PolyHermes/docker-compose.prod.env.example at main · WrBug/PolyHermes · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
# PolyHermes 生产环境配置文件示例
# PolyHermes Production Environment Configuration File Example
#
# 使用方法 / Usage:
# 1. 复制此文件为 .env: cp docker-compose.prod.env.example .env
#    Copy this file to .env: cp docker-compose.prod.env.example .env
# 2. 修改以下配置项（特别是安全相关的密钥）
#    Modify the following configuration items (especially security-related keys)
# 3. 运行: docker-compose -f docker-compose.prod.yml up -d
#    Run: docker-compose -f docker-compose.prod.yml up -d

# ============================================
# 数据库配置 / Database Configuration
# ============================================
# 数据库连接 URL / Database connection URL
DB_URL=jdbc:mysql://mysql:3306/polyhermes?useSSL=false&serverTimezone=UTC&characterEncoding=utf8&allowPublicKeyRetrieval=true
# 数据库用户名 / Database username
DB_USERNAME=root
# 数据库密码 / Database password
DB_PASSWORD=your_database_password_here

# ============================================
# Spring Profile
# ============================================
# Spring 环境配置（dev/prod）/ Spring environment configuration (dev/prod)
SPRING_PROFILES_ACTIVE=prod

# ============================================
# 服务器端口 / Server Port
# ============================================
# 对外暴露的端口（默认 80）/ External port (default 80)
SERVER_PORT=80

# ============================================
# MySQL 端口 / MySQL Port
# ============================================
# 可选，用于外部连接，默认 3307 避免与本地 MySQL 冲突
# Optional, for external connections, default 3307 to avoid conflicts with local MySQL
MYSQL_PORT=3307

# ============================================
# 安全配置 / Security Configuration
# ============================================
# ⚠️ 必须修改，不能使用默认值 / ⚠️ Must be modified, cannot use default values
#
# JWT 密钥，用于生成和验证 JWT Token
# JWT secret key, used for generating and validating JWT tokens
# 生成方式 / Generate: openssl rand -hex 64
JWT_SECRET=change-me-in-production
#
# 管理员密码重置密钥
# Admin password reset key
# 生成方式 / Generate: openssl rand -hex 32
ADMIN_RESET_PASSWORD_KEY=change-me-in-production
#
# 加密密钥，用于加密存储私钥和 API Key
# Encryption key, used for encrypting stored private keys and API keys
# 生成方式 / Generate: openssl rand -hex 32
CRYPTO_SECRET_KEY=change-me-in-production

# ============================================
# 日志级别配置 / Logging Level Configuration
# ============================================
# 可选配置，如果不设置则使用默认值 / Optional configuration, uses default values if not set
#
# Root 日志级别，控制所有第三方库的日志输出
# Root logging level, controls log output for all third-party libraries
# 默认值 / Default: WARN
# 可选值 / Options: TRACE, DEBUG, INFO, WARN, ERROR, OFF
# LOG_LEVEL_ROOT=WARN
#
# 应用日志级别，控制应用代码的日志输出
# Application logging level, controls log output for application code
# 默认值 / Default: INFO
# 可选值 / Options: TRACE, DEBUG, INFO, WARN, ERROR, OFF
# LOG_LEVEL_APP=INFO