Files
senmesh-zc/deploy/config/application-iw.yml

116 lines
2.5 KiB
YAML
Raw Permalink Normal View History

# s-file 内网侧(file.transfer.location=1)本地联调配置
# 仅本机 docker 部署使用,密码与 JWT secret 不要带到生产
server:
port: 8080
spring:
application:
name: s-file
datasource:
url: jdbc:postgresql://pg-iw:5432/s_file
driver-class-name: org.postgresql.Driver
username: sfile
password: sfile_iw_2026
druid:
initial-size: 2
min-idle: 2
max-active: 10
validation-query: SELECT 1
redis:
host: redis-iw
port: 6379
timeout: 5000
lettuce:
pool:
max-active: 8
max-idle: 4
rabbitmq:
host: mq-iw
port: 5672
username: sfile
password: sfile_mq_iw_2026
servlet:
multipart:
max-file-size: 500MB
max-request-size: 500MB
main:
allow-bean-definition-overriding: true
mybatis-plus:
mapper-locations: classpath*:com/senmesh/**/mapper/*.xml
# 平台编码(init-data 中 uc_platform.platform_code=1)
system:
code: 1
# 发号器雪花 workerId:键为 compose 中固定的容器 IP
"[code.snowflake.workid.172.25.18.10]": 1
security:
jwt:
enable: true
secret: sfile-local-iw-secret-key-please-change-0123456789abcdef
expiration: 86400000
header: Authorization
ignoring: /error,/favicon.ico
login-page: /login
superior-only: false
use-local: true
allow-if-all-abstain-decisions: true
oauth2:
enable: false
not-logs: ""
anonymous: ""
# 新用户初始密码
user:
default:
password: Qaz123567!@#
file:
upload-dir: /data/upload
storage:
type: local
transfer:
# 内网侧
location: "1"
# send-dir 与外网侧 receive-dir 指向同一摆渡目录,反之亦然
send-dir: /data/transfer/send
receive-dir: /data/transfer/receive
unpack-risk-check: false
dify:
risk:
rule:
api-key: test-rule-key
scan:
api-key: test-scan-key
# MeshSafe 文件安全检测:复用本机已部署的 meshsafe-nginx(44380)
# 凭证需存在于 MeshSafe .env 的 MESHSAFE_API_CLIENTS 白名单中
meshsafe:
enabled: true
base-url: http://host.docker.internal:44380
client-id: test-client
secret: test-secret
channel: sfile-iw
timeout-seconds: 120
fail-open: true
poll-timeout-minutes: 60
review-sync-to-meshsafe: true
poll:
cron: "0/10 * * * * ?"
rabbitmq:
custom:
topic-exchange-name: s-file-iw-topic
delayed-exchange-name: s-file-iw-delayed
broadcast-id: s-file-iw-broadcast
swagger:
enable: false
logging:
level:
com.senmesh: info