Figma太贵？这个开源设计平台，支持自托管，设计即代码

1
# ============================== Penpot 配置说明 ==============================
2
# 功能开关标识列表（可在PENPOT_FLAGS中按需增删）
3
# demo-users: 内置演示账号
4
# email-verification: 注册邮箱验证
5
# log-emails: 打印邮件日志
6
# log-invitation-tokens: 打印邀请链接Token日志
7
# login-with-github: GitHub第三方登录
8
# login-with-gitlab: GitLab第三方登录
9
# login-with-google: Google第三方登录
10
# login-with-ldap: LDAP登录
11
# login-with-oidc: OIDC统一身份登录
12
# login-with-password: 账号密码登录
13
# prepl-server: 开启调试PREPL服务
14
# registration: 允许自助注册账号
15
# secure-session-cookies: 会话Cookie启用安全加密（公网部署必须开启）
16
# smtp: 启用邮件发送服务
17
# smtp-debug: SMTP通信调试日志
18
# telemetry: 匿名使用数据上报
19
# webhooks: WebHook回调能力
20
# 官方完整配置文档：https://help.penpot.app/technical-guide/configuration/#penpot-configuration
21
# 安全警告：公网对外部署务必删除 disable-secure-session-cookies、disable-email-verification 关闭项
22
# ============================================================================
23

24
# 全局功能开关配置
25
x-flags: &penpot-flags
26
  PENPOT_FLAGS: disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies enable-mcp
27

28
# Penpot前端访问公网地址
29
x-uri: &penpot-public-uri
30
  PENPOT_PUBLIC_URI: http://localhost:9001
31

32
# HTTP请求体大小限制（上传大设计文件使用）
33
x-body-size: &penpot-http-body-size
34
  # 最大单请求Body上限
35
  PENPOT_HTTP_SERVER_MAX_BODY_SIZE: 367001600
36
  # 兼容旧版变量（已废弃，仅做向下兼容保留）
37
  PENPOT_HTTP_SERVER_MAX_MULTIPART_BODY_SIZE: 367001600
38

39
# Penpot主密钥，用于会话、邀请链接等子密钥派生
40
# 推荐使用512位Base64随机字符串生成，生成命令：python3 -c "import secrets; print(secrets.token_urlsafe(64))"
41
x-secret-key: &penpot-secret-key
42
  PENPOT_SECRET_KEY: change-this-insecure-key
43

44
# 自定义Docker网络，所有服务互通
45
networks:
46
  penpot:
47

48
# 持久化数据卷
49
volumes:
50
  penpot_postgres_v15:  # PostgreSQL数据库存储卷
51
  penpot_assets:         # 上传素材、设计文件存储卷
52

53
services:
54
  # 前端页面服务，用户访问入口
55
  penpot-frontend:
56
    image: "penpotapp/frontend:${PENPOT_VERSION:-2.16}"
57
    restart: always
58
    ports:
59
      - 9001:8080
60
    volumes:
61
      - penpot_assets:/opt/data/assets
62
    # 依赖服务启动完成后再启动前端
63
    depends_on:
64
      - penpot-backend
65
      - penpot-exporter
66
      - penpot-mcp
67
    networks:
68
      - penpot
69
    environment:
70
      << : [*penpot-flags, *penpot-http-body-size, *penpot-public-uri]
71

