11notes/medikeep

!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/banner/README.png

MEDIKEEP

!size!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png!pulls!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png%5B](https://github.com/11notes/docker-medikeep/issues)!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png!swiss_made

以非root用户运行MediKeep，无冗余内容。

简介 📢

https://github.com/afairgiant/MediKeep%EF%BC%88%E7%94%B1traah%E5%88%9B%E5%BB%BA%EF%BC%89%E6%98%AF%E4%B8%80%E6%AC%BE%E8%BD%BB%E9%87%8F%E7%BA%A7%E8%87%AA%E6%89%98%E7%AE%A1%E5%BA%94%E7%94%A8%EF%BC%8C%E7%94%A8%E4%BA%8E%E7%AE%A1%E7%90%86%E4%B8%AA%E4%BA%BA***%E4%BF%A1%E6%81%AF%E3%80%82%E5%AE%83%E8%83%BD%E5%B8%AE%E4%BD%A0%E7%BB%84%E7%BB%87%E5%81%A5%E5%BA%B7%E8%AE%B0%E5%BD%95%E5%B9%B6%E7%A1%AE%E4%BF%9D%E5%8F%AF%E8%AE%BF%E9%97%AE%E6%80%A7%EF%BC%8C%E5%90%8C%E6%97%B6%E8%AE%A9%E4%BD%A0%E5%AE%8C%E5%85%A8%E6%8E%A7%E5%88%B6%E6%95%B0%E6%8D%AE%E9%9A%90%E7%A7%81%E3%80%82

!https://github.com/11notes/docker-medikeep/blob/master/img/Dashboard.png?raw=true

核心功能 📖

该镜像能做什么？ 提供一个https://github.com/11notes/RTFM/blob/main/linux/container/image/rootless.md%E4%B8%94%E8%BD%BB%E9%87%8F%E7%9A%84MediKeep%E5%AE%89%E8%A3%85%E6%96%B9%E6%A1%88%EF%BC%8C%E5%8F%AF%E5%AE%89%E5%85%A8%E5%AD%98%E5%82%A8%E4%BD%A0%E7%9A%84***%E8%AE%B0%E5%BD%95%E3%80%82

独特价值 💶

为什么选择此镜像而非其他现有镜像？ 原因如下：

• ... 以非root用户（1000:1000）运行，提升安全性
• ... 通过CI/CD自动更新至最新版本
• ... 从源代码构建和编译，确保纯净性
• ... 包含健康检查，实时监控服务状态
• ... 只读模式运行，防止***篡改
• ... 发布前后自动扫描CVE漏洞，降低安全风险
• ... 通过安全且固定的CI/CD流程创建
• ... 镜像体积小巧，资源占用低

若你重视安全性、简洁性和极致优化，此镜像可能适合你。

对比 🏁

以下是本镜像与最常用或原始镜像的对比：

卷 📁

• /medikeep/var - 所有上传文件的存储目录
• /medikeep/backup (可选) - 备份文件的存储目录

Compose配置 ✂️

yaml
name: "medical"

x-lockdown: &lockdown
  # 防止对镜像本身的写访问
  read_only: true
  # 防止容器内任何进程获取更多权限
  security_opt:
    - "no-new-privileges=true"

services:
  postgres:
    # 有关此镜像的更多信息，请查看：https://github.com/11notes/docker-postgres
    image: "11notes/postgres:17"
    <<: *lockdown
    environment:
      TZ: "Europe/Zurich"
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
      POSTGRES_BACKUP_SCHEDULE: "0 3 * * *"
      POSTGRES_BACKUP_RETENTION: 5
    networks:
      backend:
    volumes:
      - "postgres.etc:/postgres/etc"
      - "postgres.var:/postgres/var"
      - "postgres.backup:/postgres/backup"
    tmpfs:
      - "/postgres/run:uid=1000,gid=1000"
      - "/postgres/log:uid=1000,gid=1000"
    restart: "always"

  medikeep:
    depends_on:
      postgres:
        condition: "service_healthy"
        restart: true
    image: "11notes/medikeep:0.62.1"
    <<: *lockdown
    environment:
      TZ: "Europe/Zurich"
      DB_PASSWORD: "${POSTGRES_PASSWORD}"
      SECRET_KEY: "${SECRET_KEY}"
      ADMIN_DEFAULT_PASSWORD: "${ADMIN_DEFAULT_PASSWORD}"
      SSO_ENABLED: true
      SSO_PROVIDER_TYPE: "keycloak"
      SSO_CLIENT_ID: "medikeep"
      SSO_CLIENT_SECRET: "${SSO_CLIENT_SECRET}"
      SSO_ISSUER_URL: "${SSO_ISSUER_URL}"
      SSO_REDIRECT_URI: "${SSO_REDIRECT_URI}"
    ports:
      - "3000:8080/tcp"
    networks:
      frontend:
      backend:
    volumes:
      - "medikeep.var:/medikeep/var"
      - "medikeep.backup:/medikeep/backup"
    tmpfs:
      - "/medikeep/log:uid=1000,gid=1000"
    restart: "always"

volumes:
  postgres.etc:
  postgres.var:
  postgres.backup:
  medikeep.var:
  medikeep.backup:

networks:
  frontend:
  backend:
    internal: true

若需更改容器镜像的默认UID/GID，请参考https://github.com/11notes/RTFM/blob/main/linux/container/image/11notes/how-to.changeUIDGID.md#change-uidgid-the-correct-way%E3%80%82

默认设置 🗃️

环境变量 📝

主要标签 🏷️

以下是镜像的主要标签，同时也存在每个提交及其短SHA256值对应的标签：

• https://hub.docker.com/r/11notes/medikeep/tags?name=0.62.1

无latest标签的更新建议

:latest标签易因破坏性变更导致问题，推荐使用语义化版本短标签（如:0或:0.62）固定主/次版本；若需最新版本，可使用:rolling标签（风险自负）。

镜像源 ☁️

bash
docker pull 11notes/medikeep:0.62.1  
docker pull ghcr.io/11notes/medikeep:0.62.1  
docker pull quay.io/11notes/medikeep:0.62.1  

源代码 💾

• https://github.com/11notes/docker-medikeep

父镜像 🏛️

• ${{ json_readme_parent_image }}

构建工具 🧰

• https://github.com/afairgiant/MediKeep
• https://github.com/11notes/docker-util

通用提示 📌

• 使用反向代理（如Traefik、Nginx）终止TLS并保护端点
• 使用Let’s Encrypt DNS-01挑战获取有效SSL证书

ElevenNotes™️

此镜像由你自行承担风险使用。更新前请备份，查看https://github.com/11notes/docker-medikeep/releases%E4%BA%86%E8%A7%A3%E7%A0%B4%E5%9D%8F%E6%80%A7%E5%8F%98%E6%9B%B4%E3%80%82%E8%8B%A5%E9%81%87%E9%97%AE%E9%A2%98%E6%8F%90%E4%BA%A4https://github.com/11notes/docker-medikeep/issues%EF%BC%8C%E5%BB%BA%E8%AE%AE%E6%88%96%E7%96%91%E9%97%AE%E5%88%9B%E5%BB%BAhttps://github.com/11notes/docker-medikeep/discussions%E3%80%82

创建于12.04.2026, 08:29:02 (CET)