mod
This commit is contained in:
cuijiawang
@@ -33,3 +33,9 @@ build/
|
|||||||
.vscode/
|
.vscode/
|
||||||
.DS_Store
|
.DS_Store
|
||||||
*/.DS_Store
|
*/.DS_Store
|
||||||
|
|
||||||
|
|
||||||
|
AGENTS.md
|
||||||
|
CLAUDE.md
|
||||||
|
.claude
|
||||||
|
.omo
|
||||||
@@ -1 +0,0 @@
|
|||||||
-T 1C -U -Dskiptests=true -Dmaven.compile.fork=true
|
|
||||||
@@ -76,42 +76,91 @@ TOPIAM（Top Identity and Access Management），是一款开源的身份管理
|
|||||||
+ [阿里云计算巢部署](https://topiam.cn/docs/deployment/deployment-alibaba-cloud-computenest/)
|
+ [阿里云计算巢部署](https://topiam.cn/docs/deployment/deployment-alibaba-cloud-computenest/)
|
||||||
+ [更多方式](https://eiam.topiam.cn/docs/deployment/)
|
+ [更多方式](https://eiam.topiam.cn/docs/deployment/)
|
||||||
|
|
||||||
## 微信公众号
|
## 部署
|
||||||
|
### 准备工作：确保本地构建成功
|
||||||
|
在项目根目录执行完整构建（跳过测试）
|
||||||
|
```
|
||||||
|
./mvnw clean package -DskipTests -Dlicense.skip=true -Dformatter.skip=true
|
||||||
|
```
|
||||||
|
|
||||||
欢迎关注 TOPIAM 微信公众号，接收产品最新动态。
|
```
|
||||||
|
cd /Users/yhtx/Documents/jupyter/ai/topiam
|
||||||
|
|
||||||
<img src="/images/wxmp-qr.png" alt="wxmp" width="200px">
|
# 1. 先清理并重新构建 Console 前端（验证前端兼容性）
|
||||||
|
cd eiam-console/src/main/console-fe
|
||||||
|
pnpm install --registry=https://registry.npmmirror.com
|
||||||
|
pnpm run build:dev
|
||||||
|
|
||||||
## 版权声明
|
# 2. 全量 Maven 构建（跳过测试）
|
||||||
|
cd /Users/yhtx/Documents/jupyter/ai/topiam
|
||||||
|
./mvnw clean package -DskipTests -Dlicense.skip=true -Dformatter.skip=true -pl eiam-console -am
|
||||||
|
```
|
||||||
|
完整三模块本地构建验证
|
||||||
|
```
|
||||||
|
# 按依赖顺序构建
|
||||||
|
./mvnw clean install -DskipTests -Dlicense.skip=true -Dformatter.skip=true -pl eiam-console,eiam-portal,eiam-openapi -am
|
||||||
|
```
|
||||||
|
|
||||||
开源不代表免费，`TOPIAM` 遵循 AGPL-3.0 开源协议发布，并提供技术交流学习，但绝不允许修改后和衍生的代码做为闭源的商业软件发布和销售！ 如果需要将本产品在本地进行任何附带商业化性质行为使用，请联系项目负责人进行商业授权，以遵守 AGPL 协议保证您的正常使用。
|
|
||||||
|
|
||||||
如果您**需要将本产品进行二次开发、更改并进行任何附带商业化性质行为使用**，请联系我们进行商业授权，以遵守 `AGPL-3.0` 协议保证您的正常使用。
|
三个独立启动脚本：
|
||||||
|
|
||||||
目前在国内 `GPL` 协议**具备合同特征，是一种民事法律行为** ，属于我国《合同法》调整的范围。 `TOPIAM` 项目团队保留诉讼权利。
|
脚本 服务 端口 说明
|
||||||
|
start-console.sh Console 管理后台 1898 含 -Pdev 前端热构建
|
||||||
|
start-portal.sh Portal 用户门户 1989 含 -Pdev 前端热构建
|
||||||
|
start-openapi.sh OpenAPI 开放接口 1988 纯后端，无 -Pdev
|
||||||
|
使用方法
|
||||||
|
开三个终端分别运行：
|
||||||
|
|
||||||
[相关案例：违反 `GPL` 协议赔偿 50 万，国内首例！](https://mp.weixin.qq.com/s/YQ6sNjbDS-P7BViLZIsaoA)
|
### 终端 1
|
||||||
|
`./start-console.sh`
|
||||||
|
|
||||||
> 本项目采用 `AGPL` 开源协议（抄袭牟利索赔100万）。
|
### 终端 2
|
||||||
|
`./start-portal.sh`
|
||||||
|
|
||||||
> 使用必须遵守国家法律法规，不允许非法项目使用，后果自负。
|
### 终端 3
|
||||||
|
`./start-openapi.sh`
|
||||||
|
|
||||||
## 参与贡献
|
访问地址
|
||||||
|
服务 地址
|
||||||
|
Console http://localhost:1898
|
||||||
|
Portal http://localhost:1989
|
||||||
|
OpenAPI http://localhost:1988/doc.html
|
||||||
|
登录：admin / topiam.cn 123456
|
||||||
|
|
||||||
我们强烈欢迎有兴趣的开发者参与到项目建设中来，同时欢迎大家对项目提出宝贵意见建议和功能需求，项目正在积极开发，欢迎 PR 👏。
|
保留 start-remote.sh 作为统一入口（可选）
|
||||||
|
### 仍可用于检查连通性
|
||||||
|
`./start-remote.sh all`
|
||||||
|
|
||||||
强烈推荐阅读 [《提问的智慧》](https://github.com/ryanhanwu/How-To-Ask-Questions-The-Smart-Way)、[《如何向开源社区提问题》](https://github.com/seajs/seajs/issues/545)
|
现在有四个构建脚本：
|
||||||
和 [《如何有效地报告 Bug》](http://www.chiark.greenend.org.uk/%7Esgtatham/bugs-cn.html)、[《如何向开源项目提交无法解答的问题》](https://zhuanlan.zhihu.com/p/25795393)
|
|
||||||
，更好的问题更容易获得帮助。
|
|
||||||
|
|
||||||
## Star History
|
脚本 用途
|
||||||
|
build-console.sh 仅构建 Console 镜像
|
||||||
|
build-portal.sh 仅构建 Portal 镜像
|
||||||
|
build-openapi.sh 仅构建 OpenAPI 镜像
|
||||||
|
build-images.sh 一次性构建三个（原脚本）
|
||||||
|
使用方法
|
||||||
|
### 单独构建某个模块（默认版本 1.1.0-dev，本地仓库）
|
||||||
|
```
|
||||||
|
./build-console.sh
|
||||||
|
./build-portal.sh
|
||||||
|
./build-openapi.sh
|
||||||
|
```
|
||||||
|
|
||||||
[](https://star-history.com/#topiam/eiam&Date)
|
### 指定版本和仓库
|
||||||
|
```
|
||||||
|
./build-console.sh v1.2.0 registry.cn-hangzhou.aliyuncs.com/my-ns
|
||||||
|
./build-portal.sh v1.2.0 registry.cn-hangzhou.aliyuncs.com/my-ns
|
||||||
|
./build-openapi.sh v1.2.0 registry.cn-hangzhou.aliyuncs.com/my-ns
|
||||||
|
```
|
||||||
|
## 开发流程建议
|
||||||
|
### 1. 修改 Console 代码后
|
||||||
|
`./build-console.sh`
|
||||||
|
|
||||||
## FOSSA Status
|
### 2. 修改 Portal 代码后
|
||||||
|
`./build-portal.sh`
|
||||||
|
|
||||||
[](https://app.fossa.com/projects/git%2Bgithub.com%2Ftopiam%2Feiam?ref=badge_large)
|
### 3. 发布前全量构建
|
||||||
|
```
|
||||||
## License
|
./build-images.sh v1.2.0 registry.cn-hangzhou.aliyuncs.com/my-ns
|
||||||
|
```
|
||||||
<img src='https://www.gnu.org/graphics/agplv3-with-text-162x68.png' alt="license">
|
利用 Docker 层缓存，单模块构建通常只需 30-60 秒（只重新编译变更模块）。
|
||||||
Executable
+17
@@ -0,0 +1,17 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 构建 Console 镜像
|
||||||
|
|
||||||
|
set -e
|
||||||
|
VERSION="${1:-1.1.0-dev}"
|
||||||
|
REGISTRY="${2:-localhost}"
|
||||||
|
|
||||||
|
echo "🔨 构建 Console 镜像: ${REGISTRY}/topiam-console:${VERSION}"
|
||||||
|
|
||||||
|
cd /Users/yhtx/Documents/jupyter/ai/topiam
|
||||||
|
docker build \
|
||||||
|
--build-arg BUILDKIT_INLINE_CACHE=1 \
|
||||||
|
-t ${REGISTRY}/topiam-console:${VERSION} \
|
||||||
|
-f eiam-console/Dockerfile \
|
||||||
|
.
