Rogee
851ca7e372
后端移除： - SAML: auth/saml.go, handler/saml_handler.go, account_saml_settings_handler.go, model/account_saml_settings.go, model/saml_idp_config.go, repo/*.go - LDAP: auth/ldap.go, handler/ldap_handler.go, model/account_ldap_settings.go, repo/account_ldap_settings_repo.go - MFA: auth/mfa.go, handler/mfa_handler.go - auth_service: 移除 mfaService 依赖、MFARequired 字段、LoginWithMFA 方法 - auth_handler: 移除 LoginMFA handler、MFA 分支逻辑 - bootstrap: 移除 SAML/LDAP/MFA service 初始化和 handler 注册 - sso_middleware: 精简为仅支持 OIDC provider - router: 移除 SAML/LDAP/MFA 路由注册 - config: 移除 SAMLConfig/LDAPConfig struct 和 defaults 前端移除： - v3/login: 移除 MFA 验证流程和 SAML 登录入口 - v3/api/auth: 移除 MFA 响应处理 - v3/routes: 移除 SSO login 路由 - dashboard: 移除 MFA 设置页面、SAML 安全设置页面 - i18n: 移除 mfa.json - featureFlags: 移除 SAML feature flag .env.example / .env: 移除 SAML/LDAP 配置段
74 lines
2.1 KiB
Bash
74 lines
2.1 KiB
Bash
# GoChat Environment Variables
|
|
# Copy to .env and fill in your values. NEVER commit .env to git.
|
|
|
|
# ---- Application ----
|
|
GOCHAT_ENV=prod
|
|
# Keep disabled in production. Enable only for controlled QA/UAT environments.
|
|
GOCHAT_ALLOW_FAKE_CHANNEL=false
|
|
|
|
# ---- Server ----
|
|
GOCHAT_SERVER_HOST=0.0.0.0
|
|
GOCHAT_SERVER_PORT=3000
|
|
GOCHAT_SERVER_MODE=release # debug, release, test
|
|
|
|
# ---- Database ----
|
|
GOCHAT_DATABASE_HOST=localhost
|
|
GOCHAT_DATABASE_PORT=5432
|
|
GOCHAT_DATABASE_USER=gochat
|
|
GOCHAT_DATABASE_PASSWORD=CHANGE_ME_TO_A_STRONG_PASSWORD
|
|
GOCHAT_DATABASE_DBNAME=gochat_production
|
|
GOCHAT_DATABASE_SSLMODE=disable
|
|
GOCHAT_DATABASE_MAX_IDLE_CONNS=10
|
|
GOCHAT_DATABASE_MAX_OPEN_CONNS=100
|
|
GOCHAT_DATABASE_CONN_MAX_LIFETIME=3600
|
|
|
|
# ---- Redis ----
|
|
GOCHAT_REDIS_URL=redis://localhost:6379
|
|
GOCHAT_REDIS_POOL_SIZE=50
|
|
|
|
# ---- JWT ----
|
|
GOCHAT_JWT_SECRET=CHANGE_ME_TO_A_RANDOM_64_CHAR_STRING
|
|
GOCHAT_JWT_EXPIRY_HOURS=72
|
|
GOCHAT_JWT_ACCESS_EXPIRY_MINUTES=15
|
|
GOCHAT_JWT_REFRESH_EXPIRY_HOURS=168
|
|
|
|
# ---- Logging ----
|
|
GOCHAT_LOG_LEVEL=info # debug, info, warn, error
|
|
GOCHAT_LOG_FORMAT=json # json, text
|
|
|
|
# ---- SMTP / Email ----
|
|
SMTP_ADDRESS=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=your-email@example.com
|
|
SMTP_PASSWORD=your-email-password
|
|
|
|
# ---- Worker ----
|
|
GOCHAT_WORKER_CONCURRENCY=10
|
|
|
|
# ---- Frontend URL ----
|
|
FRONTEND_URL=https://your-domain.com
|
|
|
|
# ---- Search ----
|
|
GOCHAT_SEARCH_ENGINE=meilisearch
|
|
GOCHAT_SEARCH_HOST=http://localhost:7700
|
|
GOCHAT_SEARCH_API_KEY=
|
|
GOCHAT_SEARCH_INDEX_PREFIX=gochat_
|
|
GOCHAT_SEARCH_TIMEOUT_SECONDS=5
|
|
|
|
# ---- Storage ----
|
|
GOCHAT_STORAGE_PROVIDER=local
|
|
GOCHAT_STORAGE_LOCAL_PATH=./uploads
|
|
GOCHAT_STORAGE_MAX_FILE_SIZE=20971520 # 20MB
|
|
|
|
# ---- OIDC (Enterprise OAuth/OIDC SSO, disabled by default) ----
|
|
GOCHAT_OIDC_ENABLED=false
|
|
GOCHAT_OIDC_DEFAULT_CLIENT_ID=
|
|
GOCHAT_OIDC_DEFAULT_CLIENT_SECRET=
|
|
GOCHAT_OIDC_DEFAULT_REDIRECT_URL=https://your-domain.com/api/v1/oidc/callback
|
|
GOCHAT_OIDC_DEFAULT_ISSUER_URL=https://accounts.google.com
|
|
GOCHAT_OIDC_DEFAULT_AUTHORIZATION_URL=
|
|
GOCHAT_OIDC_DEFAULT_TOKEN_URL=
|
|
GOCHAT_OIDC_DEFAULT_USER_INFO_URL=
|
|
GOCHAT_OIDC_DEFAULT_JWKS_URL=
|
|
GOCHAT_OIDC_DEFAULT_SCOPES=openid,profile,email
|