diff --git a/Docker/README.md b/Docker/README.md new file mode 100644 index 0000000..e6b7965 --- /dev/null +++ b/Docker/README.md @@ -0,0 +1,45 @@ +##### 从git上面下载源码 +``` +cd /data/ +git clone https://github.com/nineaiyu/FlyApps +``` + +#### docker环境安装 [centos7] +``` +yum install epel-release -y +yum clean all && yum makecache +yum install docker -y + +``` +#### 配置域名和证书,如果有cdn或者oss,也要进行配置 +```shell script +Docker/app.hehelucky.cn.key +Docker/app.hehelucky.cn.pem +Docker/flyapps-vhost.conf +``` +### api服务需要修改api和web域名,短信,邮箱,geetest,存储等信息 +```shell script +vim fir_ser/config.py + +API_DOMAIN = "https://app.hehelucky.cn" +WEB_DOMAIN = "https://app.hehelucky.cn" +MOBILEPROVISION = "https://ali-static.jappstore.com/embedded.mobileprovision" + +``` +### web页面需要修改指定api域名 +```vuejs +vim fir_client/vue.config.js + +const pro_base_env = { + baseUrl: 'https://flyapps.cn', + index_static: 'https://static.flyapps.cn/index/', + baseShortUrl: 'https://flyapps.top', + short_static: 'https://static.flyapps.top/short/', +}; +``` + +##### 构建静态资源和api服务 +``` +cd Docker && sh build.sh +``` + diff --git a/Docker/app.hehelucky.cn.key b/Docker/app.hehelucky.cn.key new file mode 100644 index 0000000..e4ed7d6 --- /dev/null +++ b/Docker/app.hehelucky.cn.key @@ -0,0 +1,29 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCwG4qbB2yLqgAo +/yejabGADrTv/lbEQtHSxsDDz6u2HFAd63QHLgDTR7v4SOmxd0wwSy3XNFOMZbT5 +Okbqtzl8IYgkZfJ/EByuuZsp8KbyRtDTQHB/6SMnVt61QC4esvzNlvhHFRXInC7H +whrdZsuqGo8tEuOrApbOhQ3CTMxYZ7ok3gtzcVOqaCyrRiY9F7tfOe6zHQ5kWJ8D +1XZuieFNvqh1l42B9BMcrg5rh8rYg9LYWN3HJBR5lFLi8qWFcTq5yp7a7yvozIcK +M5CngzqeHZ5OSm8iWo4ZTuD9lfSdka8y1LucNdtMLMhnr7wAlZ6vjtLvlz80NY+l +So0mX9qRAgMBAAECggEAOMg4kbH8GrAuqwlSM4thswOK7ZLZUSCmXMq+3qP4HpjU +cEE5wRLhKz6G6hBAYXswsqWa2zfA9JTanD1hHk8DlvWM2weP/84nIWMxF33DpnyU +2nh9jZCTSBznZBOUi0t03ake1nSC+JL7NmdsmBSL+IXlwkfD5qDIFUCrZgmzHZGT +aZNZgS5PL8bf8Prfif/a27zW29cwPV2geX6vnfSouobXc6PX3HGi2++BVNiCY6oW +Z7BJfQ5zRIgyuZTLmYpU5RyEzR/zoIVllcPu07/6Yhp9ptJ/DabOV1Sje3vKpm/i +WWQ0jeZj6yUq1j48xKfcfrV8uE8Zbc6zUGA1F2ZevQKBgQDZhMBY5qVk8mNj7yW3 +pdtUKEn2jKaFoItmU9dkn99SilfKGt9ip1QmijuaUs8ZE8z4w4kg4JLnDgFIWvRP +UfSeDy/ah+7gofMDQrlKuhD8eAO2RIKjzHRT1HNCQOxnY9fsh4j1lNYpU75KA1mz +BdkyzRpYnqLAOw73lyfao24BGwKBgQDPQ1GYw1cUbnTNSrWPZkNDDnouWBXInaQt +lrgFFDC4z9ZA1KDKq5nKUPlG6nTia3U/tCy0nCJGD+hKZDxymCmVUcXou9vOlZ7X +TCEpLsWtLlEOcEuCThx0OZp36D+X1dsjuvpi5CsnslJWwlWvANvI+w+ByykHhXz7 +3nUDLWI5wwKBgGQ7JsMQbRBKHQB0t4WbeKib9BEXGLiklPevFKa6gJaxRujLXzo/ +bqhftD1VgTbGCAJtX+f1c9vieTbVKpTOaBDZYKyrTKjYF3neKjHD8YXU66j2gthl +owjp8b6K2iR+PoYwoiy/y7u5agsC5jd3L3GYT1acqtQ3opr2XRgDjPIXAoGBAIXi +x6/156eUHrGKpDQo7CRCEt0jG5dHdgnZBbCKNVr9Lzsb325sYWEW46BSzgSBQ/FN +018sSNuXZQfBLmccMih59W19BOWzMzOCwx0WUK2pcMTx92UKTkkp+MWiaooLpI61 +Nw9wswvmnlfbG3x8An4W6BKBCVUJfw44yr+trnj/AoGAQ69rzKiCZUbvSoQvdMis +9JsEuT2R5vDJiJI7g6kDbCcaYDxoTx1893DVUrM3hqWt5G4PPUH0aaXZc+mj2ra3 +Tu+N95ispKfIWdyVvC55ERvRwE1tHnEWbTEejpWeZlSIpUv98gsc4/gRl4vvLXp7 +S+ilLb47MJk/uiYp4ZoUDmo= +-----END PRIVATE KEY----- + diff --git a/Docker/app.hehelucky.cn.pem b/Docker/app.hehelucky.cn.pem new file mode 100644 index 0000000..c7ff17c --- /dev/null +++ b/Docker/app.hehelucky.cn.pem @@ -0,0 +1,63 @@ +-----BEGIN CERTIFICATE----- +MIIFJjCCBA6gAwIBAgISA547rTfABP71VZz4BXZeJn+0MA0GCSqGSIb3DQEBCwUA +MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD +EwJSMzAeFw0yMTA3MTkwODI1MzNaFw0yMTEwMTcwODI1MzFaMBsxGTAXBgNVBAMT +EGFwcC5oZWhlbHVja3kuY24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB +AQCwG4qbB2yLqgAo/yejabGADrTv/lbEQtHSxsDDz6u2HFAd63QHLgDTR7v4SOmx +d0wwSy3XNFOMZbT5Okbqtzl8IYgkZfJ/EByuuZsp8KbyRtDTQHB/6SMnVt61QC4e +svzNlvhHFRXInC7HwhrdZsuqGo8tEuOrApbOhQ3CTMxYZ7ok3gtzcVOqaCyrRiY9 +F7tfOe6zHQ5kWJ8D1XZuieFNvqh1l42B9BMcrg5rh8rYg9LYWN3HJBR5lFLi8qWF +cTq5yp7a7yvozIcKM5CngzqeHZ5OSm8iWo4ZTuD9lfSdka8y1LucNdtMLMhnr7wA +lZ6vjtLvlz80NY+lSo0mX9qRAgMBAAGjggJLMIICRzAOBgNVHQ8BAf8EBAMCBaAw +HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD +VR0OBBYEFGkuA/olT2mOsdGSewk+0iXXm0gWMB8GA1UdIwQYMBaAFBQusxe3WFbL +rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov +L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v +cmcvMBsGA1UdEQQUMBKCEGFwcC5oZWhlbHVja3kuY24wTAYDVR0gBEUwQzAIBgZn +gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s +ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQCUILwejtWN +bIhzH4KLIiwN0dpNXmxPlD1h204vWE2iwgAAAXq+Fb5zAAAEAwBGMEQCIEjaWO5L +PspCGMH+On/lf2qLSZkHZ4ZOMJdE3ceUwrwTAiA73tUK6LTvO6oTnYCbAU86sT7A +WjatVO0XEna0wbQeVQB3AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDX +AAABer4VvpsAAAQDAEgwRgIhAKYM5t/UzmXqXROsNjrcAgragfw93LwkbxNIombW +CI3MAiEAyLkoqcJcRiJPFpPzqKsFmoFRP8UPWpN6b1QHci/4Vk4wDQYJKoZIhvcN +AQELBQADggEBAEkT7txu0EED/c8SP0o1Mk3HOMAQon81GS3szh0Ahx0PlxQxhmmt ++QKjGVegrs7xj++De3fR6xw85CsmAWTa1Yw9+oYOUz5tI/WbpmeyukkL5p6V+lNF +8INZ5xrdiO66prUcCaj3V2d7/ECCjtnIHNBxUn9fq84QVBXB2+mVa1qj2vc9DzL4 +fzh4pZEGFj+E5cEFmV05dXTzQJpYJntU74c05xue3dk0V6/WzY6lIQm3yx77zBBs +LkJOjfLOu9rVzoxvJZCR/ZWsmVTs1GEIVlUOEjnMVe9ev2wcUNR4989xUWbXbSLj +x2q9mavvHtgyTBzrrlFVpqZyrCU1+DFYieI= +-----END CERTIFICATE----- + + +-----BEGIN CERTIFICATE----- +MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw +TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh +cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw +WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg +RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP +R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx +sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm +NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg +Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG +/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC +AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB +Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA +FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw +AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw +Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB +gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W +PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl +ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz +CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm +lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4 +avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2 +yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O +yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids +hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+ +HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv +MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX +nLRbwHOoq7hHwg== +-----END CERTIFICATE----- + diff --git a/Docker/build.sh b/Docker/build.sh new file mode 100644 index 0000000..461cbf5 --- /dev/null +++ b/Docker/build.sh @@ -0,0 +1,13 @@ +#!/bin/bash +# +# +w_path=`pwd` +s_path=`dirname ${w_path}` + +#first build fir_client +docker pull node:14.17.3 +docker run --rm -v ${s_path}/fir_client:/fir_client -it node:14.17.3 sh /fir_client/build.sh + +## secode build fir_ser +cd ../ +docker build . -t flyapps diff --git a/Docker/end.sh b/Docker/end.sh new file mode 100644 index 0000000..5e194c6 --- /dev/null +++ b/Docker/end.sh @@ -0,0 +1,6 @@ +#!/bin/bash +sed -i '/^\[program:init/,$d' /etc/supervisor/conf.d/flyapps.conf +supervisorctl stop init &>/dev/null +supervisorctl stop end &>/dev/null +echo 'init end------------------------------------------' +exit 0 diff --git a/Docker/flyapps-vhost.conf b/Docker/flyapps-vhost.conf new file mode 100644 index 0000000..1e4c693 --- /dev/null +++ b/Docker/flyapps-vhost.conf @@ -0,0 +1,76 @@ +proxy_set_header X-Forwarded-For $remote_addr; +client_max_body_size 2000m; +#keepalive_timeout 300; + +server +{ + listen 80; + listen 443 ssl http2; + server_name app.hehelucky.cn; + index index.html index.htm default.htm default.html; + root /data/flyapps/fir_client; + + if ($server_port !~ 443){ + rewrite ^(/.*)$ https://$host$1 permanent; + } + + ssl_certificate /data/flyapps/app.hehelucky.cn.pem; + ssl_certificate_key /data/flyapps/app.hehelucky.cn.key; + ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; + ssl_prefer_server_ciphers on; + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 10m; + error_page 497 https://$host$request_uri; + +# 如果未开启token 授权,可以启动下面配置,直接让nginx读取资源,无需 uwsgi 进行转发 +# location ~ ^/download/ { +# root /data/flyapp/fir_ser/; +# rewrite ^/download/(.*) /files/$1 break; +# } + # 如果使用cdn,需要配置该选项 + set_real_ip_from 0.0.0.0/0; + real_ip_header X-Forwarded-For; + + location ~ ^/(download|api|files|udid|captcha) { + uwsgi_send_timeout 300; # 指定向uWSGI传送请求的超时时间,完成握手后向uWSGI传送请求的超时时间。 + uwsgi_connect_timeout 300; # 指定连接到后端uWSGI的超时时间。 + uwsgi_read_timeout 300; # 指定接收uWSGI应答的超时时间,完成握手后接收uWSGI应答的超时时间。 + include uwsgi_params; + uwsgi_pass 127.0.0.1:8899; + uwsgi_param UWSGI_SCRIPT wsgi; + } + + location ~ ^/(index|apps|user|login|register|supersign|home) { + try_files $uri $uri/ /index.html; + } + + + location / { + try_files $uri $uri/ /short.html; + } + + + #禁止访问的文件或目录 + location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md) + { + return 404; + } + + + location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ + { + expires 30d; + error_log off; + access_log /dev/null; + } + + location ~ .*\.(js|css)?