|
||||||
|
|
||||||
|
echo "✅ Console 镜像构建完成"
|
||||||
Executable
+17
@@ -0,0 +1,17 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 构建 OpenAPI 镜像
|
||||||
|
|
||||||
|
set -e
|
||||||
|
VERSION="${1:-1.1.0-dev}"
|
||||||
|
REGISTRY="${2:-localhost}"
|
||||||
|
|
||||||
|
echo "🔨 构建 OpenAPI 镜像: ${REGISTRY}/topiam-openapi:${VERSION}"
|
||||||
|
|
||||||
|
cd /Users/yhtx/Documents/jupyter/ai/topiam
|
||||||
|
docker build \
|
||||||
|
--build-arg BUILDKIT_INLINE_CACHE=1 \
|
||||||
|
-t ${REGISTRY}/topiam-openapi:${VERSION} \
|
||||||
|
-f eiam-openapi/Dockerfile \
|
||||||
|
.
|
||||||
|
|
||||||
|
echo "✅ OpenAPI 镜像构建完成"
|
||||||
Executable
+17
@@ -0,0 +1,17 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 构建 Portal 镜像
|
||||||
|
|
||||||
|
set -e
|
||||||
|
VERSION="${1:-1.1.0-dev}"
|
||||||
|
REGISTRY="${2:-localhost}"
|
||||||
|
|
||||||
|
echo "🔨 构建 Portal 镜像: ${REGISTRY}/topiam-portal:${VERSION}"
|
||||||
|
|
||||||
|
cd /Users/yhtx/Documents/jupyter/ai/topiam
|
||||||
|
docker build \
|
||||||
|
--build-arg BUILDKIT_INLINE_CACHE=1 \
|
||||||
|
-t ${REGISTRY}/topiam-portal:${VERSION} \
|
||||||
|
-f eiam-portal/Dockerfile \
|
||||||
|
.
|
||||||
|
|
||||||
|
echo "✅ Portal 镜像构建完成"
|
||||||
@@ -0,0 +1,144 @@
|
|||||||
|
version: '3.8'
|
||||||
|
|
||||||
|
# =============================================
|
||||||
|
# TOPIAM 生产环境部署
|
||||||
|
# =============================================
|
||||||
|
|
||||||
|
services:
|
||||||
|
# ---- Console 管理后台 ----
|
||||||
|
topiam-console:
|
||||||
|
image: topiam-console:1.1.0-dev
|
||||||
|
container_name: topiam-console
|
||||||
|
environment:
|
||||||
|
- TZ=Asia/Shanghai
|
||||||
|
- SPRING_PROFILES_ACTIVE=remote
|
||||||
|
# 数据库
|
||||||
|
- SPRING_DATASOURCE_URL=jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
- SPRING_DATASOURCE_USERNAME=topiam
|
||||||
|
- SPRING_DATASOURCE_PASSWORD=topiam
|
||||||
|
# Redis
|
||||||
|
- SPRING_DATA_REDIS_HOST=100.74.125.93
|
||||||
|
- SPRING_DATA_REDIS_PORT=6379
|
||||||
|
- SPRING_DATA_REDIS_PASSWORD=redis
|
||||||
|
# Elasticsearch
|
||||||
|
- SPRING_ELASTICSEARCH_URIS=http://100.74.125.93:9200
|
||||||
|
# RabbitMQ
|
||||||
|
- SPRING_RABBITMQ_HOST=100.74.125.93
|
||||||
|
- SPRING_RABBITMQ_PORT=5672
|
||||||
|
- SPRING_RABBITMQ_USERNAME=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_PASSWORD=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_VIRTUAL_HOST=/
|
||||||
|
# 服务地址（按实际域名修改）
|
||||||
|
- TOPIAM_SERVER_CONSOLE_PUBLIC_BASE_URL=http://your-domain.com:1898
|
||||||
|
- TOPIAM_SERVER_PORTAL_PUBLIC_BASE_URL=http://your-domain.com:1989
|
||||||
|
- TOPIAM_SERVER_OPENAPI_PUBLIC_BASE_URL=http://your-domain.com:1988
|
||||||
|
ports:
|
||||||
|
- "1898:1898"
|
||||||
|
restart: unless-stopped
|
||||||
|
deploy:
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
memory: 2G
|
||||||
|
reservations:
|
||||||
|
memory: 1G
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "curl", "-f", "http://localhost:1898/actuator/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 60s
|
||||||
|
logging:
|
||||||
|
driver: "json-file"
|
||||||
|
options:
|
||||||
|
max-size: "100m"
|
||||||
|
max-file: "3"
|
||||||
|
|
||||||
|
# ---- Portal 用户门户 ----
|
||||||
|
topiam-portal:
|
||||||
|
image: topiam-portal:1.1.0-dev
|
||||||
|
container_name: topiam-portal
|
||||||
|
environment:
|
||||||
|
- TZ=Asia/Shanghai
|
||||||
|
- SPRING_PROFILES_ACTIVE=remote
|
||||||
|
- SPRING_DATASOURCE_URL=jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
- SPRING_DATASOURCE_USERNAME=topiam
|
||||||
|
- SPRING_DATASOURCE_PASSWORD=topiam
|
||||||
|
- SPRING_DATA_REDIS_HOST=100.74.125.93
|
||||||
|
- SPRING_DATA_REDIS_PORT=6379
|
||||||
|
- SPRING_DATA_REDIS_PASSWORD=redis
|
||||||
|
- SPRING_ELASTICSEARCH_URIS=http://100.74.125.93:9200
|
||||||
|
- SPRING_RABBITMQ_HOST=100.74.125.93
|
||||||
|
- SPRING_RABBITMQ_PORT=5672
|
||||||
|
- SPRING_RABBITMQ_USERNAME=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_PASSWORD=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_VIRTUAL_HOST=/
|
||||||
|
ports:
|
||||||
|
- "1989:1989"
|
||||||
|
restart: unless-stopped
|
||||||
|
depends_on:
|
||||||
|
topiam-console:
|
||||||
|
condition: service_healthy
|
||||||
|
deploy:
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
memory: 2G
|
||||||
|
reservations:
|
||||||
|
memory: 1G
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "curl", "-f", "http://localhost:1989/actuator/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 60s
|
||||||
|
logging:
|
||||||
|
driver: "json-file"
|
||||||
|
options:
|
||||||
|
max-size: "100m"
|
||||||
|
max-file: "3"
|
||||||
|
|
||||||
|
# ---- OpenAPI 开放接口 ----
|
||||||
|
topiam-openapi:
|
||||||
|
image: topiam-openapi:1.1.0-dev
|
||||||
|
container_name: topiam-openapi
|
||||||
|
environment:
|
||||||
|
- TZ=Asia/Shanghai
|
||||||
|
- SPRING_PROFILES_ACTIVE=remote
|
||||||
|
- SPRING_DATASOURCE_URL=jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
- SPRING_DATASOURCE_USERNAME=topiam
|
||||||
|
- SPRING_DATASOURCE_PASSWORD=topiam
|
||||||
|
- SPRING_DATA_REDIS_HOST=100.74.125.93
|
||||||
|
- SPRING_DATA_REDIS_PORT=6379
|
||||||
|
- SPRING_DATA_REDIS_PASSWORD=redis
|
||||||
|
- SPRING_ELASTICSEARCH_URIS=http://100.74.125.93:9200
|
||||||
|
- SPRING_RABBITMQ_HOST=100.74.125.93
|
||||||
|
- SPRING_RABBITMQ_PORT=5672
|
||||||
|
- SPRING_RABBITMQ_USERNAME=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_PASSWORD=rabbitmq
|
||||||
|
- SPRING_RABBITMQ_VIRTUAL_HOST=/
|
||||||
|
ports:
|
||||||
|
- "1988:1988"
|
||||||
|
restart: unless-stopped
|
||||||
|
depends_on:
|
||||||
|
topiam-console:
|
||||||
|
condition: service_healthy
|
||||||
|
deploy:
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
memory: 1G
|
||||||
|
reservations:
|
||||||
|
memory: 512M
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "curl", "-f", "http://localhost:1988/actuator/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
logging:
|
||||||
|
driver: "json-file"
|
||||||
|
options:
|
||||||
|
max-size: "100m"
|
||||||
|
max-file: "3"
|
||||||
|
|
||||||
|
networks:
|
||||||
|
default:
|
||||||
|
name: topiam-network
|
||||||
@@ -1,21 +1,3 @@
|
|||||||
#
|
|
||||||
# TOPIAM Employee - Employee Identity and Access Management
|
|
||||||
# Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or modify
|
|
||||||
# it under the terms of the GNU Affero General Public License as published by
|
|
||||||
# the Free Software Foundation, either version 3 of the License, or
|
|
||||||
# (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
# GNU Affero General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Affero General Public License
|
|
||||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
#
|
|
||||||
|
|
||||||
version: '3'
|
version: '3'
|
||||||
|
|
||||||
services:
|
services:
|
||||||
|
|||||||
+127
-43
@@ -1,52 +1,136 @@
|
|||||||
#
|
# =============================================
|
||||||
# eiam-console - Employee Identity and Access Management
|
# TOPIAM Console - 多阶段构建（简化 Maven 配置）
|
||||||
# Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
# =============================================
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or modify
|
|
||||||
# it under the terms of the GNU Affero General Public License as published by
|
|
||||||
# the Free Software Foundation, either version 3 of the License, or
|
|
||||||
# (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
# GNU Affero General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Affero General Public License
|
|
||||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
#
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre as build
|
# ---- 阶段 1: 前端构建 ----
|
||||||
WORKDIR /workspace/app
|
FROM m.daocloud.io/docker.io/library/node:22.12.0-alpine AS frontend-builder
|
||||||
|
|
||||||
ARG JAR_FILE=target/topiam-employee-console-*.jar
|
WORKDIR /build/console-fe
|
||||||
COPY ${JAR_FILE} target/application.jar
|
|
||||||
RUN java -Djarmode=layertools -jar target/application.jar extract --destination target/extracted
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre
|
# 配置 pnpm 和镜像源
|
||||||
|
RUN npm config set registry https://registry.npmmirror.com && \
|
||||||
|
npm install -g pnpm@9.15.1
|
||||||
|
|
||||||
ARG EXTRACTED=/workspace/app/target/extracted
|
# 先复制 package.json 利用缓存
|
||||||
WORKDIR topiam
|
COPY eiam-console/src/main/console-fe/package.json eiam-console/src/main/console-fe/pnpm-lock.yaml* ./
|
||||||
COPY --from=build ${EXTRACTED}/dependencies/ ./
|
RUN pnpm install --frozen-lockfile --ignore-scripts
|
||||||
COPY --from=build ${EXTRACTED}/spring-boot-loader/ ./
|
|
||||||
COPY --from=build ${EXTRACTED}/snapshot-dependencies/ ./
|
# 复制源码并构建
|
||||||
COPY --from=build ${EXTRACTED}/application/ ./
|
COPY eiam-console/src/main/console-fe/ ./
|
||||||
|
ENV UMI_ENV=dev
|
||||||
|
RUN npm run build:dev
|
||||||
|
|
||||||
|
|
||||||
ENV TZ=Asia/Shanghai
|
# ---- 阶段 2: 后端构建 ----
|
||||||
RUN sed -i 's/archive.ubuntu.com/cn.archive.ubuntu.com/g' /etc/apt/sources.list \
|
FROM m.daocloud.io/docker.io/library/maven:3.9-eclipse-temurin-17 AS backend-builder
|
||||||
&& apt-get update \
|
|
||||||
&& ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
|
|
||||||
&& apt-get clean \
|
|
||||||
&& apt-get autoclean \
|
|
||||||
&& apt-get autoremove -y \
|
|
||||||
&& apt-get install -y curl \
|
|
||||||
&& apt-get install -y iputils-ping \
|
|
||||||
&& apt-get install -y wget \
|
|
||||||
&& apt-get install -y tzdata \
|
|
||||||
&& apt-get install -y fontconfig \
|
|
||||||
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
|
|
||||||
|
|
||||||
|
WORKDIR /build
|
||||||
|
|
||||||
|
# 设置 Maven 参数（避免配置文件冲突）
|
||||||
|
ENV MAVEN_OPTS="-Xmx2048m -Xms1024m -Djava.awt.headless=true -Dmaven.multiModuleProjectDirectory=/build"
|
||||||
|
|
||||||
|
# 复制父 pom 和所有模块 pom（父 pom 需要所有子模块存在）
|
||||||
|
COPY pom.xml .
|
||||||
|
COPY eiam-common/pom.xml eiam-common/pom.xml
|
||||||
|
COPY eiam-core/pom.xml eiam-core/pom.xml
|
||||||
|
COPY eiam-audit/pom.xml eiam-audit/pom.xml
|
||||||
|
COPY eiam-application/pom.xml eiam-application/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-core/pom.xml eiam-application/eiam-application-core/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-oidc/pom.xml eiam-application/eiam-application-oidc/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-jwt/pom.xml eiam-application/eiam-application-jwt/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-form/pom.xml eiam-application/eiam-application-form/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-all/pom.xml eiam-application/eiam-application-all/pom.xml
|
||||||
|
COPY eiam-protocol/pom.xml eiam-protocol/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-core/pom.xml eiam-protocol/eiam-protocol-core/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-form/pom.xml eiam-protocol/eiam-protocol-form/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-jwt/pom.xml eiam-protocol/eiam-protocol-jwt/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-oidc/pom.xml eiam-protocol/eiam-protocol-oidc/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-all/pom.xml eiam-protocol/eiam-protocol-all/pom.xml
|
||||||
|
COPY eiam-authentication/pom.xml eiam-authentication/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-core/pom.xml eiam-authentication/eiam-authentication-core/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-dingtalk/pom.xml eiam-authentication/eiam-authentication-dingtalk/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-feishu/pom.xml eiam-authentication/eiam-authentication-feishu/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-qq/pom.xml eiam-authentication/eiam-authentication-qq/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechat/pom.xml eiam-authentication/eiam-authentication-wechat/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-github/pom.xml eiam-authentication/eiam-authentication-github/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechatwork/pom.xml eiam-authentication/eiam-authentication-wechatwork/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-gitee/pom.xml eiam-authentication/eiam-authentication-gitee/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-alipay/pom.xml eiam-authentication/eiam-authentication-alipay/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-sms/pom.xml eiam-authentication/eiam-authentication-sms/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-mail/pom.xml eiam-authentication/eiam-authentication-mail/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-all/pom.xml eiam-authentication/eiam-authentication-all/pom.xml
|
||||||
|
