feat: 一键部署——配置内置默认值，去掉示例复制与环境变量

目标：git clone 后 docker compose up -d 直接可用，无需任何手工准备。变更： - config.example/ → config/，config.example.yaml → config.yaml 不再需要 cp -r 与逐份修改 - 删除 .env / .env.example，值全部内置到 docker-compose.yml （GoFrame 不展开配置文件中的 ${VAR}，环境变量方案在 Go 侧不可用） - 配置文件里的 ${VAR} 全部替换为字面默认值 - schema/04-users.sh 与 05-reset-passwords.sh 改为脚本内字面口令，不再读取环境变量 - 新增 schema/13-seed-flow-package.sql 占位文件，说明套餐表为空的原因与补齐方式 - .gitignore 不再排除 config/ 与 .env（已无 .env） - README 改为「一键启动」+「上线前必改」两张表已验证：docker compose config 通过；compose 口令、各配置文件 DSN、初始化脚本三处口令哈希一致；库名与 schema 中一致。
2026-10-29 09:17:26 +08:00
parent 0bfc0ebe80
commit 5ddad0c5e5
18 changed files with 252 additions and 299 deletions
@@ -0,0 +1,263 @@
+# ============================================================
+# iotlcm-app-server 配置示例
+#
+#   cp config.example.yaml config.yaml
+#
+# 小程序 / H5 端的后端服务。
+# ============================================================
+
+system:
+  name: "IotLCM"
+  version: "1.0"
+  description: "IotLCM App Server"
+  gfmode: "prod"
+  upload:
+    local:
+      path: "resource/upload"
+
+server:
+  address: ":8010"
+  openapiPath: "/api.json"
+  swaggerPath: "/swagger"
+  indexFiles: ["index.html", "index.htm"]
+  indexFolder: false
+  serverRoot: "resource/public"
+  searchPaths: ["/resource/public"]
+  fileServerEnabled: true
+  initLoadMemoryDB: false
+  maxHeaderBytes: "20KB"
+  clientMaxBodySize: "200MB"
+  readTimeout: "20m"
+  writeTimeout: "20m"
+  allowedDomains: []
+  enabledDBOperationLog: false
+
+logger:
+  path: "/app/resource/log/server"
+  file: "{Y-m-d-H}.log"
+  prefix: ""
+  level: "info"
+  timeFormat: "2006-01-02T15:04:05"
+  ctxKeys: []
+  header: true
+  stdout: true
+  rotateSize: 0
+  rotateExpire: 0
+  rotateBackupLimit: 0
+  rotateBackupExpire: 0
+  rotateBackupCompress: 0
+  rotateCheckInterval: "1h"
+  stdoutColorDisabled: false
+  writerColorEnable: false
+
+# ---------- JWT ----------
+# 必改：必须与 admin-svr、openapi 完全一致。
+jwt:
+  signingKey: "1f8b3c5d7e9a2b4c6d8e0f1a3b5c7d9e1f8b3c5d7e9a2b4c6d8e0f1a3b5c7d9e"
+  expiresTime: "7d"
+  bufferTime: "1d"
+  issuer: "iotlcm"
+
+captcha:
+  keyLong: 6
+  imgWidth: 240
+  imgHeight: 80
+  openCaptcha: 0
+  openCaptchaTimeout: 3600
+
+# ---------- 注册验证码：走短信服务 ----------
+register:
+  sms:
+    url: "http://iotlcm-sms:11190/api/v1/sms/send"
+    method: "POST"
+    headers: {}
+    bodyTemplate: '{"config":{"scene":"{scene}"},"params":{"phoneNumber":"{contact}","msgContent":"{code}"}}'
+    successStatus: 200
+
+# ---------- 数据库 ----------
+database:
+  # 旧平台库（历史数据对接）。不使用时空 link 即可。
+  legacyCard:
+    link: ""
+    debug: false
+    maxOpen: 5
+    maxIdle: 2
+  logger:
+    path: "/app/resource/log/server/sql"
+    level: "all"
+    stdout: true
+  default:
+    # 必改：连接串
+    link: "mysql:u_iotlcm:Iotlcm2026Default@tcp(mysql:3306)/db_iotlcm?charset=utf8mb4&parseTime=True&loc=Asia%2FShanghai"
+    debug: false
+    charset: "utf8mb4"
+    dryRun: false
+    maxIdle: 30
+    maxOpen: 100
+    maxLifetime: 120
+  memorydb:
+    link: "sqlite::@file(:memory:)"
+    debug: false
+    maxIdle: 1
+    maxOpen: 1
+    maxLifetime: 30
+
+cache:
+  adapter: "redis"
+  fileDir: "/app/resource/cache"
+
+# ---------- Redis ----------
+redis:
+  default:
+    mode: "single"
+    sentinelMasterName: ""
+    address: "redis:6379"
+    db: 0
+    pass: "Iotlcm2026Default"
+    minIdle: 5
+    maxIdle: 30
+    maxActive: 5000
+    idleTimeout: "60s"
+    ClientName: "AppServerCache"
+
+# ---------- RabbitMQ ----------
+rabbitmq:
+  enabled: true
+  dsn: "amqp://iotlcm:Iotlcm2026Default@rabbitmq:5672/"
+
+# ---------- 异步业务 ----------
+workerBatchAsync:
