superidou
9501751792
三轮审查修复(60+ 项),相对远端 main(b536672)的关键变更:
- 安全: 数据面 SSRF 拨号防护(防 DNS rebinding)/上游凭据剥离/登录防枚举
与锁定态统一/可信代理(X-Forwarded-For)限流加固/会话版本失效机制/
撤销即时传播/弱密钥拒绝启动/脱敏字节级重写(保签名契约)
- 业务逻辑: 裸 body 上传 panic/bootstrap 审计管线卡死/定价通配符优先级/
全局工具可见性/调度器停机补跑/TOTP 挑战令牌消费顺序/熔断探针语义/
>4MB 响应 token 计量/管理员重置密码作废会话 等
- 前端: 新 logo(语枢 AI 网关主题)/Provider 凭据异常警示/删除入口/
后端错误消息透传/localStorage 敏感数据收敛
- 部署: CREDENTIAL_MASTER_KEY 持久化与弱值拒绝/Provider DELETE 接口/
nginx 安全头/worker 内存限制
- 新增迁移 000029(key_hash 索引)/000030(usage_daily 币种维度)
111 lines
3.9 KiB
Bash
111 lines
3.9 KiB
Bash
APP_ENV=local
|
|
HTTP_ADDR=:8080
|
|
HTTP_READ_HEADER_TIMEOUT=5s
|
|
HTTP_IDLE_TIMEOUT=120s
|
|
HTTP_SHUTDOWN_TIMEOUT=20s
|
|
HTTP_MAX_BODY_BYTES=33554432
|
|
|
|
DATABASE_URL=postgres://gateway:gateway@localhost:5432/gateway?sslmode=disable
|
|
DATABASE_MAX_CONNS=40
|
|
DATABASE_MIN_CONNS=4
|
|
|
|
REDIS_CRITICAL_URL=redis://localhost:6379/0
|
|
REDIS_CACHE_URL=redis://localhost:6380/0
|
|
|
|
AUTH_SESSION_TTL=12h
|
|
AUTH_TOTP_CHALLENGE_TTL=5m
|
|
LOGIN_MAX_FAILURES=5
|
|
LOGIN_LOCK_DURATION=15m
|
|
|
|
# 登录防爆破：按 IP 的滑动窗口限流（与上面的账号锁定叠加）。
|
|
# 单 IP 在窗口内最多 LOGIN_RATE_LIMIT_MAX 次登录尝试，超出返回 429。
|
|
LOGIN_RATE_LIMIT_MAX=30
|
|
LOGIN_RATE_LIMIT_WINDOW=5m
|
|
|
|
# 可信反向代理网段（逗号分隔 IP/CIDR）。仅当直连对端属于这些网段时才
|
|
# 采信 X-Forwarded-For 计算限流键；网关端口直接暴露时，攻击者伪造该头
|
|
# 即可旋转每 IP 限流键、绕过登录限流。默认信任环回 + RFC1918 + ULA
|
|
# （覆盖 compose 中与 nginx 同网段部署）；远程 nginx 请改为其出口 IP。
|
|
# TRUSTED_PROXIES=127.0.0.0/8,::1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fc00::/7
|
|
|
|
# Base64-encoded 32-byte AES-256 key. Generate with: openssl rand -base64 32
|
|
# 所有环境必填；已知弱默认值（如全零密钥）会被服务端拒绝启动。
|
|
CREDENTIAL_MASTER_KEY=
|
|
CREDENTIAL_KEK_VERSION=1
|
|
ALLOW_PRIVATE_PROVIDER_URLS=false
|
|
ALLOW_PRIVATE_TOOL_URLS=false
|
|
ALLOW_PRIVATE_WEBHOOK_URLS=false
|
|
PROVIDER_REFRESH_INTERVAL=5s
|
|
|
|
# Transitional bootstrap credential. It will be replaced by database-backed API keys.
|
|
# Disabled by default for security; it bypasses per-key rate limits and tenant
|
|
# isolation, so only enable it during migration with a strong random value.
|
|
GATEWAY_BOOTSTRAP_API_KEY_ENABLED=false
|
|
GATEWAY_BOOTSTRAP_API_KEY=
|
|
UPSTREAM_BASE_URL=https://api.openai.com