COPY eiam-identity-source/pom.xml eiam-identity-source/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-core/pom.xml eiam-identity-source/eiam-identity-source-core/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-dingtalk/pom.xml eiam-identity-source/eiam-identity-source-dingtalk/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-feishu/pom.xml eiam-identity-source/eiam-identity-source-feishu/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-all/pom.xml eiam-identity-source/eiam-identity-source-all/pom.xml
|
||||||
|
COPY eiam-synchronizer/pom.xml eiam-synchronizer/pom.xml
|
||||||
|
COPY eiam-portal/pom.xml eiam-portal/pom.xml
|
||||||
|
COPY eiam-openapi/pom.xml eiam-openapi/pom.xml
|
||||||
|
COPY eiam-console/pom.xml eiam-console/pom.xml
|
||||||
|
|
||||||
|
# 下载依赖（离线模式）
|
||||||
|
RUN mvn dependency:go-offline -B -pl eiam-console -am
|
||||||
|
|
||||||
|
# 复制前端构建产物
|
||||||
|
COPY --from=frontend-builder /build/console-fe/build eiam-console/src/main/console-fe/build
|
||||||
|
|
||||||
|
# 复制后端源码并编译打包
|
||||||
|
COPY eiam-common eiam-common
|
||||||
|
COPY eiam-core eiam-core
|
||||||
|
COPY eiam-audit eiam-audit
|
||||||
|
COPY eiam-application eiam-application
|
||||||
|
COPY eiam-protocol eiam-protocol
|
||||||
|
COPY eiam-authentication eiam-authentication
|
||||||
|
COPY eiam-identity-source eiam-identity-source
|
||||||
|
COPY eiam-synchronizer eiam-synchronizer
|
||||||
|
COPY eiam-console/src eiam-console/src
|
||||||
|
|
||||||
|
RUN mvn clean package -pl eiam-console -am -P!dev -DskipTests -Dlicense.skip=true -Dformatter.skip=true -Dmaven.javadoc.skip=true
|
||||||
|
|
||||||
|
|
||||||
|
# ---- 阶段 3: 运行时镜像 ----
|
||||||
|
FROM eclipse-temurin:17-jre-alpine
|
||||||
|
|
||||||
|
# 安装基础工具：字体、时区、curl（健康检查用）
|
||||||
|
RUN apk add --no-cache \
|
||||||
|
tzdata \
|
||||||
|
fontconfig \
|
||||||
|
curl \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||||
|
&& echo "Asia/Shanghai" > /etc/timezone
|
||||||
|
|
||||||
|
# 创建非 root 用户
|
||||||
|
RUN addgroup -g 1000 -S topiam && \
|
||||||
|
adduser -u 1000 -S -G topiam topiam
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# 复制 jar 包
|
||||||
|
COPY --from=backend-builder /build/eiam-console/target/topiam-employee-console-*.jar app.jar
|
||||||
|
|
||||||
|
# 修改文件所有者
|
||||||
|
RUN chown -R topiam:topiam /app
|
||||||
|
|
||||||
|
# 切换非 root 用户
|
||||||
|
USER topiam
|
||||||
|
|
||||||
|
# 暴露端口
|
||||||
EXPOSE 1898
|
EXPOSE 1898
|
||||||
|
|
||||||
ENTRYPOINT ["java","-XX:TieredStopAtLevel=1","-Djava.security.egd=file:/dev/./urandom","-Dspring.main.lazy-initialization=false","org.springframework.boot.loader.launch.JarLauncher"]
|
# JVM 参数优化
|
||||||
|
ENV JAVA_OPTS="-Xms512m -Xmx1024m \
|
||||||
|
-XX:+UseG1GC \
|
||||||
|
-XX:MaxGCPauseMillis=200 \
|
||||||
|
-XX:+HeapDumpOnOutOfMemoryError \
|
||||||
|
-XX:HeapDumpPath=/app/heapdump.hprof \
|
||||||
|
-Djava.security.egd=file:/dev/./urandom \
|
||||||
|
-Dfile.encoding=UTF-8 \
|
||||||
|
-Duser.timezone=Asia/Shanghai"
|
||||||
|
|
||||||
|
# 健康检查
|
||||||
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
||||||
|
CMD curl -f http://localhost:1898/actuator/health || exit 1
|
||||||
|
|
||||||
|
# 启动入口
|
||||||
|
ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS -Dspring.profiles.active=remote -jar app.jar"]
|
||||||
|
|||||||
+19
-25
@@ -131,47 +131,41 @@
|
|||||||
<build>
|
<build>
|
||||||
<plugins>
|
<plugins>
|
||||||
<!--编译打包前端项目-->
|
<!--编译打包前端项目-->
|
||||||
|
<!-- 直接用系统已安装的 node/pnpm -->
|
||||||
<plugin>
|
<plugin>
|
||||||
<groupId>com.github.eirslett</groupId>
|
<groupId>org.codehaus.mojo</groupId>
|
||||||
<artifactId>frontend-maven-plugin</artifactId>
|
<artifactId>exec-maven-plugin</artifactId>
|
||||||
<version>${frontend-maven-plugin.version}</version>
|
<version>3.1.0</version>
|
||||||
<configuration>
|
|
||||||
<installDirectory>target</installDirectory>
|
|
||||||
<workingDirectory>src/main/console-fe</workingDirectory>
|
|
||||||
</configuration>
|
|
||||||
<executions>
|
<executions>
|
||||||
<execution>
|
|
||||||
<id>install node and pnpm</id>
|
|
||||||
<goals>
|
|
||||||
<goal>install-node-and-pnpm</goal>
|
|
||||||
</goals>
|
|
||||||
<phase>generate-resources</phase>
|
|
||||||
<configuration>
|
|
||||||
<nodeDownloadRoot>https://mirrors.aliyun.com/nodejs-release/</nodeDownloadRoot>
|
|
||||||
<nodeVersion>v22.12.0</nodeVersion>
|
|
||||||
<pnpmVersion>v9.15.1</pnpmVersion>
|
|
||||||
</configuration>
|
|
||||||
</execution>
|
|
||||||
<execution>
|
<execution>
|
||||||
<id>pnpm install</id>
|
<id>pnpm install</id>
|
||||||
<goals>
|
<goals>
|
||||||
<goal>pnpm</goal>
|
<goal>exec</goal>
|
||||||
</goals>
|
</goals>
|
||||||
<phase>generate-resources</phase>
|
<phase>generate-resources</phase>
|
||||||
<configuration>
|
<configuration>
|
||||||
<arguments>install</arguments>
|
<executable>pnpm</executable>
|
||||||
<pnpmRegistryURL>https://registry.npmmirror.com</pnpmRegistryURL>
|
<workingDirectory>src/main/console-fe</workingDirectory>
|
||||||
<pnpmInheritsProxyConfigFromMaven>true</pnpmInheritsProxyConfigFromMaven>
|
<arguments>
|
||||||
|
<argument>install</argument>
|
||||||
|
<argument>--registry=https://registry.npmmirror.com</argument>
|
||||||
|
<argument>--ignore-scripts</argument>
|
||||||
|
</arguments>
|
||||||
</configuration>
|
</configuration>
|
||||||
</execution>
|
</execution>
|
||||||
<execution>
|
<execution>
|
||||||
<id>pnpm run build</id>
|
<id>pnpm run build</id>
|
||||||
<goals>
|
<goals>
|
||||||
<goal>pnpm</goal>
|
<goal>exec</goal>
|
||||||
</goals>
|
</goals>
|
||||||
<phase>generate-resources</phase>
|
<phase>generate-resources</phase>
|
||||||
<configuration>
|
<configuration>
|
||||||
<arguments>run build:dev</arguments>
|
<executable>pnpm</executable>
|
||||||
|
<workingDirectory>src/main/console-fe</workingDirectory>
|
||||||
|
<arguments>
|
||||||
|
<argument>run</argument>
|
||||||
|
<argument>build:dev</argument>
|
||||||
|
</arguments>
|
||||||
</configuration>
|
</configuration>
|
||||||
</execution>
|
</execution>
|
||||||
</executions>
|
</executions>
|
||||||
|
|||||||
@@ -54,7 +54,7 @@
|
|||||||
"antd-img-crop": "^4.24.0",
|
"antd-img-crop": "^4.24.0",
|
||||||
"antd-style": "^3.7.1",
|
"antd-style": "^3.7.1",
|
||||||
"classnames": "^2.5.1",
|
"classnames": "^2.5.1",
|
||||||
"codemirror": "^6.0.1",
|
"codemirror": "5.65.19",
|
||||||
