sync2b

nslxlxsqfe/rce-lxlxsqfe.git/objects/c0/d7810f3ed04d99ba2de71a6115c13e878f5664

@@ -0,0 +1 @@
+x
+)JMU07e040031QrutñuÕËMa˜¶IÁèõã×k¦¿´^uêóZÁ£vN¡ŠJŒ�-’õJ*Jn(æc4v©^{þJýE—G!
Õl
ãå q

nslxlxsqfe/rce-lxlxsqfe.git/out2138b

@@ -0,0 +1,634 @@
+=== round2138b Fri Oct  9 13:59:55 UTC 2026 ===
+--- /backup ls ---
+total 8
+drwxr-xr-x    2 root     root          4096 Aug 20 07:52 .
+drwxr-xr-x    1 root     root          4096 Aug 20 07:52 ..
+--- /backup du ---
+--- /backup find ---
+/backup
+--- /backup candidate files ---
+--- /backup secrets grep ---
+--- /data/ssh ---
+total 32
+drwx------    2 git      git           4096 Apr 20 08:14 .
+drwxr-xr-x    5 git      git           4096 Apr 20 08:14 ..
+-rw-------    1 root     root           513 Apr 20 08:14 ssh_host_ecdsa_key
+-rw-------    1 root     root           179 Apr 20 08:14 ssh_host_ecdsa_key.pub
+-rw-------    1 root     root           411 Apr 20 08:14 ssh_host_ed25519_key
+-rw-------    1 root     root            99 Apr 20 08:14 ssh_host_ed25519_key.pub
+-rw-------    1 root     root          2602 Apr 20 08:14 ssh_host_rsa_key
+-rw-------    1 root     root           571 Apr 20 08:14 ssh_host_rsa_key.pub
+== /data/ssh/ssh_host_ecdsa_key
+head: /data/ssh/ssh_host_ecdsa_key: Permission denied
+
+== /data/ssh/ssh_host_ecdsa_key.pub
+head: /data/ssh/ssh_host_ecdsa_key.pub: Permission denied
+
+== /data/ssh/ssh_host_ed25519_key
+head: /data/ssh/ssh_host_ed25519_key: Permission denied
+
+== /data/ssh/ssh_host_ed25519_key.pub
+head: /data/ssh/ssh_host_ed25519_key.pub: Permission denied
+
+== /data/ssh/ssh_host_rsa_key
+head: /data/ssh/ssh_host_rsa_key: Permission denied
+
+== /data/ssh/ssh_host_rsa_key.pub
+head: /data/ssh/ssh_host_rsa_key.pub: Permission denied
+
+--- /home/git/.ssh ---
+total 16
+drwx------    2 git      git           4096 Apr 20 08:28 .
+drwxr-xr-x    5 git      git           4096 Aug 20 07:52 ..
+-rw-------    1 git      git            927 Oct  9 06:30 authorized_keys
+-rw-------    1 root     root            23 Apr 20 08:14 environment
+== /home/git/.ssh/authorized_keys
+command="/app/gogs/gogs serv key-1 --config='/data/gogs/conf/app.ini'",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCjHcgNQtcHHla29oV8Y9tW6GYaCWfZCC3xAFTTnFDSe5+S7XracOciERZCRrl0M113F6oJANjfE5OzTevIMffloaHCNCmxRe8Z2OECvvrq23UBa3GcGdqMgVNFuDjubtDGQa095mJk+kLt3f+tKhMyBdFaS+wetPF6/vAZc6OmRXXnqbOyMNoaCwGNummWE1J112ezZpcBH17msRNp4lewM/s3OliVXFuQQy+Tmur9Oim7aQzbQsSFazNKIlJEmMN/dV3iR2QabY8iYiSLbw3d20lLzS2AtrQR8Gmo5ERQ+g5ImVL5pYO0Fluyeaqq0OuGWl5uMeTGJZrWvz1DOlyemO9w8rkQOIYTIX9c/9ZCVqUmRi8xMd36bdQbQl2Qsjfe3uDKRImQMt7ttXVBA8o38MrDY2bA/bETOuoMPwobQcTWu1sAHNCSafc5LwhDzkrm8Y1d8/AydhlCvL8/lFOHaTz8dT5jAokbsySxYtAmxsgjr4ry49CbSxaNR70aGbU= mutao@local
+command="/app/gogs/gogs serv key-2 --config='/data/gogs/conf/app.ini'",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgMFeK5hAoTv1FIYHo+DUw6tAAkvOoNOrJOaMNDezA1 pre-deploy
+
+== /home/git/.ssh/environment
+head: /home/git/.ssh/environment: Permission denied
+
+--- gitconfig ---
+[user]
+	email = gogs@fake.local
+	name = Gogs
+[core]
+	quotepath = false
+--- dump.git parts ---
+100644 blob 610c01e797e22096cc1bea7c96c500ecb304e878 47185920	part_aa
+100644 blob f7e128e9cd5e6f4e5da4d9ef33c790c699de43df 47185920	part_ab
+100644 blob bca4acabba18c040b0249d7dfab23c1080355967 47185920	part_ac
+100644 blob 81871a0cc2e10c44ed06b41ed435e9388ddeae1f 47185920	part_ad