$ + { + expires 12h; + error_log off; + access_log /dev/null; + } + access_log /data/logs/flyapps.access.log; + error_log /data/logs/flyapps.error.log; +} diff --git a/Docker/flyapps.conf b/Docker/flyapps.conf new file mode 100644 index 0000000..c814be3 --- /dev/null +++ b/Docker/flyapps.conf @@ -0,0 +1,58 @@ +[program:nginx] +command=/usr/sbin/nginx -g 'daemon off;' +stdout_logfile=/data/logs/nginx.log +stderr_logfile=/data/logs/nginx.err +#user=nginx +autostart=true +autorestart=true +startsecs=1 + +[program:redis] +command=/usr/bin/redis-server /etc/redis/redis.conf +stdout_logfile=/data/logs/redis.log +stderr_logfile=/data/logs/redis.err +autostart=true +autorestart=true +startsecs=3 +daemonize=no +[program:flyapps] +directory=/data/flyapps/fir_ser/ +command=/usr/local/bin/uwsgi --ini uwsgi.conf +user=www-data +stdout_logfile=/data/logs/flyapps.log +stderr_logfile=/data/logs/flyapps.err +autostart=true +autorestart=true +startsecs=3 +daemonize=no + +[program:celery] +directory=/data/flyapps/fir_ser/ +command=/usr/local/bin/celery -A fir_ser worker --beat --scheduler django --loglevel=debug +user=www-data +stdout_logfile=/data/logs/celery.log +stderr_logfile=/data/logs/celery.err +autostart=true +autorestart=true +startsecs=3 +daemonize=no + +[program:init] +startsecs=1 +stdout_logfile=/data/logs/init.log +stderr_logfile=/data/logs/init.err +command=/data/flyapps/init.sh +user=www-data +autostart=true +autorestart=false +daemonize=no + +[program:end] +startsecs=1 +stdout_logfile=/data/logs/init.log +stderr_logfile=/data/logs/init.err +command=/data/flyapps/end.sh +autostart=true +autorestart=false +daemonize=no + diff --git a/Docker/init.sh b/Docker/init.sh new file mode 100644 index 0000000..6a0edfd --- /dev/null +++ b/Docker/init.sh @@ -0,0 +1,5 @@ +#!/bin/bash +cd /data/flyapps/fir_ser/ +python manage.py makemigrations && python manage.py migrate +python manage.py loaddata dumpdata.json +exit 0 diff --git a/Docker/start.sh b/Docker/start.sh new file mode 100644 index 0000000..2f033af --- /dev/null +++ b/Docker/start.sh @@ -0,0 +1,10 @@ +#!/bin/bash +# +# +docker network create flyapps +docker run --net flyapps --name mariadb -e MARIADB_ROOT_PASSWORD=root -d mariadb:10.5 +docker exec -it mariadb mysql -proot -e 'create database flyapp default character set utf8 COLLATE utf8_general_ci;' +docker exec -it mariadb mysql -proot -e "grant all on flyapp.* to flyuser@'%' identified by 'KGzKjZpWBp4R4RSa';" + + +docker run --net flyapps --link mariadb:mariadb -p 443:443 --name flyapps -d flyapps diff --git a/Docker/uwsgi.conf b/Docker/uwsgi.conf new file mode 100644 index 0000000..0ae31c6 --- /dev/null +++ b/Docker/uwsgi.conf @@ -0,0 +1,41 @@ +[uwsgi] +# 对外提供 http 服务的端口 +#http = 127.0.0.1:8899 + +#listen = 512 # set max connections to 1024 in uWSGI + +#the local unix socket file than commnuincate to Nginx 用于和 nginx 进行数据交互的端口 +socket = 127.0.0.1:8899 + +# the base directory (full path) django 程序的主目录 +chdir = /data/flyapps/fir_ser + +# Django's wsgi file +wsgi-file = fir_ser/wsgi.py + +touch-reload = fir_ser +#uwsgi 内部解析数据包大小为4K ,自己可以增加64k +buffer-size = 65536 +# maximum number of worker processes +processes = 8 + +#thread numbers startched in each worker process +threads = 4 + +#monitor uwsgi status 通过该端口可以监控 uwsgi 的负载情况 +stats = 127.0.0.1:9191 + +# 如果以nginx用户运行,则需要授权 ruby 权限 chmod ug+s /usr/local/rvm/rubies/ruby-2.7.0/bin/ruby /usr/bin/isign 否则,会导致登录信息保存失败 +uid=www-data +gid=www-data + +# clear environment on exit +vacuum = true + +enable-threads = true + +# 后台运行,并输出日志 +#daemonize = ./flyapp.log + +# 为了让阿里云cdn可以缓存数据 +del-header=cache-control diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..4f8254c --- /dev/null +++ b/Dockerfile @@ -0,0 +1,46 @@ +FROM python:3.6.14-slim + +# Fixes some weird terminal issues such as broken clear / CTRL+L +ARG PIP_MIRROR=https://mirrors.aliyun.com/pypi/simple + +RUN sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list \ + && sed -i 's/security.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list \ + && apt update + +RUN apt-get install g++ wget nginx redis supervisor -y +RUN apt-get install libssl-dev openssl libmariadb-dev sqlite -y +RUN rm -rf /var/lib/apt/lists/* + + +RUN mkdir -pv /data/flyapps +RUN mkdir -pv /data/logs/ + +COPY fir_client/dist /data/flyapps/fir_client + +RUN cd /opt/ && wget https://github.com/nineaiyu/zsign/archive/refs/tags/v1.1.1.tar.gz +RUN cd /opt/ && tar xvf v1.1.1.tar.gz && cd zsign-1.1.1/ && g++ *.cpp common/*.cpp -lcrypto -O3 -std=c++11 -o zsign && cp zsign /usr/bin/ +# install pip +COPY fir_ser /data/flyapps/fir_ser +RUN cd /data/flyapps/fir_ser/ && pip install -U setuptools pip -i ${PIP_MIRROR} --ignore-installed && pip install --no-cache-dir -r requirements.txt -i ${PIP_MIRROR} && pip install --no-cache-dir uwsgi -i ${PIP_MIRROR} + +RUN rm -rf /var/cache/yum/ + +COPY