server/.env.example

APP_ENV=dev
HTTP_ADDR=:8080
PUBLIC_BASE_URL=http://localhost:8080
OIDC_ISSUER=http://localhost:8080/auth
OIDC_AUTHORIZATION_ENDPOINT=http://localhost:8080/auth/oauth/authorize
OIDC_TOKEN_ENDPOINT=http://localhost:8080/auth/oauth/token
OIDC_USERINFO_ENDPOINT=http://localhost:8080/auth/oauth/userinfo
OIDC_JWKS_URI=http://localhost:8080/auth/oauth/jwks
OIDC_CLOUDDM_CLIENT_ID=clouddm
OIDC_CLOUDDM_CLIENT_SECRET=change-this-clouddm-client-secret
OIDC_CLOUDDM_REDIRECT_URI=
CLOUDDM_TARGET_URL=http://authserver-nginx/internal/clouddm
WAYEN_LOGIN_URL=
WAYEN_TARGET_URL=
WAYEN_USERNAME_KEY=username
WAYEN_PASSWORD_KEY=password
WAYEN_LOGIN_FORMAT=query
WAYEN_LOGIN_VALUE=username
WAYEN_OAUTH_REF=/portal/namespace/1/app
WAYEN_OAUTH_LOGIN_URL=
WAYNE_API_BASE_URL=http://wayne-backend:8080
WAYNE_ADMIN_USERNAME=admin
WAYNE_ADMIN_PASSWORD=change-this-wayne-admin-password
WAYNE_TOKEN_TTL_MINUTES=1440
WAYNE_INTERNAL_API_BASE_URL=
WAYNE_SERVICE_NAME=xinfra
WAYNE_SERVICE_API_SECRET_KEY=
OAUTH_WAYNE_CLIENT_ID=wayne
OAUTH_WAYNE_CLIENT_SECRET=change-this-wayne-client-secret
OAUTH_WAYNE_REDIRECT_URI=
OAUTH_CODE_TTL_SECONDS=120

MYSQL_DSN=auth:auth@tcp(127.0.0.1:3000)/authserver?charset=utf8mb4&parseTime=True&loc=Local
AUTO_MIGRATE=true
SSO_ENABLED=true

BOOTSTRAP_ADMIN_USERNAME=admin
BOOTSTRAP_ADMIN_PASSWORD=change-this-bootstrap-admin-password

# MySQL service delivery (AWX is required when the scheduler is enabled)
DELIVERY_SCHEDULER_ENABLED=false
DELIVERY_DISPATCH_SECONDS=5
DELIVERY_CALLBACK_BASE_URL=http://authserver-backend.authserver.svc.cluster.local:8083
DELIVERY_CREDENTIAL_SECRET=
DELIVERY_RESERVATION_TTL_MINUTES=120
DELIVERY_GLOBAL_LIMIT=2
DELIVERY_TARGET_LIMIT=2
# 单机 MySQL 实例数上限（同机多实例，容量由配额 + playbook 实机守卫兜底）
DELIVERY_HOST_INSTANCE_LIMIT=4
# 数据盘挂载点白名单（逗号分隔，第一项为默认值）
DELIVERY_DATA_DISKS=/data,/disk1,/mnt,/opt/mysql-delivery
AWX_BASE_URL=
AWX_TOKEN=
AWX_USERNAME=
AWX_PASSWORD=
AWX_WEBHOOK_TOKEN=
AWX_FACTS_TEMPLATE_ID=
AWX_FACTS_TIMEOUT_SECONDS=45
# AWX Job Template ID for ansible/mysql-rollback.yml; required for automatic cleanup
DELIVERY_ROLLBACK_TEMPLATE_ID=0
DELIVERY_SERVICE_TOKEN=
CLOUDDM_REGISTER_URL=
CLOUDDM_API_TOKEN=

JWT_SECRET=change-this-secret
JWT_ISSUER=authserver
JWT_TTL_MINUTES=120

SAML_ENTITY_ID=http://localhost:8080/api/v1/saml/metadata
SAML_ACS_URL=http://localhost:8080/api/v1/saml/acs
SAML_IDP_METADATA_URL=http://sso-internal.dev.qiniu.io/saml2/meta
SAML_LOGOUT_URL=http://sso-internal.dev.qiniu.io/signout
SAML_IDP_METADATA_CACHE_FILE=
SAML_SP_CERT_FILE=certs/sp.crt
SAML_SP_KEY_FILE=certs/sp.key

