root/geo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(config): harden database pool settings

Browse Source
This commit is contained in:
liangxu
2026-05-03 15:04:08 +08:00
parent 774b907da8
commit cec7fa25e3
13 changed files with 105 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/.env.example
+1
View File
@@ -14,6 +14,7 @@ JWT_SECRET=geo-web-Aa123456-change-me-in-production
OPS_JWT_SECRET=geo-ops-Aa123456-change-me-in-production
OPS_DEFAULT_ADMIN_PASSWORD=Aa123456
SCHEDULER_INTERNAL_METRICS_TOKEN=geo-scheduler-Aa123456-change-me-in-production
POSTGRES_PASSWORD=geo_dev
# ─── Optional: MinIO credentials ─────────────────────────────────────────────
MINIO_ROOT_USER=admin
deploy/config.yaml
+8 -8
View File
@@ -3,24 +3,24 @@ server:
mode: release
database:
host: postgres
host: pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
dbname: geo
sslmode: disable
max_open_conns: 25
max_idle_conns: 5
max_open_conns: 12
max_idle_conns: 3
monitoring_database:
host: monitoring-postgres
host: monitoring-pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
dbname: geo_monitoring
sslmode: disable
max_open_conns: 25
max_idle_conns: 5
max_open_conns: 8
max_idle_conns: 2
rabbitmq:
url: amqp://geo:geo_dev@rabbitmq:5672/geo
deploy/k3s/apps.yaml
+30
View File
@@ -38,6 +38,11 @@ spec:
env:
- name: CONFIG_PATH
value: /app/configs/config.yaml
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: TZ
value: Asia/Shanghai
- name: JWT_SECRET
@@ -125,6 +130,11 @@ spec:
env:
- name: CONFIG_PATH
value: /app/configs/config.yaml
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: TZ
value: Asia/Shanghai
- name: JWT_SECRET
@@ -193,6 +203,11 @@ spec:
env:
- name: CONFIG_PATH
value: /app/configs/config.yaml
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: TZ
value: Asia/Shanghai
- name: JWT_SECRET
@@ -278,6 +293,11 @@ spec:
env:
- name: CONFIG_PATH
value: /app/configs/config.yaml
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: TZ
value: Asia/Shanghai
- name: SCHEDULER_HTTP_HOST
@@ -384,6 +404,16 @@ spec:
env:
- name: CONFIG_PATH
value: /app/configs/ops-config.yaml
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: OPS_POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: geo-rankly-app-secret
key: POSTGRES_PASSWORD
- name: TZ
value: Asia/Shanghai
- name: OPS_JWT_SECRET
deploy/k3s/config/config.yaml
+8 -8
View File
@@ -3,24 +3,24 @@ server:
mode: release
database:
host: postgres
host: pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
dbname: geo
sslmode: disable
max_open_conns: 25
max_idle_conns: 5
max_open_conns: 12
max_idle_conns: 3
monitoring_database:
host: monitoring-postgres
host: monitoring-pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
dbname: geo_monitoring
sslmode: disable
max_open_conns: 25
max_idle_conns: 5
max_open_conns: 8
max_idle_conns: 2
rabbitmq:
url: amqp://geo:geo_dev@rabbitmq:5672/geo
deploy/k3s/config/ops-config.yaml
+6 -6
View File
@@ -3,23 +3,23 @@ server:
mode: release
database:
host: postgres
host: pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${OPS_POSTGRES_PASSWORD:geo_dev}
dbname: geo
sslmode: disable
max_open_conns: 10
max_open_conns: 5
max_idle_conns: 2
monitoring_database:
host: monitoring-postgres
host: monitoring-pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${OPS_POSTGRES_PASSWORD:geo_dev}
dbname: geo_monitoring
sslmode: disable
max_open_conns: 10
max_open_conns: 5
max_idle_conns: 2
redis:
deploy/k3s/jobs.yaml
+4 -3
View File
@@ -70,9 +70,10 @@ spec:
- /bin/sh
- -ec
- |
/usr/local/bin/migrate -path /migrations -database "postgres://geo:${POSTGRES_PASSWORD}@postgres:5432/geo?sslmode=disable" up
/usr/local/bin/migrate -path /migrations_monitoring -database "postgres://geo:${POSTGRES_PASSWORD}@monitoring-postgres:5432/geo_monitoring?sslmode=disable" up
/usr/local/bin/migrate -path /migrations_ops -database "postgres://geo:${POSTGRES_PASSWORD}@postgres:5432/geo?sslmode=disable&x-migrations-table=schema_migrations_ops" up
export PGPASSWORD="${POSTGRES_PASSWORD}"
/usr/local/bin/migrate -path /migrations -database "postgres://geo@postgres:5432/geo?sslmode=disable" up
/usr/local/bin/migrate -path /migrations_monitoring -database "postgres://geo@monitoring-postgres:5432/geo_monitoring?sslmode=disable" up
/usr/local/bin/migrate -path /migrations_ops -database "postgres://geo@postgres:5432/geo?sslmode=disable&x-migrations-table=schema_migrations_ops" up
/usr/local/bin/seed-platform-templates
volumes:
- name: app-config
deploy/k3s/secrets.yaml
+2 -2
View File
@@ -14,10 +14,10 @@ stringData:
SCHEDULER_INTERNAL_METRICS_TOKEN: geo-metrics-token
config.local.yaml: |
database:
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
monitoring_database:
password: geo_dev
password: ${POSTGRES_PASSWORD:geo_dev}
rabbitmq:
url: amqp://geo:geo_dev@rabbitmq:5672/geo
deploy/ops-config.yaml
+6 -6
View File
@@ -3,23 +3,23 @@ server:
mode: release
database:
host: postgres
host: pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${OPS_POSTGRES_PASSWORD:geo_dev}
dbname: geo
sslmode: disable
max_open_conns: 10
max_open_conns: 5
max_idle_conns: 2
monitoring_database:
host: monitoring-postgres
host: monitoring-pgbouncer
port: 5432
user: geo
password: geo_dev
password: ${OPS_POSTGRES_PASSWORD:geo_dev}
dbname: geo_monitoring
sslmode: disable
max_open_conns: 10
max_open_conns: 5
max_idle_conns: 2
redis: