From 04f0802ba0a0e65334ad77e3d17718f53fdd7bc0 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期六, 26 九月 2026 12:17:26 +0800
Subject: [PATCH] chore(配置安全): 进 jar 的配置改为纯占位符/环境变量，本机真实值移至 gitignore 的 config/application.yml；部署说明补密钥分层与轮换步骤 + 测试报告与日结

---
 docs/打包部署说明.md |   68 +++++++++++++++++++++++++++++++--
 1 files changed, 63 insertions(+), 5 deletions(-)

diff --git "a/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md" "b/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
index fd7b50c..93b547b 100644
--- "a/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
+++ "b/docs/\346\211\223\345\214\205\351\203\250\347\275\262\350\257\264\346\230\216.md"
@@ -17,7 +17,7 @@
 | 缁勪欢 | 鐗堟湰 | 璇存槑 |
 |------|------|------|
 | JDK | 1.8 | 閮ㄧ讲鏈哄繀椤伙紱鍚庣缂栬瘧/杩愯 |
-| MySQL | 5.7 / 8.0 | 閮ㄧ讲鏈哄繀椤伙紝搴撳悕 `traffic_audit` |
+| MySQL | **8.0** | 閮ㄧ讲鏈哄繀椤伙紝搴撳悕 `traffic_audit`锛涚幇缃�/寮�鍙戞満涓� 8.0.29锛岃〃鎺掑簭瑙勫垯鏄� `utf8mb4_0900_ai_ci`锛�**鐩爣鏈鸿 5.7 浼氬鍏ュけ璐�** |
 | Maven 3.x / Node.js 14+ | 鈥� | **鍙湁銆屽湪閮ㄧ讲鏈轰笂鎵撳寘銆嶆墠闇�瑕�**锛涚敤涓�閿剼鏈骇鍑虹殑鍖呴儴缃插垯涓嶉渶瑕� |
 | Redis | **涓嶉渶瑕�** | 浠ｇ爜鏈娇鐢� Redis锛堟棫璇存槑涓殑 Redis 閰嶇疆鏄仐鐣欓」锛屽彲蹇界暐锛� |
 | nginx / IIS | **涓嶉渶瑕�** | 鍓嶇宸插唴宓岃繘 jar锛岃闂� 8090 鍗冲彲锛涜鍓嶅悗绔垎绂绘椂鎵嶆槸澶囬�� |
@@ -88,10 +88,12 @@
 
 #### 璺嚎 B锛氭妸鐜扮綉/寮�鍙戞満鐨勬暟鎹暣濂楁惉杩囧幓锛堟帹鑽愶紝涓嶇敤璺戣剼鏈級
 
+鍏堢‘璁や袱绔� MySQL 閮芥槸 **8.0**锛堟湰搴撹〃鎺掑簭瑙勫垯涓� `utf8mb4_0900_ai_ci`锛�5.7 涓嶈瘑鍒細瀵艰嚧瀵煎叆澶辫触锛夛紝骞朵笖**鐢ㄤ笌鏈嶅姟绔悓鐗堟湰鐨� mysqldump**锛堜笉瑕佺敤 5.7 鐨勫鎴风鍘诲 8.0 鏈嶅姟绔級銆�
+
 鍦ㄦ簮鏈哄櫒锛堟湰鏈� MySQL 绔彛绀轰緥 3308锛屾寜瀹為檯鏀癸級锛�
 
 ```bash
-"D:\mysql\mysql-5.7.41-winx64\bin\mysqldump.exe" ^
+"C:\Program Files\MySQL\MySQL Server 8.0\bin\mysqldump.exe" ^
   --host=127.0.0.1 --port=3308 --user=root --password=浣犵殑瀵嗙爜 ^
   --default-character-set=utf8mb4 --single-transaction --routines --triggers --events ^
   --databases traffic_audit > traffic_audit_full_YYYYMMDD.sql
@@ -104,9 +106,30 @@
 ```
 
