Refactor Langfuse configuration and documentation

- Updated .env.example with new service versions and added detailed configuration options for PostgreSQL, ClickHouse, MinIO, and Redis.
- Enhanced README.md and README.zh.md for clearer setup instructions and environment variable descriptions.
- Modified docker-compose.yaml to improve service definitions, health checks, and resource limits for all components.
- Changed MinIO image to Chainguard's production-ready version and updated default credentials.
- Improved health check commands for Phoenix service in docker-compose.yaml.

src/minio/.env.example

@@ -1,14 +1,13 @@
-# MinIO Version
-MINIO_VERSION=RELEASE.2025-09-07T16-13-09Z
+# MinIO Version (Chainguard Image)
+MINIO_VERSION=0.20251015
 
-# MinIO credentials
-MINIO_ROOT_USER=root
-MINIO_ROOT_PASSWORD=password123
-
-# Optional: Legacy access key/secret (use root user/password instead)
-MINIO_ACCESS_KEY=
-MINIO_SECRET_KEY=
+# MinIO Root User Credentials
+MINIO_ROOT_USER=minioadmin
+MINIO_ROOT_PASSWORD=minioadmin
 
 # Ports
 MINIO_PORT_OVERRIDE_API=9000
 MINIO_PORT_OVERRIDE_WEBUI=9001
+
+# Timezone
+TZ=UTC

src/minio/README.md

@@ -2,25 +2,28 @@
 
 [English](./README.md) | [中文](./README.zh.md)
 
-MinIO is a high-performance, distributed object storage system that is compatible with the Amazon S3 API. It can be used to store and manage large amounts of unstructured data, such as photos, videos, log files, etc.
+MinIO is a high-performance, S3-compatible object storage system that can be used to store and manage large amounts of unstructured data, such as photos, videos, log files, and more. This deployment uses Chainguard's production-ready MinIO image, which is distroless, minimal, and continuously updated with security fixes.
 
 Open the Web UI: <http://localhost:9001>.
 
 ## Services
 
-- `minio`: The MinIO service.
+- `minio`: The MinIO object storage service (Chainguard Image).
 
 ## Configuration
 
-- `MINIO_VERSION`: The version of the MinIO image, default is `RELEASE.2025-09-07T16-13-09Z`.
+- `MINIO_VERSION`: The version of the MinIO image, default is `0.20251015`.
 - `MINIO_PORT_OVERRIDE_API`: The host port for the MinIO API, default is `9000`.
 - `MINIO_PORT_OVERRIDE_WEBUI`: The host port for the MinIO Web UI, default is `9001`.
-- `MINIO_ROOT_USER`: The root username for MinIO, default is `root`.
-- `MINIO_ROOT_PASSWORD`: The root password for MinIO, default is `password`.
-- `MINIO_ACCESS_KEY`: The access key for MinIO.
-- `MINIO_SECRET_KEY`: The secret key for MinIO.
+- `MINIO_ROOT_USER`: The root username for MinIO, default is `minioadmin`.
+- `MINIO_ROOT_PASSWORD`: The root password for MinIO, default is `minioadmin`.
+- `TZ`: Timezone setting, default is `UTC`.
 
 ## Volumes
 
 - `minio_data`: A volume for storing MinIO data.
-- `config`: A volume for storing MinIO configuration.
+
+## Notes
+
+- This configuration uses Chainguard's MinIO image (`cgr.dev/chainguard/minio`), which provides enhanced security and is continuously maintained.
+- The default credentials are `minioadmin` / `minioadmin`. Change these in production.

src/minio/README.zh.md

@@ -2,25 +2,28 @@
 
 [English](./README.md) | [中文](./README.zh.md)
 
-MinIO 是一个高性能的分布式对象存储系统，兼容 Amazon S3 API。它可以用于存储和管理大量非结构化数据，如照片、视频、日志文件等。
+MinIO 是一个高性能的 S3 兼容对象存储系统，可以用于存储和管理大量非结构化数据，如照片、视频、日志文件等。该部署使用 Chainguard 的生产级 MinIO 镜像，该镜像是无根的、最小化的，并持续更新安全修复。
 
 打开 Web UI 界面：<http://localhost:9001>。
 
 ## 服务
 
-- `minio`: MinIO 服务。
+- `minio`: MinIO 对象存储服务（Chainguard 镜像）。
 
 ## 配置
 
-- `MINIO_VERSION`: MinIO 镜像的版本，默认为 `RELEASE.2025-09-07T16-13-09Z`。
+- `MINIO_VERSION`: MinIO 镜像的版本，默认为 `0.20251015`。
 - `MINIO_PORT_OVERRIDE_API`: MinIO API 的主机端口，默认为 `9000`。
 - `MINIO_PORT_OVERRIDE_WEBUI`: MinIO Web UI 的主机端口，默认为 `9001`。
-- `MINIO_ROOT_USER`: MinIO 的 root 用户名，默认为 `root`。
-- `MINIO_ROOT_PASSWORD`: MinIO 的 root 密码，默认为 `password`。
-- `MINIO_ACCESS_KEY`: MinIO 的访问密钥。
-- `MINIO_SECRET_KEY`: MinIO 的秘密密钥。
+- `MINIO_ROOT_USER`: MinIO 的根用户名，默认为 `minioadmin`。
+- `MINIO_ROOT_PASSWORD`: MinIO 的根密码，默认为 `minioadmin`。
+- `TZ`: 时区设置，默认为 `UTC`。
 
 ## 卷
 
 - `minio_data`: 用于存储 MinIO 数据的卷。
-- `config`: 用于存储 MinIO 配置的卷。
+
+## 注意事项
+
+- 该配置使用 Chainguard 的 MinIO 镜像（`cgr.dev/chainguard/minio`），提供增强的安全性，并持续维护。
+- 默认凭据为 `minioadmin` / `minioadmin`。在生产环境中请更改这些凭据。

src/minio/docker-compose.yaml

@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
   minio:
     <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}minio/minio:${MINIO_VERSION:-RELEASE.2025-09-07T16-13-09Z}
+    image: cgr.dev/chainguard/minio:${MINIO_VERSION:-0.20251015}
     ports:
       - "${MINIO_PORT_OVERRIDE_API:-9000}:9000"
       - "${MINIO_PORT_OVERRIDE_WEBUI:-9001}:9001"
@@ -19,8 +19,7 @@ services:
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
     volumes:
       - minio_data:/data
-      - ./config:/root/.minio/
-    command: server --console-address ':9001' /data
+    command: server /data --console-address ':9001'
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
       interval: 30s