+100644 blob f1be4be0b68fcdd0d87d6f5cdc364eece18e9f68 47185920	part_ae
+100644 blob affa7958015f2e8341a20302cff383aa56086715 47185920	part_af
+100644 blob 2d6b83af917ea30a22d88620ef1d900cd1c8dba2 47185920	part_ag
+100644 blob 61665334e8e2e0abb58a9206a6ee9b5570f3335c 47185920	part_ah
+100644 blob 221c15edadd6dd04ace04843eca65b8bdd44b36c 47185920	part_ai
+100644 blob fa64e4c6460cfc615a2a473065ce1a1fd36f25bb 18669517	part_aj
+--- part_aa sha ---
+610c01e797e22096cc1bea7c96c500ecb304e878
+--- sub2api deploy ---
+####FILE sub2api::SERVER_DEPLOYMENT_2026-09-15.md
+# 2026-09-15 服务器部署结果
+
+已按用户授权将本地修复部署到 https://juhe.pub。新版本为 `optional-controls-20260915`，服务器 `107.149.55.60`，部署连接核对既有 SSH 主机指纹。登录密码仅在连接时输入，没有保存在项目、源码归档或本报告中。
+
+## 当前版本
+
+- 镜像：`chengchuan-relay:optional-controls-20260915`
+- 镜像 ID：`sha256:bc0a061f84b8be362b443c3ff2e7fdff255b5ea4a80cb907961ea742192c8b19`
+- 构建时间：2026-09-15 02:33:07 UTC。
+- 当前 Compose 目录：`/opt/chengchuan-relay/releases/optional-controls-20260915/source/deploy`。后续操作应使用此目录，旧说明中的 `source/deploy`、`feature-source-next/deploy` 是历史部署目录。
+- 发布源码包：项目外 `交付包/relay-optional-controls-20260915-source.tar.gz`，4,001 个文件逐项 SHA-256 验证；压缩包 SHA-256 为 `c67137e3567f9b59d7069af74bd52d489edbf7e85625f5c4f1df1a2955ed444f`。
+
+## 生效内容和默认状态
+
+本次同时上线本地报告中的账号保护修复、B 方案 v3 评分、鹈鹕 SVG 展示、测试队列与轮询修复、可选 RPM / 自适应并发、独立完整性控制和真实分组统计。
+
+线上全部账号的并发数、代理和 extra 配置在切换前后摘要一致，没有批量切换策略或覆盖管理员设置。严格 RPM 开启账号数为 0，自适应并发开启账号数为 0；管理员可在账号编辑的“可选流量控制”启用，建议参数可继续自定义。分组管理勾选“完整统计”后显示入口。
+
+第 248 号迁移 `248_intelligent_assessment_v2.sql` 已执行，新增队列调度字段并扩展测试状态约束；既有迁移文件未改动。历史测试结论没有自动批量重评；需要时从详情手动复核。
+
+## 验证结果
+
+1. 服务器构建完整前后端镜像成功，含前端类型检查和 i18n 检查。
+2. 将部署前数据库备份恢复到隔离容器，验证新迁移与重复执行；用户、账号、密钥、用量行以及历史测试原始字段保持一致。隔离网络禁止测试副本访问真实上游。
+3. 新镜像在隔离环境的 20 项 HTTP/API 检查通过。
+4. 线上切换后的 20 项 HTTPS 检查通过，覆盖健康、前端入口与资源、未认证拒绝、现有管理员登录、流量配置读取、分组统计与日期校验、账号测试中心。
+5. 线上规则试判确认 `**ANSWER: 12颗**` 显示 `completed / correct / non_compliant`，评分版本 3，答案正确性与格式分别判断。该请求只运行规则，不调用模型、不改写历史测试。
+6. 本机外部访问 `https://juhe.pub/health` 返回 200 和 `{"status":"ok"}`，服务器 HTTPS 登录页返回 200。
+
+切换及首次完整检查耗时约 8.3 秒，不等同于精确停机时长。仅重建应用容器，PostgreSQL 和 Redis 的容器 ID 保持不变。未执行真实上游模型、支付、发信或图片生成测试；最新页面的浏览器目视验收仍受此前浏览器工具认证错误限制。
+
+## 备份与回滚
+
+服务器私有备份目录：`/opt/chengchuan-relay/backups/before-optional-controls-20260915`。
+
+保留部署前源码、应用数据、私有环境设置、部署前数据库 dump，以及停止旧应用后制作的 `database-at-cutover.dump`。数据库备份目录索引已用 pg_restore 检查。旧镜像另加标签 `chengchuan-relay:rollback-optional-controls-20260915`，原镜像也保留。
+
+普通应用回滚可从新部署目录执行：
+
+```sh
+RELAY_VERSION=rollback-optional-controls-20260915 docker compose --env-file .env -f compose.relay.yml up -d --no-deps --no-build --wait app
+```
+
+第 248 号迁移主要为兼容扩展，旧镜像回滚不需要自动还原数据库；新状态在旧测试界面显示可能有限制。不得使用删除卷命令更新，也不应在产生新业务数据后直接覆盖数据库备份。备份包含私有业务数据，应保留原目录权限。
+
+本次临时应用、数据库副本、Redis 和隔离网络已清理；原有测试容器、线上容器及业务卷未删除。被清理的是可从保留备份重建的验证副本。
+
+服务器证据目录：`/opt/chengchuan-relay/evidence/optional-controls-20260915`。本地可复核副本见 `verification/deployment-20260915/`。
+####FILE sub2api::deploy/docker-compose.yml
+# =============================================================================
+# Sub2API Docker Compose Configuration
+# =============================================================================
+# Quick Start:
+#   1. Copy .env.example to .env and configure
+#   2. docker-compose up -d
+#   3. Check logs: docker-compose logs -f sub2api
+#   4. Access: http://localhost:8080
+#
+# All configuration is done via environment variables.
