Files
asd-backend/deploy/rust-backend-green.service
milky0217 2c86219c82
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
feat: Alipay 安全加固 + 切换手机网站支付 (wap.pay)
- Phase 1: 移除 Git 中 ALIPAY 密钥,改用 EnvironmentFile
  所有 4 个 deploy 模板删除 ALIPAY_* 内联 Environment,改为指向 .env
  check_service_file() 不再要求 ALIPAY_APP_ID 在 Environment 中
  init_env() 生成模板添加 EnvironmentFile 行

- Phase 2: 切换到手机网站支付 (alipay.trade.wap.pay)
  payment.rs: product_code QUICK_WAP_PAY, method alipay.trade.wap.pay
  用户从手机浏览器访问时自动唤起支付宝 APP

- Phase 3: 服务器 .env 文件创建
  所有环境 .env 文件已通过 SSH 创建(600 权限)
  dev 使用沙箱网关 (openapi-sandbox.dl.alipaydev.com)
  prod 使用正式网关 (openapi.alipay.com)

- 生产部署完成(blue→green 双环境同步)
  密钥安全: 不再存在于任何 Git 跟踪文件中
2026-07-20 14:52:39 +08:00

42 lines
1.2 KiB
Desktop File

[Unit]
Description=Rust Backend Green (Standby)
After=network.target postgresql.service
Wants=network.target
[Service]
Type=simple
User=rust-backend
Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_green
ExecStart=/root/rust/rust_backend_green/rust-backend
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
Environment=DATABASE_URL=postgres://milkydata:44n6FdB8CdDAk5rk@127.0.0.1:5432/milkydata
Environment=WECHAT_APPID=wx5b00eb90621802f7
Environment=WECHAT_SECRET=494efc513faa310bfba588bda2849bfd
Environment=JWT_SECRET=tribesman-pavestone-hatchling-wrangle-silly-embargo
Environment=SSL_KEY_PATH=/etc/ssl/rust_backend/privkey.pem
Environment=SSL_CERT_PATH=/etc/ssl/rust_backend/fullchain.pem
Environment=RUST_LOG=info
Environment=PAYMENT_MAINTENANCE_MODE=true
Environment=APP_VERSION=0.3.0
Environment=FREE_USER_DATA_LIMIT=20
EnvironmentFile=/root/rust/rust_backend_green/.env
Environment=APP_BASE_URL=https://xmclassmate.top
Environment=SERVER_PORT=4434
Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/root/rust/rust_backend_green
SyslogIdentifier=rust-backend-green
[Install]
WantedBy=multi-user.target