47273ae3fd
包含 s-file 后端、React 前端、MeshSafe 安全检测对接，以及内外网两套 compose/nginx/配置（仅前端 28180/28280 对外发布，其余端口不暴露）。 说明：deploy/config/application-iw.yml 与 application-ow.yml 按维护者 明确要求原样入库，其中含本机 Docker 用的库口令、RabbitMQ 口令与 JWT 密钥；上生产前需替换。
116 lines
2.5 KiB
YAML
116 lines
2.5 KiB
YAML
# s-file 外网侧（file.transfer.location=2）本地联调配置
|
||
# 仅本机 docker 部署使用，密码与 JWT secret 不要带到生产
|
||
server:
|
||
port: 8080
|
||
|
||
spring:
|
||
application:
|
||
name: s-file
|
||
datasource:
|
||
url: jdbc:postgresql://pg-ow:5432/s_file
|
||
driver-class-name: org.postgresql.Driver
|
||
username: sfile
|
||
password: sfile_ow_2026
|
||
druid:
|
||
initial-size: 2
|
||
min-idle: 2
|
||
max-active: 10
|
||
validation-query: SELECT 1
|
||
redis:
|
||
host: redis-ow
|
||
port: 6379
|
||
timeout: 5000
|
||
lettuce:
|
||
pool:
|
||
max-active: 8
|
||
max-idle: 4
|
||
rabbitmq:
|
||
host: mq-ow
|
||
port: 5672
|
||
username: sfile
|
||
password: sfile_mq_ow_2026
|
||
servlet:
|
||
multipart:
|
||
max-file-size: 500MB
|
||
max-request-size: 500MB
|
||
main:
|
||
allow-bean-definition-overriding: true
|
||
|
||
mybatis-plus:
|
||
mapper-locations: classpath*:com/senmesh/**/mapper/*.xml
|
||
|
||
# 平台编码(init-data 中 uc_platform.platform_code=1)
|
||
system:
|
||
code: 1
|
||
|
||
# 发号器雪花 workerId：键为 compose 中固定的容器 IP；两侧 workerId 必须不同
|
||
"[code.snowflake.workid.172.25.28.10]": 2
|
||
|
||
security:
|
||
jwt:
|
||
enable: true
|
||
secret: sfile-local-ow-secret-key-please-change-0123456789abcdef
|
||
expiration: 86400000
|
||
header: Authorization
|
||
ignoring: /error,/favicon.ico
|
||
login-page: /login
|
||
superior-only: false
|
||
use-local: true
|
||
allow-if-all-abstain-decisions: true
|
||
oauth2:
|
||
enable: false
|
||
not-logs: ""
|
||
anonymous: ""
|
||
|
||
# 新用户初始密码
|
||
user:
|
||
default:
|
||
password: Qaz123567!@#
|
||
|
||
file:
|
||
upload-dir: /data/upload
|
||
storage:
|
||
type: local
|
||
transfer:
|
||
# 外网侧：与内网侧相反
|
||
location: "2"
|
||
# compose 里 send-dir 挂到 gate/ow2iw、receive-dir 挂到 gate/iw2ow
|
||
send-dir: /data/transfer/send
|
||
receive-dir: /data/transfer/receive
|
||
unpack-risk-check: false
|
||
|
||
dify:
|
||
risk:
|
||
rule:
|
||
api-key: test-rule-key
|
||
scan:
|
||
api-key: test-scan-key
|
||
|
||
# MeshSafe 文件安全检测：复用本机已部署的 meshsafe-nginx(44380)
|
||
# 凭证需存在于 MeshSafe .env 的 MESHSAFE_API_CLIENTS 白名单中
|
||
meshsafe:
|
||
enabled: true
|
||
base-url: http://host.docker.internal:44380
|
||
client-id: test-client
|
||
secret: test-secret
|
||
channel: sfile-ow
|
||
timeout-seconds: 120
|
||
fail-open: true
|
||
poll-timeout-minutes: 60
|
||
review-sync-to-meshsafe: true
|
||
poll:
|
||
cron: "0/10 * * * * ?"
|
||
|
||
rabbitmq:
|
||
custom:
|
||
topic-exchange-name: s-file-ow-topic
|
||
delayed-exchange-name: s-file-ow-delayed
|
||
broadcast-id: s-file-ow-broadcast
|
||
|
||
swagger:
|
||
enable: false
|
||
|
||
logging:
|
||
level:
|
||
com.senmesh: info
|