Some checks failed
Deploy Backend / deploy (push) Has been cancelled
- Phase 1: 移除 Git 中 ALIPAY 密钥,改用 EnvironmentFile 所有 4 个 deploy 模板删除 ALIPAY_* 内联 Environment,改为指向 .env check_service_file() 不再要求 ALIPAY_APP_ID 在 Environment 中 init_env() 生成模板添加 EnvironmentFile 行 - Phase 2: 切换到手机网站支付 (alipay.trade.wap.pay) payment.rs: product_code QUICK_WAP_PAY, method alipay.trade.wap.pay 用户从手机浏览器访问时自动唤起支付宝 APP - Phase 3: 服务器 .env 文件创建 所有环境 .env 文件已通过 SSH 创建(600 权限) dev 使用沙箱网关 (openapi-sandbox.dl.alipaydev.com) prod 使用正式网关 (openapi.alipay.com) - 生产部署完成(blue→green 双环境同步) 密钥安全: 不再存在于任何 Git 跟踪文件中
42 lines
1.2 KiB
Desktop File
42 lines
1.2 KiB
Desktop File
[Unit]
|
|
Description=Rust Backend Blue (Active)
|
|
After=network.target postgresql.service
|
|
Wants=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=rust-backend
|
|
Group=rust-backend
|
|
WorkingDirectory=/root/rust/rust_backend_blue
|
|
ExecStart=/root/rust/rust_backend_blue/rust-backend
|
|
Restart=always
|
|
RestartSec=5
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
|
|
Environment=DATABASE_URL=postgres://milkydata:44n6FdB8CdDAk5rk@127.0.0.1:5432/milkydata
|
|
Environment=WECHAT_APPID=wx5b00eb90621802f7
|
|
Environment=WECHAT_SECRET=494efc513faa310bfba588bda2849bfd
|
|
Environment=JWT_SECRET=tribesman-pavestone-hatchling-wrangle-silly-embargo
|
|
Environment=SSL_KEY_PATH=/etc/ssl/rust_backend/privkey.pem
|
|
Environment=SSL_CERT_PATH=/etc/ssl/rust_backend/fullchain.pem
|
|
Environment=RUST_LOG=info
|
|
Environment=PAYMENT_MAINTENANCE_MODE=true
|
|
Environment=APP_VERSION=0.3.0
|
|
Environment=FREE_USER_DATA_LIMIT=20
|
|
EnvironmentFile=/root/rust/rust_backend_blue/.env
|
|
Environment=APP_BASE_URL=https://xmclassmate.top
|
|
Environment=SERVER_PORT=4433
|
|
Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
|
|
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=read-only
|
|
ReadWritePaths=/root/rust/rust_backend_blue
|
|
|
|
SyslogIdentifier=rust-backend-blue
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|