+# No Setup Wizard needed - the system auto-initializes on first run.
+# =============================================================================
+
+services:
+  # ===========================================================================
+  # Sub2API Application
+  # ===========================================================================
+  sub2api:
+    image: weishaw/sub2api:latest
+    container_name: sub2api
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    ulimits:
+      nofile:
+        soft: 100000
+        hard: 100000
+    ports:
+      - "${BIND_HOST:-0.0.0.0}:${SERVER_PORT:-8080}:8080"
+    volumes:
+      # Data persistence (config.yaml will be auto-generated here)
+      - sub2api_data:/app/data
+      # Optional: Mount custom config.yaml (uncomment and create the file first)
+      # Copy config.example.yaml to config.yaml, modify it, then uncomment:
+      # - ./config.yaml:/app/data/config.yaml
+      # Optional: Mount a custom Codex instructions template file, then point
+      # gateway.forced_codex_instructions_template_file at /app/data/codex-instructions.md.tmpl
+      # in config.yaml.
+      # - ./codex-instructions.md.tmpl:/app/data/codex-instructions.md.tmpl:ro
+    environment:
+      # =======================================================================
+      # Auto Setup (REQUIRED for Docker deployment)
+      # =======================================================================
+      - AUTO_SETUP=true
+
+      # =======================================================================
+      # Server Configuration
+      # =======================================================================
+      - SERVER_HOST=0.0.0.0
+      - SERVER_PORT=8080
+      - SERVER_MODE=${SERVER_MODE:-release}
+      - ENABLE_SERVER_TIMING=${ENABLE_SERVER_TIMING:-false}
+      - RUN_MODE=${RUN_MODE:-standard}
+      - UPDATE_GITHUB_TOKEN=${UPDATE_GITHUB_TOKEN:-}
+      - ALIPAY_MOBILE_PRECREATE_DEEP_LINK=${ALIPAY_MOBILE_PRECREATE_DEEP_LINK:-}
+
+      # =======================================================================
+      # Database Configuration (PostgreSQL)
+      # =======================================================================
+      - DATABASE_HOST=postgres
+      - DATABASE_PORT=5432
+      - DATABASE_USER=${POSTGRES_USER:-sub2api}
+      - DATABASE_PASSWORD=${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}
+      - DATABASE_DBNAME=${POSTGRES_DB:-sub2api}
+      - DATABASE_SSLMODE=disable
+      - DATABASE_MAX_OPEN_CONNS=${DATABASE_MAX_OPEN_CONNS:-50}
+      - DATABASE_MAX_IDLE_CONNS=${DATABASE_MAX_IDLE_CONNS:-10}
+      - DATABASE_CONN_MAX_LIFETIME_MINUTES=${DATABASE_CONN_MAX_LIFETIME_MINUTES:-30}
+      - DATABASE_CONN_MAX_IDLE_TIME_MINUTES=${DATABASE_CONN_MAX_IDLE_TIME_MINUTES:-5}
+
+      # =======================================================================
+      # Redis Configuration
+      # =======================================================================
+      - REDIS_HOST=redis
+      - REDIS_PORT=6379
+      - REDIS_USERNAME=${REDIS_USERNAME:-}
+      - REDIS_PASSWORD=${REDIS_PASSWORD:-}
+      - REDIS_DB=${REDIS_DB:-0}
+      - REDIS_POOL_SIZE=${REDIS_POOL_SIZE:-1024}
+      - REDIS_MIN_IDLE_CONNS=${REDIS_MIN_IDLE_CONNS:-10}
+      - REDIS_ENABLE_TLS=${REDIS_ENABLE_TLS:-false}
+
+      # =======================================================================
+      # Admin Account (auto-created on first run)
+      # =======================================================================
+      - ADMIN_EMAIL=${ADMIN_EMAIL:-admin@sub2api.local}
+      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-}
+
+      # =======================================================================
+      # JWT Configuration
+      # =======================================================================
+      # IMPORTANT: Set a fixed JWT_SECRET to prevent login sessions from being
+      # invalidated after container restarts. If left empty, a random secret
+      # will be generated on each startup.
+      # Generate a secure secret: openssl rand -hex 32
+      - JWT_SECRET=${JWT_SECRET:-}
+      - JWT_EXPIRE_HOUR=${JWT_EXPIRE_HOUR:-24}
+
+      # =======================================================================
+      # Setup Configuration
+      # =======================================================================
+      - SETUP_MIGRATION_TIMEOUT_SECONDS=${SETUP_MIGRATION_TIMEOUT_SECONDS:-0}
+
+      # =======================================================================
+      # TOTP (2FA) Configuration
+      # =======================================================================
+      # IMPORTANT: Set a fixed encryption key for TOTP secrets. If left empty,
+      # a random key will be generated on each startup, causing all existing
+      # TOTP configurations to become invalid (users won't be able to login
+      # with 2FA).