 - `--databases` 浼氭妸 `CREATE DATABASE` + `USE` 涓�璧峰啓杩涘浠斤紝鎵�浠ョ洰鏍囨満鍣�**涓嶇敤鍏堝缓搴撱�佷篃涓嶇敤璺戦偅 4 涓剼鏈�**銆�
-- 澶囦唤閲屽寘鍚� `sys_user`锛屾墍浠ヨ处鍙峰瘑鐮佷笌婧愭満鍣ㄥ畬鍏ㄤ竴鑷达紙鏈満鏄� `admin / 123456`锛夛紝涓嶄細琚� init.sql 閲嶇疆鎴� `admin/admin123`銆�
-- 鐗堟湰鍏煎锛氭湰鏈烘槸 MySQL 5.7锛屽鍒� 5.7 鎴� 8.0 閮藉彲浠ワ紱鍙嶅悜锛�8.0 鈫� 5.7锛夊彲鑳藉洜 `utf8mb4_0900_ai_ci` 鎺掑簭瑙勫垯澶辫触銆�
-- 鏈宸茬敓鎴愬苟楠岃瘉杩囧浠斤細`traffic_audit_full_20260913.sql`锛�45.5 MB锛�29 寮犺〃瀵煎叆鍚庨�愯〃 `COUNT(*)` 涓庢簮搴� 0 宸紓锛夈��
+- 澶囦唤閲屽寘鍚� `sys_user`锛岃处鍙峰瘑鐮佷笌婧愭満鍣ㄥ畬鍏ㄤ竴鑷达紙鏈満鏄� `admin / 123456`锛夛紝涓嶄細琚噸缃垚 `admin/admin123`銆�
+- 鈿狅笍 澶囦唤閲屾瘡寮犺〃閮藉甫 `DROP TABLE IF EXISTS`锛堝叡 29 寮狅級锛�**鐩爣搴撹鏄凡鏈夋暟鎹紝浼氳鐩存帴瑕嗙洊**銆傝杩樺師鍒扮┖搴擄紝鎴栧厛鑷繁澶囦唤鐩爣搴撱��
+- 鏈宸茬敓鎴愬苟**楠岃瘉杩�**澶囦唤锛歚traffic_audit_full_20260913.sql`锛�45.5 MB锛�8.0.29 瀹㈡埛绔鍑猴級銆�
+  楠岃瘉鏂瑰紡锛氭妸澶囦唤搴撳悕鏀规垚涓存椂搴撳鍏ワ紝閫愯〃姣斿 `SHOW CREATE TABLE`锛堣〃缁撴瀯锛変笌 `COUNT(*)`锛堣鏁帮級鈥斺��**29 寮犺〃缁撴瀯涓庤鏁板潎 0 宸紓**锛屾娊鏌� `wyc_order_monthly` 2026-08 鏁版嵁涓�鑷达紝楠岃瘉鍚庡凡鍒犻櫎涓存椂搴撱��
+
+#### 璺嚎 B2锛氱敤 Navicat 鐨勩�屽浠� / 杩樺師澶囦唤銆嶏紙.nb3锛屾渶璐磋繎鏃ュ父涔犳儻锛�
+