72
  # Penpot后端核心业务服务
73
  penpot-backend:
74
    image: "penpotapp/backend:${PENPOT_VERSION:-2.16}"
75
    restart: always
76
    volumes:
77
      - penpot_assets:/opt/data/assets
78
    # 等待数据库、缓存健康就绪再启动
79
    depends_on:
80
      penpot-postgres:
81
        condition: service_healthy
82
      penpot-valkey:
83
        condition: service_healthy
84
    networks:
85
      - penpot
86
    environment:
87
      << : [*penpot-flags, *penpot-public-uri, *penpot-http-body-size, *penpot-secret-key]
88
      # PostgreSQL数据库连接配置
89
      PENPOT_DATABASE_URI: postgresql://penpot-postgres/penpot
90
      PENPOT_DATABASE_USERNAME: penpot
91
      PENPOT_DATABASE_PASSWORD: penpot
92
      # Valkey缓存（原Redis），用于WebSocket实时通知
93
      PENPOT_REDIS_URI: redis://penpot-valkey/0
94
      # 文件存储配置：本地文件系统模式
95
      PENPOT_OBJECTS_STORAGE_BACKEND: fs
96
      PENPOT_OBJECTS_STORAGE_FS_DIRECTORY: /opt/data/assets
97
      # 匿名使用数据上报
98
      PENPOT_TELEMETRY_ENABLED: "true"
99
      PENPOT_TELEMETRY_REFERER: compose
100
      # SMTP邮件发送配置（当前使用内置邮件捕获容器）
101
      PENPOT_SMTP_DEFAULT_FROM: [email protected]
102
      PENPOT_SMTP_DEFAULT_REPLY_TO: [email protected]
103
      PENPOT_SMTP_HOST: penpot-mailcatch
104
      PENPOT_SMTP_PORT: 1025
105
      PENPOT_SMTP_USERNAME:
106
      PENPOT_SMTP_PASSWORD:
107
      PENPOT_SMTP_TLS: "false"
108
      PENPOT_SMTP_SSL: "false"
109

110
  # MCP服务扩展组件
111
  penpot-mcp:
112
    image: "penpotapp/mcp:${PENPOT_VERSION:-2.16}"
113
    restart: always
114
    networks:
115
      - penpot
116

117
  # 图纸导出服务（生成图片/PDF等导出能力）
118
  penpot-exporter:
119
    image: "penpotapp/exporter:${PENPOT_VERSION:-2.16}"
120
    restart: always
121
    depends_on:
122
      penpot-valkey:
123
        condition: service_healthy
124
    networks:
125
      - penpot
126
    environment:
127
      << : [*penpot-secret-key]
128
      # 内部网络访问前端地址，用于渲染导出
129
      PENPOT_PUBLIC_URI: http://penpot-frontend:8080
130
      # 连接Valkey缓存
131
      PENPOT_REDIS_URI: redis://penpot-valkey/0
132

133
  # PostgreSQL 数据库存储业务数据
134
  penpot-postgres:
135
    image: "postgres:15"
136
    restart: always
137
    stop_signal: SIGINT
138
    # 数据库健康检测，等待就绪再提供服务
139
    healthcheck:
140
      test: ["CMD-SHELL", "pg_isready -U penpot"]
141
      interval: 2s
142
      timeout: 10s
143
      retries: 5
144
      start_period: 2s
145
    volumes:
146
      - penpot_postgres_v15:/var/lib/postgresql/data
147
    networks:
148
      - penpot
149
    environment:
150
      - POSTGRES_INITDB_ARGS=--data-checksums
151
      - POSTGRES_DB=penpot
152
      - POSTGRES_USER=penpot
153
      - POSTGRES_PASSWORD=penpot
154

155
  # Valkey缓存服务（兼容Redis协议），实时消息、会话缓存
156
  penpot-valkey:
157
    image: valkey/valkey:8.1
158
    restart: always
159
    # 缓存健康检测
160
    healthcheck:
161
      test: ["CMD-SHELL", "valkey-cli ping | grep PONG"]
162
      interval: 1s
163
      timeout: 3s
164
      retries: 5
165
      start_period: 3s
166
    networks:
167
      - penpot
168
    environment:
169
      # 限制最大内存及淘汰策略
170
      - VALKEY_EXTRA_FLAGS=--maxmemory 128mb --maxmemory-policy volatile-lfu
171

172
  # 测试用邮件捕获服务，接收所有系统发送邮件，1080端口网页查看
173
  # 生产环境请替换为真实SMTP服务器
174
  penpot-mailcatch:
175
    image: sj26/mailcatcher:latest
176
    restart: always
177
    expose:
178
      - '1025'
179
    ports:
180
      - "1080:1080"
181
    networks:
182
      - penpot