From 04f0802ba0a0e65334ad77e3d17718f53fdd7bc0 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期六, 26 九月 2026 12:17:26 +0800
Subject: [PATCH] chore(配置安全): 进 jar 的配置改为纯占位符/环境变量，本机真实值移至 gitignore 的 config/application.yml；部署说明补密钥分层与轮换步骤 + 测试报告与日结
---
docs/打包部署说明.md | 35 +++++++++++++++++++++++++++++++++++
1 files changed, 35 insertions(+), 0 deletions(-)
diff --git "a/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md" "b/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
index 5d98f70..93b547b 100644
--- "a/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
+++ "b/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
@@ -219,3 +219,38 @@
- **2026-09-13**锛氭柊澧炰竴閿墦鍖呰剼鏈� `package-deploy.py`锛沯ar 鏀逛负鍐呭祵鍓嶇锛堥儴缃叉満涓嶅啀闇�瑕� nginx锛夛紱鍒犻櫎 Redis 鐩稿叧璇存槑锛堜唬鐮佹湭浣跨敤锛夛紱琛� `sql_wyc.sql` 涓� `summary.template-dir`锛涜ˉ `jwt.secret` 鍙栧�艰鍒欙紱琛ラ儴缃插悗楠岃瘉娓呭崟銆�
- 2026-08-27锛氶鐗堬紙zip 閮ㄧ讲鍖� + nginx 鏂规锛夈��
+
+---
+
+## 瀵嗛挜涓庨厤缃紙2026-09-26 璧凤紝鎵撳寘蹇呰锛�
+
+### 鍒嗗眰绾﹀畾
+
+| 浣嶇疆 | 鐢ㄩ�� | 鏄惁杩� git | 鏄惁杩� jar |
+| --- | --- | --- | --- |
+| `traffic-audit-server/src/main/resources/application.yml` | 杩� jar 鐨勯粯璁ら厤缃紝**鍙湁鍗犱綅绗�**锛坄${TRAFFIC_DB_PASSWORD:}`銆乣${DEEPSEEK_API_KEY:}` 绛夛級 | 鍚︼紙宸� gitignore锛岀敤 `application.yml.example` 鍋氭ā鏉匡級 | **鏄�**锛堟棤鐪熷疄鍊硷級 |
+| `traffic-audit-server/config/application.yml` | 鏈満寮�鍙戠湡瀹炲�硷紙搴撳彛浠� / JWT / DeepSeek key锛� | 鍚︼紙宸� gitignore锛� | 鍚� |
+| jar 鍚岀骇鐨� `backend/application.yml` | 閮ㄧ讲鏈虹湡瀹炲�硷紙浼樺厛绾ч珮浜� jar 鍐呯疆锛� | 鍚� | 鍚︼紙鍦ㄥ寘澶栵紝鐜板満濉級 |
+| 鐜鍙橀噺 `TRAFFIC_DB_PASSWORD` / `TRAFFIC_DB_USER` / `TRAFFIC_DB_URL` / `TRAFFIC_JWT_SECRET` / `DEEPSEEK_API_KEY` | 瑕嗙洊浠ヤ笂浠绘剰涓�椤� | 鍚� | 鍚� |
+
+### 鎵撳寘鍓嶈嚜鏌ワ紙30 绉掞級
+
+```powershell
+# 1) 纭杩� jar 鐨勯厤缃病鏈夌湡瀹炲瘑閽ワ紙搴斿彧鐪嬪埌 ${...}锛�
+Select-String -Path traffic-audit-server\src\main\resources\application.yml -Pattern "password:|api-key:|secret:"
+# 2) 鎵撳畬鍖呭悗鍐嶉獙璇佷竴娆� jar 鍐呴儴
+python -c "import zipfile;print(zipfile.ZipFile('traffic-audit-server/target/traffic-audit-server-1.0.0-SNAPSHOT.jar').read('BOOT-INF/classes/application.yml').decode('utf-8'))" | Select-String "password:|api-key:"
+```
+
+### 閮ㄧ讲鏈轰笂鍔�/鎹� DeepSeek key
+
+1. 鎵撳寘涓婁紶鍚庯紝缂栬緫 **jar 鍚岀骇**鐨� `backend/application.yml`锛歚deepseek.api-key: "浣犵殑鏂発ey"`锛堢暀绌哄垯椤甸潰 AI 鍒嗘瀽涓嶅彲鐢紝鍏朵綑鍔熻兘姝ｅ父锛夛紱
+2. 閲嶅惎鍚庣锛歚start-backend.cmd`锛堟垨 `java -jar traffic-audit-server-1.0.0-SNAPSHOT.jar`锛夛紱
+3. 椤甸潰閲岀偣涓�娆� AI 鍒嗘瀽纭鍙敤锛�
+4. **涓嶈**鍘绘敼 jar 鍐呴儴鐨勯厤缃紙鏀逛簡涓嬫鍙戝寘灏变涪锛夛紝涔熶笉瑕佹妸 key 鎻愪氦杩涗换浣曚粨搴撴枃浠躲��
+
+### 杞崲锛堜綔搴燂級宸叉硠闇茬殑 key
+
+1. 鐧诲綍 DeepSeek 鎺у埗鍙� 鈫� API Keys 鈫� 鏂板缓涓�涓� key锛�
+2. 鍒犻櫎/绂佺敤鏃� key锛堟棫 key 绔嬪埢澶辨晥锛屾鍓嶆墦鍖呭甫鍑哄幓鐨� jar 閲岄偅浠藉嵆浣滃簾锛夛紱
+3. 鎸変笂闈㈢ 1~3 姝ユ妸鏂� key 濉埌閮ㄧ讲鏈虹殑澶栭儴閰嶇疆骞堕噸鍚獙璇併��
--
Gitblit v1.9.1