+      # Generate a secure key: openssl rand -hex 32
+      - TOTP_ENCRYPTION_KEY=${TOTP_ENCRYPTION_KEY:-}
+
+      # =======================================================================
+      # Timezone Configuration
+      # This affects ALL time operations in the application:
+      # - Database timestamps
+      # - Usage statistics "today" boundary
+      # - Subscription expiry times
+      # - Log timestamps
+      # Common values: Asia/Shanghai, America/New_York, Europe/London, UTC
+      # =======================================================================
+      - TZ=${TZ:-Asia/Shanghai}
+
+      # =======================================================================
+      # Gemini OAuth Configuration (for Gemini accounts)
+      # =======================================================================
+      - GEMINI_OAUTH_CLIENT_ID=${GEMINI_OAUTH_CLIENT_ID:-}
+      - GEMINI_OAUTH_CLIENT_SECRET=${GEMINI_OAUTH_CLIENT_SECRET:-}
+      - GEMINI_OAUTH_SCOPES=${GEMINI_OAUTH_SCOPES:-}
+      - GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
+
+      # Built-in OAuth client secrets (optional)
+      # SECURITY: This repo does not embed third-party client_secret.
+      - GEMINI_CLI_OAUTH_CLIENT_SECRET=${GEMINI_CLI_OAUTH_CLIENT_SECRET:-}
+      - ANTIGRAVITY_OAUTH_CLIENT_SECRET=${ANTIGRAVITY_OAUTH_CLIENT_SECRET:-}
+      - ANTIGRAVITY_USER_AGENT_VERSION=${ANTIGRAVITY_USER_AGENT_VERSION:-}
+
+      # =======================================================================
+      # Security Configuration (URL Allowlist)
+      # =======================================================================
+      # Enable URL allowlist validation (false to skip allowlist checks)
+      - SECURITY_URL_ALLOWLIST_ENABLED=${SECURITY_URL_ALLOWLIST_ENABLED:-false}
+      # Allow insecure HTTP URLs when allowlist is disabled (default: true; set to false to require https)
+      - SECURITY_URL_ALLOWLIST_ALLOW_INSECURE_HTTP=${SECURITY_URL_ALLOWLIST_ALLOW_INSECURE_HTTP:-true}
+      # Allow private IP addresses for upstream/pricing/CRS (default: true; set to false to block private hosts)
+      - SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS=${SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS:-true}
+      # Upstream hosts whitelist (comma-separated, only used when enabled=true)
+      - SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS=${SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS:-}
+
+####FILE sub2api::deploy/docker-compose.standalone.yml
+# =============================================================================
+# Sub2API Docker Compose - Standalone Configuration
+# =============================================================================
+# This configuration runs only the Sub2API application.
+# PostgreSQL and Redis must be provided externally.
+#
+# Usage:
+#   1. Copy .env.example to .env and configure database/redis connection
+#   2. docker-compose -f docker-compose.standalone.yml up -d
+#   3. Access: http://localhost:8080
+# =============================================================================
+
+services:
+  sub2api:
+    image: weishaw/sub2api:latest
+    container_name: sub2api
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    ulimits:
+      nofile:
+        soft: 100000
+        hard: 100000
+    ports:
+      - "${BIND_HOST:-0.0.0.0}:${SERVER_PORT:-8080}:8080"
+    volumes:
+      - sub2api_data:/app/data
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    environment:
+      # =======================================================================
+      # Auto Setup
+      # =======================================================================
