/microservices/code-queue/Dockerfile container_name: code-queue-backend restart: unless-stopped mem_limit: 600m memswap_limit: 1536m depends_on: - database - backend-core - oa-event-flow expose: - "4222" environment: HOST: "0.0.0.0" PORT: "4222" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" CODE_QUEUE_DATA_DIR: "/var/lib/unidesk/code-queue" CODE_QUEUE_WORKDIR: "/root/unidesk" CODE_QUEUE_CODEX_HOME: "/var/lib/unidesk/code-queue/codex-home" CODE_QUEUE_OPENCODE_XDG_DIR: "/var/lib/unidesk/code-queue/opencode-xdg" CODE_QUEUE_SOURCE_CODEX_CONFIG: "/root/.codex/config.toml" CODE_QUEUE_DEFAULT_MODEL: "gpt-5.5" CODE_QUEUE_MODELS: "gpt-5.5,gpt-5.4-mini,gpt-5.4,minimax-m2.7" CODE_QUEUE_MODEL_REASONING_EFFORTS: "gpt-5.5=xhigh" CODE_QUEUE_SANDBOX: "danger-full-access" CODE_QUEUE_APPROVAL_POLICY: "never" OA_EVENT_FLOW_BASE_URL: "http://oa-event-flow:4255" CODE_QUEUE_MAX_ATTEMPTS: "99" CODE_QUEUE_MAX_ACTIVE_QUEUES: "${UNIDESK_CODE_QUEUE_MAX_ACTIVE_QUEUES:-0}" NODE_OPTIONS: "${UNIDESK_CODE_QUEUE_NODE_OPTIONS:---max-old-space-size=768}" CODE_QUEUE_IN_MEMORY_OUTPUT_RECORDS: "${UNIDESK_CODE_QUEUE_IN_MEMORY_OUTPUT_RECORDS:-10}" CODE_QUEUE_IN_MEMORY_EVENT_RECORDS: "${UNIDESK_CODE_QUEUE_IN_MEMORY_EVENT_RECORDS:-10}" CODE_QUEUE_CODEX_SQLITE_LOG_EXPORT_BATCH_SIZE: "${UNIDESK_CODE_QUEUE_CODEX_SQLITE_LOG_EXPORT_BATCH_SIZE:-500}" CODE_QUEUE_MAIN_PROVIDER_ID: "main-server" CODE_QUEUE_REMOTE_WORKDIR: "${UNIDESK_CODE_QUEUE_REMOTE_WORKDIR:-/home/ubuntu}" CODE_QUEUE_EXECUTION_PROVIDER_IDS: "${UNIDESK_CODE_QUEUE_EXECUTION_PROVIDER_IDS:-D601}" CODE_QUEUE_DEV_CONTAINER_MASTER_HOST: "${UNIDESK_PUBLIC_HOST}" CODE_QUEUE_DEV_CONTAINER_DEFAULT_PROVIDER_ID: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_DEFAULT_PROVIDER_ID:-D601}" CODE_QUEUE_DEV_CONTAINER_IMAGE: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_IMAGE:-}" CODE_QUEUE_DEV_CONTAINER_WORKDIR: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_WORKDIR:-/home/ubuntu}" CODE_QUEUE_NOTIFY_CLAUDEQQ_ENABLED: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_ENABLED:-true}" CODE_QUEUE_NOTIFY_CLAUDEQQ_BASE_URL: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_BASE_URL:-http://backend-core:8080/api/microservices/claudeqq/proxy}" CODE_QUEUE_NOTIFY_CLAUDEQQ_TARGET_TYPE: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_TARGET_TYPE:-private}" CODE_QUEUE_NOTIFY_CLAUDEQQ_USER_ID: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_USER_ID:-645275593}" CODE_QUEUE_NOTIFY_CLAUDEQQ_GROUP_ID: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_GROUP_ID:-}" CODE_QUEUE_NOTIFY_CLAUDEQQ_MAX_RESPONSE_CHARS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_MAX_RESPONSE_CHARS:-12000}" CODE_QUEUE_NOTIFY_CLAUDEQQ_TIMEOUT_MS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_TIMEOUT_MS:-15000}" CODE_QUEUE_NOTIFY_CLAUDEQQ_SEND_ATTEMPTS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_SEND_ATTEMPTS:-3}" OPENAI_API_KEY: "${OPENAI_API_KEY:-}" CRS_OAI_KEY: "${CRS_OAI_KEY:-}" MINIMAX_API_KEY: "${UNIDESK_CODE_QUEUE_MINIMAX_API_KEY:-}" MINIMAX_API_BASE: "${UNIDESK_CODE_QUEUE_MINIMAX_API_BASE:-https://api.minimaxi.com/v1}" MINIMAX_MODEL: "${UNIDESK_CODE_QUEUE_MINIMAX_MODEL:-MiniMax-M2.7}" MINIMAX_JUDGE_TIMEOUT_MS: "${UNIDESK_CODE_QUEUE_MINIMAX_JUDGE_TIMEOUT_MS:-60000}" MINIMAX_JUDGE_REPAIR_ATTEMPTS: "${UNIDESK_CODE_QUEUE_MINIMAX_JUDGE_REPAIR_ATTEMPTS:-2}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_code-queue.