PID   USER     TIME  COMMAND
    1 root      php /usr/bin/supervisord -c /etc/supervisord.conf
   64 www-data  php /app/backend/artisan queue:work --queue=default,webhook-queue --sleep=3 --tries=3 --timeout=60
   65 www-data  /bin/sh -c while true; do php /app/backend/artisan schedule:run --no-interaction; sleep 60; done
   66 root      nginx: master process /usr/sbin/nginx -g daemon off;
   67 root      node /usr/share/node_modules/yarn/bin/yarn.js start
   69 root      php-fpm: master process (/usr/local/etc/php-fpm.conf)
   93 root      /usr/bin/node /app/frontend/node_modules/.bin/cross-env NODE_ENV=production node server.js

# APP_KEY：base64 编码的 32 字节随机串
openssl rand -base64 32
# JWT_SECRET：不少于 32 字符的随机十六进制串
openssl rand -hex 32

# mkdir -p /opt/data/hi-events-v1.11.2/{pgdata,redisdata,backup} && cd /opt/data/hi-events-v1.11.2

APP_KEY=base64:Hqk3DmVc8pW2rTxN7yBjLsQaZeF0gUhIvOcMnSbKd1w=
JWT_SECRET=Xk9Pv2QmR7tWz4YbCfJhLsDgNnEaUuIo6MkPqSrTvXyB3dGf5Hj8Lz0Wc2Vn6Qp4
VITE_FRONTEND_URL=http://localhost:8129
VITE_API_URL_CLIENT=http://localhost:8129/api
VITE_API_URL_SERVER=http://localhost/api
VITE_STRIPE_PUBLISHABLE_KEY=pk_test_123456789
VITE_APP_NAME=Hi.Events
LOG_CHANNEL=stderr
QUEUE_CONNECTION=redis
APP_CDN_URL=http://localhost:8129/storage
APP_FRONTEND_URL=http://localhost:8129
APP_DISABLE_REGISTRATION=false
APP_SAAS_MODE_ENABLED=false
APP_TRUSTED_PROXIES=*
API_DOCS_ENABLED=true
MAIL_MAILER=log
MAIL_DRIVER=log
MAIL_HOST=mail.local
MAIL_PORT=1025
MAIL_FROM_ADDRESS=test@example.com
MAIL_FROM_NAME="Hi Events"
FILESYSTEM_PUBLIC_DISK=public
FILESYSTEM_PRIVATE_DISK=local
POSTGRES_DB=hi-events
POSTGRES_USER=postgres
POSTGRES_PASSWORD=q1w2e3r4
STRIPE_PUBLIC_KEY=pk_test_123456789
STRIPE_SECRET_KEY=sk_test_123456789
STRIPE_WEBHOOK_SECRET=whsec_test_123456789
REDIS_HOST=redis
REDIS_PASSWORD=
REDIS_PORT=6379

