feat: add admin accounts and image templates

This commit is contained in:
inman
2026-07-03 11:25:25 +08:00
parent d98e58adfa
commit c3ea9f0eb1
61 changed files with 7016 additions and 199 deletions

View File

@@ -15,20 +15,42 @@ ZHINIAN_PUBLIC_BASE_URL=http://127.0.0.1:3000
# Production requires login by default. Set ZHINIAN_AUTH_REQUIRED=0 only for trusted local development.
ZHINIAN_AUTH_REQUIRED=auto
ZHINIAN_AUTH_BASE_URL=https://<gateway-domain>/auth
ZHINIAN_AUTH_CLIENT_ID=customPC
ZHINIAN_AUTH_CLIENT_SECRET=
ZHINIAN_AUTH_CLIENT_ID=app
ZHINIAN_AUTH_CLIENT_SECRET=app
ZHINIAN_AUTH_SCOPE=server
ZHINIAN_AUTH_ISSUER=https://pig4cloud.com
ZHINIAN_AUTH_PASSWORD_ENC_KEY=
ZHINIAN_AUTH_PASSWORD_ENC_KEY=thanks,pig4cloud
ZHINIAN_AUTH_SESSION_SECRET=change-me-to-a-long-random-secret
# Comma-separated authorities that can access logs/settings/accounts.
ZHINIAN_ADMIN_AUTHORITIES=ROLE_ADMIN,sys_user_view,sys_log_view,sys_config_view
# Comma-separated usernames that can access logs/settings/accounts. Defaults include ceshiop.
ZHINIAN_ADMIN_USERS=ceshiop
# Optional overrides when endpoints do not follow AUTH_BASE defaults.
ZHINIAN_AUTH_AUTHORIZE_URL=
ZHINIAN_AUTH_TOKEN_URL=
ZHINIAN_AUTH_JWKS_URL=
ZHINIAN_AUTH_LOGOUT_URL=
# Organization/member management API from basic-capability-services-biz.
# Base URL should include the gateway/service prefix before /organization...
ZHINIAN_ORG_API_BASE_URL=
# Optional fallback token. Account management forwards the current logged-in access_token by default.
ZHINIAN_ORG_API_TOKEN=
ZHINIAN_STAFF_API_BASE_URL=
# Optional fallback token. If empty, uses the current logged-in access_token or ZHINIAN_ORG_API_TOKEN.
ZHINIAN_STAFF_API_TOKEN=
ZHINIAN_ORG_TENANT_ID=
ZHINIAN_ORG_ID=
# Optional path overrides when the gateway exposes organization APIs through wrapper routes.
ZHINIAN_ORG_LIST_PATH=
ZHINIAN_ORG_GROUP_LIST_PATH=
ZHINIAN_ORG_ROLE_LIST_PATH=
# Defaults to /adminOrganization/organizationMember/organizationMemberList through hotelStaff.
ZHINIAN_ORG_MEMBER_LIST_PATH=
# Public API v1 and worker task management.
# Format: clientId:key,anotherClient:anotherKey
# Format: accountId:key,anotherAccount:anotherKey.
# Jobs and assets are partitioned by accountId as ownerId `api:<accountId>`.
ZHINIAN_API_KEYS=demo-agent:change-me-public-api-key
ZHINIAN_INTERNAL_WORKER_TOKEN=change-me-worker-token
ZHINIAN_WEBHOOK_SECRET=