Docker/flyapps.conf /etc/supervisor/conf.d/flyapps.conf +COPY Docker/uwsgi.conf /data/flyapps/fir_ser/uwsgi.conf +COPY Docker/flyapps-vhost.conf /etc/nginx/conf.d/flyapps-vhost.conf +COPY Docker/app.hehelucky.cn.pem /data/flyapps/app.hehelucky.cn.pem +COPY Docker/app.hehelucky.cn.key /data/flyapps/app.hehelucky.cn.key +RUN chown -R www-data:www-data /data/flyapps/fir_ser/ + + +RUN sed -i "/^daemonize/s@yes@no@" /etc/redis/redis.conf + + +#RUN cd /data/flyapps/&& source py3/bin/activate && cd fir_ser/ && python manage.py makemigrations && python manage.py migrate +COPY Docker/init.sh /data/flyapps/init.sh +COPY Docker/end.sh /data/flyapps/end.sh +EXPOSE 443 +#ENTRYPOINT ["/data/flyapps/init.sh"] +#ENTRYPOINT ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf", "-n"] +CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf", "-n"] + diff --git a/fir_ser/config.py b/fir_ser/config.py new file mode 100644 index 0000000..9b95032 --- /dev/null +++ b/fir_ser/config.py @@ -0,0 +1,286 @@ +#!/usr/bin/env python +# -*- coding:utf-8 -*- +# project: 7月 +# author: NinEveN +# date: 2021/7/19 + +API_DOMAIN = "https://app.hehelucky.cn" +WEB_DOMAIN = "https://app.hehelucky.cn" +MOBILEPROVISION = "https://ali-static.jappstore.com/embedded.mobileprovision" + + +class BASECONF(object): + DEBUG = True + + SECRET_KEY = 'j!g@^bc(z(a3*i&kp$_@bgb)bug&^#3=amch!3lz&1x&s6ss6t' + + ALLOWED_HOSTS = ['127.0.0.1', 'synchrotron', '172.16.133.34', 'ali.cdn.flyapp.dvcloud.xin', + 'api.src.flyapp.dvcloud.xin'] + + SERVER_DOMAIN = { + 'IOS_PMFILE_DOWNLOAD_DOMAIN': { + "domain_name": API_DOMAIN.split("://")[1], + 'is_https': True if API_DOMAIN.split("://")[0] == "https" else False, + }, # 验证码,ios 描述文件和plist文件下载域名,该域名用于后端,一般为api访问域名 + 'POST_UDID_DOMAIN': API_DOMAIN, # 超级签名 安装签名时 向该域名 发送udid数据,该域名用于后端,一般为 api 访问域名 + # 'REDIRECT_UDID_DOMAIN': 'https://app.hehelucky.cn', # 超级签名 安装完成之后,跳转域名,该域名为前端web访问域名,如果用户定义了自己的域名,则跳转用户域名 + 'FILE_UPLOAD_DOMAIN': API_DOMAIN, # 本地文件上传域名,使用本地存储必须配置 + } + + # geetest 配置信息 + GEETEST_ID = "d3f3cf73200a70bd3a0c32ea22e5003a" + GEETEST_KEY = "6f4ab6185c230a4b1f8430f28ebe4804" + GEETEST_CYCLE_TIME = 10 + GEETEST_BYPASS_STATUS_KEY = "gt_server_bypass_status" + GEETEST_BYPASS_URL = "http://bypass.geetest.com/v1/bypass_status.php" + + # 访问速率限制 + DEFAULT_THROTTLE_RATES = { + 'ShortAccessUser1': '180/m', + 'ShortAccessUser2': '2000/h', + 'LoginUser': '200/m', + 'RegisterUser1': '40/m', + 'RegisterUser2': '300/h', + 'GetAuthC1': '60/m', + 'GetAuthC2': '300/h', + 'InstallAccess1': '10/m', + 'InstallAccess2': '20/h', + 'ReceiveUdid1': '10/h', + 'ReceiveUdid2': '20/h', + } + + +class DBCONF(object): + host = '127.0.0.1' + port = '3306' + password = 'KGzKjZpWBp4R4RSa' + user = 'flyuser' + name = 'flyapp' + + +class CACHECONF(object): + host = '127.0.0.1' + port = '6379' + password = '' + + +class AUTHCONF(object): + # 注册方式,如果启用sms或者email 需要配置 THIRD_PART_CONFIG.sender 信息 + REGISTER = { + "enable": True, + "captcha": False, # 是否开启注册字母验证码 + "geetest": True, # 是否开启geetest验证,如要开启请先配置geetest + "register_type": { + 'sms': True, # 短信注册 + 'email': True, # 邮件注册 + 'code': False, # 邀请码注册,邀请码必填写,需要和短信,邮件一起使用 + } + } + # 个人资料修改修改也会使用该配置 + CHANGER = { + "enable": True, + "captcha": False, # 是否开启注册字母验证码 + "geetest": True, # 是否开启geetest验证,如要开启请先配置geetest + "change_type": { + 'sms': False, # 短信注册 + 'email': True, # 邮件注册 + 'code': False, # 邀请码注册,邀请码必填写,需要和短信,邮件一起使用 + } + } + LOGIN = { + "captcha": False, # 是否开启登录字母验证码 + "geetest": True, # 是否开启geetest验证 + "login_type": { + 'sms': True, # 短信登录 + 'email': True, # 邮件登录 + 'up': True, # 密码登录 + } + } + + +class STORAGECONF(object): + STORAGE = [ + { + 'name': 'local', + 'type': 0, + 'auth': { + 'domain_name': API_DOMAIN.split("://")[1], + # 正式环境需要填写正式的访问域名,如果配置cdn,可以填写cdn的域名,仅支持阿里云 cdn, + # 开启cdn之后,如果该域名和服务器域名不相同,需要设置阿里云cdn 缓存配置,自定义HTTP响应头 添加 Access-Control-Allow-Origin * 才可以 + 'is_https': True if API_DOMAIN.split("://")[0] == "https" else False, + 'download_auth_type': 1, # 0:不开启token 1:本地token 2:cdn 开启cdn,并且使用本地存储,使用阿里云cdn进行url鉴权, + 'cnd_auth_key': '', # 当cdn为阿里云并且 download_auth_type=2 的时候 生效,需要 开启阿里云OSS私有Bucket回源 + }, + 'active': True + }, + { + 'name': 'aliyun', + 'type': 2, + 'auth': { + 'access_key': 'LTAI4FkbTR', + 'secret_key': '2iLIxy9', + 'bucket_name': 'fge', + 'sts_role_arn': 'ap-sage', + 'endpoint': 'oss-cn-beijing-internal.aliyuncs.com', # 服务器和oss在同一个地区,填写内网的endpoint + 'is_https': True, + 'domain_name': 'aoud.xin', + 'download_auth_type': 1, # 1:oss 2:cdn + 'cnd_auth_key': '', # 当cdn为阿里云并且 download_auth_type=2 的时候 生效,需要 开启阿里云OSS私有Bucket回源 + }, + 'active': False + }, + { + 'name': 'qiniuyun', + 'type': 1, + 'auth': { + 'access_key': 'mT4fiJ', + 'secret_key': '0G9fXfhYLynv', + 