刘光辉
14 小时以前 34981c30a78e8bbd7791131059a9210f9928b62c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
spring:
  application:
    name: jnpf-biz-common
  mvc:
    servlet:
      load-on-startup: 0
  main:
    allow-bean-definition-overriding: true
    allow-circular-references: true
  config:
    # 补丁 #8:配置来源 = 仓库 config/(镜像内 /config,经 JNPF_CONFIG_DIR 指向)。
    # file:(非 optional)= 缺文件启动即失败,防静默半配置;host-override 是宿主栈
    # 专用覆盖(容器内不存在,optional 落空跳过)。
    import:
      - file:${JNPF_CONFIG_DIR:config}/shared/datasource.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/resources.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/system-config.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/frame-config.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/logger.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/mq.yaml
      # 本服务专属配置(2026-08-11 由 jnpf-audit.yaml 迁移而来,承接日志级别;
      # 排在 logger.yaml 之后才能覆盖它的 root: ERROR)
      - file:${JNPF_CONFIG_DIR:config}/shared/jnpf-biz-common.yaml
      # 审计层 0 表单注册表:由各业务模块自助维护,故独立 data-id,不并进 jnpf-biz-common.yaml
      # (2026-08-11 随 audit 搬入,原先由 jnpf-audit-server 引入)
      - file:${JNPF_CONFIG_DIR:config}/shared/audit-layer0-forms.yaml
      - file:${JNPF_CONFIG_DIR:config}/shared/discovery.yaml
      # 本服务专属配置(各能力的参数,如 onlyoffice.*);排在 shared 之后以便覆盖共享值
      - file:${JNPF_CONFIG_DIR:config}/shared/jnpf-biz-common.yaml
      - optional:file:${JNPF_CONFIG_DIR:config}/host-override/discovery.yaml
 
# 应用服务器
server:
  tomcat:
    uri-encoding: UTF-8
  port: 30015
 
management:
  endpoints:
    web:
      exposure:
        include: '*'
  endpoint:
    health:
      show-details: always
    logfile:
      access: unrestricted
 
# ping 探针放行(三层放行模式;biz-common 是聚合服务,每个能力各有自己的探针路径):
#   · onlyoffice 能力:/onlyoffice/ping ← 网关 /api/biz/onlyoffice/ping(StripPrefix=2)
#   · audit 能力:    /ping            ← 网关 /api/audit/ping(StripPrefix=2,2026-08-11 搬入时
#     刻意保持原路径不变,网关路由与 42 个回归脚本因此零改动)
# ⚠️ L042:这三层是**服务级**放行,无 token 时经网关仍会 600、直连仍被 inner-auth 拦,
# 都是设计内行为;全链验证必须带真实登录 token。
jnpf:
  security:
    ignore:
      urls:
        - /onlyoffice/ping
        - /api/biz/onlyoffice/ping
        - /dev-api/biz/onlyoffice/ping
        - /ping
        - /api/audit/ping
        - /dev-api/audit/ping
  tenant:
    ignore-urls:
      - /onlyoffice/ping
      - /api/biz/onlyoffice/ping
      - /dev-api/biz/onlyoffice/ping
      - /ping
      - /api/audit/ping
      - /dev-api/audit/ping
 
sa-token:
  filter:
    exclude-paths:
      - /onlyoffice/ping
      - /api/biz/onlyoffice/ping
      - /dev-api/biz/onlyoffice/ping
      - /ping
      - /api/audit/ping
      - /dev-api/audit/ping