From 8fc24b5d366b300b1b78d90b92997167ed1dd522 Mon Sep 17 00:00:00 2001 From: wangjia <809946525@qq.com> Date: Fri, 19 Jun 2026 14:04:06 +0800 Subject: [PATCH] =?UTF-8?q?chore(deploy):=20=E7=A7=BB=E9=99=A4=E9=80=80?= =?UTF-8?q?=E5=BD=B9=E7=9A=84=20ed25519/HMAC=20license=20=E6=AD=BB?= =?UTF-8?q?=E9=85=8D=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 兑换券改造后运行时已不读签名相关 env，清理 production.env.template 的 LICENSE_HMAC_SECRET / LICENSE_ED25519_* 三项，并从 render-env.sh 的 SECRET_KEYS 去掉对应密钥（渲染 env 时不再白拉 Bitwarden）。 Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01Y2Wdwo7SmgBJU37cBrkhPK --- deploy/production.env.template | 3 --- deploy/render-env.sh | 2 +- 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/deploy/production.env.template b/deploy/production.env.template index d5bc9b2..0ee6a56 100644 --- a/deploy/production.env.template +++ b/deploy/production.env.template @@ -5,9 +5,6 @@ DATABASE_DSN=root:CHANGE_ME_DB_PASS@tcp(127.0.0.1:3306)/jiu_db?charset=utf8mb4&p JWT_SECRET=CHANGE_ME_RANDOM_32CHARS JWT_ACCESS_EXPIRE_MIN=60 JWT_REFRESH_EXPIRE_H=168 -LICENSE_HMAC_SECRET=CHANGE_ME_RANDOM_32CHARS -LICENSE_ED25519_PUBLIC_KEY=zFkRV0E+oMjHbixiBamf2ZAq+n7En2V7EJRIurgtVxo= -LICENSE_ED25519_PRIVATE_KEY=CHANGE_ME_ED25519_PRIVATE_FROM_BITWARDEN STORAGE_UPLOAD_DIR=/opt/jiu/images STORAGE_BASE_URL=https://jiu.51yanmei.com/images STORAGE_PUBLIC_URL=https://jiu.51yanmei.com diff --git a/deploy/render-env.sh b/deploy/render-env.sh index b7d5599..3bf9f23 100755 --- a/deploy/render-env.sh +++ b/deploy/render-env.sh @@ -16,7 +16,7 @@ set -euo pipefail # ---- 可配置项 ---- RBW="${RBW_BIN:-/opt/homebrew/bin/rbw}" BW_ITEM="${JIU_BW_ITEM:-jiu db password}" # 存放 jiu 密钥字段的 Bitwarden 条目 -SECRET_KEYS="DATABASE_DSN JWT_SECRET LICENSE_HMAC_SECRET LICENSE_ED25519_PRIVATE_KEY DB_PASSWORD" +SECRET_KEYS="DATABASE_DSN JWT_SECRET DB_PASSWORD" EC2_HOST="${EC2_HOST:-18.136.60.128}" EC2_USER="${EC2_USER:-ec2-user}"