feat: rebuild email platform and operations console
This commit is contained in:
@@ -0,0 +1,90 @@
|
||||
# 开发环境配置 - SQLite 数据库
|
||||
[server]
|
||||
host = "0.0.0.0"
|
||||
port = 3000
|
||||
request_timeout_seconds = 30
|
||||
max_body_bytes = 1048576
|
||||
concurrency_limit = 256
|
||||
rate_limit_per_minute = 120
|
||||
cors_origins = ["http://localhost:3000", "http://localhost:5173"]
|
||||
|
||||
[database]
|
||||
# 数据库类型: mysql, sqlite, postgresql
|
||||
database_type = "sqlite"
|
||||
|
||||
# MySQL/PostgreSQL 配置
|
||||
# host = "localhost"
|
||||
# port = 3306
|
||||
# user = "root"
|
||||
# password = "root"
|
||||
# database = "web_template"
|
||||
|
||||
# SQLite 配置（当 database_type = "sqlite" 时使用）
|
||||
path = "data/app.db"
|
||||
|
||||
# 连接池配置
|
||||
max_connections = 10
|
||||
|
||||
[auth]
|
||||
jwt_secret = "9f7d3c7a564dfkopp26smb2644nqzfvbsao9f7d3c7a1a8f28544b5e6d7a"
|
||||
# 分开配置两个 token 的过期时间
|
||||
access_token_expiration_minutes = 15 # access_token 15 分钟
|
||||
refresh_token_expiration_days = 7 # refresh_token 7 天
|
||||
registration_open = true # 开发环境开放注册
|
||||
invite_code = "" # 空=不校验邀请码
|
||||
bootstrap_admin_email = "" # 本地需要时填写管理员邮箱
|
||||
|
||||
[redis]
|
||||
enabled = false
|
||||
host = "localhost"
|
||||
port = 6379
|
||||
password = "" # 可选
|
||||
db = 0
|
||||
|
||||
[email]
|
||||
enabled = false
|
||||
smtp_host = "smtp.example.com"
|
||||
smtp_port = 587
|
||||
smtp_username = ""
|
||||
smtp_password = ""
|
||||
from_email = "noreply@example.com"
|
||||
from_name = "Email Unlimited"
|
||||
verification_code_ttl_seconds = 600
|
||||
queue_enabled = false
|
||||
worker_pool_size = 2
|
||||
|
||||
# SMTP 收信服务（临时邮箱核心）
|
||||
[smtp]
|
||||
enabled = true
|
||||
listen_host = "0.0.0.0"
|
||||
listen_port = 25
|
||||
hostname = "mail.shenjianl.cn"
|
||||
local_domains = ["mail.shenjianl.cn", "shenjianl.cn"]
|
||||
max_message_bytes = 1048576
|
||||
connection_timeout_seconds = 30
|
||||
max_recipients_per_message = 1
|
||||
ip_connect_per_min = 20
|
||||
domain_per_min = 10
|
||||
rcpt_per_min = 10
|
||||
require_ptr = false # 开发环境关闭 PTR（本地无 PTR 记录）
|
||||
email_ttl_days = 7
|
||||
mailbox_ttl_hours = 24
|
||||
mailbox_max_quota_bytes = 10485760
|
||||
address_local_part_len = 10
|
||||
sender_per_min = 10
|
||||
pair_per_10min = 5
|
||||
greylist_enabled = false # 开发环境关闭灰名单（避免本地测试被挡）
|
||||
greylist_retry_delay_seconds = 300
|
||||
greylist_entry_ttl_seconds = 86400
|
||||
quarantine_threshold = 60
|
||||
score_weight_subject_code = 30
|
||||
score_weight_spf_fail = 20
|
||||
score_weight_ptr_missing = 15
|
||||
score_weight_bad_attachment = 25
|
||||
|
||||
[abuse]
|
||||
domain_emails_threshold_10min = 50
|
||||
ip_connects_threshold_1min = 60
|
||||
auto_block_ttl_seconds = 3600
|
||||
honeypot_addresses = ["admin@mail.shenjianl.cn", "noreply@mail.shenjianl.cn", "test@mail.shenjianl.cn"]
|
||||
alert_webhook_url = ""
|
||||
@@ -0,0 +1,91 @@
|
||||
# 生产环境配置 - PostgreSQL 数据库
|
||||
|
||||
[server]
|
||||
host = "0.0.0.0" # 服务器监听地址（0.0.0.0=允许所有网络访问）
|
||||
port = 3000 # 服务器监听端口（确保防火墙已开放）
|
