fix(container): keep runtime files out of CI image

.dockerignore

@@ -0,0 +1,21 @@
+.git
+.github
+.gitea
+__pycache__/
+.pytest_cache/
+.mypy_cache/
+.venv/
+venv/
+build/
+dist/
+package/
+.env
+.env.*
+db_inp/
+inp/
+temp/
+data/
+logs/
+coverage/
+*.pyc
+*.dump

.gitea/workflows/package.yml

@@ -0,0 +1,21 @@
+name: Server CI/CD v2
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch: {}
+
+jobs:
+  build-test-publish-and-deploy:
+    uses: OrgTJWater/ci-templates/.gitea/workflows/container-cd.yml@main
+    with:
+      image_name: gitea.waternetwork.cn/orgtjwater/tjwater-backend
+      dockerfile: Dockerfile
+      build_context: .
+      deploy_service: backend
+      deploy_host: 192.168.1.114
+    secrets:
+      REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
+      REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+      DEV_DEPLOY_SSH_KEY: ${{ secrets.DEV_DEPLOY_SSH_KEY }}

Dockerfile

@@ -9,16 +9,18 @@ RUN conda install -y -c conda-forge python=3.12 pymetis && \
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-# 将代码放入子目录 'app'，将数据放入子目录 'db_inp'
-# 这样临时文件默认会生成在 /app 下，而代码在 /app/app 下，实现了分离
+# 本地数据目录和环境变量在运行时通过 Compose 挂载或注入，
+# 不应进入镜像构建上下文。
+RUN mkdir -p /app/db_inp /app/inp /app/data /app/temp
+
 COPY app ./app
-COPY db_inp ./db_inp
-COPY temp ./temp
-COPY .env .
 
 # 设置 PYTHONPATH 以便 uvicorn 找到 app 模块
 ENV PYTHONPATH=/app
 
 EXPOSE 8000
 
+HEALTHCHECK --interval=10s --timeout=3s --start-period=30s --retries=6 \
+  CMD python -c "from urllib.request import urlopen; urlopen('http://127.0.0.1:8000/health', timeout=2)" || exit 1
+
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--workers", "4"]

app/main.py

@@ -63,6 +63,11 @@ app = FastAPI(
 )
 
 
+@app.get("/health", include_in_schema=False)
+async def health() -> dict[str, bool]:
+    return {"ok": True}
+
+
 # Include Routers
 app.include_router(api_router, prefix="/api/v1")
 # Legcy Routers without version prefix