"content-security-policy-parser": "^0.6.0",
|
"content-security-policy-parser": "^0.6.0",
|
||||||
"copy-to-clipboard": "^3.3.3",
|
"copy-to-clipboard": "^3.3.3",
|
||||||
"crypto-js": "^4.2.0",
|
"crypto-js": "^4.2.0",
|
||||||
|
|||||||
+4866
-4004
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,5 @@
|
|||||||
|
allowBuilds:
|
||||||
|
core-js: true
|
||||||
|
core-js-pure: true
|
||||||
|
es5-ext: true
|
||||||
|
esbuild: true
|
||||||
@@ -0,0 +1,72 @@
|
|||||||
|
spring:
|
||||||
|
datasource:
|
||||||
|
url: jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
username: topiam
|
||||||
|
password: topiam
|
||||||
|
driver-class-name: com.mysql.cj.jdbc.Driver
|
||||||
|
hikari:
|
||||||
|
maximum-pool-size: 20
|
||||||
|
minimum-idle: 5
|
||||||
|
connection-timeout: 30000
|
||||||
|
idle-timeout: 600000
|
||||||
|
max-lifetime: 1800000
|
||||||
|
|
||||||
|
data:
|
||||||
|
redis:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 6379
|
||||||
|
password: redis
|
||||||
|
database: 0
|
||||||
|
timeout: 5000ms
|
||||||
|
lettuce:
|
||||||
|
pool:
|
||||||
|
max-active: 20
|
||||||
|
max-idle: 10
|
||||||
|
min-idle: 5
|
||||||
|
shutdown-timeout: 100ms
|
||||||
|
|
||||||
|
elasticsearch:
|
||||||
|
uris: http://100.74.125.93:9200
|
||||||
|
connection-timeout: 5000ms
|
||||||
|
socket-timeout: 10000ms
|
||||||
|
|
||||||
|
rabbitmq:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 5672
|
||||||
|
username: rabbitmq
|
||||||
|
password: rabbitmq
|
||||||
|
virtual-host: /
|
||||||
|
publisher-confirm-type: correlated
|
||||||
|
publisher-returns: true
|
||||||
|
dynamic: true
|
||||||
|
listener:
|
||||||
|
simple:
|
||||||
|
acknowledge-mode: manual
|
||||||
|
concurrency: 5
|
||||||
|
max-concurrency: 20
|
||||||
|
prefetch: 10
|
||||||
|
|
||||||
|
# SpringDoc 配置
|
||||||
|
springdoc:
|
||||||
|
swagger-ui:
|
||||||
|
enabled: true
|
||||||
|
path: /swagger-ui.html
|
||||||
|
api-docs:
|
||||||
|
path: /v3/api-docs
|
||||||
|
|
||||||
|
# TOPIAM 服务配置
|
||||||
|
topiam:
|
||||||
|
server:
|
||||||
|
console-public-base-url: http://100.74.125.93:1898
|
||||||
|
portal-public-base-url: http://100.74.125.93:1989
|
||||||
|
openapi-public-base-url: http://100.74.125.93:1988
|
||||||
|
synchronizer-public-base-url: http://100.74.125.93:1986
|
||||||
|
|
||||||
|
# 可选：日志配置
|
||||||
|
logging:
|
||||||
|
level:
|
||||||
|
cn.topiam: debug
|
||||||
|
org.springframework.web: info
|
||||||
|
org.hibernate.SQL: warn
|
||||||
|
pattern:
|
||||||
|
console: "%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n"
|
||||||
+98
-43
@@ -1,53 +1,108 @@
|
|||||||
#
|
# =============================================
|
||||||
# eiam-openapi - Employee Identity and Access Management
|
# TOPIAM OpenAPI - 多阶段构建（纯后端，无前端）
|
||||||
# Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
# =============================================
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or modify
|
|
||||||
# it under the terms of the GNU Affero General Public License as published by
|
|
||||||
# the Free Software Foundation, either version 3 of the License, or
|
|
||||||
# (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
# GNU Affero General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Affero General Public License
|
|
||||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
#
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre as build
|
# ---- 阶段 1: 后端构建 ----
|
||||||
WORKDIR /workspace/app
|
FROM m.daocloud.io/docker.io/library/maven:3.9-eclipse-temurin-17 AS backend-builder
|
||||||
|
|
||||||
ARG JAR_FILE=target/topiam-employee-openapi-*.jar
|
WORKDIR /build
|
||||||
COPY ${JAR_FILE} target/application.jar
|
|
||||||
RUN java -Djarmode=layertools -jar target/application.jar extract --destination target/extracted
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre
|
# 设置 Maven 参数（避免配置文件冲突）
|
||||||
|
ENV MAVEN_OPTS="-Xmx2048m -Xms1024m -Djava.awt.headless=true -Dmaven.multiModuleProjectDirectory=/build"
|
||||||
|
|
||||||
ARG EXTRACTED=/workspace/app/target/extracted
|
# 复制父 pom 和所有模块 pom（父 pom 需要所有子模块存在）
|
||||||
WORKDIR topiam
|
COPY pom.xml .
|
||||||
COPY --from=build ${EXTRACTED}/dependencies/ ./
|
COPY eiam-common/pom.xml eiam-common/pom.xml
|
||||||
COPY --from=build ${EXTRACTED}/spring-boot-loader/ ./
|
COPY eiam-core/pom.xml eiam-core/pom.xml
|
||||||
COPY --from=build ${EXTRACTED}/snapshot-dependencies/ ./
|
COPY eiam-audit/pom.xml eiam-audit/pom.xml
|
||||||
COPY --from=build ${EXTRACTED}/application/ ./
|
COPY eiam-application/pom.xml eiam-application/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-core/pom.xml eiam-application/eiam-application-core/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-oidc/pom.xml eiam-application/eiam-application-oidc/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-jwt/pom.xml eiam-application/eiam-application-jwt/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-form/pom.xml eiam-application/eiam-application-form/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-all/pom.xml eiam-application/eiam-application-all/pom.xml
|
||||||
|
COPY eiam-protocol/pom.xml eiam-protocol/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-core/pom.xml eiam-protocol/eiam-protocol-core/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-form/pom.xml eiam-protocol/eiam-protocol-form/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-jwt/pom.xml eiam-protocol/eiam-protocol-jwt/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-oidc/pom.xml eiam-protocol/eiam-protocol-oidc/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-all/pom.xml eiam-protocol/eiam-protocol-all/pom.xml
|
||||||
|