'bucket_name': 'fge', + 'is_https': False, + 'domain_name': 'foud.xin' + }, + 'active': False + } + ] + + +class SENDERCONF(object): + SENDER = [ + { + 'name': 'email', + 'type': 0, + 'auth': { + 'email_host': 'smtp.126.com', + 'email_port': 465, + 'use_tls': False, + 'use_ssl': True, + 'username': 'flyapps@126.com', + 'password': 'GGHFEUMZBRZIFZGQ', + 'form': 'FlyApp Validation ', + 'subject': '%(code)s验证', + 'template_code': { + 'login': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在登录,若非本人操作,请勿泄露。', + 'change': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在尝试变更重要信息,请妥善保管账户信息。', + 'register': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在注册成为新用户,感谢您的支持!', + } + }, + 'active': True + }, + { + 'name': 'aliyun', + 'type': 1, + 'auth': { + 'access_key': 'xxxx', + 'secret_key': 'xxxx', + 'region_id': 'cn-hangzhou', + 'sing_name': 'FLY应用分发', + 'template_code': { + 'login': 'SMS_88888', + 'change': 'SMS_88888', + 'register': 'SMS_8888', + } + }, + 'active': False + }, + { + 'name': 'jiguang', + 'type': 2, + 'auth': { + 'app_key': '93e1a9f71db4f044de4db34a', + 'master_secret': '5f996ee39c7eb52906510cc2', + 'sign_id': '18138', + 'template_code': { + 'login': '1', + 'change': '1', + 'register': '1', + } + }, + 'active': True + }, + ] + + +class IPACONF(object): + MOBILECONFIG_SIGN_SSL = { + # 描述文件是否签名,默认是关闭状态;如果开启,并且ssl_key_path 和 ssl_pem_path 正常,则使用填写的ssl进行签名,否则默认不签名 + 'open': False, + 'ssl_key_path': '/data/cert/%s.key' % API_DOMAIN.split("://")[1], + 'ssl_pem_path': '/data/cert/%s.pem' % API_DOMAIN.split("://")[1] + } + DEFAULT_MOBILEPROVISION = { + # 默认描述文件路径或者下载路径,用户企业签名或者超级签名 跳转 [设置 - 通用 - 描述文件|设备管理] 页面 + # 如果配置了path路径,则走路径,如果配置了url,则走URL,path 优先级大于url优先级 + 'enterprise': { + 'url': MOBILEPROVISION + }, + 'supersign': { + # 超级签名,如果self 为True,则默认用自己的描述文件,否则同企业配置顺序一致,自己的配置文件有时候有问题 + 'self': False, + 'url': MOBILEPROVISION + } + } + + +class PAYCONF(object): + PAY_SUCCESS_URL = '%s/user/orders' % WEB_DOMAIN # 前端页面,支付成功跳转页面 + PAY_CONFIG = [ + { + 'NAME': 'alipay', + 'TYPE': 'ALI', + 'ENABLED': True, + 'AUTH': { + 'APP_ID': "2021002138691845", + 'APP_PRIVATE_KEY': '''-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAhqf2mwftoxZDNpl4eWsQ6mEfXgMlNPr6jv72ecA4hbKWqChXQmGS1T+0VsRTSoOXRDlu1MMqkTGISzHvmGb7Gmw+Myfs/ojoonD9r8fODvIo1MHolFBhr3GNQu7tqBlVJ76QgiYft+c4kkqCguuyCrd3Te6C5zCIuh6O98r4D3A3LFcm6OdScWGcfEbR+FUv+jSi2oezHeSpkhhpHGBLSsI0L9JOdHetdUE/TwN8V1HABdpnPXtp9SIu6ioIrrligX1ZRlwht2YUt0BPqPp/ApLdRIsqlhD4/ejmtMlaRqqiN6PulEThBew/qaLVSXIr2HCSXtwbki3pFMFOcsjF2wIDAQABAoIBADp4sQL83FnXDvSki8XdkgjUh7RhFUT+PtLdL9YKfADCXd1DNzDiAcqL0RlkQu62WXcMoW3OGavWoGJWmr3I6fy9R/0atzSH6syu19n+nyGqUcShNwdAKErwufB4o8Y8yddqToHVYCyRQOV1aVrEUhmJNUsn6LvPPW/kWRyMjE7XQDFHpL5/Ly7pXe+f9Btm37ZuePTPsm65P88C3GznjZxXhY1LBWFKLPG1470xdReduyeJFZS/TmK0nUxLwkACm9Gfvp7S2KJ3okUXohsGBAgJ68B9YeGiuIJiZhH2DZ1pm3/R9bSpOX3H+6vjaCsacXT5w7LZB+O0Vkthcm9vqeECgYEAvozFkIkFXXCEmCr3QVCJs4Fc6onbXEJU45xxubPhkA1wwwPrSqdubo4RHvNIus45Fn4mLzuQsaPRyJJZajvaKWC00GxhChMYj+nWgkAmABPKGwkMxzjC7wvEJkGyt87fHpK1XMFWQgfJ42VwUtmyemCMuh+A2SOekIJay93xTtkCgYEAtOhmQ4pu2cyqTzT+SD7p/VnS4sNqqM4I8NSvTuLkEo2IHnUj7YG6XoPZjn35dBvYUWWN2dwgfHXGEEzCOIwfy8GPA4eoKCDNEkMvoBVLdrEzMqg5QwG5GsIGvOuFnAzAw+D5YwEym/qmC2oBbat5jsAGT2rMmU5MnaS8a7lvcdMCgYEAiusQQb5TZfrZACMa3cg8i9y9A9R7UzicsM/mbW+B+8aAtfxOdr+4F+uE+d594IrmPcq8ReUUKR34nFRt0bBO7amuSOEqofCoEIt3MsBXs+i5iJpBcaClJSeb2hQ9mhm8uopUpInjPAJ3okva5twFbYikMDE1e5inSk1uqoBlI4kCgYB4rzDJjeg1U9upy2h3OcFPSkTtEgBtbEV6o+fvcF1GIzTTXMIDB7AUrVDNRizL0GeWpXDkDX1+ifL/nLVUk+YCP7XwXOdJHdiwfjGfUZVuMPg+qwrIMLYTq6xjC5uuZrOR+NtluL7SX3u10ZnyV5pYKLIM+OpUu29RGzy3gJVgEQKBgCC9vXS7P9RHTAxYEG4WOzv0tjFUtPOsaHenvNbc7nVe2Kkre0/TO+EtnuhINmJp2y5UEve6cLK2sPnbT8raarjPuomDfN0hwEx3jZd+rPdB/tdRH0LMLBu28TlzHllJYjbINn+NXc0adbqeuA4ziXTZow5yX5J+i9dy55A1bvie +-----END RSA PRIVATE KEY-----''', + 'ALI_PUBLIC_KEY': '''-----BEGIN CERTIFICATE----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkru1ulQV1v4q+q38nyzgkdd3evf7C1/Ipu6K+ZFb5FiuxJ7mildkBSuKz/8+TRd+tjgk2lfc2ehK5pja3cxDO/nb25sBoWiU09rtxgXLehLsgRRhatbICrlOnYxg5aiB5odAp3NMRqore4lnVYwfIyL9M49I0G/NbQzYjUQvAQJsnHwc6a6Kuqi1CwR1WXI0sDF9w7KXC4vRFFIUTwI4bVq4HQWI7NhbgEajHM/j6D6Bh/OMcTYnJJzCja0WmZRe5flfCsELlPESOCWUMbYoaNfBzpNvvyOpmRgs9jgy2WY9SeaB9hxwkpr8tOd2Sc7j3221JKCyDaFAX+4zPy7/fQIDAQAB +-----END CERTIFICATE-----''', + 'APP_NOTIFY_URL': '%s/api/v1/fir/server/pay_success' % API_DOMAIN, # 支付支付回调URL + 'RETURN_URL': PAY_SUCCESS_URL, # 支付前端页面回调URL + 'SUBJECT': '向 FLY分发平台 充值', + } + }, + { + 'TYPE': 'WX', + 'NAME': 'wxpay', + 'ENABLED': True, + 'AUTH': { + 'APP_ID': "wx390e5985fd3699e6", + 'MCH_ID': "1608486112", + 'SERIAL_NO': "27DADA4D2921CDD66B8B20A68276F09B90754922", + 'APP_PRIVATE_KEY': '''-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDbXhNoHljrkS8T +jXg3+tTkaoOol8FDt0jSGckhzX46gkS16CWYwTthBKurfFtynsJe4uDOphS1ge/r +QEU3+rWNxqa8o6gHSpp2UTYAz/1oYOlXuSa4NA1uD47lmVZJzad2ybWDSsoeRjFj +c+X6F0ZiE3FmdN1iHz8NmbP99foih4smv15X+wX5DrsuLuPVHNB4D0fqvY7P5PO3 +wUQXWQNezCYzpPoXX2H/UkyFEFZhWk6/9z3aAkYmqfd6IWPHewOqnVoQRKmo5bXb +yWbB+QIl/HcSfNtq869s5lLGR2Rl2UX8IFXCcXnRPhSAVIeWfXN26Pc9dz9N4VTU +yiZ8Y6AHAgMBAAECggEABdS0U1orJufPBogGIAbMzd1+7mZKPtCKYPtKe1mI92kr +BmLLTQol1+hV39MIYz2RERCaxSNo/YIcrHYi4OALH1+eYvk+qCL1hBuYgeEFbVbW +HPzQ6KiJitljBPtUbdXHk8K8zmaYhMF84pXcEQ+5UTYPF5gXoloORQBG5oM5SN2g +2GTgYw1cpDzzRRwnmpvYd1ZydYNj8m6k7I2L1pwzRS/6/whz1sScpfh+91w1IVM0 +WT+pPSdiVtQ7ktmvcTrWj7eNIbcsptZ1QgSV3UHkU0xzLG9N1TqJdHOquunXRS7V +iw/4NgXveXSTSQrmmZVS+Kdyc+z1iDqwOXmE7hjioQKBgQD7js+40NCAPLYXEfer +UFvZ6kem9mJIzAUdeTdK4BjYJrcU+UsXRmcWJIPI9HWSr31f/fSfu2SKyBa6+dFF +SeNHuHPPqQAXrsNuhFG1wcKoNybk7KrsQlXheK7br42565Tegz3UXOKMrnPPlukH +ZZdlYmwBFjEJvIr9jxJvJoW6qQKBgQDfPb697vR8ruLaecPmsq920iC3AQRanYFK +dW6U98JkCN9A/LXA1jGyDTEhtlja+5Ylp0M1EnlcZ079Jnvek5haSNnD0xb1nMy8 +P/o0/eWWArTgfjfiJeq1tSdrinGhNz0+Vty74wnbS+5P18H23I5jBlGX5hyNkU4L +axUfJM9jLwKBgCo/1xVkRNB04eRICT/FlFeqKHSbRvCRC37iv+2ca6/J+M/V+s2i +7mdipJuYqzKCtNztayt0rrM8Xczzbjlj6n8+NH05FiHkIUCriomrTEUyVh72vNJH +ZeMjgMK23mfOcEda5YSIQSh9mEfSQbsTTfUiLZ+VGZFYEEP7xo3Se31ZAoGBAJas +LPYytq8EtrYwowktJwJydoQt2otybRYdRmKjCn/MASrypZWeu/Hpt3SCh1xdnAyT +5OeILYMxcv2noMksIxMkwl3KNl/V0dVo9O4ZQ4DJGN3AMuWfI9g6iX2q9mCSUPKn +W9owNbHegN1AyXhdinjJhf6Y4EKohN1uC9Z2WMcfAoGAW90Z2LkqG2fen+R62syP +aaInnu9bitb9rVENCNGXQHdWmIYBMM5zrg8nX8xNJ+yeGQhgxE+YeSq4FOpe0JkA +daWIhg++OHN2MBRutj7oL/AFAxyu467YA5+itEJLHNATbOr/s13S66nePNXox/hr +bIX1aWjPxirQX9mzaL3oEQI= +-----END PRIVATE KEY-----''', + 'API_V3_KEY': '60DbP621a9C3162dDd4AB9c2O15a005L', + 'APP_NOTIFY_URL': '%s/api/v1/fir/server/pay_success' % API_DOMAIN, # 支付支付回调URL + 'RETURN_URL': PAY_SUCCESS_URL, # 支付前端页面回调URL + 'SUBJECT': '向 FLY分发平台 充值', + } + } + ] diff --git a/fir_ser/fir_ser/settings.py b/fir_ser/fir_ser/settings.py index eb2594e..c38e804 100644 --- a/fir_ser/fir_ser/settings.py +++ b/fir_ser/fir_ser/settings.py @@ -11,6 +11,7 @@ https://docs.djangoproject.com/en/3.0/ref/settings/ """ import os +from config import * # Build paths inside the project like this: os.path.join(BASE_DIR, ...) BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__))) @@ -19,13 +20,12 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__))) # See https://docs.djangoproject.com/en/3.0/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! -SECRET_KEY = 'j!g@^bc(z(a3*i&kp$_@bgb)bug&^#3=amch!3lz&1x&s6ss6t' +SECRET_KEY = BASECONF.SECRET_KEY # SECURITY WARNING: don't run with debug turned on in production! -DEBUG = True +DEBUG = BASECONF.DEBUG -ALLOWED_HOSTS = ['127.0.0.1', 'synchrotron', '172.16.133.34', 'ali.cdn.flyapp.dvcloud.xin', - 'api.src.flyapp.dvcloud.xin'] +ALLOWED_HOSTS = BASECONF.ALLOWED_HOSTS # Application definition @@ -85,11 +85,11 @@ DATABASES = { # }, 'default': { 'ENGINE': 'django.db.backends.mysql', - 'NAME': 'flyapp', - 'USER': 'flyuser', - 'PASSWORD': 'KGzKjZpWBp4R4RSa', - 'HOST': '127.0.0.1', - 'PORT': '3306', + 'NAME': DBCONF.name, + 'USER': DBCONF.user, + 'PASSWORD': DBCONF.password, + 'HOST': DBCONF.host, + 'PORT': DBCONF.port, # 设置MySQL的驱动 # 'OPTIONS': {'init_command': 'SET storage_engine=INNODB'}, 'OPTIONS': {'init_command': 'SET sql_mode="STRICT_TRANS_TABLES"', 'charset': 'utf8mb4'} @@ -122,19 +122,7 @@ REST_FRAMEWORK = { 'DEFAULT_THROTTLE_CLASSES': [ 'api.utils.throttle.LoginUserThrottle', ], - 'DEFAULT_THROTTLE_RATES': { - 'ShortAccessUser1': '180/m', - 'ShortAccessUser2': '2000/h', - 'LoginUser': '200/m', - 'RegisterUser1': '40/m', - 'RegisterUser2': '300/h', - 'GetAuthC1': '60/m', - 'GetAuthC2': '300/h', - 'InstallAccess1': '10/m', - 'InstallAccess2': '20/h', - 'ReceiveUdid1': '10/h', - 'ReceiveUdid2': '20/h', - } + 'DEFAULT_THROTTLE_RATES': BASECONF.DEFAULT_THROTTLE_RATES } # Internationalization # https://docs.djangoproject.com/en/3.0/topics/i18n/ @@ -170,11 +158,11 @@ AUTH_USER_MODEL = "api.UserInfo" CACHES = { "default": { "BACKEND": "django_redis.cache.RedisCache", - "LOCATION": "redis://127.0.0.1:6379/1", + "LOCATION": "redis://%s:%s/1" % (CACHECONF.host, CACHECONF.port), "OPTIONS": { "CLIENT_CLASS": "django_redis.client.DefaultClient", "CONNECTION_POOL_KWARGS": {"max_connections": 100}, - "PASSWORD": "", + "PASSWORD": CACHECONF.password, "DECODE_RESPONSES": True }, "TIMEOUT": 60 * 15 @@ -190,143 +178,22 @@ REST_FRAMEWORK_EXTENSIONS = { } # geetest 配置信息 -GEETEST_ID = "d3f3cf73200a70bd3a0c32ea22e5003a" -GEETEST_KEY = "6f4ab6185c230a4b1f8430f28ebe4804" -GEETEST_CYCLE_TIME = 10 -GEETEST_BYPASS_STATUS_KEY = "gt_server_bypass_status" -GEETEST_BYPASS_URL = "http://bypass.geetest.com/v1/bypass_status.php" +GEETEST_ID = BASECONF.GEETEST_ID +GEETEST_KEY = BASECONF.GEETEST_KEY +GEETEST_CYCLE_TIME = BASECONF.GEETEST_CYCLE_TIME +GEETEST_BYPASS_STATUS_KEY = BASECONF.GEETEST_BYPASS_STATUS_KEY +GEETEST_BYPASS_URL = BASECONF.GEETEST_BYPASS_URL # 注册方式,如果启用sms或者email 需要配置 THIRD_PART_CONFIG.sender 信息 -REGISTER = { - "enable": True, - "captcha": False, # 是否开启注册字母验证码 - "geetest": True, # 是否开启geetest验证,如要开启请先配置geetest - "register_type": { - 'sms': True, # 短信注册 - 'email': True, # 邮件注册 - 'code': False, # 邀请码注册,邀请码必填写,需要和短信,邮件一起使用 - } -} +REGISTER = AUTHCONF.REGISTER # 个人资料修改修改也会使用该配置 -CHANGER = { - "enable": True, - "captcha": False, # 是否开启注册字母验证码 - "geetest": True, # 是否开启geetest验证,如要开启请先配置geetest - "change_type": { - 'sms': True, # 短信注册 - 'email': True, # 邮件注册 - 'code': False, # 邀请码注册,邀请码必填写,需要和短信,邮件一起使用 - } -} -LOGIN = { - "captcha": False, # 是否开启登录字母验证码 - "geetest": True, # 是否开启geetest验证 - "login_type": { - 'sms': True, # 短信登录 - 'email': True, # 邮件登录 - 'up': True, # 密码登录 - } -} +CHANGER = AUTHCONF.CHANGER +LOGIN = AUTHCONF.LOGIN THIRD_PART_CONFIG = { # APP存储配置 - 'storage': [ - { - 'name': 'local', - 'type': 0, - 'auth': { - 'domain_name': 'app.hehelucky.cn', - # 正式环境需要填写正式的访问域名,如果配置cdn,可以填写cdn的域名,仅支持阿里云 cdn, - # 开启cdn之后,如果该域名和服务器域名不相同,需要设置阿里云cdn 缓存配置,自定义HTTP响应头 添加 Access-Control-Allow-Origin * 才可以 - 'is_https': True, - 'download_auth_type': 1, # 0:不开启token 1:本地token 2:cdn 开启cdn,并且使用本地存储,使用阿里云cdn进行url鉴权, - 'cnd_auth_key': '', # 当cdn为阿里云并且 download_auth_type=2 的时候 生效,需要 开启阿里云OSS私有Bucket回源 - }, - 'active': True - }, - { - 'name': 'aliyun', - 'type': 2, - 'auth': { - 'access_key': 'LTAI4FkbTR', - 'secret_key': '2iLIxy9', - 'bucket_name': 'fge', - 'sts_role_arn': 'ap-sage', - 'endpoint': 'oss-cn-beijing-internal.aliyuncs.com', # 服务器和oss在同一个地区,填写内网的endpoint - 'is_https': True, - 'domain_name': 'aoud.xin', - 'download_auth_type': 1, # 1:oss 2:cdn - 'cnd_auth_key': '', # 当cdn为阿里云并且 download_auth_type=2 的时候 生效,需要 开启阿里云OSS私有Bucket回源 - }, - 'active': False - }, - { - 'name': 'qiniuyun', - 'type': 1, - 'auth': { - 'access_key': 'mT4fiJ', - 'secret_key': '0G9fXfhYLynv', - 'bucket_name': 'fge', - 'is_https': False, - 'domain_name': 'foud.xin' - }, - 'active': False - } - ], - 'sender': [ - { - 'name': 'email', - 'type': 0, - 'auth': { - 'email_host': 'smtp.126.com', - 'email_port': 465, - 'use_tls': False, - 'use_ssl': True, - 'username': 'flyapps@126.com', - 'password': 'GGHFEUMZBRZIFZGQ', - 'form': 'FlyApp Validation ', - 'subject': '%(code)s验证', - 'template_code': { - 'login': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在登录,若非本人操作,请勿泄露。', - 'change': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在尝试变更重要信息,请妥善保管账户信息。', - 'register': '欢迎使用FLY 应用分发平台。 您的验证码%(code)s,您正在注册成为新用户,感谢您的支持!', - } - }, - 'active': True - }, - { - 'name': 'aliyun', - 'type': 1, - 'auth': { - 'access_key': 'LTAI5tJH2EnjVzJGMmNCYo9U', - 'secret_key': 'd0LETks5oxkdfbkLGtFihklWGbokab', - 'region_id': 'cn-hangzhou', - 'sing_name': '合合相亲', - 'template_code': { - 'login': 'SMS_177185094', - 'change': 'SMS_177185090', - 'register': 'SMS_177185092', - } - }, - 'active': False - }, - { - 'name': 'jiguang', - 'type': 2, - 'auth': { - 'app_key': '93e1a9f71db4f044de4db34a', - 'master_secret': '5f996ee39c7eb52906510cc2', - 'sign_id': '18138', - 'template_code': { - 'login': '1', - 'change': '1', - 'register': '1', - } - }, - 'active': True - }, - ] - + 'storage': STORAGECONF.STORAGE, + 'sender': SENDERCONF.SENDER } CACHE_KEY_TEMPLATE = { 'user_can_download_key': 'user_can_download', @@ -361,37 +228,25 @@ SYNC_CACHE_TO_DATABASE = { 'auto_check_ios_developer_active_times': 60 * 60 * 12, # ios开发者证书检测时间 } -SERVER_DOMAIN = { - 'IOS_PMFILE_DOWNLOAD_DOMAIN': { - "domain_name": 'app.hehelucky.cn', - 'is_https': True, - }, # 验证码,ios 描述文件和plist文件下载域名,该域名用于后端,一般为api访问域名 - 'POST_UDID_DOMAIN': 'https://app.hehelucky.cn', # 超级签名 安装签名时 向该域名 发送udid数据,该域名用于后端,一般为 api 访问域名 - # 'REDIRECT_UDID_DOMAIN': 'https://app.hehelucky.cn', # 超级签名 安装完成之后,跳转域名,该域名为前端web访问域名,如果用户定义了自己的域名,则跳转用户域名 - 'FILE_UPLOAD_DOMAIN': 'https://app.hehelucky.cn', # 本地文件上传域名,使用本地存储必须配置 -} - -MOBILECONFIG_SIGN_SSL = { - # 描述文件是否签名,默认是关闭状态;如果开启,并且ssl_key_path 和 ssl_pem_path 正常,则使用填写的ssl进行签名,否则默认不签名 - 'open': False, - 'ssl_key_path': '/data/cert/app.hehelucky.cn.key', - 'ssl_pem_path': '/data/cert/app.hehelucky.cn.pem' -} - -DEFAULT_MOBILEPROVISION = { - # 默认描述文件路径或者下载路径,用户企业签名或者超级签名 跳转 [设置 - 通用 - 描述文件|设备管理] 页面 - # 如果配置了path路径,则走路径,如果配置了url,则走URL,path 优先级大于url优先级 - 'enterprise': { - 'path': os.path.join(MEDIA_ROOT, 'embedded.mobileprovision'), - 'url': 'https://ali-static.jappstore.com/embedded.mobileprovision' - }, - 'supersign': { - # 超级签名,如果self 