+`.nb3` 鏄� Navicat 绉佹湁澶囦唤鏍煎紡锛坱ar 瀹瑰櫒锛氭瘡寮犺〃涓�浠� meta.json + gz 鍘嬬缉鐨勬暟鎹垎鐗� + SHA1 鏍￠獙 + 鎬� meta.json锛夛紝
+鍙兘鐢� Navicat 鑷繁鐢熸垚銆佷篃鍙兘鍦� Navicat 閲岀敤銆岃繕鍘熷浠姐�嶈繕鍘熲�斺��**鐢� `.sql` 鐐广�岃繕鍘熷浠姐�嶄竴瀹氬け璐�**锛堥偅涓叆鍙ｅ彧璁� .nb3锛夈��
+
+鍦ㄦ簮鏈哄櫒锛�30 绉掞級锛�
+
+1. Navicat 鈫� 杩炴帴 `mysql80` 鈫� 閫変腑 `traffic_audit` 鈫� 鍙抽敭 鈫掋�屽浠解�︺�嶁啋 璧蜂釜鍚嶅瓧 鈫� 纭畾锛岀瓑瀹冭窇瀹岋紱
+2. 鐢熸垚鐨勫浠芥枃浠跺湪 Navicat 鐨� profile 鐩綍锛歚D:\鏂囨。\Navicat\MySQL\Servers\mysql80\traffic_audit\<鏃堕棿鎴�>.nb3`
+   锛堟湰鏈� 8/27 閭ｄ唤灏卞湪杩欓噷锛屼絾瀹�**宸茶繃鏈�**锛氬彧鏈� 27 寮犺〃銆佺己缃戠害杞︿袱寮犺〃銆佹暟鎹槸 8/27 鐨勶紝涓嶈鐢級銆�
+
+鍦ㄧ洰鏍囨満鍣細
+
+3. 鍏堝湪 Navicat 閲屽缓涓�涓繛鍒版湰鏈� MySQL 8.0 鐨勮繛鎺ワ紙**杩炴帴鍚嶅缓璁笌婧愭満鍣ㄤ竴鑷达紝姣斿 `mysql80`**锛夛紝骞舵柊寤虹┖搴� `traffic_audit`锛堝瓧绗﹂泦 utf8mb4锛夛紱
+4. 鎶� `.nb3` 鏀惧埌鐩爣鏈哄櫒鐨勫搴旂洰褰� `<Navicat profile>\MySQL\Servers\<杩炴帴鍚�>\traffic_audit\`锛堟病鏈夊氨鐓х潃寤虹洰褰曪級锛�
+5. 鍙抽敭璇ュ簱 鈫掋�岃繕鍘熷浠姐�嶁啋 鍦ㄩ�夋嫨鍒楄〃閲屽嬀閫夎繖浠藉浠� 鈫� 寮�濮嬶紙鍒楄〃閲岀湅涓嶅埌灏遍噸鍚竴娆� Navicat锛夈��
+
+> 涓夌鏂瑰紡锛堣矾绾� A 绌哄簱 4 鑴氭湰 / 璺嚎 B 鍛戒护琛岃繕鍘� .sql / 璺嚎 B2 Navicat .nb3锛�**浠婚�夊叾涓�**鍗冲彲锛�
+> 浣�**涓嶈鍙犲姞**锛氳繕鍘熷畬澶囦唤鍚庡啀璺� `init.sql` 浼氭妸鏁版嵁娓呯┖閲嶅缓銆�
 
