server:
  port: 8090
  mode: debug
  # 生产环境请配置为真实运维后台域名，例如 https://ops.example.com。
  # 留空时沿用开发环境 CORS 放开策略。
  allowed_origins: []
  security_headers:
    enabled: true
  trusted_proxies:
    - 127.0.0.1
    - ::1
    - 10.42.0.0/16
    - 10.43.0.0/16
    - 172.16.0.0/12

database:
  host: localhost
  port: 5432
  user: geo
  password: geo_dev
  dbname: geo
  sslmode: disable
  max_open_conns: 5
  max_idle_conns: 2

monitoring_database:
  host: localhost
  port: 5433
  user: geo
  password: geo_dev
  dbname: geo_monitoring
  sslmode: disable
  max_open_conns: 5
  max_idle_conns: 2

redis:
  addr: localhost:6379
  db: 0

cache:
  driver: redis

object_storage:
  provider: aliyun
  endpoint: https://oss-cn-shanghai.aliyuncs.com
  access_key: LTAI5tAEj8euR8B1gXzMoG84
  secret_key: lJPrKo9ViyHJE8UWIMmMCY0B6Je8v2
  bucket: shengxintui
  use_ssl: true
  public_base_url: ""
  bucket_acl: private
  object_acl: default
  signed_url_ttl: 30m
  region: cn-shanghai
  force_path_style: false

log:
  level: info
  format: json

jwt:
  secret: "15645415841"           # 必须通过 OPS_JWT_SECRET 环境变量提供
  access_ttl: 8h

auth:
  password_cipher:
    # 留空 private_key_pem 时会在单进程内生成临时密钥；生产多实例请通过环境变量注入同一把私钥。
    enabled: true
    key_id: ops-password-rsa-oaep-v1
    private_key_pem: ""

default_admin:
  username: admin
  display_name: 系统管理员
  email: ""
  password: "liang0920"         # 必须通过 OPS_DEFAULT_ADMIN_PASSWORD 提供（首次启动且表为空时使用）

admin_users:
  default_plan_code: free

media_supply:
  enabled: true
  default_markup_percent: 50
  minimum_markup_cents: 0
  worker:
    enabled: true
    poll_interval: 5s
    batch_size: 1
    order_max_attempts: 3
    sync_max_attempts: 2
  meijiequan:
    base_url: http://www.meijiequan.com
    user_id: ""
    username: "17788409108"
    password: "happy114"
    session_ttl: 4h
    request_timeout: 30s
    sync_page_delay: 800ms
    sync_page_size: 100
    max_sync_pages: 200
    search_options_ttl: 6h
    upstream_lock_ttl: 30s
    upstream_min_interval: 2s

ip_region:
  # 可选外部 xdb 路径；文件不存在时自动使用二进制 embed 内置数据。
  v4_xdb_path: ""
  v6_xdb_path: ""