||||
request_timeout_seconds = 30
|
||||
max_body_bytes = 1048576
|
||||
concurrency_limit = 256
|
||||
rate_limit_per_minute = 120
|
||||
cors_origins = ["https://example.com"]
|
||||
|
||||
[database]
|
||||
database_type = "postgresql" # 数据库类型：sqlite/mysql/postgresql
|
||||
host = "localhost" # PostgreSQL 服务器地址
|
||||
port = 5432 # PostgreSQL 端口（默认 5432）
|
||||
user = "postgres" # PostgreSQL 用户名（请创建专用用户）
|
||||
password = "postgres" # PostgreSQL 密码（请修改为强密码）
|
||||
database = "web_template" # 数据库名称（不存在会自动创建）
|
||||
max_connections = 20 # 最大连接数（生产环境建议 20-100）
|
||||
|
||||
[auth]
|
||||
jwt_secret = "CHANGE_ME_WITH_AT_LEAST_32_RANDOM_CHARACTERS" # 必须通过部署配置替换
|
||||
access_token_expiration_minutes = 15 # Access Token 过期时间（分钟）
|
||||
refresh_token_expiration_days = 7 # Refresh Token 过期时间（天）
|
||||
registration_open = true # 生产建议改为 false 或配合邀请码
|
||||
invite_code = "" # 设置非空值则注册需邀请码（如 "shenjianl-2026"）
|
||||
bootstrap_admin_email = "" # 首次部署可配置管理员邮箱，并同时设置强邀请码
|
||||
|
||||
[redis]
|
||||
enabled = true
|
||||
host = "localhost" # Redis 服务器地址
|
||||
port = 6379 # Redis 端口（默认 6379）
|
||||
password = "" # Redis 密码（强烈建议设置密码）
|
||||
db = 0 # Redis 数据库编号（0-15）
|
||||
|
||||
[email]
|
||||
enabled = false
|
||||
smtp_host = "smtp.example.com"
|
||||
smtp_port = 587
|
||||
smtp_username = ""
|
||||
smtp_password = ""
|
||||
from_email = "noreply@example.com"
|
||||
from_name = "Email Unlimited"
|
||||
verification_code_ttl_seconds = 600
|
||||
queue_enabled = true
|
||||
worker_pool_size = 4
|
||||
|
||||
# SMTP 收信服务（临时邮箱核心）
|
||||
[smtp]
|
||||
enabled = true
|
||||
listen_host = "0.0.0.0"
|
||||
listen_port = 25
|
||||
hostname = "mail.shenjianl.cn"
|
||||
local_domains = ["mail.shenjianl.cn", "shenjianl.cn"]
|
||||
max_message_bytes = 1048576
|
||||
connection_timeout_seconds = 30
|
||||
max_recipients_per_message = 1
|
||||
ip_connect_per_min = 20
|
||||
domain_per_min = 10
|
||||
rcpt_per_min = 10
|
||||
require_ptr = true # 生产环境要求 PTR 记录
|
||||
email_ttl_days = 7
|
||||
mailbox_ttl_hours = 24
|
||||
mailbox_max_quota_bytes = 10485760
|
||||
address_local_part_len = 10
|
||||
sender_per_min = 10
|
||||
pair_per_10min = 5
|
||||
greylist_enabled = true # 生产环境启用灰名单
|
||||
greylist_retry_delay_seconds = 300
|
||||
greylist_entry_ttl_seconds = 86400
|
||||
quarantine_threshold = 60
|
||||
score_weight_subject_code = 30
|
||||
score_weight_spf_fail = 20
|
||||
score_weight_ptr_missing = 15
|
||||
score_weight_bad_attachment = 25
|
||||
body_encryption_key = "" # 生产环境必须通过 SMTP__BODY_ENCRYPTION_KEY 注入 32 字节随机密钥
|
||||
|
||||
[abuse]
|
||||
domain_emails_threshold_10min = 50
|
||||
ip_connects_threshold_1min = 60
|
||||
auto_block_ttl_seconds = 3600
|
||||
honeypot_addresses = ["admin@mail.shenjianl.cn", "noreply@mail.shenjianl.cn", "test@mail.shenjianl.cn"]
|
||||
alert_webhook_url = ""
|
||||
|
||||
# 安全检查清单：部署前请确认
|
||||
# ✅ 1. 已修改 jwt_secret 为强随机字符串
|
||||
# ✅ 2. 已修改数据库密码为强密码
|
||||
# ✅ 3. 已设置 Redis 密码
|
||||
# ✅ 4. 已配置防火墙规则
|
||||
# ✅ 5. 已启用 HTTPS（使用 Nginx/Caddy 等反向代理）
|
||||
# ✅ 6. 已设置数据库定期备份
|
||||
Reference in New Issue
Block a user