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - /var/run/docker.sock:/var/run/docker.sock - .:/root/unidesk - .:/workspace - /root/.codex/config.toml:/root/.codex/config.toml:ro - ${UNIDESK_HOST_ROOT_SSH_DIR:-/root/.ssh}:/root/.ssh:ro - ${UNIDESK_LOG_DIR}:/var/log/unidesk - ./.state/code-queue:/var/lib/unidesk/code-queue extra_hosts: - "host.docker.internal:host-gateway" healthcheck: test: ["CMD-SHELL", "curl -fsS --max-time 2 http://127.0.0.1:4222/health >/dev/null"] interval: 5s timeout: 3s retries: 20 oa-event-flow: image: oa-event-flow build: context: . dockerfile: src/components/microservices/oa-event-flow/Dockerfile container_name: oa-event-flow-backend restart: unless-stopped depends_on: - database - backend-core expose: - "4255" environment: HOST: "0.0.0.0" PORT: "4255" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" PIPELINE_OA_BRIDGE_BASE_URL: "http://backend-core:8080/api/microservices/pipeline/proxy" PIPELINE_OA_BRIDGE_INTERVAL_MS: "${UNIDESK_PIPELINE_OA_BRIDGE_INTERVAL_MS:-15000}" PIPELINE_OA_BRIDGE_RUN_LIMIT: "${UNIDESK_PIPELINE_OA_BRIDGE_RUN_LIMIT:-50}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_oa-event-flow.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4255/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 project-manager: image: project-manager build: context: . dockerfile: src/components/microservices/project-manager/Dockerfile container_name: project-manager-backend restart: unless-stopped depends_on: - database expose: - "4233" environment: HOST: "0.0.0.0" PORT: "4233" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_project-manager.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4233/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 baidu-netdisk: image: baidu-netdisk build: context: . dockerfile: src/components/microservices/baidu-netdisk/Dockerfile container_name: baidu-netdisk-backend restart: unless-stopped depends_on: - database expose: - "4244" environment: HOST: "0.0.0.0" PORT: "4244" DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}" BAIDU_NETDISK_CLIENT_ID: "${UNIDESK_BAIDU_NETDISK_CLIENT_ID:-}" BAIDU_NETDISK_CLIENT_SECRET: "${UNIDESK_BAIDU_NETDISK_CLIENT_SECRET:-}" BAIDU_NETDISK_TOKEN_KEY: "${UNIDESK_BAIDU_NETDISK_TOKEN_KEY:-}" BAIDU_NETDISK_APP_ROOT: "${UNIDESK_BAIDU_NETDISK_APP_ROOT:-/}" BAIDU_NETDISK_STAGING_DIR: "/data/staging" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_baidu-netdisk.