|
|
UPSTREAM_API_KEY=
|
|
UPSTREAM_FALLBACK_ENABLED=true
|
|
|
|
AUDIT_QUEUE_SIZE=4096
|
|
AUDIT_BATCH_SIZE=200
|
|
AUDIT_FLUSH_INTERVAL=1s
|
|
AUDIT_RETENTION=2160h
|
|
USAGE_RETENTION=17520h
|
|
# M9 Trace 保留时长（agent_traces/agent_trace_spans，由 maintenance worker 清理）。
|
|
TRACE_RETENTION=2160h
|
|
AUDIT_PARTITION_MONTHS_AHEAD=3
|
|
AUDIT_MAINTENANCE_INTERVAL=6h
|
|
|
|
# Keep the {outbox} hash tag so marker and Stream keys share a Redis Cluster slot.
|
|
OUTBOX_STREAM=gateway:{outbox}:events
|
|
OUTBOX_BATCH_SIZE=100
|
|
OUTBOX_POLL_INTERVAL=500ms
|
|
OUTBOX_LEASE=30s
|
|
OUTBOX_MAX_ATTEMPTS=10
|
|
OUTBOX_MAX_BACKOFF=5m
|
|
OUTBOX_STREAM_MAX_LENGTH=100000
|
|
OUTBOX_MARKER_TTL=720h
|
|
|
|
# Multi-instance immutable snapshot refresh. Admin writes also reload the local process immediately.
|
|
CONTENT_POLICY_REFRESH_INTERVAL=30s
|
|
PRICING_REFRESH_INTERVAL=30s
|
|
|
|
# Opt-in non-streaming JSON shadow traffic. A dedicated credential is mandatory;
|
|
# production client Authorization headers are never forwarded to the shadow.
|
|
SHADOW_BASE_URL=
|
|
SHADOW_API_KEY=
|
|
SHADOW_SAMPLE_RATE=0
|
|
SHADOW_TIMEOUT=20s
|
|
SHADOW_MAX_BODY_BYTES=2097152
|
|
SHADOW_MAX_CONCURRENT=16
|
|
|
|
# M8 对象存储（MinIO）。上传/下载全部经网关代理，MinIO 不暴露主机端口。
|
|
# 本地 compose 会自带一个 minio 服务；连远端 S3 时把 S3_ENDPOINT 指向它即可。
|
|
S3_ENDPOINT=http://minio:9000
|
|
S3_ACCESS_KEY_ID=gateway
|
|
S3_SECRET_ACCESS_KEY=gateway-secret
|
|
S3_BUCKET=gateway-files
|
|
S3_REGION=us-east-1
|
|
S3_USE_SSL=false
|
|
S3_MAX_FILE_BYTES=134217728
|
|
|
|
# M8 P2 向量化（本地 Ollama，默认 bge-m3）。设为 false 可整体关闭，知识库退回纯 FTS。
|
|
# EMBEDDING_DIM 必须与迁移 000024 的 vector(1024) 列一致。
|
|
EMBEDDINGS_ENABLED=true
|
|
OLLAMA_BASE_URL=http://ollama:11434
|
|
EMBEDDING_MODEL=bge-m3
|
|
EMBEDDING_DIM=1024
|
|
EMBEDDING_BATCH_SIZE=64
|
|
EMBEDDING_TIMEOUT=120s
|
|
|
|
# M8 P3 定时任务调度器。任务自身的执行 API Key 以主密钥加密存储。
|
|
SCHEDULER_GATEWAY_BASE_URL=http://gateway-api:8080
|
|
SCHEDULER_POLL_INTERVAL=5s
|
|
SCHEDULER_EXECUTION_TIMEOUT=5m
|
|
SCHEDULER_BATCH_SIZE=10
|
|
SCHEDULER_MAX_ATTEMPTS=3
|
|
|
|
# Used only by cmd/gateway-bootstrap; never commit the real value.
|
|
BOOTSTRAP_ADMIN_USERNAME=admin
|
|
BOOTSTRAP_ADMIN_PASSWORD=
|