spring: application: name: tms-framework servlet: multipart: max-file-size: 104857600 max-request-size: 104857600 server: port: 8080 tms: upgrade: staging-root-dir: /home/tmp/tms-upgrade-staging log-dir: /home/tms/tmp/tms-upgrade-logs signature-public-key-pem-path: /home/tms/config/upgrade-public-key.pem security: internal-token: change-me-internal-token internal-auth: enabled: true debug-role-code: KEY_ADMIN debug-auth-level: FULL debug-session-token: DEBUG-BYPASS openapi: timestamp-skew-seconds: 300 clients: demo-app: change-me-openapi-secret cisd: preset: product-type: ENTERPRISE version: V1.3.2 source: CONFIG device: profile: model: SYD7108 name: 跨境支付终端一体机 cpu-model-default: "" memory-total-default: 16GB disk-total-default: 256G runtime-status: disk-usage-path: /home/tms file: storage: upload-base-dir: /home/tms/uploads max-file-size-bytes: 104857600 cert: # 允许导入为根 CA 信任锚的 SHA-256 指纹白名单。为空表示不限制；生产建议填写线下确认的根 CA 指纹。 trusted-root-fingerprints: - "" init: executor: mode: LOCAL timeout-sec: 600 log-dir: /home/tms/tmp/tms-init-logs standard-home-dir: /home/cmep4i standard-db-username: root standard-db-password: change-me standard-db-apply-command: /home/tms/bin/apply_standard_db.sh standard-db-entry-sql-file-name: CMEP.sql standard-nginx-target-path: /usr/local/nginx/conf/nginx.conf standard-web-target-dir: /usr/local/nginx/html standard-web-organization-json-path: /usr/local/nginx/html/organization.json standard-run-user: cmep4i standard-app-start-command: sudo -n /usr/local/sbin/tms-start-standard-apps standard-app-stop-command: sudo -n /usr/local/sbin/tms-stop-standard-apps standard-nginx-start-command: /home/tms/bin/start_standard_nginx.sh standard-nginx-stop-command: /home/tms/bin/stop_standard_nginx.sh standard-rabbit-stop-command: /home/tms/bin/stop_standard_rabbitmq.sh standard-post-check-command: /home/tms/bin/check_standard_runtime.sh standard-vendor-step-runner-command: /usr/local/sbin/tms-run-standard-vendor-step rabbitmq-ctl-command: sudo -n /usr/local/sbin/tms-rabbitmqctl upload-base-dir: /home/tms/uploads staging-root-dir: /tmp/tms-init-staging direct-receiver-license-target-path: /home/cmep4d/cmep/license/cmep.license standard-tlq-license-target-path: /home/tlq/tlqconf.zip direct-tlq-license-target-path: /home/tlq/TLQ8/license.dat direct-db-script-dir: /opt/CAE_Install_Base_Resource/DB direct-tlq-init-cfg-dir: /opt/CAE_Install_App_Resource/CAE rabbit-admin-username: admin rabbit-admin-password: admin rabbit-vhost: /RQ standard-rabbit-credential-encrypt-enabled: true standard-rabbit-credential-secret-key: ABCDEFGHIJKLMN1234567890 backup: output-dir: /home/tms/tmp/resource-backup-packages restore-task-root-dir: /home/tms/tmp/resource-restore tms-script-path: /home/tms/scripts/tms.sh # 资源恢复停服务命令，可按现场需要增删。 restore-stop-commands: - code: STANDARD_NGINX command: /home/tms/bin/stop_standard_nginx.sh required: false product-types: - ENTERPRISE - INDIRECT - code: STANDARD_APPS command: sudo -n /usr/local/sbin/tms-stop-standard-apps required: false product-types: - ENTERPRISE - INDIRECT - code: TMS command: /home/tms/scripts/tms.sh stop required: false # 资源恢复启动服务命令。标准/间参默认启动 TMS、CMSP/CMTP 和 nginx。 restore-start-commands: - code: TMS command: /home/tms/scripts/tms.sh start required: true - code: STANDARD_APPS command: sudo -n /usr/local/sbin/tms-start-standard-apps required: true product-types: - ENTERPRISE - INDIRECT - code: STANDARD_NGINX command: /home/tms/bin/start_standard_nginx.sh required: true product-types: - ENTERPRISE - INDIRECT # TMS 库备份排除表。默认跳过角色、授权、会话和资源任务表，避免恢复时覆盖新机器安全登录状态或带回旧 RUNNING 任务。 mysqldump-timeout-seconds: 300 restore-db-timeout-seconds: 300 tms-db-excluded-tables: - tms_role_account - tms_role_ukey_binding - tms_auth_full_account - tms_auth_session - tms_resource_backup_task - tms_resource_restore_task allowed-restore-roots: - /home/tms/config - /home/cmep4i - /home/cmep4d - /home/tms/tmp/resource-restore # 直接复制恢复的文件类资源，可按现场需要增删改。 # FILE 的 restore-path 是目标文件；DIR/GLOB 的 restore-path 是目标目录。 file-resources: - code: TMS_CONFIG mode: DIR path: /home/tms/config restore-path: /home/tms/config required: true - code: CP_CONFIG mode: FILE path: /home/cmep4i/cpconfig.cfg restore-path: /home/cmep4i/cpconfig.cfg product-types: - ENTERPRISE - INDIRECT required: true - code: CP_CONFIG mode: FILE path: /opt/cpconfig.cfg restore-path: /opt/cpconfig.cfg product-types: - DIRECT required: true - code: RECEIVER_LICENSE mode: FILE path: /home/cmep4i/cmep/license/cmep.license restore-path: /home/cmep4i/cmep/license/cmep.license product-types: - ENTERPRISE - INDIRECT required: true - code: RECEIVER_LICENSE mode: FILE path: /home/cmep4d/cmep/license/cmep.license restore-path: /home/cmep4d/cmep/license/cmep.license product-types: - DIRECT required: true - code: STANDARD_CMSP_APP_CONFIG mode: GLOB path: /home/cmep4i/cmsp/application-prd*.properties restore-path: /home/cmep4i/cmsp product-types: - ENTERPRISE - INDIRECT required: true - code: STANDARD_CMTP_APP_CONFIG mode: GLOB path: /home/cmep4i/cmtp/application-prd*.properties restore-path: /home/cmep4i/cmtp product-types: - ENTERPRISE - INDIRECT required: true - code: CUSTOM_CERT mode: FILE path: /home/tms/config/custom-cert.pem restore-path: /home/tms/config/custom-cert.pem required: false - code: CUSTOM_APP_CONFIG mode: GLOB path: /home/cmep4i/cmsp/custom-*.properties restore-path: /home/cmep4i/cmsp required: false