+  enabled: true
+  exchange: "iotlcm.batch"
+  queueName: "iotlcm.batch.execute"
+  failOnPublish: false
+
+appBusinessAsync:
+  enabled: true
+  exchange: "iotlcm.app"
+  queueName: "iotlcm.app.business"
+  failOnPublish: false
+
+# ---------- 支付（可选） ----------
+# 不使用支付功能时把 enabled 全部改 false。
+payment:
+  balanceRecharge:
+    enabled: false
+  mock:
+    enabled: false
+  wechat:
+    enabled: false
+    envFile: ""
+    apiBase: "https://api.mch.weixin.qq.com"
+    mchId: ""
+    mchSerialNo: ""
+    apiV3Key: ""
+    # 微信支付证书需单独放入 data/certs 目录，不随仓库分发
+    privateKeyPath: "resource/certs/wechatpay_apiclient_key.pem"
+    notifyUrl: "https://your-domain.example.com/app/api/v1/app/payment/wechat/notify"
+    notifyBaseUrl: "https://your-domain.example.com/app"
+    refundNotifyUrl: "https://your-domain.example.com/app/api/v1/app/payment/wechat/refund-notify"
+    timeoutMinutes: 5
+    platformPublicKeyId: ""
+    platformPublicKeyPath: "resource/certs/wechatpay_platform_public_key.pem"
+    h5:
+      enabled: false
+      appId: ""
+      appName: ""
+      appUrl: "https://your-domain.example.com/app"
+      payerClientIp: ""
+    mini:
+      enabled: false
+      appId: ""
+      appSecret: ""
+
+# ---------- 卡号识别（拍照查卡） ----------
+# 走 OpenAI 兼容接口的视觉模型。不需要该功能时 enabled 改 false。
+appCardRecognition:
+  enabled: false
+  provider: "openai-compatible"
+  baseUrl: ""
+  endpoint: ""
+  model: ""
+  apiKey: ""
+  timeout: "25s"
+  maxImageBytes: 8388608
+  maxTokens: 256
+  rateLimit:
+    enabled: true
+    count: 20
+    period: "1m"
+
+# 微信订阅消息模板
+appWarning:
+  wechatSubscribeTemplateId: ""
+
+# ---------- TDengine（流量历史） ----------
+tsdb:
+  database: "TdEngine"
+  tdengine:
+    type: "taosWS"
+    dsn: ":@ws(:)/"
+    dbName: ""
+    dailyDbName: ""
+    monthlyDbName: ""
+    maxOpenConns: 100
+    maxIdleConns: 10
+
+# ---------- 免登录白名单 ----------
+router:
+  exceptLogin:
+    - /api/v1/auth/captcha
+    - /api/v1/auth/side-captcha
+    - /api/v1/auth/check-side-captcha
+    - /api/v1/auth/sms
+    - /api/v1/auth/register
+    - /api/v1/auth/login
+    - /api/v1/auth/wechat-login
+    - /api/v1/auth/wechat-bind-phone
+    - /api/v1/auth/forgot-password
+    - /api/v1/card/public-query
+    - /api/v1/card/recognize
+    - /api/v1/card/public-package-detail
+    - /api/v1/open/diagnosis/info
+    - /api/v1/open/diagnosis/flow
+    - /api/v1/payment/wechat/notify
+    - /api/v1/payment/wechat/refund-notify
+    - /api/v1/app/auth/captcha
+    - /api/v1/app/auth/side-captcha
+    - /api/v1/app/auth/check-side-captcha
+    - /api/v1/app/auth/sms
+    - /api/v1/app/auth/register
+    - /api/v1/app/auth/login
+    - /api/v1/app/auth/wechat-login
+    - /api/v1/app/auth/wechat-bind-phone
+    - /api/v1/app/auth/forgot-password
+    - /api/v1/app/card/public-query
+    - /api/v1/app/card/recognize
+    - /api/v1/app/card/public-package-detail
+    - /api/v1/app/open/diagnosis/info
+    - /api/v1/app/open/diagnosis/flow
+    - /api/v1/app/payment/wechat/notify
+    - /api/v1/app/payment/wechat/refund-notify
+    - /openapi/v3/query/token
+
+# ---------- 上游服务地址 ----------
+upstream:
+  # 控制台智能诊断内部凭据，须与 admin-svr 一致
+  appDiagnosisToken: "iotlcm_diagnosis_2026"
+  provider: "onelink_mock"
+  default:
+    clientName: "http://upstream-proxy:8510"
+    timeout: "10s"
+  gateway:
+    clientName: "http://upstream-chan:8110"
+    timeout: "10s"
+  # 移动 OneLink 挡板（联调用）。对接真实运营商时 enabled 改 false。
+  onelinkMock:
+    enabled: false
+    baseUrl: "http://onelink-mock:8080/v5"
+    appid: ""
+    password: ""
+    timeout: "10s"
+    tokenTTL: 3600
+    accounts: []