Files
asd-backend/deploy/rust-backend-development.service
milky0217 2c86219c82
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
feat: Alipay 安全加固 + 切换手机网站支付 (wap.pay)
- Phase 1: 移除 Git 中 ALIPAY 密钥,改用 EnvironmentFile
  所有 4 个 deploy 模板删除 ALIPAY_* 内联 Environment,改为指向 .env
  check_service_file() 不再要求 ALIPAY_APP_ID 在 Environment 中
  init_env() 生成模板添加 EnvironmentFile 行

- Phase 2: 切换到手机网站支付 (alipay.trade.wap.pay)
  payment.rs: product_code QUICK_WAP_PAY, method alipay.trade.wap.pay
  用户从手机浏览器访问时自动唤起支付宝 APP

- Phase 3: 服务器 .env 文件创建
  所有环境 .env 文件已通过 SSH 创建(600 权限)
  dev 使用沙箱网关 (openapi-sandbox.dl.alipaydev.com)
  prod 使用正式网关 (openapi.alipay.com)

- 生产部署完成(blue→green 双环境同步)
  密钥安全: 不再存在于任何 Git 跟踪文件中
2026-07-20 14:52:39 +08:00

40 lines
1.2 KiB
Desktop File

[Unit]
Description=Rust Backend Development Service
After=network.target postgresql.service
Wants=network.target
[Service]
Type=simple
User=rust-backend
Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_dev
ExecStart=/root/rust/rust_backend_dev/rust-backend
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
Environment=DATABASE_URL=postgres://milkydata:44n6FdB8CdDAk5rk@127.0.0.1:5432/milkydata_dev
Environment=WECHAT_APPID=wx5b00eb90621802f7
Environment=WECHAT_SECRET=494efc513faa310bfba588bda2849bfd
Environment=JWT_SECRET=U8ZQKiyRN3IdkM705Rr6uLRpZ56w3z8Fw7aA6ib9oUk=
Environment=SSL_KEY_PATH=/etc/ssl/private/private.key
Environment=SSL_CERT_PATH=/etc/ssl/certs/full_chain.pem
Environment=RUST_LOG=info,rust_backend=debug
Environment=APP_VERSION=0.2.0
Environment=FREE_USER_DATA_LIMIT=50
Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
Environment=APP_BASE_URL=https://dev.xmclassmate.top
EnvironmentFile=/root/rust/rust_backend_dev/.env
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/root/rust/rust_backend_dev
SyslogIdentifier=rust-backend-dev
[Install]
WantedBy=multi-user.target