name: hievents-1.11.2-stack

services:
  hievents:
    image: daveearley/hi.events-all-in-one:v1.11.2-beta
    container_name: hievents-1.11.2-aio
    restart: unless-stopped
    ports:
      - "8129:80"
    environment:
      - VITE_FRONTEND_URL=${VITE_FRONTEND_URL}
      - VITE_API_URL_CLIENT=${VITE_API_URL_CLIENT}
      - VITE_API_URL_SERVER=${VITE_API_URL_SERVER}
      - VITE_STRIPE_PUBLISHABLE_KEY=${VITE_STRIPE_PUBLISHABLE_KEY}
      - VITE_APP_NAME=${VITE_APP_NAME}
      - LOG_CHANNEL=${LOG_CHANNEL}
      - QUEUE_CONNECTION=${QUEUE_CONNECTION}
      - APP_KEY=${APP_KEY}
      - APP_CDN_URL=${APP_CDN_URL}
      - APP_FRONTEND_URL=${APP_FRONTEND_URL}
      - JWT_SECRET=${JWT_SECRET}
      - APP_DISABLE_REGISTRATION=${APP_DISABLE_REGISTRATION}
      - APP_SAAS_MODE_ENABLED=${APP_SAAS_MODE_ENABLED}
      - APP_TRUSTED_PROXIES=${APP_TRUSTED_PROXIES}
      - API_DOCS_ENABLED=${API_DOCS_ENABLED}
      - MAIL_MAILER=${MAIL_MAILER}
      - MAIL_DRIVER=${MAIL_DRIVER}
      - MAIL_HOST=${MAIL_HOST}
      - MAIL_PORT=${MAIL_PORT}
      - MAIL_FROM_ADDRESS=${MAIL_FROM_ADDRESS}
      - MAIL_FROM_NAME=${MAIL_FROM_NAME}
      - FILESYSTEM_PUBLIC_DISK=${FILESYSTEM_PUBLIC_DISK}
      - FILESYSTEM_PRIVATE_DISK=${FILESYSTEM_PRIVATE_DISK}
      - DATABASE_URL=postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-secret}@postgres:5432/${POSTGRES_DB:-hi-events}
      - REDIS_HOST=redis
      - REDIS_PASSWORD=
      - REDIS_PORT=6379
      - STRIPE_PUBLIC_KEY=${STRIPE_PUBLIC_KEY}
      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY}
      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET}
      - WEBHOOK_QUEUE_NAME=webhook-queue
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - hievents-net

  redis:
    image: redis:7-alpine
    container_name: hievents-1.11.2-redis
    restart: unless-stopped
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - ./redisdata:/data
    networks:
      - hievents-net

  postgres:
    image: postgres:17-alpine
    container_name: hievents-1.11.2-postgres
    restart: unless-stopped
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER:-postgres} -d $${POSTGRES_DB:-hi-events}" ]
      interval: 10s
      timeout: 5s
      retries: 5
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-hi-events}
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-secret}
    volumes:
      - ./pgdata:/var/lib/postgresql/data
    networks:
      - hievents-net

networks:
  hievents-net:
    name: hievents-1.11.2-net
    driver: bridge
    ipam:
      config:
        - subnet: 10.89.58.0/24

# docker compose up -d
[+] Running 33/33
 ✔ hievents 23 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿]      0B/0B      Pulled
   ✔ a0d0a0d46f8b Pull complete
   ...
 ✔ Network hievents-1.11.2-net   Created
 ✔ Container hievents-1.11.2-redis    Healthy
 ✔ Container hievents-1.11.2-postgres Healthy
 ✔ Container hievents-1.11.2-aio      Started

# docker compose ps
NAME                     IMAGE                                          COMMAND                  SERVICE    CREATED          STATUS                    PORTS
hievents-1.11.2-aio      daveearley/hi.events-all-in-one:v1.11.2-beta   "docker-php-entrypoi…"   hievents   12 minutes ago   Up 12 minutes (healthy)   0.0.0.0:8129->80/tcp
hievents-1.11.2-postgres postgres:17-alpine                             "docker-entrypoint.s…"   postgres   52 minutes ago   Up 52 minutes (healthy)   5432/tcp
hievents-1.11.2-redis    redis:7-alpine                                 "docker-entrypoint.s…"   redis      52 minutes ago   Up 52 minutes (healthy)   6379/tcp

cd /app/backend

if ! php artisan migrate --force; then
    echo "============================================"
    echo "ERROR: Migrations could not complete. Check the error above."
    echo "Ensure DATABASE_URL is set."
    echo "============================================"
fi

php artisan cache:clear
php artisan config:clear
php artisan route:clear
php artisan view:clear
php artisan storage:link

chown -R www-data:www-data /app/backend
chmod -R 775 /app/backend/storage /app/backend/bootstrap/cache

