feat(update): 支持 Docker Compose 页面一键升级并发布 v1.3.0

docker-compose.yml

@@ -13,10 +13,13 @@ services:
         NODE_IMAGE: ${NODE_IMAGE:-docker.m.daocloud.io/library/node:22-alpine}
         GO_IMAGE: ${GO_IMAGE:-docker.m.daocloud.io/library/golang:1.23-bookworm}
         RUNTIME_IMAGE: ${RUNTIME_IMAGE:-docker.m.daocloud.io/library/debian:bookworm-slim}
+        UPDATER_IMAGE: ${UPDATER_IMAGE:-docker.m.daocloud.io/library/docker:27-cli}
         GOPROXY: ${GOPROXY:-https://goproxy.cn,direct}
     image: fonu:${FONU_VERSION:-local}
     container_name: fonu
     restart: unless-stopped
+    depends_on:
+      - updater
     ports:
       - "6893:6893"
       - "18080:80"
@@ -26,14 +29,42 @@ services:
       # 想落到指定目录就在同层 .env 里设 FONU_DATA_PATH=/vol1/docker/fonu-data ——
       # 以 / 或 . 开头的写法会被 compose 当成 bind mount，其余字符串仍是命名卷。
       - ${FONU_DATA_PATH:-fonu-data}:/data
+      - fonu-updater-sock:/run/fonu-updater
     environment:
       FONU_DATA_DIR: /data
       FONU_LISTEN: :6893
+      FONU_UPDATER_SOCKET: /run/fonu-updater/updater.sock
       # 留空即自动：应用会在数据目录里生成并持久化 <DataDir>/session_secret（0600）
       # 想自己指定就设这个变量；注意它同时是凭据加密密钥，已有数据后不要随意更换
       FONU_SESSION_SECRET: ${FONU_SESSION_SECRET:-}
       # 时区：通知消息时间按此显示（默认东八区）
       TZ: ${TZ:-Asia/Shanghai}
 
+  # 受限升级 sidecar：只有它持有 Docker Socket，主程序通过共享 Unix Socket 触发
+  updater:
+    build:
+      context: .
+      target: updater
+      args:
+        GO_IMAGE: ${GO_IMAGE:-docker.m.daocloud.io/library/golang:1.23-bookworm}
+        UPDATER_IMAGE: ${UPDATER_IMAGE:-docker.m.daocloud.io/library/docker:27-cli}
+        GOPROXY: ${GOPROXY:-https://goproxy.cn,direct}
+    image: fonu-updater:${FONU_VERSION:-local}
+    container_name: fonu-updater
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_SOCK:-/var/run/docker.sock}:/var/run/docker.sock
+      - .:/workspace
+      - fonu-updater-sock:/run/fonu-updater
+    environment:
+      FONU_UPDATER_SOCKET: /run/fonu-updater/updater.sock
+      FONU_UPDATE_PROJECT_DIR: /workspace
+      FONU_UPDATE_COMPOSE_FILE: docker-compose.yml
+      FONU_UPDATE_SERVICE: fonu
+      FONU_UPDATE_MODE: local
+      FONU_UPDATE_APP_URL: http://fonu:6893
+      TZ: ${TZ:-Asia/Shanghai}
+
 volumes:
   fonu-data:
+  fonu-updater-sock: