51 lines
2.3 KiB
Plaintext
51 lines
2.3 KiB
Plaintext
GAOKAO_ADMIN_BIND=0.0.0.0
|
||
GAOKAO_ENV=prod
|
||
GAOKAO_ADMIN_PORT=8000
|
||
GAOKAO_ADMIN_USER=admin
|
||
GAOKAO_ADMIN_PASS=change-me-now-admin-pass
|
||
GAOKAO_JWT_SECRET=replace-with-64-char-jwt-secret-before-production-1234567890abcdef
|
||
GAOKAO_PORTAL_TOKEN_SECRET=replace-with-independent-64-char-portal-secret-before-production-abcdef1234567890
|
||
GAOKAO_ORDERS_FERNET_KEY=replace-with-strong-orders-fernet-secret-before-production
|
||
GAOKAO_PORTAL_UPLOAD_DIR=/var/lib/gaokao/portal_uploads
|
||
GAOKAO_PORTAL_UPLOAD_MAX_BYTES=5242880
|
||
GAOKAO_PORTAL_UPLOAD_MAX_FILES=5
|
||
# LLM 自动审核 / 方案生成（生产环境必须配置）
|
||
GAOKAO_LLM_PROVIDER=dashscope
|
||
GAOKAO_LLM_API_KEY=replace-with-real-llm-api-key
|
||
GAOKAO_LLM_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
|
||
GAOKAO_LLM_MODEL=qwen-plus
|
||
GAOKAO_LLM_TIMEOUT=60
|
||
GAOKAO_LLM_MAX_TOKENS=4096
|
||
# 可选：多模型 fallback（逗号分隔，主供应商失败时按顺序尝试）
|
||
# GAOKAO_LLM_FALLBACK_MODELS=gpt-4o-mini,deepseek-chat
|
||
# GAOKAO_LLM_FALLBACK_PROVIDERS=openai,deepseek
|
||
# GAOKAO_LLM_FALLBACK_API_KEYS=sk-openai-key,sk-deepseek-key
|
||
# GAOKAO_LLM_FALLBACK_BASE_URLS=https://api.openai.com/v1,https://api.deepseek.com/v1
|
||
GAOKAO_PAYMENT_PROVIDER=mock
|
||
GAOKAO_PAYMENT_BASE_URL=https://example.com
|
||
GAOKAO_PAYMENT_WEBHOOK_SECRET=replace-with-independent-payment-webhook-secret
|
||
GAOKAO_PAYMENT_NOTIFY_URL=
|
||
GAOKAO_PAYMENT_RETURN_URL=
|
||
GAOKAO_PAYMENT_APP_ID=
|
||
GAOKAO_PAYMENT_PRIVATE_KEY_PATH=
|
||
GAOKAO_PAYMENT_ALIPAY_PUBLIC_KEY_PATH=
|
||
GAOKAO_SMTP_HOST=
|
||
GAOKAO_SMTP_PORT=25
|
||
GAOKAO_SMTP_SENDER=
|
||
GAOKAO_SMTP_USER=
|
||
GAOKAO_SMTP_PASS=
|
||
GAOKAO_SMTP_USE_TLS=false
|
||
GAOKAO_SMTP_USE_SSL=false
|
||
GAOKAO_ALERT_RECIPIENTS=
|
||
GAOKAO_ALERT_WEBHOOK_URLS=
|
||
GAOKAO_OPS_ALERT_LOG=/var/lib/gaokao/ops-alerts.jsonl
|
||
# === Review Remediation 2026-07-05 新增安全要求 ===
|
||
# 1. Admin JWT 不再允许 URL query 参数传递（T1-01）
|
||
# 2. payment-return 需要 return_nonce（T2-01，由 checkout_token 自动生成）
|
||
# 3. Portal token v2 带 jti，支持撤销（T2-04）
|
||
# 4. 附件上传校验 magic bytes + MIME（T3-01）
|
||
# 5. Alipay notify body 限制 64KB（T3-02）
|
||
# 6. 物理删除订单必须带 actor/reason，自动写 deletion audit（T3-03）
|
||
# 7. schema_migrations 版本化迁移（T3-04，旧库自动升级）
|
||
# 8. LLM provider 生产环境必须配置（GAOKAO_LLM_PROVIDER=none 在 prod 会 fail-closed）
|