为True,则默认用自己的描述文件,否则同企业配置顺序一致,自己的配置文件有时候有问题 - 'self': False, - 'path': os.path.join(MEDIA_ROOT, 'embedded.mobileprovision'), - 'url': 'https://ali-static.jappstore.com/embedded.mobileprovision' - } -} +SERVER_DOMAIN = BASECONF.SERVER_DOMAIN + +MOBILECONFIG_SIGN_SSL = IPACONF.MOBILECONFIG_SIGN_SSL + +DEFAULT_MOBILEPROVISION = IPACONF.DEFAULT_MOBILEPROVISION +# DEFAULT_MOBILEPROVISION = { +# # 默认描述文件路径或者下载路径,用户企业签名或者超级签名 跳转 [设置 - 通用 - 描述文件|设备管理] 页面 +# # 如果配置了path路径,则走路径,如果配置了url,则走URL,path 优先级大于url优先级 +# 'enterprise': { +# 'path': os.path.join(MEDIA_ROOT, 'embedded.mobileprovision'), +# 'url': 'https://ali-static.jappstore.com/embedded.mobileprovision' +# }, +# 'supersign': { +# # 超级签名,如果self 为True,则默认用自己的描述文件,否则同企业配置顺序一致,自己的配置文件有时候有问题 +# 'self': False, +# 'path': os.path.join(MEDIA_ROOT, 'embedded.mobileprovision'), +# 'url': 'https://ali-static.jappstore.com/embedded.mobileprovision' +# } +# } SESSION_ENGINE = "django.contrib.sessions.backends.cache" SESSION_CACHE_ALIAS = "default" @@ -452,68 +307,8 @@ LOGGING = { }, } -PAY_SUCCESS_URL = 'https://app.hehelucky.cn/user/orders' # 前端页面,支付成功跳转页面 -PAY_CONFIG = [ - { - 'NAME': 'alipay', - 'TYPE': 'ALI', - 'ENABLED': True, - 'AUTH': { - 'APP_ID': "2021002138691845", - 'APP_PRIVATE_KEY': '''-----BEGIN RSA PRIVATE KEY----- - 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 - -----END RSA PRIVATE KEY-----''', - 'ALI_PUBLIC_KEY': '''-----BEGIN CERTIFICATE----- - MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkru1ulQV1v4q+q38nyzgkdd3evf7C1/Ipu6K+ZFb5FiuxJ7mildkBSuKz/8+TRd+tjgk2lfc2ehK5pja3cxDO/nb25sBoWiU09rtxgXLehLsgRRhatbICrlOnYxg5aiB5odAp3NMRqore4lnVYwfIyL9M49I0G/NbQzYjUQvAQJsnHwc6a6Kuqi1CwR1WXI0sDF9w7KXC4vRFFIUTwI4bVq4HQWI7NhbgEajHM/j6D6Bh/OMcTYnJJzCja0WmZRe5flfCsELlPESOCWUMbYoaNfBzpNvvyOpmRgs9jgy2WY9SeaB9hxwkpr8tOd2Sc7j3221JKCyDaFAX+4zPy7/fQIDAQAB - -----END CERTIFICATE-----''', - 'APP_NOTIFY_URL': 'https://app.hehelucky.cn/api/v1/fir/server/pay_success', # 支付支付回调URL - 'RETURN_URL': PAY_SUCCESS_URL, # 支付前端页面回调URL - 'SUBJECT': '向 FLY分发平台 充值', - } - }, - { - 'TYPE': 'WX', - 'NAME': 'wxpay', - 'ENABLED': True, - 'AUTH': { - 'APP_ID': "wx390e5985fd3699e6", - 'MCH_ID': "1608486112", - 'SERIAL_NO': "27DADA4D2921CDD66B8B20A68276F09B90754922", - 'APP_PRIVATE_KEY': '''-----BEGIN PRIVATE KEY----- -MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDbXhNoHljrkS8T -jXg3+tTkaoOol8FDt0jSGckhzX46gkS16CWYwTthBKurfFtynsJe4uDOphS1ge/r -QEU3+rWNxqa8o6gHSpp2UTYAz/1oYOlXuSa4NA1uD47lmVZJzad2ybWDSsoeRjFj -c+X6F0ZiE3FmdN1iHz8NmbP99foih4smv15X+wX5DrsuLuPVHNB4D0fqvY7P5PO3 -wUQXWQNezCYzpPoXX2H/UkyFEFZhWk6/9z3aAkYmqfd6IWPHewOqnVoQRKmo5bXb -yWbB+QIl/HcSfNtq869s5lLGR2Rl2UX8IFXCcXnRPhSAVIeWfXN26Pc9dz9N4VTU -yiZ8Y6AHAgMBAAECggEABdS0U1orJufPBogGIAbMzd1+7mZKPtCKYPtKe1mI92kr -BmLLTQol1+hV39MIYz2RERCaxSNo/YIcrHYi4OALH1+eYvk+qCL1hBuYgeEFbVbW -HPzQ6KiJitljBPtUbdXHk8K8zmaYhMF84pXcEQ+5UTYPF5gXoloORQBG5oM5SN2g -2GTgYw1cpDzzRRwnmpvYd1ZydYNj8m6k7I2L1pwzRS/6/whz1sScpfh+91w1IVM0 -WT+pPSdiVtQ7ktmvcTrWj7eNIbcsptZ1QgSV3UHkU0xzLG9N1TqJdHOquunXRS7V -iw/4NgXveXSTSQrmmZVS+Kdyc+z1iDqwOXmE7hjioQKBgQD7js+40NCAPLYXEfer -UFvZ6kem9mJIzAUdeTdK4BjYJrcU+UsXRmcWJIPI9HWSr31f/fSfu2SKyBa6+dFF -SeNHuHPPqQAXrsNuhFG1wcKoNybk7KrsQlXheK7br42565Tegz3UXOKMrnPPlukH -ZZdlYmwBFjEJvIr9jxJvJoW6qQKBgQDfPb697vR8ruLaecPmsq920iC3AQRanYFK -dW6U98JkCN9A/LXA1jGyDTEhtlja+5Ylp0M1EnlcZ079Jnvek5haSNnD0xb1nMy8 -P/o0/eWWArTgfjfiJeq1tSdrinGhNz0+Vty74wnbS+5P18H23I5jBlGX5hyNkU4L -axUfJM9jLwKBgCo/1xVkRNB04eRICT/FlFeqKHSbRvCRC37iv+2ca6/J+M/V+s2i -7mdipJuYqzKCtNztayt0rrM8Xczzbjlj6n8+NH05FiHkIUCriomrTEUyVh72vNJH -ZeMjgMK23mfOcEda5YSIQSh9mEfSQbsTTfUiLZ+VGZFYEEP7xo3Se31ZAoGBAJas -LPYytq8EtrYwowktJwJydoQt2otybRYdRmKjCn/MASrypZWeu/Hpt3SCh1xdnAyT -5OeILYMxcv2noMksIxMkwl3KNl/V0dVo9O4ZQ4DJGN3AMuWfI9g6iX2q9mCSUPKn -W9owNbHegN1AyXhdinjJhf6Y4EKohN1uC9Z2WMcfAoGAW90Z2LkqG2fen+R62syP -aaInnu9bitb9rVENCNGXQHdWmIYBMM5zrg8nX8xNJ+yeGQhgxE+YeSq4FOpe0JkA -daWIhg++OHN2MBRutj7oL/AFAxyu467YA5+itEJLHNATbOr/s13S66nePNXox/hr -bIX1aWjPxirQX9mzaL3oEQI= ------END PRIVATE KEY-----''', - 'API_V3_KEY': '60DbP621a9C3162dDd4AB9c2O15a005L', - 'APP_NOTIFY_URL': 'https://app.hehelucky.cn/api/v1/fir/server/pay_success', # 支付支付回调URL - 'RETURN_URL': PAY_SUCCESS_URL, # 支付前端页面回调URL - 'SUBJECT': '向 FLY分发平台 充值', - } - } -] +PAY_SUCCESS_URL = PAYCONF.PAY_SUCCESS_URL +PAY_CONFIG = PAYCONF.PAY_CONFIG # 结果存放到Django|redis # CELERY_RESULT_BACKEND = 'django-db' diff --git a/fir_ser/requirements/rpm_requirements.txt b/fir_ser/requirements/rpm_requirements.txt new file mode 100644 index 0000000..dae9d4d --- /dev/null +++ b/fir_ser/requirements/rpm_requirements.txt @@ -0,0 +1 @@ +python36 python36-devel redis mariadb-devel gcc-c++ gcc openssl-devel wget \ No newline at end of file