+      - AUTO_SETUP=true
+
+      # =======================================================================
+      # Server Configuration
+      # =======================================================================
+      - SERVER_HOST=0.0.0.0
+      - SERVER_PORT=8080
+      - SERVER_MODE=${SERVER_MODE:-release}
+      - ENABLE_SERVER_TIMING=${ENABLE_SERVER_TIMING:-false}
+      - RUN_MODE=${RUN_MODE:-standard}
+      - UPDATE_GITHUB_TOKEN=${UPDATE_GITHUB_TOKEN:-}
+
+      # =======================================================================
+      # Database Configuration (PostgreSQL) - Required
+      # =======================================================================
+      - DATABASE_HOST=${DATABASE_HOST:?DATABASE_HOST is required}
+      - DATABASE_PORT=${DATABASE_PORT:-5432}
+      - DATABASE_USER=${DATABASE_USER:-sub2api}
+      - DATABASE_PASSWORD=${DATABASE_PASSWORD:?DATABASE_PASSWORD is required}
+      - DATABASE_DBNAME=${DATABASE_DBNAME:-sub2api}
+      - DATABASE_SSLMODE=${DATABASE_SSLMODE:-disable}
+      - DATABASE_MAX_OPEN_CONNS=${DATABASE_MAX_OPEN_CONNS:-50}
+      - DATABASE_MAX_IDLE_CONNS=${DATABASE_MAX_IDLE_CONNS:-10}
+      - DATABASE_CONN_MAX_LIFETIME_MINUTES=${DATABASE_CONN_MAX_LIFETIME_MINUTES:-30}
+      - DATABASE_CONN_MAX_IDLE_TIME_MINUTES=${DATABASE_CONN_MAX_IDLE_TIME_MINUTES:-5}
+
+      # =======================================================================
+      # Redis Configuration - Required
+      # =======================================================================
+      - REDIS_HOST=${REDIS_HOST:?REDIS_HOST is required}
+      - REDIS_PORT=${REDIS_PORT:-6379}
+      - REDIS_USERNAME=${REDIS_USERNAME:-}
+      - REDIS_PASSWORD=${REDIS_PASSWORD:-}
+      - REDIS_DB=${REDIS_DB:-0}
+      - REDIS_POOL_SIZE=${REDIS_POOL_SIZE:-1024}
+      - REDIS_MIN_IDLE_CONNS=${REDIS_MIN_IDLE_CONNS:-10}
+      - REDIS_ENABLE_TLS=${REDIS_ENABLE_TLS:-false}
+
+      # =======================================================================
+      # Admin Account (auto-created on first run)
+      # =======================================================================
+      - ADMIN_EMAIL=${ADMIN_EMAIL:-admin@sub2api.local}
+      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-}
+
+      # =======================================================================
+      # JWT Configuration
+      # =======================================================================
+      - JWT_SECRET=${JWT_SECRET:-}
+      - JWT_EXPIRE_HOUR=${JWT_EXPIRE_HOUR:-24}
+
+      # =======================================================================
+      # Setup Configuration
+      # =======================================================================
+      - SETUP_MIGRATION_TIMEOUT_SECONDS=${SETUP_MIGRATION_TIMEOUT_SECONDS:-0}
+
+      # =======================================================================
+      # Timezone Configuration
+      # =======================================================================
+      - TZ=${TZ:-Asia/Shanghai}
+
+      # =======================================================================
+      # Gemini OAuth Configuration (optional)
+      # =======================================================================
+      - GEMINI_OAUTH_CLIENT_ID=${GEMINI_OAUTH_CLIENT_ID:-}
+      - GEMINI_OAUTH_CLIENT_SECRET=${GEMINI_OAUTH_CLIENT_SECRET:-}
+      - GEMINI_OAUTH_SCOPES=${GEMINI_OAUTH_SCOPES:-}
+      - GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
+
+      # Built-in OAuth client secrets (optional)
+      # SECURITY: This repo does not embed third-party client_secret.
+      - GEMINI_CLI_OAUTH_CLIENT_SECRET=${GEMINI_CLI_OAUTH_CLIENT_SECRET:-}