COPY eiam-authentication/pom.xml eiam-authentication/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-core/pom.xml eiam-authentication/eiam-authentication-core/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-dingtalk/pom.xml eiam-authentication/eiam-authentication-dingtalk/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-feishu/pom.xml eiam-authentication/eiam-authentication-feishu/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-qq/pom.xml eiam-authentication/eiam-authentication-qq/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechat/pom.xml eiam-authentication/eiam-authentication-wechat/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-github/pom.xml eiam-authentication/eiam-authentication-github/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechatwork/pom.xml eiam-authentication/eiam-authentication-wechatwork/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-gitee/pom.xml eiam-authentication/eiam-authentication-gitee/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-alipay/pom.xml eiam-authentication/eiam-authentication-alipay/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-sms/pom.xml eiam-authentication/eiam-authentication-sms/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-mail/pom.xml eiam-authentication/eiam-authentication-mail/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-all/pom.xml eiam-authentication/eiam-authentication-all/pom.xml
|
||||||
|
COPY eiam-identity-source/pom.xml eiam-identity-source/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-core/pom.xml eiam-identity-source/eiam-identity-source-core/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-dingtalk/pom.xml eiam-identity-source/eiam-identity-source-dingtalk/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-feishu/pom.xml eiam-identity-source/eiam-identity-source-feishu/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-all/pom.xml eiam-identity-source/eiam-identity-source-all/pom.xml
|
||||||
|
COPY eiam-synchronizer/pom.xml eiam-synchronizer/pom.xml
|
||||||
|
COPY eiam-console/pom.xml eiam-console/pom.xml
|
||||||
|
COPY eiam-portal/pom.xml eiam-portal/pom.xml
|
||||||
|
COPY eiam-openapi/pom.xml eiam-openapi/pom.xml
|
||||||
|
|
||||||
|
# 下载依赖（离线模式）
|
||||||
|
RUN mvn dependency:go-offline -B -pl eiam-openapi -am
|
||||||
|
|
||||||
|
# 复制后端源码并编译打包
|
||||||
|
COPY eiam-common eiam-common
|
||||||
|
COPY eiam-core eiam-core
|
||||||
|
COPY eiam-audit eiam-audit
|
||||||
|
COPY eiam-openapi/src eiam-openapi/src
|
||||||
|
|
||||||
|
RUN mvn clean package -pl eiam-openapi -am -P!dev -DskipTests -Dlicense.skip=true -Dformatter.skip=true -Dmaven.javadoc.skip=true
|
||||||
|
|
||||||
|
|
||||||
ENV TZ=Asia/Shanghai
|
# ---- 阶段 2: 运行时镜像 ----
|
||||||
RUN sed -i 's/archive.ubuntu.com/cn.archive.ubuntu.com/g' /etc/apt/sources.list \
|
FROM eclipse-temurin:17-jre-alpine
|
||||||
&& apt-get update \
|
|
||||||
&& ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
|
|
||||||
&& apt-get clean \
|
|
||||||
&& apt-get autoclean \
|
|
||||||
&& apt-get autoremove -y \
|
|
||||||
&& apt-get install -y curl \
|
|
||||||
&& apt-get install -y iputils-ping \
|
|
||||||
&& apt-get install -y wget \
|
|
||||||
&& apt-get install -y tzdata \
|
|
||||||
&& apt-get install -y fontconfig \
|
|
||||||
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
|
|
||||||
|
|
||||||
|
# 安装基础工具
|
||||||
|
RUN apk add --no-cache \
|
||||||
|
tzdata \
|
||||||
|
curl \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||||
|
&& echo "Asia/Shanghai" > /etc/timezone
|
||||||
|
|
||||||
|
# 创建非 root 用户
|
||||||
|
RUN addgroup -g 1000 -S topiam && \
|
||||||
|
adduser -u 1000 -S -G topiam topiam
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# 复制 jar 包
|
||||||
|
COPY --from=backend-builder /build/eiam-openapi/target/topiam-employee-openapi-*.jar app.jar
|
||||||
|
|
||||||
|
# 修改文件所有者
|
||||||
|
RUN chown -R topiam:topiam /app
|
||||||
|
|
||||||
|
# 切换非 root 用户
|
||||||
|
USER topiam
|
||||||
|
|
||||||
|
# 暴露端口
|
||||||
EXPOSE 1988
|
EXPOSE 1988
|
||||||
|
|
||||||
ENTRYPOINT ["java","-XX:TieredStopAtLevel=1","-Djava.security.egd=file:/dev/./urandom","-Dspring.main.lazy-initialization=false","org.springframework.boot.loader.launch.JarLauncher"]
|
# JVM 参数优化（OpenAPI 较轻量，内存可适当减小）
|
||||||
|
ENV JAVA_OPTS="-Xms256m -Xmx512m \
|
||||||
|
-XX:+UseG1GC \
|
||||||
|
-XX:MaxGCPauseMillis=200 \
|
||||||
|
-XX:+HeapDumpOnOutOfMemoryError \
|
||||||
|
-XX:HeapDumpPath=/app/heapdump.hprof \
|
||||||
|
-Djava.security.egd=file:/dev/./urandom \
|
||||||
|
-Dfile.encoding=UTF-8 \
|
||||||
|
-Duser.timezone=Asia/Shanghai"
|
||||||
|
|
||||||
|
# 健康检查
|
||||||
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
||||||
|
CMD curl -f http://localhost:1988/actuator/health || exit 1
|
||||||
|
|
||||||
|
# 启动入口
|
||||||
|
ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS -Dspring.profiles.active=remote -jar app.jar"]
|
||||||
|
|||||||
@@ -0,0 +1,72 @@
|
|||||||
|
spring:
|
||||||
|
datasource:
|
||||||
|
url: jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
username: topiam
|
||||||
|
password: topiam
|
||||||
|
driver-class-name: com.mysql.cj.jdbc.Driver
|
||||||
|
hikari:
|
||||||
|
maximum-pool-size: 20
|
||||||
|
minimum-idle: 5
|
||||||
|
connection-timeout: 30000
|
||||||
|
idle-timeout: 600000
|
||||||
|
max-lifetime: 1800000
|
||||||
|
|
||||||
|
data:
|
||||||
|
redis:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 6379
|
||||||
|
password: redis
|
||||||
|
database: 0
|
||||||
|
timeout: 5000ms
|
||||||
|
lettuce:
|
||||||
|
pool:
|
||||||
|
max-active: 20
|
||||||
|
max-idle: 10
|
||||||
|
min-idle: 5
|
||||||
|
shutdown-timeout: 100ms
|
||||||
|
|
||||||
|
elasticsearch:
|
||||||
|
uris: http://100.74.125.93:9200
|
||||||
|
connection-timeout: 5000ms
|
||||||
|
socket-timeout: 10000ms
|
||||||
|
|
||||||
|
rabbitmq:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 5672
|
||||||
|
username: rabbitmq
|
||||||
|
password: rabbitmq
|
||||||
|
virtual-host: /
|
||||||
|
publisher-confirm-type: correlated
|
||||||
|
publisher-returns: true
|
||||||
|
dynamic: true
|
||||||
|
listener:
|
||||||
|
simple:
|
||||||
|
acknowledge-mode: manual
|
||||||
|
concurrency: 5
|
||||||
|
max-concurrency: 20
|
||||||
|
prefetch: 10
|
||||||
|
|
||||||
|
# SpringDoc 配置
|
||||||
|
springdoc:
|
||||||
|
swagger-ui:
|
||||||
|
enabled: true
|
||||||
|
path: /swagger-ui.html
|
||||||
|
api-docs:
|
||||||
|
path: /v3/api-docs
|
||||||
|
|
||||||
|
# TOPIAM 服务配置
|
||||||
|
topiam:
|
||||||
|
server:
|
||||||
|
console-public-base-url: http://100.74.125.93:1898
|
||||||
|
portal-public-base-url: http://100.74.125.93:1989
|
||||||
|
openapi-public-base-url: http://100.74.125.93:1988
|
||||||
|
synchronizer-public-base-url: http://100.74.125.93:1986
|
||||||
|
|
||||||
|
# 可选：日志配置
|
||||||
|
logging:
|
||||||
|
level:
|
||||||
|
cn.topiam: debug
|
||||||
|
org.springframework.web: info
|
||||||
|
org.hibernate.SQL: warn
|
||||||
|
pattern:
|
||||||
|
console: "%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n"
