feat: 登录注入 MQTT 凭证、官方智能体平台化、会话ID扩容、微信支付分账/认证迁移

serverrun/mqtt/docker-compose.yml

@@ -1,23 +1,65 @@
 # MQTT 消息服务（EMQX，大屏/桌面端实时总线）
+name: opc-emqx
+
 services:
   emqx:
-    image: emqx/emqx:5.8
+    # image: 192.168.1.3:9998/pinesound/emqx:latest 
+    image: emqx/emqx:latest
     container_name: opc-emqx
-    restart: always
-    ports:
-      - "127.0.0.1:1883:1883"     # MQTT
-      - "127.0.0.1:18083:18083"   # 管理 API
-      - "127.0.0.1:8083:8083"     # WebSocket
+    pull_policy: always
+    restart: unless-stopped
     environment:
-      - EMQX_NAME=opc
-      - EMQX_HOST=node1.emqx.local
+      # EMQX 集群名称
+      EMQX_CLUSTER__NAME: opc_cluster
+      # 节点名称
+      EMQX_NODE__NAME: emqx@127.0.0.1
+      # Dashboard 管理员密码
+      EMQX_DASHBOARD__DEFAULT_PASSWORD: "WSSmine4ever"
+      # MQTT TCP 监听器认证
+      EMQX_LISTENERS__TCP__DEFAULT__PROXY_PROTOCOL: false
+      # 内置数据库认证（MQTT 客户端连接用户名密码）
+      EMQX_AUTHENTICATION__BUILTIN__USERS: |
+        [
+          {
+            "username": "opc",
+            "password": "Opc123!"
+          }
+        ]
+      # 允许匿名连接（设为 false 强制认证）
+      EMQX_ALLOW_ANONYMOUS: false
+      # MQTT 最大客户端数
+      EMQX_LISTENERS__TCP__DEFAULT__MAX_CONNECTIONS: 102400
+      # 日志等级
+      EMQX_LOG__LEVEL: info
+    ports:
+      # MQTT TCP
+      - "1883:1883"
+      # MQTT SSL
+      - "8883:8883"
+      # MQTT WebSocket
+      - "8083:8083"
+      # MQTT WebSocket SSL
+      - "8084:8084"
+      # Dashboard API（Web 管理控制台）
+      - "18083:18083"
     volumes:
+      # 持久化 EMQX 数据
       - ../../serverdata/emqx-data:/opt/emqx/data
+      # 持久化 EMQX 日志
       - ../../serverdata/emqx-log:/opt/emqx/log
+    
+    user: "0:0"   # 临时用 root 运行，彻底解决权限
+    
+    healthcheck:
+      test: ["CMD", "emqx", "ctl", "status"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
     networks:
       - opc-network
 
 networks:
   opc-network:
     name: opc-network
-    external: true
+    external: true