# UserBase 生产配置（镜像内自足：配置中心已停用，运行时密码由 Gitea Secrets / projman .env 环境变量注入）
server:
  port: 8060
  servlet:
    # 对外经 caddy 暴露为 http://base.yunhaixingtong.com/userbase
    context-path: /userbase

spring:
  mvc:
    date-format: yyyy-MM-dd HH:mm:ss
  servlet:
    multipart:
      max-file-size: 50MB
      max-request-size: 200MB
  jackson:
    time-zone: GMT+8
    date-format: yyyy-MM-dd HH:mm:ss

  redis:
    host: redis-server
    port: 6379
    database: 0
    # 兜底密码运行时由容器环境变量 REDIS_PASSWORD 注入（值来自 Gitea Secrets / projman .env，不入镜像）
    password: ${REDIS_PASSWORD}
    timeout: 2000ms
  data:
    redis:
      repositories:
        enabled: false

  # 镜像内兜底：db 密码运行时由 DB_PASSWORD 环境变量注入（来自 Gitea Secrets / projman .env，不入镜像）
  datasource:
    url: jdbc:mysql://mysql8:3306/bsch_userbase?useUnicode=true&characterEncoding=utf-8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
    username: root
    password: ${DB_PASSWORD}
    driver-class-name: com.mysql.cj.jdbc.Driver
    min-idle: 10
    max-active: 30

  jpa:
    database: MySQL
    show-sql: false
    hibernate:
      ddl-auto: update
    database-platform: org.hibernate.dialect.MySQL5InnoDBDialect
    properties:
      hibernate.order_by.default_null_ordering: last
      hibernate:
        dialect: org.hibernate.dialect.MySQL5InnoDBDialect
      open-in-view: true

  rabbitmq:
    host: rabbitmq
    port: 5672
    username: admin
    # 兜底密码运行时由 RABBITMQ_PASSWORD 环境变量注入（值来自 Gitea Secrets / projman .env，不入镜像）
    password: ${RABBITMQ_PASSWORD}
    listener:
      direct:
        auto-startup: false
      simple:
        auto-startup: false

# 健康检查（projman 健康总览探活口径：容器 Running + HTTP 200 即健康）：
# 仅暴露 health；DB/Redis 计入总体状态（连不上即 DOWN=503，projman 显示 fail），rabbit 推送链路不算
management:
  endpoints:
    web:
      exposure:
        include: health
  endpoint:
    health:
      show-details: never
  health:
    rabbit:
      enabled: false

# 单点登录 / 应用间签名鉴权（基础平台 yh-auth / yh-app-auth）
yh:
  sso:
    server-url-prefix: http://sso.yunhaixingtong.com/cas/
    client-host-url: http://base.yunhaixingtong.com/userbase
    allow-headers: all
    allow-origins: all
    url-pattern: /api/*
    mobi-api-pattern: /mobiapi/*
  app-auth:
    enabled: true

ADMIN_TAG_ID: 290

# 上传文件落容器卷，compose 里挂到宿主机 ./upload-data
FILE_PATH: /data/upload
FILE_WEB_PATH: http://base.yunhaixingtong.com/userbase/upload/
UPLOAD_WEB_PATH_HTTP: http://base.yunhaixingtong.com/userbase/upload/file/

logging:
  level:
    root: INFO
  file:
    path: /app/logs