2026-11-02 10:59:03 +08:00
|
|
|
|
# s-file 内网侧（file.transfer.location=1）本地联调配置
|
|
|
|
|
|
# 仅本机 docker 部署使用，密码与 JWT secret 不要带到生产
|
|
|
|
|
|
server:
|
|
|
|
|
|
port: 8080
|
|
|
|
|
|
|
|
|
|
|
|
spring:
|
|
|
|
|
|
application:
|
|
|
|
|
|
name: s-file
|
|
|
|
|
|
datasource:
|
|
|
|
|
|
url: jdbc:postgresql://pg-iw:5432/s_file
|
|
|
|
|
|
driver-class-name: org.postgresql.Driver
|
|
|
|
|
|
username: sfile
|
|
|
|
|
|
password: sfile_iw_2026
|
|
|
|
|
|
druid:
|
|
|
|
|
|
initial-size: 2
|
|
|
|
|
|
min-idle: 2
|
|
|
|
|
|
max-active: 10
|
|
|
|
|
|
validation-query: SELECT 1
|
|
|
|
|
|
redis:
|
|
|
|
|
|
host: redis-iw
|
|
|
|
|
|
port: 6379
|
|
|
|
|
|
timeout: 5000
|
|
|
|
|
|
lettuce:
|
|
|
|
|
|
pool:
|
|
|
|
|
|
max-active: 8
|
|
|
|
|
|
max-idle: 4
|
|
|
|
|
|
rabbitmq:
|
|
|
|
|
|
host: mq-iw
|
|
|
|
|
|
port: 5672
|
|
|
|
|
|
username: sfile
|
|
|
|
|
|
password: sfile_mq_iw_2026
|
|
|
|
|
|
servlet:
|
|
|
|
|
|
multipart:
|
|
|
|
|
|
max-file-size: 500MB
|
|
|
|
|
|
max-request-size: 500MB
|
|
|
|
|
|
main:
|
|
|
|
|
|
allow-bean-definition-overriding: true
|
|
|
|
|
|
|
|
|
|
|
|
mybatis-plus:
|
|
|
|
|
|
mapper-locations: classpath*:com/senmesh/**/mapper/*.xml
|
|
|
|
|
|
|
|
|
|
|
|
# 平台编码(init-data 中 uc_platform.platform_code=1)
|
|
|
|
|
|
system:
|
|
|
|
|
|
code: 1
|
|
|
|
|
|
|
|
|
|
|
|
# 发号器雪花 workerId：键为 compose 中固定的容器 IP
|
|
|
|
|
|
"[code.snowflake.workid.172.25.18.10]": 1
|
|
|
|
|
|
|
|
|
|
|
|
security:
|
|
|
|
|
|
jwt:
|
|
|
|
|
|
enable: true
|
|
|
|
|
|
secret: sfile-local-iw-secret-key-please-change-0123456789abcdef
|
|
|
|
|
|
expiration: 86400000
|
|
|
|
|
|
header: Authorization
|
|
|
|
|
|
ignoring: /error,/favicon.ico
|
|
|
|
|
|
login-page: /login
|
|
|
|
|
|
superior-only: false
|
|
|
|
|
|
use-local: true
|
|
|
|
|
|
allow-if-all-abstain-decisions: true
|
|
|
|
|
|
oauth2:
|
|
|
|
|
|
enable: false
|
|
|
|
|
|
not-logs: ""
|
|
|
|
|
|
anonymous: ""
|
|
|
|
|
|
|
|
|
|
|
|
# 新用户初始密码
|
|
|
|
|
|
user:
|
|
|
|
|
|
default:
|
|
|
|
|
|
password: Qaz123567!@#
|
|
|
|
|
|
|
|
|
|
|
|
file:
|
|
|
|
|
|
upload-dir: /data/upload
|
|
|
|
|
|
storage:
|
|
|
|
|
|
type: local
|
|
|
|
|
|
transfer:
|
|
|
|
|
|
# 内网侧
|
|
|
|
|
|
location: "1"
|
|
|
|
|
|
# send-dir 与外网侧 receive-dir 指向同一摆渡目录，反之亦然
|
|
|
|
|
|
send-dir: /data/transfer/send
|
|
|
|
|
|
receive-dir: /data/transfer/receive
|
|
|
|
|
|
unpack-risk-check: false
|
2026-11-03 22:42:06 +08:00
|
|
|
|
monitor:
|
|
|
|
|
|
# 单轮时间预算（秒），与 5 秒监听周期配套；个数不代表工作量，时间才代表
|
|
|
|
|
|
round-budget-seconds: 4
|
|
|
|
|
|
round-max-files: 500
|
|
|
|
|
|
# 包内单个文件超过该大小（MB）直接标 .error，避免整文件读进堆导致 OOM
|
|
|
|
|
|
max-unpack-size-mb: 512
|
|
|
|
|
|
# 校验不过或解包异常且文件静止超过该秒数即判坏包，标 .error 停止重试
|
|
|
|
|
|
stale-after-seconds: 300
|
2026-11-02 10:59:03 +08:00
|
|
|
|
|
|
|
|
|
|
dify:
|
|
|
|
|
|
risk:
|
|
|
|
|
|
rule:
|
|
|
|
|
|
api-key: test-rule-key
|
|
|
|
|
|
scan:
|
|
|
|
|
|
api-key: test-scan-key
|
|
|
|
|
|
|
|
|
|
|
|
# MeshSafe 文件安全检测：复用本机已部署的 meshsafe-nginx(44380)
|
|
|
|
|
|
# 凭证需存在于 MeshSafe .env 的 MESHSAFE_API_CLIENTS 白名单中
|
|
|
|
|
|
meshsafe:
|
|
|
|
|
|
enabled: true
|
|
|
|
|
|
base-url: http://host.docker.internal:44380
|
|
|
|
|
|
client-id: test-client
|
|
|
|
|
|
secret: test-secret
|
|
|
|
|
|
channel: sfile-iw
|
|
|
|
|
|
timeout-seconds: 120
|
|
|
|
|
|
fail-open: true
|
|
|
|
|
|
poll-timeout-minutes: 60
|
|
|
|
|
|
review-sync-to-meshsafe: true
|
|
|
|
|
|
poll:
|
|
|
|
|
|
cron: "0/10 * * * * ?"
|
|
|
|
|
|
|
|
|
|
|
|
rabbitmq:
|
|
|
|
|
|
custom:
|
|
|
|
|
|
topic-exchange-name: s-file-iw-topic
|
|
|
|
|
|
delayed-exchange-name: s-file-iw-delayed
|
|
|
|
|
|
broadcast-id: s-file-iw-broadcast
|
|
|
|
|
|
|
|
|
|
|
|
swagger:
|
|
|
|
|
|
enable: false
|
|
|
|
|
|
|
|
|
|
|
|
logging:
|
|
|
|
|
|
level:
|
|
|
|
|
|
com.senmesh: info
|