exec /usr/bin/supervisord -c /etc/supervisord.conf

# curl -s -o /dev/null -w 'GET / -> %{http_code}\n' http://localhost:8129/
GET / -> 200

# curl -s -X POST http://localhost:8129/api/auth/login \
    -H 'Accept: application/json' -H 'Content-Type: application/json' \
    -d '{"email":"admin@example.com","password":"q1w2e3r4"}'
{"token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOi8vbG9jYWxob3N0L2F1dGgvbG9naW4iLCJpYXQiOjE3OTI3NTAwNzcsImV4cCI6MTc5MzM1NDg3NywibmJmIjoxNzkyNzUwMDc3LCJqdGkiOiJZNnBoR21UTHlBclpBT2ZlIiwic3ViIjoiMSIsInBydiI6ImI1YjFhZjFhZWY1MWUyMmU1Y2JlMzk0YzM3NDU3MjJhYjgwYWQ2Y2MiLCJhY2NvdW50X2lkIjoxLCJyb2xlIjoiQURNSU4ifQ.dTjNLiJeGk2TCFjUSiA6iJunXHjsGc-ADRicTXrymQI","token_type":"bearer","expires_in":604800}

# 1) 专用网络（显式子网）
docker network create --driver bridge --subnet 10.89.58.0/24 hievents-1.11.2-net

# 2) PostgreSQL
docker run -d --name hievents-1.11.2-postgres \
  --network hievents-1.11.2-net \
  -e POSTGRES_DB=hi-events -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=q1w2e3r4 \
  -v /opt/data/hi-events-v1.11.2/pgdata:/var/lib/postgresql/data \
  --restart unless-stopped postgres:17-alpine

# 3) Redis
docker run -d --name hievents-1.11.2-redis \
  --network hievents-1.11.2-net \
  -v /opt/data/hi-events-v1.11.2/redisdata:/data \
  --restart unless-stopped redis:7-alpine

# 4) Hi.Events all-in-one（环境变量与 compose 4.1 的 .env 对应，此处列关键项）
docker run -d --name hievents-1.11.2-aio \
  --network hievents-1.11.2-net \
  -p 8129:80 \
  -e APP_KEY=base64:<你的APP_KEY> \
  -e JWT_SECRET=<你的JWT_SECRET> \
  -e APP_FRONTEND_URL=http://<主机>:8129 \
  -e VITE_FRONTEND_URL=http://<主机>:8129 \
  -e VITE_API_URL_CLIENT=http://<主机>:8129/api \
  -e VITE_API_URL_SERVER=http://<主机>/api \
  -e APP_CDN_URL=http://<主机>:8129/storage \
  -e DATABASE_URL=postgresql://postgres:q1w2e3r4@postgres:5432/hi-events \
  -e REDIS_HOST=redis -e REDIS_PORT=6379 \
  -e QUEUE_CONNECTION=redis -e LOG_CHANNEL=stderr \
  -e APP_DISABLE_REGISTRATION=false \
  --restart unless-stopped \
  daveearley/hi.events-all-in-one:v1.11.2-beta

# docker compose ps                      # 三服务健康状态
# docker compose stop hievents           # 仅停应用（数据库保留连接清理）
# docker compose start hievents          # 再启动
# docker compose down                    # 停并移除（数据目录保留，不丢数据）
# docker compose up -d                   # 重新拉起

# docker compose logs -f hievents        # 应用与迁移日志（含 supervisord 启动序列）
# docker compose logs --tail 100 postgres

# docker exec hievents-1.11.2-postgres pg_dump -Fc -U postgres hi-events > backup/hi-events-20261023.dump
# ls -l backup/hi-events-20261023.dump
-rw-r--r-- 1 root root 223725 10月 23 18:14 backup/hi-events-20261023.dump

# docker compose stop hievents            # 必须先停应用，否则 DROP 报错（见常见问题）
# docker exec hievents-1.11.2-postgres psql -U postgres -c 'DROP DATABASE "hi-events";'
DROP DATABASE
# docker exec hievents-1.11.2-postgres psql -U postgres -c 'CREATE DATABASE "hi-events";'
CREATE DATABASE
# docker exec -i hievents-1.11.2-postgres pg_restore -U postgres -d hi-events < backup/hi-events-20261023.dump
# docker compose start hievents

# docker compose ps hievents --format '{{.Name}} {{.Status}}'
hievents-1.11.2-aio Up 12 seconds (healthy)
# 登录并查询：
恢复后 events: [(1, 'Demo Conference 2026', 'LIVE')]
恢复后 organizers: [(1, 'Demo Organizer')]