feat: strengthen P0 security and operations

2026-08-01 11:20:02 +08:00
parent f776056834
commit 84c2b0b21d
77 changed files with 24185 additions and 355 deletions
--- a/Tiku.Worker/appsettings.json
+++ b/Tiku.Worker/appsettings.json
@@ -0,0 +1,90 @@
+{
+  "Serilog": {
+    "MinimumLevel": {
+      "Default": "Information",
+      "Override": {
+        "Microsoft": "Warning",
+        "Microsoft.EntityFrameworkCore.Database.Command": "Warning",
+        "System.Net.Http.HttpClient": "Warning"
+      }
+    },
+    "WriteTo": [
+      {
+        "Name": "Console"
+      }
+    ],
+    "Properties": {
+      "Application": "Tiku.Worker"
+    }
+  },
+  "OpenTelemetry": {
+    "OtlpEndpoint": ""
+  },
+  "Worker": {
+    "Enabled": true,
+    "JobPollSeconds": 2,
+    "JobParallelism": 4,
+    "JobBatchSize": 5
+  },
+  "TenantDomains": {
+    "Enabled": true,
+    "PollSeconds": 60,
+    "BatchSize": 50,
+    "DnsJsonEndpoint": "https://cloudflare-dns.com/dns-query",
+    "VerificationRecordPrefix": "_tiku-verification",
+    "AllowedCnameTargets": [],
+    "GatewayBaseUrl": null,
+    "GatewayApiKey": null
+  },
+  "SaasSubscriptions": {
+    "Enabled": true,
+    "BatchSize": 100,
+    "PastDueGraceDays": 7
+  },
+  "FeatureUsageReconciliation": {
+    "Enabled": true,
+    "BatchSize": 100,
+    "IntervalMinutes": 60
+  },
+  "Storage": {
+    "DefaultProvider": "aliyun_oss",
+    "DefaultBucket": "tenant-assets",
+    "PublicBaseUrl": "",
+    "MaxUploadBytes": 524288000,
+    "AllowedMimePrefixes": [
+      "image/",
+      "video/",
+      "audio/"
+    ],
+    "AllowedMimeTypes": [
+      "application/pdf",
+      "application/json",
+      "application/gzip",
+      "text/csv",
+      "application/vnd.ms-excel",
+      "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+    ],
+    "RequireTenantPrefix": true,
+    "AliyunOss": {
+      "Region": "",
+      "Endpoint": "",
+      "AccessKeyId": "",
+      "AccessKeySecret": "",
+      "SecurityToken": "",
+      "UseInternalEndpoint": false,
+      "UsePathStyle": false,
+      "UseCName": false,
+      "PresignDefaultMinutes": 15
+    }
+  },
+  "Security": {
+    "ClamAV": {
+      "Host": "localhost",
+      "Port": 3310,
+      "TimeoutSeconds": 30,
+      "ChunkBytes": 65536,
+      "StreamMaxLength": 524288000
+    }
+  }
+}