ci调整

docker/application-prod.yml

@@ -20,20 +20,23 @@ spring:
     host: redis-server
     port: 6379
     database: 0
-    password: 'wv&WcDYAmLtqTIGM'
+    # 生产由 nacos application-infra.yaml 注入；此处仅作 nacos 不可达时的兜底，
+    # 密码不写死，运行时由容器环境变量 REDIS_PASSWORD 注入（值来自 Gitea Secrets，不入镜像）
+    password: ${REDIS_PASSWORD}
     timeout: 2000ms
   data:
     redis:
       repositories:
         enabled: false
 
-  datasource:
-    url: jdbc:mysql://mysql8:3306/bsch_userbase?useUnicode=true&characterEncoding=utf-8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
-    username: root
-    password: 'CVf^x$sW*b6CGHxh'
-    driver-class-name: com.mysql.cj.jdbc.Driver
-    min-idle: 10
-    max-active: 30
+#  datasource:
+#    url: jdbc:mysql://mysql8:3306/bsch_userbase?useUnicode=true&characterEncoding=utf-8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
+#    username: root
+#    # 生产由 nacos application-infra.yaml 注入；兜底密码运行时由 DB_PASSWORD 环境变量注入（来自 Gitea Secrets）
+#    password: ${DB_PASSWORD}
+#    driver-class-name: com.mysql.cj.jdbc.Driver
+#    min-idle: 10
+#    max-active: 30
 
   jpa:
     database: MySQL
@@ -51,7 +54,8 @@ spring:
     host: rabbitmq
     port: 5672
     username: admin
-    password: 'JdU29I#Q2E4yXoUl'
+    # 生产由 nacos application-infra.yaml 注入；兜底密码运行时由 RABBITMQ_PASSWORD 环境变量注入（来自 Gitea Secrets）
+    password: ${RABBITMQ_PASSWORD}
     listener:
       direct:
         auto-startup: false