+      - ANTIGRAVITY_OAUTH_CLIENT_SECRET=${ANTIGRAVITY_OAUTH_CLIENT_SECRET:-}
+      - ANTIGRAVITY_USER_AGENT_VERSION=${ANTIGRAVITY_USER_AGENT_VERSION:-}
+
+      # =======================================================================
+      # Gateway Upstream, Scheduling & Image Configuration
+      # =======================================================================
+      # Gateway values come from Compose .env or the shell.
+      # Fallbacks mirror Sub2API backend defaults so omitted values preserve behavior.
+      - GATEWAY_FORCE_CODEX_CLI=${GATEWAY_FORCE_CODEX_CLI:-false}
+      - GATEWAY_OPENAI_COMPACT_MODEL=${GATEWAY_OPENAI_COMPACT_MODEL:-gpt-5.4}
+      - SUB2API_IMAGES_MAIN_MODEL=${SUB2API_IMAGES_MAIN_MODEL:-gpt-5.6-luna}
+      - GATEWAY_OPENAI_RESPONSE_HEADER_TIMEOUT=${GATEWAY_OPENAI_RESPONSE_HEADER_TIMEOUT:-0}
+      - GATEWAY_OPENAI_WS_FORCE_HTTP=${GATEWAY_OPENAI_WS_FORCE_HTTP:-false}
+      - GATEWAY_OPENAI_HTTP2_ENABLED=${GATEWAY_OPENAI_HTTP2_ENABLED:-true}
+      - GATEWAY_OPENAI_HTTP2_ALLOW_PROXY_FALLBACK_TO_HTTP1=${GATEWAY_OPENAI_HTTP2_ALLOW_PROXY_FALLBACK_TO_HTTP1:-true}
+      - GATEWAY_OPENAI_HTTP2_FALLBACK_ERROR_THRESHOLD=${GATEWAY_OPENAI_HTTP2_FALLBACK_ERROR_THRESHOLD:-2}
+      - GATEWAY_OPENAI_HTTP2_FALLBACK_WINDOW_SECONDS=${GATEWAY_OPENAI_HTTP2_FALLBACK_WINDOW_SECONDS:-60}
+      - GATEWAY_OPENAI_HTTP2_FALLBACK_TTL_SECONDS=${GATEWAY_OPENAI_HTTP2_FALLBACK_TTL_SECONDS:-600}
+      - GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_FAILURE_THRESHOLD=${GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_FAILURE_THRESHOLD:-2}
+      - GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_WINDOW_SECONDS=${GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_WINDOW_SECONDS:-60}
+      - GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_TTL_SECONDS=${GATEWAY_OPENAI_PROXY_STREAM_CIRCUIT_TTL_SECONDS:-600}
+      - GATEWAY_MAX_BODY_SIZE=${GATEWAY_MAX_BODY_SIZE:-268435456}
+      - GATEWAY_MAX_CONNS_PER_HOST=${GATEWAY_MAX_CONNS_PER_HOST:-1024}
+      - GATEWAY_MAX_IDLE_CONNS=${GATEWAY_MAX_IDLE_CONNS:-2560}
+      - GATEWAY_MAX_IDLE_CONNS_PER_HOST=${GATEWAY_MAX_IDLE_CONNS_PER_HOST:-120}
+      - GATEWAY_SCHEDULING_STICKY_SESSION_MAX_WAITING=${GATEWAY_SCHEDULING_STICKY_SESSION_MAX_WAITING:-3}
+      - GATEWAY_SCHEDULING_STICKY_SESSION_WAIT_TIMEOUT=${GATEWAY_SCHEDULING_STICKY_SESSION_WAIT_TIMEOUT:-120s}
+      - GATEWAY_SCHEDULING_FALLBACK_WAIT_TIMEOUT=${GATEWAY_SCHEDULING_FALLBACK_WAIT_TIMEOUT:-30s}
+      - GATEWAY_SCHEDULING_FALLBACK_MAX_WAITING=${GATEWAY_SCHEDULING_FALLBACK_MAX_WAITING:-100}
+      - GATEWAY_SCHEDULING_LOAD_BATCH_ENABLED=${GATEWAY_SCHEDULING_LOAD_BATCH_ENABLED:-true}
+      - GATEWAY_SCHEDULING_SLOT_CLEANUP_INTERVAL=${GATEWAY_SCHEDULING_SLOT_CLEANUP_INTERVAL:-30s}
+      - GATEWAY_SCHEDULING_DB_FALLBACK_ENABLED=${GATEWAY_SCHEDULING_DB_FALLBACK_ENABLED:-true}
+      - GATEWAY_SCHEDULING_DB_FALLBACK_TIMEOUT_SECONDS=${GATEWAY_SCHEDULING_DB_FALLBACK_TIMEOUT_SECONDS:-0}
+      - GATEWAY_SCHEDULING_DB_FALLBACK_MAX_QPS=${GATEWAY_SCHEDULING_DB_FALLBACK_MAX_QPS:-0}
+      - GATEWAY_SCHEDULING_OUTBOX_POLL_INTERVAL_SECONDS=${GATEWAY_SCHEDULING_OUTBOX_POLL_INTERVAL_SECONDS:-1}
+      - GATEWAY_SCHEDULING_OUTBOX_LAG_WARN_SECONDS=${GATEWAY_SCHEDULING_OUTBOX_LAG_WARN_SECONDS:-5}
+      - GATEWAY_SCHEDULING_OUTBOX_LAG_REBUILD_SECONDS=${GATEWAY_SCHEDULING_OUTBOX_LAG_REBUILD_SECONDS:-10}
+      - GATEWAY_SCHEDULING_OUTBOX_LAG_REBUILD_FAILURES=${GATEWAY_SCHEDULING_OUTBOX_LAG_REBUILD_FAILURES:-3}
+      - GATEWAY_SCHEDULING_OUTBOX_BACKLOG_REBUILD_ROWS=${GATEWAY_SCHEDULING_OUTBOX_BACKLOG_REBUILD_ROWS:-10000}
+      - GATEWAY_SCHEDULING_FULL_REBUILD_INTERVAL_SECONDS=${GATEWAY_SCHEDULING_FULL_REBUILD_INTERVAL_SECONDS:-300}
