root
7d8e82c69f
Ship the Ops backstage 对象存储 page (browse / upload / move / delete / folder ops) backed by a new object-storage service + handler, with the shared storage client extended with List/Stat/Copy/Usage/DownloadURL so both MinIO and Aliyun providers cover the new surface. Add ForcePathStyle to the object-storage config and treat r2/s3/custom_s3 as external providers so Cloudflare R2 and other S3-compatibles can share the MinIO client path without spinning up the bundled MinIO. Also add CSV import/export + template download to the site-domain mappings page, raise gin MaxMultipartMemory to 8 MiB for the new multipart endpoints, register Ops swagger routes, and extend the descriptions-parity test to cover the ops router. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
85 lines
1.8 KiB
YAML
85 lines
1.8 KiB
YAML
server:
|
|
port: 8090
|
|
mode: debug
|
|
# 生产环境请配置为真实运维后台域名，例如 https://ops.example.com。
|
|
# 留空时沿用开发环境 CORS 放开策略。
|
|
allowed_origins: []
|
|
security_headers:
|
|
enabled: true
|
|
trusted_proxies:
|
|
- 127.0.0.1
|
|
- ::1
|
|
- 10.42.0.0/16
|
|
- 10.43.0.0/16
|
|
- 172.16.0.0/12
|
|
|
|
database:
|
|
host: localhost
|
|
port: 5432
|
|
user: geo
|
|
password: geo_dev
|
|
dbname: geo
|
|
sslmode: disable
|
|
max_open_conns: 5
|
|
max_idle_conns: 2
|
|
|
|
monitoring_database:
|
|
host: localhost
|
|
port: 5433
|
|
user: geo
|
|
password: geo_dev
|
|
dbname: geo_monitoring
|
|
sslmode: disable
|
|
max_open_conns: 5
|
|
max_idle_conns: 2
|
|
|
|
redis:
|
|
addr: localhost:6379
|
|
db: 0
|
|
|
|
cache:
|
|
driver: redis
|
|
|
|
object_storage:
|
|
provider: aliyun
|
|
endpoint: https://oss-cn-shanghai.aliyuncs.com
|
|
access_key: LTAI5tAEj8euR8B1gXzMoG84
|
|
secret_key: lJPrKo9ViyHJE8UWIMmMCY0B6Je8v2
|
|
bucket: shengxintui
|
|
use_ssl: true
|
|
public_base_url: ""
|
|
bucket_acl: private
|
|
object_acl: default
|
|
signed_url_ttl: 30m
|
|
region: cn-shanghai
|
|
force_path_style: false
|
|
|
|
log:
|
|
level: info
|
|
format: json
|
|
|
|
jwt:
|
|
secret: "15645415841" # 必须通过 OPS_JWT_SECRET 环境变量提供
|
|
access_ttl: 8h
|
|
|
|
auth:
|
|
password_cipher:
|
|
# 留空 private_key_pem 时会在单进程内生成临时密钥；生产多实例请通过环境变量注入同一把私钥。
|
|
enabled: true
|
|
key_id: ops-password-rsa-oaep-v1
|
|
private_key_pem: ""
|
|
|
|
default_admin:
|
|
username: admin
|
|
display_name: 系统管理员
|
|
email: ""
|
|
password: "liang0920" # 必须通过 OPS_DEFAULT_ADMIN_PASSWORD 提供（首次启动且表为空时使用）
|
|
|
|
admin_users:
|
|
default_plan_code: free
|
|
|
|
ip_region:
|
|
# 可选外部 xdb 路径；文件不存在时自动使用二进制 embed 内置数据。
|
|
v4_xdb_path: ""
|
|
v6_xdb_path: ""
|