CI Bot
9c6c477f55
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 2m22s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 2m24s
CI/CD Pipeline / Integration Tests (pull_request) Failing after 37s
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 4m3s
CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped
CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
P0 关键修复: - P0-1: 注册接口添加 RateLimitMiddleware 限流保护 - P0-3: /metrics 端点添加 JWT 认证（移除匿名访问） - P0-4: 修复 Celery 任务名冲突（generation_task vs generate_video） - P1-5: JWT logout token 黑名单机制 P1 修复: - P1-1: forgot_password 硬编码 localhost → 使用 settings.APP_BASE_URL - P1-2: generation.py 直接创建 DB 连接 → 使用依赖注入 - P1-6: Image.open() 未关闭 → 统一使用 with 语句 - P1-7: 订阅续费事务修复 P2 代码质量: - P2-1: 修复 EditingMode 枚举重复定义 → 统一引用 shared 包 - P2-2: 修复 SMTP_FRON_NAME → SMTP_FROM_NAME 拼写 - P2-3: UserModel subscription_quota 类型统一为 float - P2-4: .env.production DATABASE_MAX_OVERFLOW 30 → 10 - 清理 15 处 except:pass（保留 2 处有注释说明的） - 禁用 SVG 上传（XSS 风险） - 删除 decode_token_unsafe() 不安全函数 - 简化 /ready 端点 - 删除 8 处死代码、10 个空文件/模块 - 合并 3 对 100% 重复函数 - 对齐 6 个废弃环境变量 v2 修复（代码审查后）: - 修复密码重置路由路径: /password/forgot → /forgot-password, /password/reset → /reset-password（与前端 API 对齐） - 合并 _check_project_access: asset_libraries.py 和 edit_plans.py 中的重复函数统一到 _helpers.py（含空字符串守卫 + 中文错误信息） - 顺手修复: HTTPException 统一从 fastapi 导入（替换 starlette 导入） - OSS_ENDPOINT 拼写修复拆分为单独 PR，本 PR 不包含
61 lines
2.2 KiB
Bash
Executable File
61 lines
2.2 KiB
Bash
Executable File
# 小虾 SaaS 环境变量配置
|
||
|
||
# ==================== 应用配置 ====================
|
||
APP_NAME=小虾 SaaS
|
||
APP_BASE_URL=http://localhost:3000
|
||
APP_ENV=development
|
||
|
||
# ==================== 数据库配置 ====================
|
||
DATABASE_URL=postgresql://xiaoxia_user:your_password@localhost:5432/xiaoxia_saas
|
||
|
||
# 开发环境：使用内存数据库（不需要 PostgreSQL）
|
||
USE_IN_MEMORY_DB=true
|
||
|
||
# 生产环境：使用 PostgreSQL
|
||
# USE_IN_MEMORY_DB=false
|
||
|
||
# ==================== Redis 配置 ====================
|
||
REDIS_URL=redis://localhost:6379/0
|
||
|
||
# ==================== JWT 配置 ====================
|
||
JWT_SECRET_KEY=your-super-secret-key-change-this-in-production-min-32-chars
|
||
JWT_ALGORITHM=HS256
|
||
JWT_ACCESS_TOKEN_EXPIRE_MINUTES=30
|
||
JWT_REFRESH_TOKEN_EXPIRE_DAYS=30
|
||
|
||
# ==================== 邮件配置 ====================
|
||
SMTP_HOST=smtp.gmail.com
|
||
SMTP_PORT=587
|
||
SMTP_USER=your-email@gmail.com
|
||
SMTP_PASSWORD=your-app-specific-password
|
||
SMTP_FROM_EMAIL=noreply@xiaoxia-saas.com
|
||
SMTP_FROM_NAME=小虾 SaaS
|
||
|
||
# ==================== 环境配置 ====================
|
||
ENVIRONMENT=development
|
||
DEBUG=true
|
||
|
||
# ==================== CORS 配置 ====================
|
||
# 逗号分隔的域名列表（Settings 读取 CORS_ORIGINS_RAW）
|
||
CORS_ORIGINS_RAW=http://localhost:3000,http://localhost:5173
|
||
|
||
# ==================== 阿里云 OSS 配置 ====================
|
||
OSS_ENDPOINT=oss-cn-hangzhou.aliyuncs.com
|
||
OSS_ACCESS_KEY_ID=your-access-key-id
|
||
OSS_ACCESS_KEY_SECRET=your-access-key-secret
|
||
OSS_BUCKET_NAME=xiaoxia-autocut
|
||
|
||
# ==================== CosyVoice 语音合成配置 ====================
|
||
# 注意：base_url 只需写到 /api/v1，具体路径由代码拼接
|
||
# 模型: cosyvoice-v3-flash (推荐，支持系统音色，性价比高)
|
||
# cosyvoice-v3-plus (高质量，系统音色少)
|
||
# cosyvoice-v3.5-flash / cosyvoice-v3.5-plus (仅支持克隆/设计音色，无系统音色)
|
||
# 音色: v3系列系统音色带 _v3 后缀，如 longxiaochun_v3, longxiaoxia_v3, longanyang (无后缀)
|
||
# 注意：COSYVOICE_* 变量由 packages/shared/config.py 的 SharedSettings 读取
|
||
COSYVOICE_API_KEY=your-cosyvoice-api-key
|
||
COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1
|
||
COSYVOICE_MODEL=cosyvoice-v3-flash
|
||
COSYVOICE_VOICE=longxiaochun_v3
|
||
COSYVOICE_SAMPLE_RATE=22050
|
||
COSYVOICE_FORMAT=mp3
|