|
||||||
+123
-43
@@ -1,54 +1,134 @@
|
|||||||
#
|
# =============================================
|
||||||
# eiam-portal - Employee Identity and Access Management
|
# TOPIAM Portal - 多阶段构建（简化 Maven 配置）
|
||||||
# Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
# =============================================
|
||||||
#
|
|
||||||
# This program is free software: you can redistribute it and/or modify
|
|
||||||
# it under the terms of the GNU Affero General Public License as published by
|
|
||||||
# the Free Software Foundation, either version 3 of the License, or
|
|
||||||
# (at your option) any later version.
|
|
||||||
#
|
|
||||||
# This program is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
# GNU Affero General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Affero General Public License
|
|
||||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
#
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre as build
|
# ---- 阶段 1: 前端构建 ----
|
||||||
WORKDIR /workspace/app
|
FROM m.daocloud.io/docker.io/library/node:22.12.0-alpine AS frontend-builder
|
||||||
|
|
||||||
ARG JAR_FILE=target/topiam-employee-portal-*.jar
|
WORKDIR /build/portal-fe
|
||||||
COPY ${JAR_FILE} target/application.jar
|
|
||||||
RUN java -Djarmode=layertools -jar target/application.jar extract --destination target/extracted
|
|
||||||
|
|
||||||
FROM azul/zulu-openjdk:17-jre
|
# 配置 pnpm 和镜像源
|
||||||
|
RUN npm config set registry https://registry.npmmirror.com && \
|
||||||
|
npm install -g pnpm@9.15.1
|
||||||
|
|
||||||
|
# 先复制 package.json 利用缓存
|
||||||
|
COPY eiam-portal/src/main/portal-fe/package.json eiam-portal/src/main/portal-fe/pnpm-lock.yaml* ./
|
||||||
|
RUN pnpm install --frozen-lockfile --ignore-scripts
|
||||||
|
|
||||||
|
# 复制源码并构建
|
||||||
|
COPY eiam-portal/src/main/portal-fe/ ./
|
||||||
|
ENV UMI_ENV=dev
|
||||||
|
RUN npm run build:dev
|
||||||
|
|
||||||
|
|
||||||
|
# ---- 阶段 2: 后端构建 ----
|
||||||
|
FROM m.daocloud.io/docker.io/library/maven:3.9-eclipse-temurin-17 AS backend-builder
|
||||||
|
|
||||||
ARG EXTRACTED=/workspace/app/target/extracted
|
WORKDIR /build
|
||||||
WORKDIR topiam
|
|
||||||
COPY --from=build ${EXTRACTED}/dependencies/ ./
|
|
||||||
COPY --from=build ${EXTRACTED}/spring-boot-loader/ ./
|
|
||||||
COPY --from=build ${EXTRACTED}/snapshot-dependencies/ ./
|
|
||||||
COPY --from=build ${EXTRACTED}/application/ ./
|
|
||||||
|
|
||||||
ENV TZ=Asia/Shanghai
|
# 设置 Maven 参数（避免配置文件冲突）
|
||||||
RUN sed -i 's/archive.ubuntu.com/cn.archive.ubuntu.com/g' /etc/apt/sources.list \
|
ENV MAVEN_OPTS="-Xmx2048m -Xms1024m -Djava.awt.headless=true -Dmaven.multiModuleProjectDirectory=/build"
|
||||||
&& apt-get update \
|
|
||||||
&& ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
|
# 复制父 pom 和所有模块 pom
|
||||||
&& apt-get clean \
|
COPY pom.xml .
|
||||||
&& apt-get autoclean \
|
COPY eiam-common/pom.xml eiam-common/pom.xml
|
||||||
&& apt-get autoremove -y \
|
COPY eiam-core/pom.xml eiam-core/pom.xml
|
||||||
&& apt-get install -y curl \
|
COPY eiam-audit/pom.xml eiam-audit/pom.xml
|
||||||
&& apt-get install -y iputils-ping \
|
COPY eiam-application/pom.xml eiam-application/pom.xml
|
||||||
&& apt-get install -y wget \
|
COPY eiam-application/eiam-application-core/pom.xml eiam-application/eiam-application-core/pom.xml
|
||||||
&& apt-get install -y tzdata \
|
COPY eiam-application/eiam-application-oidc/pom.xml eiam-application/eiam-application-oidc/pom.xml
|
||||||
&& apt-get install -y fontconfig \
|
COPY eiam-application/eiam-application-jwt/pom.xml eiam-application/eiam-application-jwt/pom.xml
|
||||||
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
|
COPY eiam-application/eiam-application-form/pom.xml eiam-application/eiam-application-form/pom.xml
|
||||||
|
COPY eiam-application/eiam-application-all/pom.xml eiam-application/eiam-application-all/pom.xml
|
||||||
|
COPY eiam-protocol/pom.xml eiam-protocol/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-core/pom.xml eiam-protocol/eiam-protocol-core/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-form/pom.xml eiam-protocol/eiam-protocol-form/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-jwt/pom.xml eiam-protocol/eiam-protocol-jwt/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-oidc/pom.xml eiam-protocol/eiam-protocol-oidc/pom.xml
|
||||||
|
COPY eiam-protocol/eiam-protocol-all/pom.xml eiam-protocol/eiam-protocol-all/pom.xml
|
||||||
|
COPY eiam-authentication/pom.xml eiam-authentication/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-core/pom.xml eiam-authentication/eiam-authentication-core/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-dingtalk/pom.xml eiam-authentication/eiam-authentication-dingtalk/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-feishu/pom.xml eiam-authentication/eiam-authentication-feishu/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-qq/pom.xml eiam-authentication/eiam-authentication-qq/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechat/pom.xml eiam-authentication/eiam-authentication-wechat/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-github/pom.xml eiam-authentication/eiam-authentication-github/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-wechatwork/pom.xml eiam-authentication/eiam-authentication-wechatwork/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-gitee/pom.xml eiam-authentication/eiam-authentication-gitee/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-alipay/pom.xml eiam-authentication/eiam-authentication-alipay/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-sms/pom.xml eiam-authentication/eiam-authentication-sms/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-mail/pom.xml eiam-authentication/eiam-authentication-mail/pom.xml
|
||||||
|
COPY eiam-authentication/eiam-authentication-all/pom.xml eiam-authentication/eiam-authentication-all/pom.xml
|
||||||
|
COPY eiam-console/pom.xml eiam-console/pom.xml
|
||||||
|
COPY eiam-openapi/pom.xml eiam-openapi/pom.xml
|
||||||
|
COPY eiam-portal/pom.xml eiam-portal/pom.xml
|
||||||
|
COPY eiam-identity-source/pom.xml eiam-identity-source/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-core/pom.xml eiam-identity-source/eiam-identity-source-core/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-dingtalk/pom.xml eiam-identity-source/eiam-identity-source-dingtalk/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-feishu/pom.xml eiam-identity-source/eiam-identity-source-feishu/pom.xml
|
||||||
|
COPY eiam-identity-source/eiam-identity-source-all/pom.xml eiam-identity-source/eiam-identity-source-all/pom.xml
|
||||||
|
COPY eiam-synchronizer/pom.xml eiam-synchronizer/pom.xml
|
||||||
|
|
||||||
|
# 下载依赖（离线模式）
|
||||||
|
RUN mvn dependency:go-offline -B -pl eiam-portal -am
|
||||||
|
|
||||||
|
# 复制前端构建产物
|
||||||
|
COPY --from=frontend-builder /build/portal-fe/build eiam-portal/src/main/portal-fe/build
|
||||||
|
|
||||||
|
# 复制后端源码并编译打包
|
||||||
|
COPY eiam-common eiam-common
|
||||||
|
COPY eiam-core eiam-core
|
||||||
|
COPY eiam-audit eiam-audit
|
||||||
|
COPY eiam-application eiam-application
|
||||||
|
COPY eiam-protocol eiam-protocol
|
||||||
|
COPY eiam-authentication eiam-authentication
|
||||||
|
COPY eiam-portal/src eiam-portal/src
|
||||||
|
|
||||||
|
RUN mvn clean package -pl eiam-portal -am -P!dev -DskipTests -Dlicense.skip=true -Dformatter.skip=true -Dmaven.javadoc.skip=true
|
||||||
|
|
||||||
|
|
||||||
|
# ---- 阶段 3: 运行时镜像 ----
|
||||||
|
FROM eclipse-temurin:17-jre-alpine
|
||||||
|
|
||||||
|
# 安装基础工具
|
||||||
|
RUN apk add --no-cache \
|
||||||
|
tzdata \
|
||||||
|
fontconfig \
|
||||||
|
curl \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||||
|
&& echo "Asia/Shanghai" > /etc/timezone
|
||||||
|
|
||||||
|
