From c9a30b473d950ab72274de22eb8f7706090cbdee Mon Sep 17 00:00:00 2001
From: chenxing <chenxing@bestsch.com>
Date: Wed, 5 Aug 2026 11:19:14 +0800
Subject: [PATCH] fix: maven-settings overrides HTTP blocker; cache ~/.m2 on
 host

---
 .gitea/workflows/deploy.yml |  3 ++-
 maven-settings.xml          | 11 +++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 288a54e..e878b25 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -27,7 +27,8 @@ jobs:
       # 产出 target/userbase.jar 落到工作区。
       - name: Build jar (maven, host network, nexus maven-public)
         # maven-settings.xml 将 central 指向 nexus maven-public（含内部 SNAPSHOT BOM 与 central 代理）
-        run: docker run --rm --network=host -v $PWD:/build -w /build maven:3.9-eclipse-temurin-8 mvn -s maven-settings.xml -B -DskipTests package
+        # 挂载宿主 /opt/docker/ubs-m2 作为 maven 本地仓库缓存，加速重复构建
+        run: docker run --rm --network=host -v $PWD:/build -v /opt/docker/ubs-m2:/root/.m2 -w /build maven:3.9-eclipse-temurin-8 mvn -s maven-settings.xml -B -DskipTests package
 
       - name: Build image on host daemon
         run: docker build -f docker/Dockerfile -t userbase-service:latest .
diff --git a/maven-settings.xml b/maven-settings.xml
index 6fee94c..2107fa9 100644
--- a/maven-settings.xml
+++ b/maven-settings.xml
@@ -1,4 +1,15 @@
 <settings>
+  <!-- Maven 3.8+ 默认拦截 HTTP 仓库（maven-default-http-blocker）。
+       nexus maven-public 仅提供 HTTP，故在此覆盖该 blocker，放行内网 nexus。 -->
+  <mirrors>
+    <mirror>
+      <id>maven-default-http-blocker</id>
+      <mirrorOf>external:http:*</mirrorOf>
+      <name>nexus maven-public (allow http)</name>
+      <url>http://192.168.10.160:8081/repository/maven-public/</url>
+      <blocked>false</blocked>
+    </mirror>
+  </mirrors>
   <profiles>
     <profile>
       <id>nexus</id>