Files
shanxia2.0/生产环境部署/backend.env.production.example
T
2026-07-12 12:04:43 +08:00

59 lines
2.2 KiB
Bash
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# shanxia2.0 后端生产环境配置(模板)
# 实际部署文件:backend/.env.production(已按生产机 121.43.228.102:9911 配好,随 backend 上传)
# 若需重新生成,可复制本模板到 backend/.env.production 后按注释修改
APP_NAME=山峡化工一体化门户
DEBUG=false
DEFAULT_TENANT_NO=shanxia2.0
WEB_AUTH_DEFAULT_ROLE=admin
# === 与本地一致的远程中间件(按实际 .env 填写)===
DATABASE_URL=mysql+pymysql://USER:PASSWORD@47.99.164.66:3306/shanxia2.0
STORAGE_TYPE=minio
MINIO_ENDPOINT=47.99.164.66:20004
MINIO_ACCESS_KEY=CHANGEME
MINIO_SECRET_KEY=CHANGEME
MINIO_BUCKET=zkxw
MINIO_SECURE=false
MINIO_BASE_URL=https://www.chengyantek.cn/zkxw
REDIS_HOST=47.99.164.66
REDIS_PORT=16379
REDIS_DB=8
REDIS_PASSWORD=CHANGEME
REDIS_TIMEOUT_SEC=30
REDIS_SSL_ENABLED=false
# === 生产必改 ===
SECRET_KEY=请替换为随机长字符串-勿用默认值
LOGIN_ALLOW_PLAINTEXT_LOGIN=false
# 固定 RSA 私钥(多 worker / 重启后公钥不变;可从本地生成 PEM 后粘贴)
LOGIN_RSA_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
# 允许的前端 Origin(JSON 数组)
BACKEND_CORS_ORIGINS=["http://121.43.228.102:9911"]
# 公开 H5 页拼接用(司机端等)
PUBLIC_WEB_ORIGIN=http://121.43.228.102:9911
# === API 加密(与前端 VITE_API_ENCRYPT_* 保持一致)===
API_ENCRYPT_ENABLED=false
API_ENCRYPT_FAIL_OPEN=false
API_ENCRYPT_FIXED_SECRET=sqxp-web-api-crypto-fixed-secret
API_ENCRYPT_TS_SKEW_SEC=300
API_ENCRYPT_NONCE_TTL_SEC=300
API_ENCRYPT_EXCLUDE_PATHS=/,/health,/docs,/openapi.json,/api/web/auth/login-rsa-public-key,/api/web/auth/login,/api/web/auth/refresh-token,/api/mini/auth/login-rsa-public-key,/api/mini/auth/login,/api/mini/auth/sms-login,/api/mini/common/china-region-tree,/api/web/admin/attachment/upload,/api/web/admin/products/upload-image,/api/web/admin/categories/upload-image,/api/web/admin/users/upload-avatar,/api/invoice/download
# === 可选:API 请求日志 ===
# API_REQUEST_LOG_ENABLED=false
# === 微信支付(若启用小程序支付,按本地 .env 同步)===
# WXPAY_MCHID=
# WXPAY_MINI_APPID=
# WXPAY_SECRET=
# WXPAY_API_KEY=
# WXPAY_NOTIFY_URL=
# WXPAY_REFUND_NOTIFY_URL=