// 这里填写允许注册的邮箱列表
const allowList = ['[email protected]', '[email protected]'];


exports.onExecutePreUserRegistration = async (event, api) => {
  if (!allowList.includes(event.user.email)) {
    api.access.deny("Your email address is not in the allowList.");
  }
};

lobechat
├── db_data  # 空目录
├── s3_data  # 空目录
├── .env
└── docker-compose.yaml

services:
  minio:
    image: minio/minio
    container_name: lobechat-minio
    ports:
      - 9000:9000  # API口，即minio.mydomain.com访问端口
      - 9001:9001  # 管理口
    volumes:
      - ./s3_data:/etc/minio/data
    environment:
      - MINIO_ROOT_USER=${MINIO_ROOT_USER}
      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD}
      - MINIO_API_CORS_ALLOW_ORIGIN=${APP_URL}
    restart: unless-stopped
    command: >
      server /etc/minio/data --address ":9000" --console-address ":9001"
    deploy:
      resources:
        limits:
          memory: 128M
        reservations:
          memory: 64M

  db:
    image: pgvector/pgvector:pg17
    container_name: lobechat-db
    volumes:
      - ./db_data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=${DB_NAME}
      - POSTGRES_USER=${DB_USER}
      - POSTGRES_PASSWORD=${DB_PASSWORD}
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U ${DB_USER} -d ${DB_NAME}']
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    deploy:
      resources:
        limits:
          memory: 128M
        reservations:
          memory: 64M

  lobe:
    image: lobehub/lobe-chat-database
    container_name: lobechat
    ports:
      - 3210:3210  # 前端入口，即chat.mydomain.com访问端口
    depends_on:
      - db
    environment:
      - HTTP_PROXY=${HTTP_PROXY}
      - HTTPS_PROXY=${HTTP_PROXY}
      - DATABASE_URL=postgresql://${DB_USER}:${DB_PASSWORD}@db:5432/${DB_NAME}
      - APP_URL=${APP_URL}
      - KEY_VAULTS_SECRET=${KEY_VAULTS_SECRET}
      - NEXT_AUTH_SECRET=${KEY_VAULTS_SECRET}
      - NEXT_AUTH_SSO_PROVIDERS=auth0
      - NEXTAUTH_URL=${APP_URL}/api/auth
      - AUTH_AUTH0_ID=${AUTH_AUTH0_ID}
      - AUTH_AUTH0_SECRET=${AUTH_AUTH0_SECRET}
      - AUTH_AUTH0_ISSUER=${AUTH_AUTH0_ISSUER}
      - S3_ENABLE_PATH_STYLE=1
      - S3_PUBLIC_DOMAIN=${S3_PUBLIC_DOMAIN}
      - S3_ENDPOINT=${S3_PUBLIC_DOMAIN}
      - S3_BUCKET=${S3_BUCKET}
      - S3_ACCESS_KEY_ID=${S3_ACCESS_KEY_ID}
      - S3_SECRET_ACCESS_KEY=${S3_SECRET_ACCESS_KEY}
    restart: unless-stopped
    deploy:
      resources:
        limits:
          memory: 512M
        reservations:
          memory: 256M

DB_NAME=lobechat
DB_USER=自定义名称
DB_PASSWORD=自定义密码


# 必填，LobeChat 域名，用于 tRPC 调用
# 请保证此域名在你的 NextAuth 鉴权服务提供商、S3 服务商的 CORS 白名单中
APP_URL=https://chat.mydomain.com


# Postgres 相关，也即 DB 必需的环境变量
# 必填，用于加密敏感信息的密钥，可以使用 openssl rand -base64 32 生成
KEY_VAULTS_SECRET=自己生成后填入


# NEXT_AUTH 相关，也即鉴权服务必需的环境变量
AUTH_AUTH0_ID=填入Auth0获取的Domain
AUTH_AUTH0_SECRET=填入Auth0获取的Client ID
AUTH_AUTH0_ISSUER=填入Auth0获取的Client Secret


# 代理相关，如果需要的话（比如使用 GitHub 作为鉴权服务提供商）
# HTTP_PROXY=http://mydomain.com:7890


# S3 相关，也即非结构化数据（文件、图片等）存储必需的环境变量
S3_ACCESS_KEY_ID=MinIO部署后获取Access Key后填入
S3_SECRET_ACCESS_KEY=MinIO部署后获取Secret Key后填入
# 必填，S3 的 Bucket
S3_BUCKET=lobechat
# 必填，S3 的 Public Domain，用于客户端通过公开连接访问非结构化数据
S3_PUBLIC_DOMAIN=https://minio.mydomain.com


MINIO_ROOT_USER=自定义名称
MINIO_ROOT_PASSWORD=自定义密码

docker compose up -d