wangxuming/NianAIGC
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改配置编辑不了的问题

Browse Source
This commit is contained in:
andy
2026-08-18 12:41:39 +08:00
parent 22b504e53e
commit 2a2f78c81e
42 changed files with 1082 additions and 178 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/check-ack-manifests.mjs
View File

@@ -39,7 +39,8 @@ assert(goApi.includes("name: zhinian-go-runtime"), "Go API must consume the Go r
assert(goApi.includes("name: zhinian-go-auth"), "Go API must own the browser session signing Secret");
assert(!goApi.includes("name: zhinian-web-auth"), "Go API must not reference the removed Web auth Secret");
assert(goApi.includes("name: zhinian-go-bootstrap"), "Go API must receive bootstrap administrator credentials");
assert(goApi.includes("name: zhinian-go-providers"), "Go API must receive real provider credentials");
assert(goApi.includes("name: zhinian-go-providers"), "Go API must accept provider environment fallbacks");
assert(goApi.includes("optional: true"), "Provider fallback Secret must be optional when settings are stored in PostgreSQL");
assert(!goApi.includes("rds-ca"), "Go API must not mount an RDS CA when PostgreSQL TLS is disabled");
assert(!goApi.includes("/etc/zhinian/rds"), "Go API must not retain the removed RDS CA path");
assert(!/\bTLS\b/i.test(goApi), "Go API manifest must not retain PostgreSQL TLS configuration");
@@ -48,7 +49,7 @@ assert(!goApi.includes("DATABASE_CA_CERT_PATH"), "Go API must not receive a data
const secrets = read("secrets.example.yaml");
assert(secrets.includes("name: zhinian-go-auth"), "Example secrets must name Go as the session Secret owner");
assert(secrets.includes("name: zhinian-go-providers"), "Example secrets must define real provider credentials");
assert(secrets.includes("name: zhinian-go-providers"), "Example secrets must define optional provider environment fallbacks");
assert(!secrets.includes("name: zhinian-web-auth"), "Example secrets must not retain the removed Web auth Secret");
assert(!secrets.includes("zhinian-rds-ca"), "Example secrets must not define the removed RDS CA Secret");
assert(!secrets.includes("sslrootcert"), "Example DATABASE_URL values must not reference an RDS CA");

2
scripts/deploy.sh
View File

@@ -23,7 +23,7 @@ if command -v node >/dev/null 2>&1; then
elif [ ! -f .env.local ]; then
cp .env.example .env.local
echo "[deploy] Created .env.local from .env.example"
echo "[deploy] Configure DATABASE_URL and real provider credentials in .env.local before production use, or use the temporary ZHINIAN_ALLOW_UNCONFIGURED_PROVIDERS bootstrap flag."
echo "[deploy] Configure DATABASE_URL in .env.local; provider credentials may be added later from the super-administrator settings page."
fi
if ! grep -q '^ZHINIAN_INTERNAL_WORKER_TOKEN=' .env.local || grep -q '^ZHINIAN_INTERNAL_WORKER_TOKEN=$\|^ZHINIAN_INTERNAL_WORKER_TOKEN=change-me-worker-token$' .env.local; then

2
scripts/ensure-deploy-env.mjs
View File

@@ -15,7 +15,7 @@ if (!existsSync(envPath)) {
}
copyFileSync(examplePath, envPath);
console.log("[deploy] Created .env.local from .env.example");
console.log("[deploy] Configure DATABASE_URL and real provider credentials in .env.local before production use, or use the temporary ZHINIAN_ALLOW_UNCONFIGURED_PROVIDERS bootstrap flag.");
console.log("[deploy] Configure DATABASE_URL in .env.local; provider credentials may be added later from the super-administrator settings page.");
}
let envText = readFileSync(envPath, "utf8");

1
scripts/migrate-postgres.mjs
View File

@@ -163,6 +163,7 @@ function applicationRoleTablePrivileges() {
["platform_organizations", "SELECT, INSERT, UPDATE, DELETE"],
["platform_users", "SELECT, INSERT, UPDATE, DELETE"],
["platform_account_migrations", "SELECT, INSERT, UPDATE"],
["platform_runtime_settings", "SELECT, INSERT, UPDATE"],
["billing_price_rules", "SELECT, INSERT, UPDATE"],
["billing_wallets", "SELECT, INSERT, UPDATE"],
["billing_ledger", "SELECT, INSERT"]