张翔
042f66499a
- Add missing lucide-react icons (Users, Target, MessageCircle, Layers, CreditCard) - Fix admin/page.test.tsx ESLint errors (add displayName) - Fix api/contact/route.test.ts ESLint errors (remove any types, use import) - Add RESEND_API_KEY environment variable for API tests - All 122 test suites now passing - Test pass rate: 99.8% (1499/1502 passed, 3 skipped)
78 lines
2.0 KiB
Bash
78 lines
2.0 KiB
Bash
# Jenkins安全配置环境变量示例
|
||
# 作者：张翔
|
||
# 日期：2026-04-07
|
||
# 说明：复制此文件为 .env.jenkins.production 并填入实际值
|
||
|
||
# ============================================
|
||
# Jenkins访问控制
|
||
# ============================================
|
||
|
||
# Jenkins管理员用户名
|
||
JENKINS_ADMIN_USER=admin
|
||
|
||
# Jenkins管理员密码（请使用强密码）
|
||
# 生成方法：openssl rand -base64 32
|
||
JENKINS_ADMIN_PASSWORD=CHANGE_ME_STRONG_PASSWORD_HERE
|
||
|
||
# ============================================
|
||
# Webhook安全配置
|
||
# ============================================
|
||
|
||
# Webhook Token（用于Generic Webhook Trigger）
|
||
# 生成方法：openssl rand -hex 32
|
||
JENKINS_WEBHOOK_TOKEN=CHANGE_ME_RANDOM_TOKEN_HERE
|
||
|
||
# Webhook签名密钥（用于验证Gitea请求）
|
||
# 生成方法：openssl rand -hex 32
|
||
WEBHOOK_SECRET=CHANGE_ME_WEBHOOK_SECRET_HERE
|
||
|
||
# ============================================
|
||
# 网络安全配置
|
||
# ============================================
|
||
|
||
# 允许访问Webhook的IP地址（逗号分隔）
|
||
# 示例：192.168.1.100,10.0.0.50
|
||
ALLOWED_IPS=127.0.0.1
|
||
|
||
# Jenkins域名
|
||
DOMAIN=your-domain.com
|
||
|
||
# ============================================
|
||
# SSL/TLS配置
|
||
# ============================================
|
||
|
||
# SSL证书路径
|
||
SSL_CERT_PATH=/etc/letsencrypt/live/your-domain.com/fullchain.pem
|
||
SSL_KEY_PATH=/etc/letsencrypt/live/your-domain.com/privkey.pem
|
||
|
||
# ============================================
|
||
# 审计和监控
|
||
# ============================================
|
||
|
||
# 安全日志保留天数
|
||
SECURITY_LOG_RETENTION_DAYS=90
|
||
|
||
# 访问日志路径
|
||
JENKINS_ACCESS_LOG=/var/log/nginx/jenkins-access.log
|
||
JENKINS_ERROR_LOG=/var/log/nginx/jenkins-error.log
|
||
|
||
# ============================================
|
||
# 频率限制
|
||
# ============================================
|
||
|
||
# 每分钟最大请求数
|
||
RATE_LIMIT_REQUESTS=10
|
||
|
||
# 并发连接数限制
|
||
CONNECTION_LIMIT=10
|
||
|
||
# ============================================
|
||
# 备份配置
|
||
# ============================================
|
||
|
||
# 备份目录
|
||
BACKUP_DIR=/backup/jenkins
|
||
|
||
# 备份保留天数
|
||
BACKUP_RETENTION_DAYS=30
|