cisd/config/application.yml.example

spring:
  application:
    name: tms-framework
  servlet:
    multipart:
      max-file-size: 104857600
      max-request-size: 104857600

server:
  port: 8080

tms:
  upgrade:
    staging-root-dir: /home/tmp/tms-upgrade-staging
    log-dir: /home/tms/tmp/tms-upgrade-logs
    signature-public-key-pem-path: /home/tms/config/upgrade-public-key.pem
  security:
    internal-token: change-me-internal-token
    internal-auth:
      enabled: true
      debug-role-code: KEY_ADMIN
      debug-auth-level: FULL
      debug-session-token: DEBUG-BYPASS
    openapi:
      timestamp-skew-seconds: 300
      clients:
        demo-app: change-me-openapi-secret
  cisd:
    preset:
      product-type: ENTERPRISE
      version: V1.3.2
      source: CONFIG
  device:
    profile:
      model: SYD7108
      name: 跨境支付终端一体机
      cpu-model-default: ""
      memory-total-default: 16GB
      disk-total-default: 256G
  file:
    storage:
      upload-base-dir: /home/tms/uploads
      max-file-size-bytes: 104857600
  cert:
    # 允许导入为根 CA 信任锚的 SHA-256 指纹白名单。为空表示不限制；生产建议填写线下确认的根 CA 指纹。
    trusted-root-fingerprints:
      - ""
  init:
    executor:
      mode: LOCAL
      timeout-sec: 600
      log-dir: /home/tms/tmp/tms-init-logs
      standard-home-dir: /home/cmep4i
      standard-db-username: root
      standard-db-password: change-me
      standard-db-apply-command: /home/tms/bin/apply_standard_db.sh
      standard-db-entry-sql-file-name: CMEP.sql
      standard-nginx-target-path: /usr/local/nginx/conf/nginx.conf
      standard-web-target-dir: /usr/local/nginx/html
      standard-web-organization-json-path: /usr/local/nginx/html/organization.json
      standard-run-user: cmep4i
      standard-app-start-command: /home/tms/bin/start_standard_apps.sh
      standard-app-stop-command: /home/tms/bin/stop_standard_apps.sh
      standard-nginx-start-command: /home/tms/bin/start_standard_nginx.sh
      standard-nginx-stop-command: /home/tms/bin/stop_standard_nginx.sh
      standard-rabbit-stop-command: /home/tms/bin/stop_standard_rabbitmq.sh
      standard-post-check-command: /home/tms/bin/check_standard_runtime.sh
      upload-base-dir: /home/tms/uploads
      staging-root-dir: /tmp/tms-init-staging
      direct-receiver-license-target-path: /home/cmep4d/cmep/license/cmep.license
      standard-tlq-license-target-path: /home/tlq/tlqconf.zip
      direct-tlq-license-target-path: /home/tlq/TLQ8/license.dat
      direct-db-script-dir: /opt/CAE_Install_Base_Resource/DB
      direct-tlq-init-cfg-dir: /opt/CAE_Install_App_Resource/CAE
      rabbit-admin-username: admin
      rabbit-admin-password: admin
      rabbit-vhost: /RQ
      standard-rabbit-credential-encrypt-enabled: true
      standard-rabbit-credential-secret-key: ABCDEFGHIJKLMN1234567890
  backup:
    output-dir: /home/tms/tmp/resource-backup-packages
    restore-task-root-dir: /home/tms/tmp/resource-restore
    tms-script-path: /home/tms/scripts/tms.sh
    # 资源恢复停服务命令，可按现场需要增删。
    restore-stop-commands:
      - code: STANDARD_NGINX
        command: /home/tms/bin/stop_standard_nginx.sh
        required: false
        product-types:
          - ENTERPRISE
          - INDIRECT
      - code: STANDARD_APPS
        command: /home/tms/bin/stop_standard_apps.sh
        required: false
        product-types:
          - ENTERPRISE
          - INDIRECT
      - code: TMS
        command: /home/tms/scripts/tms.sh stop
        required: false
    # 资源恢复启动服务命令。标准/间参默认启动 TMS、CMSP/CMTP 和 nginx。
    restore-start-commands:
      - code: TMS
        command: /home/tms/scripts/tms.sh start
        required: true
      - code: STANDARD_APPS
        command: /home/tms/bin/start_standard_apps.sh
        required: true
        product-types:
          - ENTERPRISE
          - INDIRECT
      - code: STANDARD_NGINX
        command: /home/tms/bin/start_standard_nginx.sh
        required: true
        product-types:
          - ENTERPRISE
          - INDIRECT
    # TMS 库备份排除表。默认跳过角色、授权、会话、审计和资源任务表，避免恢复时覆盖新机器安全状态或带回旧 RUNNING 任务。
    mysqldump-timeout-seconds: 300
    restore-db-timeout-seconds: 300
    tms-db-excluded-tables:
      - tms_role_account
      - tms_role_ukey_binding
      - tms_auth_full_account
      - tms_auth_session
      - tms_auth_challenge
      - tms_auth_audit_log
      - tms_operation_audit_log
      - tms_resource_backup_task
      - tms_resource_restore_task
    allowed-restore-roots:
      - /home/tms/config
      - /home/cmep4i
      - /home/cmep4d
      - /home/tms/tmp/resource-restore
    # 直接复制恢复的文件类资源，可按现场需要增删改。
    # FILE 的 restore-path 是目标文件；DIR/GLOB 的 restore-path 是目标目录。
    file-resources:
      - code: TMS_CONFIG
        mode: DIR
        path: /home/tms/config
        restore-path: /home/tms/config
        required: true
      - code: CP_CONFIG
        mode: FILE
        path: /home/cmep4i/cpconfig.cfg
        restore-path: /home/cmep4i/cpconfig.cfg
        product-types:
          - ENTERPRISE
          - INDIRECT
        required: true
      - code: CP_CONFIG
        mode: FILE
        path: /opt/cpconfig.cfg
        restore-path: /opt/cpconfig.cfg
        product-types:
          - DIRECT
        required: true
      - code: RECEIVER_LICENSE
        mode: FILE
        path: /home/cmep4i/cmep/license/cmep.license
        restore-path: /home/cmep4i/cmep/license/cmep.license
        product-types:
          - ENTERPRISE
          - INDIRECT
        required: true
      - code: RECEIVER_LICENSE
        mode: FILE
        path: /home/cmep4d/cmep/license/cmep.license
        restore-path: /home/cmep4d/cmep/license/cmep.license
        product-types:
          - DIRECT
        required: true
      - code: STANDARD_CMSP_APP_CONFIG
        mode: GLOB
        path: /home/cmep4i/cmsp/application-prd*.properties
        restore-path: /home/cmep4i/cmsp
        product-types:
          - ENTERPRISE
          - INDIRECT
        required: true
      - code: STANDARD_CMTP_APP_CONFIG
        mode: GLOB
        path: /home/cmep4i/cmtp/application-prd*.properties
        restore-path: /home/cmep4i/cmtp
        product-types:
          - ENTERPRISE
          - INDIRECT
        required: true
      - code: CUSTOM_CERT
        mode: FILE
        path: /home/tms/config/custom-cert.pem
        restore-path: /home/tms/config/custom-cert.pem
        required: false
      - code: CUSTOM_APP_CONFIG
        mode: GLOB
        path: /home/cmep4i/cmsp/custom-*.properties
        restore-path: /home/cmep4i/cmsp
        required: false