cisd/config/application.yml.example
2026-05-20 10:57:16 +08:00

201 lines
6.8 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

spring:
application:
name: tms-framework
servlet:
multipart:
max-file-size: 104857600
max-request-size: 104857600
server:
port: 8080
tms:
upgrade:
staging-root-dir: /home/tmp/tms-upgrade-staging
log-dir: /home/tms/tmp/tms-upgrade-logs
signature-public-key-pem-path: /home/tms/config/upgrade-public-key.pem
security:
internal-token: change-me-internal-token
internal-auth:
enabled: true
debug-role-code: KEY_ADMIN
debug-auth-level: FULL
debug-session-token: DEBUG-BYPASS
openapi:
timestamp-skew-seconds: 300
clients:
demo-app: change-me-openapi-secret
cisd:
preset:
product-type: ENTERPRISE
version: V1.3.2
source: CONFIG
device:
profile:
model: SYD7108
name: 跨境支付终端一体机
cpu-model-default: ""
memory-total-default: 16GB
disk-total-default: 256G
runtime-status:
disk-usage-path: /home/tms
file:
storage:
upload-base-dir: /home/tms/uploads
max-file-size-bytes: 104857600
cert:
# 允许导入为根 CA 信任锚的 SHA-256 指纹白名单。为空表示不限制;生产建议填写线下确认的根 CA 指纹。
trusted-root-fingerprints:
- ""
init:
executor:
mode: LOCAL
timeout-sec: 600
log-dir: /home/tms/tmp/tms-init-logs
standard-home-dir: /home/cmep4i
standard-db-username: root
standard-db-password: change-me
standard-db-apply-command: /home/tms/bin/apply_standard_db.sh
standard-db-entry-sql-file-name: CMEP.sql
standard-nginx-target-path: /usr/local/nginx/conf/nginx.conf
standard-web-target-dir: /usr/local/nginx/html
standard-web-organization-json-path: /usr/local/nginx/html/organization.json
standard-run-user: cmep4i
standard-app-start-command: sudo -n /usr/local/sbin/tms-start-standard-apps
standard-app-stop-command: sudo -n /usr/local/sbin/tms-stop-standard-apps
standard-nginx-start-command: /home/tms/bin/start_standard_nginx.sh
standard-nginx-stop-command: /home/tms/bin/stop_standard_nginx.sh
standard-rabbit-stop-command: /home/tms/bin/stop_standard_rabbitmq.sh
standard-post-check-command: /home/tms/bin/check_standard_runtime.sh
standard-vendor-step-runner-command: /usr/local/sbin/tms-run-standard-vendor-step
rabbitmq-ctl-command: sudo -n /usr/local/sbin/tms-rabbitmqctl
upload-base-dir: /home/tms/uploads
staging-root-dir: /tmp/tms-init-staging
direct-receiver-license-target-path: /home/cmep4d/cmep/license/cmep.license
standard-tlq-license-target-path: /home/tlq/tlqconf.zip
direct-tlq-license-target-path: /home/tlq/TLQ8/license.dat
direct-db-script-dir: /opt/CAE_Install_Base_Resource/DB
direct-tlq-init-cfg-dir: /opt/CAE_Install_App_Resource/CAE
rabbit-admin-username: admin
rabbit-admin-password: admin
rabbit-vhost: /RQ
standard-rabbit-credential-encrypt-enabled: true
standard-rabbit-credential-secret-key: ABCDEFGHIJKLMN1234567890
backup:
output-dir: /home/tms/tmp/resource-backup-packages
restore-task-root-dir: /home/tms/tmp/resource-restore
tms-script-path: /home/tms/scripts/tms.sh
# 资源恢复停服务命令,可按现场需要增删。
restore-stop-commands:
- code: STANDARD_NGINX
command: /home/tms/bin/stop_standard_nginx.sh
required: false
product-types:
- ENTERPRISE
- INDIRECT
- code: STANDARD_APPS
command: sudo -n /usr/local/sbin/tms-stop-standard-apps
required: false
product-types:
- ENTERPRISE
- INDIRECT
- code: TMS
command: /home/tms/scripts/tms.sh stop
required: false
# 资源恢复启动服务命令。标准/间参默认启动 TMS、CMSP/CMTP 和 nginx。
restore-start-commands:
- code: TMS
command: /home/tms/scripts/tms.sh start
required: true
- code: STANDARD_APPS
command: sudo -n /usr/local/sbin/tms-start-standard-apps
required: true
product-types:
- ENTERPRISE
- INDIRECT
- code: STANDARD_NGINX
command: /home/tms/bin/start_standard_nginx.sh
required: true
product-types:
- ENTERPRISE
- INDIRECT
# TMS 库备份排除表。默认跳过角色、授权、会话和资源任务表,避免恢复时覆盖新机器安全登录状态或带回旧 RUNNING 任务。
mysqldump-timeout-seconds: 300
restore-db-timeout-seconds: 300
tms-db-excluded-tables:
- tms_role_account
- tms_role_ukey_binding
- tms_auth_full_account
- tms_auth_session
- tms_resource_backup_task
- tms_resource_restore_task
allowed-restore-roots:
- /home/tms/config
- /home/cmep4i
- /home/cmep4d
- /home/tms/tmp/resource-restore
# 直接复制恢复的文件类资源,可按现场需要增删改。
# FILE 的 restore-path 是目标文件DIR/GLOB 的 restore-path 是目标目录。
file-resources:
- code: TMS_CONFIG
mode: DIR
path: /home/tms/config
restore-path: /home/tms/config
required: true
- code: CP_CONFIG
mode: FILE
path: /home/cmep4i/cpconfig.cfg
restore-path: /home/cmep4i/cpconfig.cfg
product-types:
- ENTERPRISE
- INDIRECT
required: true
- code: CP_CONFIG
mode: FILE
path: /opt/cpconfig.cfg
restore-path: /opt/cpconfig.cfg
product-types:
- DIRECT
required: true
- code: RECEIVER_LICENSE
mode: FILE
path: /home/cmep4i/cmep/license/cmep.license
restore-path: /home/cmep4i/cmep/license/cmep.license
product-types:
- ENTERPRISE
- INDIRECT
required: true
- code: RECEIVER_LICENSE
mode: FILE
path: /home/cmep4d/cmep/license/cmep.license
restore-path: /home/cmep4d/cmep/license/cmep.license
product-types:
- DIRECT
required: true
- code: STANDARD_CMSP_APP_CONFIG
mode: GLOB
path: /home/cmep4i/cmsp/application-prd*.properties
restore-path: /home/cmep4i/cmsp
product-types:
- ENTERPRISE
- INDIRECT
required: true
- code: STANDARD_CMTP_APP_CONFIG
mode: GLOB
path: /home/cmep4i/cmtp/application-prd*.properties
restore-path: /home/cmep4i/cmtp
product-types:
- ENTERPRISE
- INDIRECT
required: true
- code: CUSTOM_CERT
mode: FILE
path: /home/tms/config/custom-cert.pem
restore-path: /home/tms/config/custom-cert.pem
required: false
- code: CUSTOM_APP_CONFIG
mode: GLOB
path: /home/cmep4i/cmsp/custom-*.properties
restore-path: /home/cmep4i/cmsp
required: false