 > 娉ㄦ剰锛歚docs/` 鐩綍锛堟姤琛ㄦā鏉裤�佹眹鎬诲ぇ琛ㄦ瘝鐗堬級**涓庢暟鎹簱鏃犲叧锛屾棤璁哄摢鏉¤矾绾块兘蹇呴』涓�骞舵嫹璐�**銆�
 
@@ -196,3 +219,38 @@
 
 - **2026-09-13**锛氭柊澧炰竴閿墦鍖呰剼鏈� `package-deploy.py`锛沯ar 鏀逛负鍐呭祵鍓嶇锛堥儴缃叉満涓嶅啀闇�瑕� nginx锛夛紱鍒犻櫎 Redis 鐩稿叧璇存槑锛堜唬鐮佹湭浣跨敤锛夛紱琛� `sql_wyc.sql` 涓� `summary.template-dir`锛涜ˉ `jwt.secret` 鍙栧�艰鍒欙紱琛ラ儴缃插悗楠岃瘉娓呭崟銆�
 - 2026-08-27锛氶鐗堬紙zip 閮ㄧ讲鍖� + nginx 鏂规锛夈��
+
+---
+
+## 瀵嗛挜涓庨厤缃紙2026-09-26 璧凤紝鎵撳寘蹇呰锛�
+
+### 鍒嗗眰绾﹀畾
+
+| 浣嶇疆 | 鐢ㄩ�� | 鏄惁杩� git | 鏄惁杩� jar |
+| --- | --- | --- | --- |
+| `traffic-audit-server/src/main/resources/application.yml` | 杩� jar 鐨勯粯璁ら厤缃紝**鍙湁鍗犱綅绗�**锛坄${TRAFFIC_DB_PASSWORD:}`銆乣${DEEPSEEK_API_KEY:}` 绛夛級 | 鍚︼紙宸� gitignore锛岀敤 `application.yml.example` 鍋氭ā鏉匡級 | **鏄�**锛堟棤鐪熷疄鍊硷級 |
+| `traffic-audit-server/config/application.yml` | 鏈満寮�鍙戠湡瀹炲�硷紙搴撳彛浠� / JWT / DeepSeek key锛� | 鍚︼紙宸� gitignore锛� | 鍚� |
+| jar 鍚岀骇鐨� `backend/application.yml` | 閮ㄧ讲鏈虹湡瀹炲�硷紙浼樺厛绾ч珮浜� jar 鍐呯疆锛� | 鍚� | 鍚︼紙鍦ㄥ寘澶栵紝鐜板満濉級 |
+| 鐜鍙橀噺 `TRAFFIC_DB_PASSWORD` / `TRAFFIC_DB_USER` / `TRAFFIC_DB_URL` / `TRAFFIC_JWT_SECRET` / `DEEPSEEK_API_KEY` | 瑕嗙洊浠ヤ笂浠绘剰涓�椤� | 鍚� | 鍚� |
+
+### 鎵撳寘鍓嶈嚜鏌ワ紙30 绉掞級
+
+```powershell
+# 1) 纭杩� jar 鐨勯厤缃病鏈夌湡瀹炲瘑閽ワ紙搴斿彧鐪嬪埌 ${...}锛�
+Select-String -Path traffic-audit-server\src\main\resources\application.yml -Pattern "password:|api-key:|secret:"
+# 2) 鎵撳畬鍖呭悗鍐嶉獙璇佷竴娆� jar 鍐呴儴
+python -c "import zipfile;print(zipfile.ZipFile('traffic-audit-server/target/traffic-audit-server-1.0.0-SNAPSHOT.jar').read('BOOT-INF/classes/application.yml').decode('utf-8'))" | Select-String "password:|api-key:"
+```
+
+### 閮ㄧ讲鏈轰笂鍔�/鎹� DeepSeek key
+
+1. 鎵撳寘涓婁紶鍚庯紝缂栬緫 **jar 鍚岀骇**鐨� `backend/application.yml`锛歚deepseek.api-key: "浣犵殑鏂発ey"`锛堢暀绌哄垯椤甸潰 AI 鍒嗘瀽涓嶅彲鐢紝鍏朵綑鍔熻兘姝ｅ父锛夛紱
+2. 閲嶅惎鍚庣锛歚start-backend.cmd`锛堟垨 `java -jar traffic-audit-server-1.0.0-SNAPSHOT.jar`锛夛紱
+3. 椤甸潰閲岀偣涓�娆� AI 鍒嗘瀽纭鍙敤锛�
+4. **涓嶈**鍘绘敼 jar 鍐呴儴鐨勯厤缃紙鏀逛簡涓嬫鍙戝寘灏变涪锛夛紝涔熶笉瑕佹妸 key 鎻愪氦杩涗换浣曚粨搴撴枃浠躲��
+
+### 杞崲锛堜綔搴燂級宸叉硠闇茬殑 key
+
+1. 鐧诲綍 DeepSeek 鎺у埗鍙� 鈫� API Keys 鈫� 鏂板缓涓�涓� key锛�
+2. 鍒犻櫎/绂佺敤鏃� key锛堟棫 key 绔嬪埢澶辨晥锛屾鍓嶆墦鍖呭甫鍑哄幓鐨� jar 閲岄偅浠藉嵆浣滃簾锛夛紱
+3. 鎸変笂闈㈢ 1~3 姝ユ妸鏂� key 濉埌閮ㄧ讲鏈虹殑澶栭儴閰嶇疆骞堕噸鍚獙璇併��

--
Gitblit v1.9.1