+      - GATEWAY_IMAGE_STREAM_DATA_INTERVAL_TIMEOUT=${GATEWAY_IMAGE_STREAM_DATA_INTERVAL_TIMEOUT:-900}
+      - GATEWAY_IMAGE_STREAM_KEEPALIVE_INTERVAL=${GATEWAY_IMAGE_STREAM_KEEPALIVE_INTERVAL:-10}
+      - GATEWAY_IMAGE_NONSTREAM_KEEPALIVE_INTERVAL=${GATEWAY_IMAGE_NONSTREAM_KEEPALIVE_INTERVAL:-0}
+      - GATEWAY_IMAGE_CONCURRENCY_ENABLED=${GATEWAY_IMAGE_CONCURRENCY_ENABLED:-false}
+      - GATEWAY_IMAGE_CONCURRENCY_MAX_CONCURRENT_REQUESTS=${GATEWAY_IMAGE_CONCURRENCY_MAX_CONCURRENT_REQUESTS:-0}
+      - GATEWAY_IMAGE_CONCURRENCY_OVERFLOW_MODE=${GATEWAY_IMAGE_CONCURRENCY_OVERFLOW_MODE:-reject}
+--- env dumps ---
+####FILE yhlxj/chatgptgo.git::.env
+APP_JWT_SECRET=ULPY8neY4XuF3QnEWBh4M2s8srfc0Uuj
+APP_AES_KEY=31VJ4ztHqjcHoZHjD0T8N9SUcfY9ZMGR
+
+GITHUB_CLIENT_ID=Ov23li5JZ3I6wxSvUvCH
+GITHUB_CLIENT_SECRET=98e43c0505a287616d3a569264dccdbe666e3ff7
+GITHUB_REDIRECT_URI=https://chatgptgo.shop/oauth/callback
+
+GOOGLE_CLIENT_ID=473266772680-p9qkkg9f2havgcjkqv6p2ta60dn3do79.apps.googleusercontent.com
+GOOGLE_CLIENT_SECRET=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
+GOOGLE_REDIRECT_URI=https://chatgptgo.shop/oauth/callback
+
+APP_PAYMENT_MOCK_MODE=false
+APP_ALIPAY_ENABLED=true
+ALIPAY_APP_ID=2021006118643235
+ALIPAY_SIGN_TYPE=RSA2
+
+ALIPAY_PRIVATE_KEY=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
+ALIPAY_PUBLIC_KEY=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7BkvG60UrGuyMxpJJWyB4O5UkxdFAO7ravTkPkcqqSC4FFzOrnZ0KbSAFF+j6M4c4I3AGxFBrDONnpQ1Dy/rQoFSxdDeqXdt1xY6YSilPQnYMK6T+lT2xthtKYCUmQSjX/2VIRJhzqzvmJb+fPOdJPrv56EJW+tsxQFmLlNgHBKEe2ma658SWc3Mudvd/sktVMg2Qfeg4j1qGswiJoMnr40OKsJITn81+FR2QaOeKoU0fp/WNsBZOvnAo0kuf1y63cwAtK2iBa5JrZUz+EOrNEVYMv9s56qw5u1t0r0zxq/d+0xURGvNjVSCnlQ6IHRqhuXvMepQtNzDo9hlonEOQIDAQAB
+ALIPAY_GATEWAY_URL=https://openapi.alipay.com/gateway.do
+ALIPAY_NOTIFY_URL=https://api.chatgptgo.shop/api/alipay/notify
+ALIPAY_RETURN_URL=https://api.chatgptgo.shop/api/alipay/return
+ALIPAY_FRONTEND_RETURN_URL=https://chatgptgo.shop/#/dashboard/orders
+
+YHLXJ_DATASOURCE_URL=jdbc:mysql://sh-cdb-4tdnmrqa.sql.tencentcdb.com:63893/yhlxj?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true&useSSL=FALSE
+YHLXJ_DATASOURCE_USERNAME=yhlxj
+YHLXJ_DATASOURCE_PASSWORD=yhlxj123
+
+SPRING_DATASOURCE_URL=jdbc:mysql://hk-cdb-0nm1iua5.sql.tencentcdb.com:63938/chatgptgo?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true&useSSL=FALSE
+SPRING_DATASOURCE_USERNAME=chatgptgo
+SPRING_DATASOURCE_PASSWORD=eGkvKXKJ0gCOXkP8
+
+SPRING_DATA_REDIS_HOST=47.98.245.158
+SPRING_DATA_REDIS_PORT=16379
+SPRING_REDIS_PASSWORD=app.ZxAris@169
+SPRING_REDIS_DATABASE=0
+
+APP_MAIL_SUBJECT=【ChatGPTGo】邮箱验证码
+APP_MAIL_FROM=no-reply@chatgptgo.shop
+APP_MAIL_SES_SECRET_ID=AKIDynNhmbBVbR1LWQ4SaS3PVLvITO2QZT8X
+APP_MAIL_SES_SECRET_KEY=A5k9KGzSfjY7PTRCiz1oKabMq42lDPKz
+APP_MAIL_SES_REGION=ap-hongkong
+APP_MAIL_SES_ENDPOINT=ses.tencentcloudapi.com
+APP_MAIL_SES_FROM=no-reply@chatgptgo.shop
+APP_MAIL_SES_TEMPLATE_ID=178727
+APP_MAIL_SES_TEMPLATE_DATA_KEY=code
+
+ALLOWED_ORIGINS="https://chatgptgo.shop,https://www.chatgptgo.shop"####FILE zoujiajian/claudecode.git::DEPLOYMENT_GUIDE.md
+# Claude Relay Service 部署指南
+
+## 🎯 项目概述
+
+Claude Relay Service 是一个Claude API中继服务，包含：
+- **前端**: Vue 3 + Element Plus，运行在端口 3000
+- **后端**: Go 服务，运行在端口 8080
+- **数据库**: MySQL (配置在docker-compose.yml中)
+
+## 📋 环境要求
+
+### 必需环境
+- **Node.js** >= 18.0.0
+- **npm** >= 9.0.0  
+- **Go** >= 1.21.0
+- **Docker** 和 **Docker Compose** (可选，用于数据库)
+
+### 检查环境
+```bash
+node --version
+npm --version
+go version
+docker --version
+```
+
+## 🚀 快速开始
+
+### 1. 安装依赖
+
+```bash
+# 安装前端依赖
+cd frontend
+npm install --legacy-peer-deps
+cd ..
