feat(deploy): 为更新组件增加定时维护与双保险

docker-compose.yml

@@ -9,6 +9,7 @@ services:
     #端口冲突时，只需要修改前面的端口比如修改为，3011:3010
     labels:
       - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_CORE_UPDATE_ENABLED:-true}"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     ports:
       - "${EASYAI_PROXY_BIND_IP:-127.0.0.1}:${WEB_PORT}:3010"
 #    read_only: true
@@ -60,6 +61,7 @@ services:
     image: registry.cn-shanghai.aliyuncs.com/comfy-ai/comfy-server:${VERSION} # 阿里云
     labels:
       - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_CORE_UPDATE_ENABLED:-true}"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     ports:
       - "${SERVER_HTTP_BIND_IP:-127.0.0.1}:${SERVER_HTTP_PORT}:3001"    # Linux Nginx 部署默认仅回环；Windows/LAN 直连由启动脚本显式覆盖
 #    read_only: true
@@ -166,6 +168,7 @@ services:
     image: registry.cn-shanghai.aliyuncs.com/easyaigc/model-conversion-worker:${MODEL_CONVERSION_WORKER_VERSION:-latest}
     labels:
       - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_CORE_UPDATE_ENABLED:-true}"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     restart: unless-stopped
     cpus: 2
     mem_limit: 4g
@@ -219,6 +222,7 @@ services:
     image: registry.cn-shanghai.aliyuncs.com/easyaigc/wsgateway:latest # 阿里云
     labels:
       - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_CORE_UPDATE_ENABLED:-true}"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     ports:
       - "${EASYAI_PROXY_BIND_IP:-127.0.0.1}:${CONFIG_WS_PORT:-3002}:3002"    # Linux IP/域名模式默认仅供同机 Nginx 访问
     read_only: true
@@ -335,6 +339,7 @@ services:
     image: ${RABBITMQ_IMAGE:-registry.cn-shanghai.aliyuncs.com/easyaigc/mq:latest}
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     container_name: rabbitmq
     restart: unless-stopped
     environment:
@@ -349,7 +354,7 @@ services:
       easyai:
         ipv4_address: 172.21.0.12
   watchtower:
-    image: ${WATCHTOWER_IMAGE:-registry.cn-shanghai.aliyuncs.com/comfy-ai/watchtower-aliyun:1.22.3}
+    image: ${WATCHTOWER_IMAGE:-registry.cn-shanghai.aliyuncs.com/comfy-ai/watchtower-aliyun:latest}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ${DOCKER_CONFIG_FILE:-/root/.docker/config.json}:/config.json:ro
@@ -358,6 +363,7 @@ services:
     environment:
       - WATCHTOWER_POLL_INTERVAL=${SYSTEM_UPDATER_UPDATE_INTERVAL_SECONDS:-86400}
       - WATCHTOWER_CLEANUP=${WATCHTOWER_CLEANUP:-false}
+      - WATCHTOWER_SCOPE=${WATCHTOWER_SCOPE:-}
       - WATCHTOWER_HTTP_API_HOST=0.0.0.0
       - WATCHTOWER_HTTP_API_ENDPOINTS=health,update,metrics,events,history
       - WATCHTOWER_HTTP_API_TOKEN=${WATCHTOWER_API_KEY}
@@ -366,6 +372,7 @@ services:
     restart: always
     labels:
       - "com.centurylinklabs.watchtower.enable=false"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
 #    ports:
 #      - "${WATCHTOWER_PORT}:8080"
     read_only: true
@@ -385,6 +392,7 @@ services:
       - managed-update
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     restart: unless-stopped
     read_only: true
     cap_drop:
@@ -399,6 +407,8 @@ services:
       - DOCKER_CONFIG_FILE=/run/secrets/docker-config.json
       - UPDATE_STATE_DIR=/var/lib/easyai-updater
       - UPDATE_MANIFEST_FILE=/etc/easyai-updater/release-manifest.json
+      - UPDATE_MANIFEST_SOURCE=${UPDATE_MANIFEST_SOURCE:-remote}
+      - UPDATE_MANIFEST_URL=${UPDATE_MANIFEST_URL:-}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ${DOCKER_CONFIG_FILE:-/root/.docker/config.json}:/run/secrets/docker-config.json:ro
@@ -482,6 +492,7 @@ services:
     # 不映射宿主机端口，仅允许 Docker 内网中的 easyai-server 访问
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     volumes:
       - ./sandbox-data:/app/data
       - ./local_packages:/app/local_packages
@@ -554,6 +565,7 @@ services:
     image: registry.cn-shanghai.aliyuncs.com/easyaigc/agent-governance:${ASG_VERSION:-latest}
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     ports:
       - "${EASYAI_PROXY_BIND_IP:-127.0.0.1}:${ASG_PORT:-3003}:3003"
     networks:
@@ -585,6 +597,7 @@ services:
     image: registry.cn-shanghai.aliyuncs.com/easyaigc/agent-memory:${AMS_VERSION:-latest}
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
+      - "com.centurylinklabs.watchtower.scope=${WATCHTOWER_SCOPE:-}"
     ports:
       - "${EASYAI_INFRA_BIND_IP:-127.0.0.1}:${AMS_PORT:-3004}:3004"
     environment: