237 lines
9.2 KiB
YAML
237 lines
9.2 KiB
YAML
# 🏭 生产环境配置
|
||
# 只包含与默认配置不同的配置项
|
||
|
||
# ===========================================
|
||
# 🌍 环境标识
|
||
# ===========================================
|
||
app:
|
||
env: production
|
||
|
||
# ===========================================
|
||
# 🌐 服务器配置
|
||
# ===========================================
|
||
server:
|
||
mode: release
|
||
|
||
# ===========================================
|
||
# 🔒 CORS配置 - 生产环境
|
||
# ===========================================
|
||
development:
|
||
enable_cors: true
|
||
cors_allowed_origins: "http://localhost:5173,https://consoletest.haiyudata.com,https://console.haiyudata.com"
|
||
cors_allowed_methods: "GET,POST,PUT,PATCH,DELETE,OPTIONS"
|
||
cors_allowed_headers: "Origin,Content-Type,Accept,Authorization,X-Requested-With,Access-Id"
|
||
|
||
# ===========================================
|
||
# 🗄️ 数据库配置
|
||
# ===========================================
|
||
# 敏感信息通过外部环境变量注入
|
||
database:
|
||
host: "hyapi-postgres-prod"
|
||
port: "5432"
|
||
user: "hyapi_user"
|
||
password: "Qm8kZ3nR7pL4wT9y"
|
||
name: "hyapi"
|
||
sslmode: "disable"
|
||
timezone: "Asia/Shanghai"
|
||
max_open_conns: 25
|
||
max_idle_conns: 10
|
||
conn_max_lifetime: 300s
|
||
auto_migrate: true
|
||
redis:
|
||
host: "hyapi-redis-prod"
|
||
port: "6379"
|
||
password: ""
|
||
db: 0
|
||
|
||
# ===========================================
|
||
# 🔐 JWT配置
|
||
# ===========================================
|
||
jwt:
|
||
secret: JwT8xR4mN9vP2sL7kH3oB6yC1zA5uF0qE9tW
|
||
|
||
api:
|
||
domain: "api.haiyudata.com"
|
||
# 可选：对外可访问的 API 完整基址（无尾斜杠），用于企业报告 reportUrl、PDF 预生成等；不设则按 https://{domain} 推导。环境变量 API_PUBLIC_BASE_URL 优先于本项。
|
||
# public_base_url: "https://api.haiyudata.com"
|
||
# ===========================================
|
||
# 📁 存储服务配置 - 七牛云
|
||
# ===========================================
|
||
storage:
|
||
access_key: "AO6u6sDWi6L9TsPfr4awC7FYP85JTjt3bodZACCM"
|
||
secret_key: "2fjxweGtSAEaUdVgDkWEmN7JbBxHBQDv1cLORb9_"
|
||
bucket: "tianyuanapi"
|
||
domain: "https://file.tianyuanapi.com"
|
||
|
||
# ===========================================
|
||
# 🔍 OCR服务配置 - 百度智能云
|
||
# ===========================================
|
||
ocr:
|
||
api_key: "aMsrBNGUJxgcgqdm3SEdcumm"
|
||
secret_key: "sWlv2h2AWA3aAt5bjXCkE6WeA5AzpAAD"
|
||
|
||
# ===========================================
|
||
# 📝 e签宝服务配置
|
||
# ===========================================
|
||
esign:
|
||
app_id: "5112059455"
|
||
app_secret: "cacdb6cfca94b74c86bcea277a978884"
|
||
server_url: "https://openapi.esign.cn"
|
||
template_id: "d8f5db99506f4dab893f629cb1e82497"
|
||
contract:
|
||
name: "海宇数据-合作协议"
|
||
expire_days: 7
|
||
retry_count: 3
|
||
auth:
|
||
org_auth_modes: ["PSN_MOBILE3"]
|
||
default_auth_mode: "PSN_MOBILE3"
|
||
psn_auth_modes: ["PSN_MOBILE3", "PSN_IDCARD"]
|
||
willingness_auth_modes: ["CODE_SMS"]
|
||
redirect_url: "https://console.haiyudata.com/certification/callback/auth"
|
||
sign:
|
||
auto_finish: true
|
||
sign_field_style: 1
|
||
client_type: "ALL"
|
||
redirect_url: "https://console.haiyudata.com/certification/callback/sign"
|
||
|
||
# ===========================================
|
||
# 📝 法大大服务配置（FASC OpenAPI v5.1）
|
||
# 应用名称：海宇数据 | AppId：80005307 | 状态：待上线
|
||
# ===========================================
|
||
fadada:
|
||
app_id: "00004782"
|
||
app_secret: "E9GMVOQ9NBSOUDG5VOFM0J1CZPOAP2Y8"
|
||
# 待上线/联调用测试环境；正式上线后改为 https://api.fadada.com/api/v5/
|
||
server_url: "https://api.fadada.com/api/v5/"
|
||
open_corp_id: "7118e66dfd9349d998c0395c5d0742ad" # 海宇数据在法大大侧企业 ID
|
||
# 免验证签场景码：仅 freeSignType=business 时需要；当前按模板免验证签（template），可留空
|
||
no_auth_scene_code: ""
|
||
template_id: "1784619066713193840" # 合作协议模板 ID（填单/签署；免验证签依据此模板）
|
||
# 签署模板中的参与方标识（actorId），必须与模板「签署角色」名称完全一致
|
||
party_a_actor_id: "甲方"
|
||
party_b_actor_id: "乙方"
|
||
# 签署模板内文档 docId（填单必填）；可从模板详情/任务详情 docs[].docId 获取，留空则创建后自动解析
|
||
template_doc_id: ""
|
||
# 模板控件编码（fieldId）——与法大大后台控件编码一致
|
||
template_fields:
|
||
# 协议编号：线上由 GenerateContractCode 生成，格式 HYDATA-{当天YYYYMMDD}-R{6位随机数}（R=入驻），已有 contract_code 则复用；下列控件全部填同一编号
|
||
agreement_no:
|
||
- "0277518263"
|
||
- "5199991781"
|
||
- "0923405093"
|
||
- "6021178427"
|
||
- "5137728710"
|
||
- "3181735831"
|
||
- "2594442367"
|
||
- "5884938840"
|
||
- "6914410621"
|
||
- "6308592720"
|
||
- "3347376554"
|
||
- "8264194159"
|
||
contract_date: "2039326319" # 签订日期（系统填写）
|
||
# 甲方企业名：控件不可复用，多处填同一企业名
|
||
party_a_name:
|
||
- "6920634255"
|
||
- "1847502631"
|
||
party_a_uscc: "8702060291" # 甲方统一信用代码
|
||
party_a_address: "4557539440" # 甲方联系地址
|
||
party_a_rep: "8627432823" # 甲方授权代表/法人
|
||
# 签署日期为签署控件（非填写控件），由甲/乙方签署时自动写入，勿走填单 API
|
||
party_a_sign_date: ""
|
||
party_b_sign_date: ""
|
||
contract:
|
||
name: "海宇数据-合作协议"
|
||
expire_days: 7
|
||
retry_count: 3
|
||
auth:
|
||
# 认证完成后顶层跳回企业入驻页（勿用 callback 页留在 iframe 内）
|
||
redirect_url: "https://console.haiyudata.com/profile/certification"
|
||
sign:
|
||
# 甲方签署完成后回跳（iframe 内会顶层跳出到入驻页）
|
||
redirect_url: "https://console.haiyudata.com/certification/callback/fadada/sign"
|
||
callback:
|
||
enabled: true
|
||
|
||
# ===========================================
|
||
# 💰 支付宝支付配置
|
||
# ===========================================
|
||
alipay:
|
||
is_production: true
|
||
notify_url: "https://console.haiyudata.com/api/v1/finance/alipay/callback"
|
||
return_url: "https://console.haiyudata.com/api/v1/finance/alipay/return"
|
||
|
||
# ===========================================
|
||
# 💰 微信支付配置
|
||
# ===========================================
|
||
Wxpay:
|
||
app_id: "wxa42614fcc7e5c50e"
|
||
|
||
# ===========================================
|
||
# 💰 钱包配置
|
||
# ===========================================
|
||
wallet:
|
||
default_credit_limit: 50.00
|
||
min_amount: "100.00" # 生产环境最低充值金额
|
||
max_amount: "100000.00" # 单次最高充值金额
|
||
recharge_bonus_enabled: false # 暂不赠送，展示商务洽谈提示
|
||
api_store_recharge_tip: "尊敬的客户，若您的充值金额较大或有批量调价需求，为获取专属商务优惠方案，请直接联系我司商务团队进行洽谈。感谢您的支持！"
|
||
# 支付宝充值赠送配置（recharge_bonus_enabled 为 true 时生效）
|
||
alipay_recharge_bonus:
|
||
- recharge_amount: 1000.00 # 充值1000元
|
||
bonus_amount: 50.00 # 赠送50元
|
||
- recharge_amount: 5000.00 # 充值5000元
|
||
bonus_amount: 300.00 # 赠送300元
|
||
- recharge_amount: 10000.00 # 充值10000元
|
||
bonus_amount: 800.00 # 赠送800元
|
||
|
||
# ===========================================
|
||
# 🚦 频率限制配置 - 生产环境
|
||
# ===========================================
|
||
daily_ratelimit:
|
||
max_requests_per_day: 50000 # 生产环境每日最大请求次数
|
||
max_requests_per_ip: 5000 # 生产环境每个IP每日最大请求次数
|
||
max_concurrent: 200 # 生产环境最大并发请求数
|
||
|
||
# 排除频率限制的路径
|
||
exclude_paths:
|
||
- "/health" # 健康检查接口
|
||
- "/metrics" # 监控指标接口
|
||
|
||
# 排除频率限制的域名
|
||
exclude_domains:
|
||
- "api.*" # API二级域名不受频率限制
|
||
- "*.api.*" # 支持多级API域名
|
||
|
||
# 生产环境安全配置（严格限制）
|
||
enable_ip_whitelist: false # 生产环境不启用IP白名单
|
||
enable_ip_blacklist: true # 启用IP黑名单
|
||
ip_blacklist: # 生产环境IP黑名单
|
||
- "192.168.1.100" # 示例：被禁止的IP
|
||
- "10.0.0.50" # 示例：被禁止的IP
|
||
|
||
enable_user_agent: true # 启用User-Agent检查
|
||
blocked_user_agents: # 被阻止的User-Agent
|
||
- "curl" # 阻止curl请求
|
||
- "wget" # 阻止wget请求
|
||
- "python-requests" # 阻止Python requests
|
||
- "LangShen" # 阻止LangShen请求
|
||
|
||
enable_referer: true # 启用Referer检查
|
||
allowed_referers: # 允许的Referer
|
||
- "https://console.haiyudata.com"
|
||
- "https://consoletest.haiyudata.com"
|
||
|
||
enable_geo_block: false # 生产环境暂时不启用地理位置阻止
|
||
enable_proxy_check: true # 启用代理检查
|
||
|
||
# ===========================================
|
||
# 📱 短信服务配置
|
||
# ===========================================
|
||
sms:
|
||
# 短信服务商切换：tencent / aliyun
|
||
provider: "tencent"
|
||
# 滑块验证码配置
|
||
captcha_enabled: false # 是否启用滑块验证码
|
||
captcha_secret: "" # 阿里云验证码密钥（可选）
|
||
scene_id: "wynt39to" # 阿里云验证码场景ID
|