Add UUID/FK channel checks, agent whitelist/push APIs, bindings, super-admin LWW audit with rollback, reconcile rate limits, and sync docs. Default customers stay opt-in; company conflict UI is removed. Co-authored-by: Cursor <cursoragent@cursor.com>
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
Name: platform
|
|
Host: 0.0.0.0
|
|
Port: 8888
|
|
|
|
DataSource: "postgres://platform:platform@postgres:5432/platform?sslmode=disable"
|
|
DryRun: false
|
|
DevAuth: false
|
|
PublicBaseURL: "http://127.0.0.1:8180"
|
|
# 生产:改为对外 HTTPS 域名(与 .env 中 AIJZ_PUBLIC_BASE_URL 一致),改后执行 ./reload-config.sh platform
|
|
# PublicBaseURL: "https://aijz.example.com"
|
|
RateLimitPerMin: 6000
|
|
|
|
Auth:
|
|
AccessSecret: "dev-only-change-me"
|
|
AccessExpire: 86400
|
|
IssueSecret: "dev-only-change-me"
|
|
PhoneLoginOnly: false
|
|
RequirePhoneBound: false
|
|
|
|
License:
|
|
Enabled: false
|
|
Customer: ""
|
|
LeaseDir: "./data/license/leases"
|
|
StateDir: "./data/license/state"
|
|
ControlSecret: "dev-license-control-secret"
|
|
SeedNotAfter: ""
|
|
GraceDays: 0
|
|
Message: "授权已过期,请联系宇信达续费"
|
|
|
|
Agent:
|
|
CapsuleSecret: "dev-agent-capsule-secret"
|
|
RegisterSecret: "dev-only-change-me"
|
|
|
|
Storage:
|
|
Driver: local
|
|
LocalRoot: /app/data/uploads
|
|
PublicBase: "http://127.0.0.1:8180/api/v1/storage"
|
|
# 生产:与 PublicBaseURL 同域,例如 https://aijz.example.com/api/v1/storage
|
|
|
|
DBSync:
|
|
Enabled: true
|
|
DataDir: /app/data/dbsync
|
|
LwwAuditTTLDays: 90
|
|
ReconcileMinSec: 300
|