+
+# 安装后端依赖
+go mod download
+```
+
+### 2. 开发环境启动
+
+```bash
+# 使用开发启动脚本（推荐）
+./dev-start.sh
+
+# 或者手动启动
+# 终端1: 启动后端
+cd backend && go run cmd/main.go
+
+# 终端2: 启动前端  
+####FILE zoujiajian/nebula_job.git::docker-compose.yml
+services:
+  nebula-job:
+    image: javazou/nebula-job:latest
+    container_name: nebula-job
+    restart: unless-stopped
+    environment:
+      TZ: Asia/Shanghai
+      DATABASE_DSN: "root:pwd@tcp(ip:63306)/new-api?charset=utf8mb4&parseTime=True&loc=Local"
+      REDIS_ADDR: "usw-crs-e7y44hz5.sql.tencentcdb.com:24962"
+      REDIS_PASSWORD: "pwd"
+      REDIS_DB: "0"####FILE zoujiajian/tokens-website.git::docker-compose.yml
+version: '3.8'
+
+services:
+  tokens-website:
+    image: javazou/tokens-website:latest
+    container_name: tokens-website
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    environment:
+      - ADMIN_API=http://tokens.apinebula.com:8000
+      - ADMIN_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3ODEzMjI3MDMsInVzZXJuYW1lIjoicm9vdCJ9.W2DJM-WN_5cvcM30BR9TTss2LN5eyWcqpq2Q9yAj90Y
+      - LISTEN_ADDR=:8080
+      # 同 docker network 内，直接用容器名 + 内部端口 3306
+      - DB_DSN=root:your_password@tcp(nebula_mysql_test:3306)/tokens_website?charset=utf8mb4&parseTime=True&loc=Local
+    networks:
+      - nebula-net
+
+networks:
+  nebula-net:
+    name: nebula_nebula-test-network
+    external: true
+####FILE zoujiajian/yh-auditlimit.git::docker-compose.yml
+version: '3'
+services:
+  auditlimit:
+    image: chan188710/auditlimit
+    restart: always
+    ports:
+      - "127.0.0.1:9611:8080"
+    volumes:
+      - ./data:/app/
+      - ./config.yaml:/app/config.yaml
+
+    ####FILE youzi/nebula.git::.env.production
+VITE_APP_PROXY_URL=https://apinebula.ai/
+# VITE_APP_PROXY_URL=https://local-mutao-3000.apinebula.ai
+####FILE youzi/foxvip-fe.git::deploy/.env.production
+# ----------------------------------------------------------------------
+# foxvip-fe 生产环境 → Cloudflare Pages (SSR)
+# 由 deploy.sh 自动 source, 提供 NITRO_PRESET / CF_* / NUXT_* 变量
+# 本文件包含敏感凭据, 已在 .gitignore 中排除
+# ----------------------------------------------------------------------
+
+# ===== Nitro / Cloudflare Pages 必填 =====
+NITRO_PRESET=cloudflare-pages
+CF_PROJECT_NAME=foxvip-fe-prod
+# main 分支会被 Cloudflare Pages 标记为 Production
+CF_BRANCH=master
+
+# Cloudflare 凭据 (沿用 test 账号, 若生产走别的账号请替换)
+CLOUDFLARE_ACCOUNT_ID=f74ae1f88b86e57f8db0a30950fffe31
+CLOUDFLARE_API_TOKEN=cfat_xAhbNfPgDoIniSfg4mMfCqGkiJm3FzkmXdeJi6yL2545a232
+
+# ===== runtimeConfig.public (打到客户端的变量) =====
+# 接口请求直连后端域名, 不再通过 Nitro routeRules 反代
+NUXT_PUBLIC_API_BASE_URL=https://api.foxvip.com
+NUXT_APP_NUMBER=/
+NUXT_HELP_API_BASE_URL=https://cmsapi.foxvip.com
+GOOGLE_CLIENT_ID=371004574299-hhj668e7g9mbvh3o4dentfniinmu6kfk.apps.googleusercontent.com
+KAKAO_APP_KEY=0cc164183eb76726ed689511c0a811e5
+KAKAO_REDIRECT_URI=/oauth
+TURNSTILE_SITE_KEY=
+STRIPE_PUBLISHABLE_KEY=
+####FILE youzi/web-yinhe.git::.env.production
+NODE_ENV=production
+VITE_APP_PROXY_URL=https://nf.video/8081/api
+VITE_APP_CDN_URL=https://nf.video/cdn2/picture
+VITE_APP_CDN1_URL=https://nf.video/cdn/picture
+VITE_APP_NUMBER=/8081/api
+VITE_APP_BASE=/retry/web/
+VITE_ROBOTS=index,follow,max-image-preview:large,max-snippet:-1,max-video-preview:-1
+VITE_VERSON_CURRENT_TYPE=1691389913188
+VITE_VERSON_TYPE=1691027607093,1691389913188,1691052584871,1
+--- grep all repos HEAD for secret assignment ---
+--- local-r dirs ---
+104
+113
+114
+115
+116
+117
+118
+119
+82
+83
+84
+85
+86
+87
+89
+90
+91
+92
+93
+94
+97
+98
+99
+--- deep scan still running? ---
+=== end round2138b Fri Oct  9 13:59:57 UTC 2026 ===

sync2138e.txt

@@ -0,0 +1 @@
+y