# 创建非 root 用户
|
||||||
|
RUN addgroup -g 1000 -S topiam && \
|
||||||
|
adduser -u 1000 -S -G topiam topiam
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# 复制 jar 包
|
||||||
|
COPY --from=backend-builder /build/eiam-portal/target/topiam-employee-portal-*.jar app.jar
|
||||||
|
|
||||||
|
# 修改文件所有者
|
||||||
|
RUN chown -R topiam:topiam /app
|
||||||
|
|
||||||
|
# 切换非 root 用户
|
||||||
|
USER topiam
|
||||||
|
|
||||||
|
# 暴露端口
|
||||||
EXPOSE 1989
|
EXPOSE 1989
|
||||||
|
|
||||||
ENTRYPOINT ["java","-XX:TieredStopAtLevel=1","-Djava.security.egd=file:/dev/./urandom","-Dspring.main.lazy-initialization=false","org.springframework.boot.loader.launch.JarLauncher"]
|
# JVM 参数优化
|
||||||
|
ENV JAVA_OPTS="-Xms512m -Xmx1024m \
|
||||||
|
-XX:+UseG1GC \
|
||||||
|
-XX:MaxGCPauseMillis=200 \
|
||||||
|
-XX:+HeapDumpOnOutOfMemoryError \
|
||||||
|
-XX:HeapDumpPath=/app/heapdump.hprof \
|
||||||
|
-Djava.security.egd=file:/dev/./urandom \
|
||||||
|
-Dfile.encoding=UTF-8 \
|
||||||
|
-Duser.timezone=Asia/Shanghai"
|
||||||
|
|
||||||
|
# 健康检查
|
||||||
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
||||||
|
CMD curl -f http://localhost:1989/actuator/health || exit 1
|
||||||
|
|
||||||
|
# 启动入口
|
||||||
|
ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS -Dspring.profiles.active=remote -jar app.jar"]
|
||||||
|
|||||||
+4400
-3006
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,72 @@
|
|||||||
|
spring:
|
||||||
|
datasource:
|
||||||
|
url: jdbc:mysql://100.74.125.93:3306/topiam?serverTimezone=GMT%2B8&useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&useSSL=false&allowPublicKeyRetrieval=true&rewriteBatchedStatements=true
|
||||||
|
username: topiam
|
||||||
|
password: topiam
|
||||||
|
driver-class-name: com.mysql.cj.jdbc.Driver
|
||||||
|
hikari:
|
||||||
|
maximum-pool-size: 20
|
||||||
|
minimum-idle: 5
|
||||||
|
connection-timeout: 30000
|
||||||
|
idle-timeout: 600000
|
||||||
|
max-lifetime: 1800000
|
||||||
|
|
||||||
|
data:
|
||||||
|
redis:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 6379
|
||||||
|
password: redis
|
||||||
|
database: 0
|
||||||
|
timeout: 5000ms
|
||||||
|
lettuce:
|
||||||
|
pool:
|
||||||
|
max-active: 20
|
||||||
|
max-idle: 10
|
||||||
|
min-idle: 5
|
||||||
|
shutdown-timeout: 100ms
|
||||||
|
|
||||||
|
elasticsearch:
|
||||||
|
uris: http://100.74.125.93:9200
|
||||||
|
connection-timeout: 5000ms
|
||||||
|
socket-timeout: 10000ms
|
||||||
|
|
||||||
|
rabbitmq:
|
||||||
|
host: 100.74.125.93
|
||||||
|
port: 5672
|
||||||
|
username: rabbitmq
|
||||||
|
password: rabbitmq
|
||||||
|
virtual-host: /
|
||||||
|
publisher-confirm-type: correlated
|
||||||
|
publisher-returns: true
|
||||||
|
dynamic: true
|
||||||
|
listener:
|
||||||
|
simple:
|
||||||
|
acknowledge-mode: manual
|
||||||
|
concurrency: 5
|
||||||
|
max-concurrency: 20
|
||||||
|
prefetch: 10
|
||||||
|
|
||||||
|
# SpringDoc 配置
|
||||||
|
springdoc:
|
||||||
|
swagger-ui:
|
||||||
|
enabled: true
|
||||||
|
path: /swagger-ui.html
|
||||||
|
api-docs:
|
||||||
|
path: /v3/api-docs
|
||||||
|
|
||||||
|
# TOPIAM 服务配置
|
||||||
|
topiam:
|
||||||
|
server:
|
||||||
|
console-public-base-url: http://100.74.125.93:1898
|
||||||
|
portal-public-base-url: http://100.74.125.93:1989
|
||||||
|
openapi-public-base-url: http://100.74.125.93:1988
|
||||||
|
synchronizer-public-base-url: http://100.74.125.93:1986
|
||||||
|
|
||||||
|
# 可选：日志配置
|
||||||
|
logging:
|
||||||
|
level:
|
||||||
|
cn.topiam: debug
|
||||||
|
org.springframework.web: info
|
||||||
|
org.hibernate.SQL: warn
|
||||||
|
pattern:
|
||||||
|
console: "%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n"
|
||||||
@@ -1,23 +1,4 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
<?xml version="1.0" encoding="UTF-8"?>
|
||||||
<!--
|
|
||||||
|
|
||||||
TOPIAM Employee - Employee Identity and Access Management
|
|
||||||
Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
|
||||||
|
|
||||||
This program is free software: you can redistribute it and/or modify
|
|
||||||
it under the terms of the GNU Affero General Public License as published by
|
|
||||||
the Free Software Foundation, either version 3 of the License, or
|
|
||||||
(at your option) any later version.
|
|
||||||
|
|
||||||
This program is distributed in the hope that it will be useful,
|
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
GNU Affero General Public License for more details.
|
|
||||||
|
|
||||||
You should have received a copy of the GNU Affero General Public License
|
|
||||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
-->
|
|
||||||
<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/POM/4.0.0"
|
<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/POM/4.0.0"
|
||||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
|
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||||||
<modelVersion>4.0.0</modelVersion>
|
<modelVersion>4.0.0</modelVersion>
|
||||||
|
|||||||
Executable
+11
@@ -0,0 +1,11 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 启动 Console 管理后台 (端口 1898)
|
||||||
|
|
||||||
|
set -e
|
||||||
|
PROJECT_ROOT="/Users/yhtx/Documents/jupyter/ai/topiam"
|
||||||
|
|
||||||
|
echo "🚀 启动 Console (端口 1898)..."
|
||||||
|
cd "$PROJECT_ROOT/eiam-console"
|
||||||
|
../mvnw spring-boot:run -Pdev \
|
||||||
|
-Dspring-boot.run.jvmArguments="-Dspring.profiles.active=remote" \
|
||||||
|
-Dlicense.skip=true -Dformatter.skip=true
|
||||||
Executable
+11
@@ -0,0 +1,11 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 启动 OpenAPI 开放接口 (端口 1988)
|
||||||
|
|
||||||
|
set -e
|
||||||
|
PROJECT_ROOT="/Users/yhtx/Documents/jupyter/ai/topiam"
|
||||||
|
|
||||||
|
echo "🚀 启动 OpenAPI (端口 1988)..."
|
||||||
|
cd "$PROJECT_ROOT/eiam-openapi"
|
||||||
|
../mvnw spring-boot:run \
|
||||||
|
-Dspring-boot.run.jvmArguments="-Dspring.profiles.active=remote" \
|
||||||
|
-Dlicense.skip=true -Dformatter.skip=true
|
||||||
Executable
+11
@@ -0,0 +1,11 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# 启动 Portal 用户门户 (端口 1989)
|
||||||
|
|
||||||
|
set -e
|
||||||
|
PROJECT_ROOT="/Users/yhtx/Documents/jupyter/ai/topiam"
|
||||||
|
|
||||||
|
echo "🚀 启动 Portal (端口 1989)..."
|
||||||
|
cd "$PROJECT_ROOT/eiam-portal"
|
||||||
|
../mvnw spring-boot:run -Pdev \
|
||||||
|
-Dspring-boot.run.jvmArguments="-Dspring.profiles.active=remote" \
|
||||||
|
-Dlicense.skip=true -Dformatter.skip=true
|
||||||
@@ -1,22 +1,3 @@
|
|||||||
<!--
|
|
||||||
|
|
||||||
TOPIAM Employee - Employee Identity and Access Management
|
|
||||||
Copyright © 2022-Present Jinan Yuanchuang Network Technology Co., Ltd. (support@topiam.cn)
|
|
||||||
|
|
||||||
This program is free software: you can redistribute it and/or modify
|
|
||||||
it under the terms of the GNU Affero General Public License as published by
|
|
||||||
the Free Software Foundation, either version 3 of the License, or
|
|
||||||
(at your option) any later version.
|
|
||||||
|
|
||||||
This program is distributed in the hope that it will be useful,
|
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
GNU Affero General Public License for more details.
|
|
||||||
|
|
||||||
You should have received a copy of the GNU Affero General Public License
|
|
||||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
-->
|
|
||||||
<profiles version="1">
|
<profiles version="1">
|
||||||
<profile kind="CodeFormatterProfile" name="TopIAM Convention" version="1">
|
<profile kind="CodeFormatterProfile" name="TopIAM Convention" version="1">
|
||||||
<setting id="org.eclipse.jdt.core.formatter.comment.insert_new_line_before_root_tags" value="insert"/>
|
<setting id="org.eclipse.jdt.core.formatter.comment.insert_new_line_before_root_tags" value="insert"/>
|
||||||
|
|||||||
Reference in New Issue
Block a user