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk - ./.state/baidu-netdisk/staging:/data/staging healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4244/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 frontend: build: context: . dockerfile: src/components/frontend/Dockerfile container_name: unidesk-frontend restart: unless-stopped depends_on: - backend-core ports: - "${UNIDESK_FRONTEND_PORT}:8080" environment: PORT: "8080" CORE_INTERNAL_URL: "http://backend-core:8080" FRONTEND_PUBLIC_URL: "http://${UNIDESK_PUBLIC_HOST}:${UNIDESK_FRONTEND_PORT}" PROVIDER_INGRESS_PUBLIC_URL: "ws://${UNIDESK_PUBLIC_HOST}:${UNIDESK_PROVIDER_INGRESS_PORT}/ws/provider" AUTH_USERNAME: "${UNIDESK_AUTH_USERNAME}" AUTH_PASSWORD: "${UNIDESK_AUTH_PASSWORD}" SESSION_SECRET: "${UNIDESK_SESSION_SECRET}" SESSION_TTL_SECONDS: "${UNIDESK_SESSION_TTL_SECONDS}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_frontend.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" volumes: - ${UNIDESK_LOG_DIR}:/var/log/unidesk healthcheck: test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] interval: 5s timeout: 3s retries: 20 provider-gateway: image: unidesk_provider-gateway build: context: . dockerfile: src/components/provider-gateway/Dockerfile container_name: unidesk-provider-gateway-main restart: always pid: "host" depends_on: - backend-core environment: PROVIDER_SERVER_URL: "ws://backend-core:8081/ws/provider" PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}" PROVIDER_ID: "${UNIDESK_PROVIDER_ID}" PROVIDER_NAME: "${UNIDESK_PROVIDER_NAME}" PROVIDER_LABELS_JSON: "${UNIDESK_PROVIDER_LABELS_JSON}" HEARTBEAT_INTERVAL_MS: "${UNIDESK_HEARTBEAT_INTERVAL_MS}" RECONNECT_BASE_MS: "${UNIDESK_RECONNECT_BASE_MS}" RECONNECT_MAX_MS: "${UNIDESK_RECONNECT_MAX_MS}" DOCKER_SOCKET_PATH: "/var/run/docker.sock" MONITOR_DISK_PATH: "${UNIDESK_MONITOR_DISK_PATH}" PROVIDER_UPGRADE_HOST_PROJECT_ROOT: "${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}" PROVIDER_UPGRADE_WORKSPACE_PATH: "${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}" PROVIDER_UPGRADE_COMPOSE_FILE: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_FILE}" PROVIDER_UPGRADE_ENV_FILE: "${UNIDESK_PROVIDER_UPGRADE_ENV_FILE}" PROVIDER_UPGRADE_COMPOSE_PROJECT: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_PROJECT}" PROVIDER_UPGRADE_SERVICE: "${UNIDESK_PROVIDER_UPGRADE_SERVICE}" PROVIDER_UPGRADE_RUNNER_IMAGE: "${UNIDESK_PROVIDER_UPGRADE_RUNNER_IMAGE}" LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_provider-gateway.jsonl" UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}" HOST_SSH_HOST: "${UNIDESK_HOST_SSH_HOST}" HOST_SSH_PORT: "${UNIDESK_HOST_SSH_PORT}" HOST_SSH_USER: "${UNIDESK_HOST_SSH_USER}" HOST_SSH_KEY: "/run/host-ssh/id_ed25519" HOST_REMOTE_CWD: "/root" HOST_LOGIN_SHELL: "/bin/bash" volumes: - /var/run/docker.sock:/var/run/docker.sock - ${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}:${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}:ro - ${UNIDESK_HOST_SSH_KEY_DIR}:/run/host-ssh:ro - ${UNIDESK_LOG_DIR}:/var/log/unidesk extra_hosts: - "host.docker.internal:host-gateway" volumes: unidesk_pgdata_10gb: name: unidesk_pgdata_10gb