feat(ops-api/audit): annotate audit log IP with region lookup

root/geo

Add an IPRegionResolver wrapping the ip2region xdb library and attach it
to AuditService so each appended event records both the raw IP and a
resolved region in a new ops.audit_logs.ip_region column. Loopback and
private addresses short-circuit to local labels; missing xdb data or
lookup errors degrade silently so auditing keeps working without it.
The ops console audit view shows the region beneath the IP. Bundle the
v4/v6 xdb data under internal/ops/app/ipregiondata so the resolver works
out of the box, with config paths/env overrides for swapping in updated
data sets.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

This commit is contained in:

liangxu

2026-04-29 00:46:37 +08:00

parent 5a9d80c518

commit 3480d04ec3

17 changed files with 344 additions and 11 deletions

									
										server/configs/ops-config.yaml
									
		+5
		
												View File
												
				@@ -28,3 +28,8 @@ default_admin:

				admin_users:

				  default_plan_code: free

				ip_region:

				  # 可选外部 xdb 路径；文件不存在时自动使用二进制 embed 内置数据。

				  v4_xdb_path: ""

				  v6_xdb_path: ""