# SINA CMDB machine resources
SINA_BASE_URL=https://sinai.qiniu.io:443
SINA_USERNAME=
SINA_PASSWORD=
Add authserver module 2026-07-13 14:39:56 +08:00			`APP_ENV=dev`
			`HTTP_ADDR=:8080`
			`PUBLIC_BASE_URL=http://localhost:8080`
sync authserver sso integrations 2026-07-14 17:37:08 +08:00			`OIDC_ISSUER=http://localhost:8080/auth`
			`OIDC_AUTHORIZATION_ENDPOINT=http://localhost:8080/auth/oauth/authorize`
			`OIDC_TOKEN_ENDPOINT=http://localhost:8080/auth/oauth/token`
			`OIDC_USERINFO_ENDPOINT=http://localhost:8080/auth/oauth/userinfo`
			`OIDC_JWKS_URI=http://localhost:8080/auth/oauth/jwks`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`OIDC_CLOUDDM_CLIENT_ID=clouddm`
			`OIDC_CLOUDDM_CLIENT_SECRET=change-this-clouddm-client-secret`
			`OIDC_CLOUDDM_REDIRECT_URI=`
sync authserver sso integrations 2026-07-14 17:37:08 +08:00			`CLOUDDM_TARGET_URL=http://authserver-nginx/internal/clouddm`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`WAYEN_LOGIN_URL=`
			`WAYEN_TARGET_URL=`
			`WAYEN_USERNAME_KEY=username`
			`WAYEN_PASSWORD_KEY=password`
			`WAYEN_LOGIN_FORMAT=query`
			`WAYEN_LOGIN_VALUE=username`
			`WAYEN_OAUTH_REF=/portal/namespace/1/app`
			`WAYEN_OAUTH_LOGIN_URL=`
feat(auth): use Wayne native role APIs 2026-07-21 17:05:48 +08:00			`WAYNE_API_BASE_URL=http://wayne-backend:8080`
			`WAYNE_ADMIN_USERNAME=admin`
			`WAYNE_ADMIN_PASSWORD=change-this-wayne-admin-password`
			`WAYNE_TOKEN_TTL_MINUTES=1440`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`WAYNE_INTERNAL_API_BASE_URL=`
			`WAYNE_SERVICE_NAME=xinfra`
			`WAYNE_SERVICE_API_SECRET_KEY=`
			`OAUTH_WAYNE_CLIENT_ID=wayne`
			`OAUTH_WAYNE_CLIENT_SECRET=change-this-wayne-client-secret`
			`OAUTH_WAYNE_REDIRECT_URI=`
			`OAUTH_CODE_TTL_SECONDS=120`
Add authserver module 2026-07-13 14:39:56 +08:00
			`MYSQL_DSN=auth:auth@tcp(127.0.0.1:3000)/authserver?charset=utf8mb4&parseTime=True&loc=Local`
			`AUTO_MIGRATE=true`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`SSO_ENABLED=true`

			`BOOTSTRAP_ADMIN_USERNAME=admin`
			`BOOTSTRAP_ADMIN_PASSWORD=change-this-bootstrap-admin-password`
Add authserver module 2026-07-13 14:39:56 +08:00
feat(delivery): add delivery configuration and environment variables 2026-07-23 12:04:02 +08:00			`# MySQL service delivery (AWX is required when the scheduler is enabled)`
			`DELIVERY_SCHEDULER_ENABLED=false`
feat(delivery): switch AWX delivery to callbacks 2026-07-27 15:19:18 +08:00			`DELIVERY_DISPATCH_SECONDS=5`
			`DELIVERY_CALLBACK_BASE_URL=http://authserver-backend.authserver.svc.cluster.local:8083`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`DELIVERY_CREDENTIAL_SECRET=`
feat(delivery): add delivery configuration and environment variables 2026-07-23 12:04:02 +08:00			`DELIVERY_RESERVATION_TTL_MINUTES=120`
			`DELIVERY_GLOBAL_LIMIT=2`
			`DELIVERY_TARGET_LIMIT=2`
feat(delivery): support multi-instance scheduling on a single host 2026-07-27 15:19:44 +08:00			`# 单机 MySQL 实例数上限（同机多实例，容量由配额 + playbook 实机守卫兜底）`
			`DELIVERY_HOST_INSTANCE_LIMIT=4`
feat(delivery): extend MySQL delivery parameters and tighten resource bounds 2026-07-27 15:16:57 +08:00			`# 数据盘挂载点白名单（逗号分隔，第一项为默认值）`
feat: wire mysql delivery to awx callbacks 2026-07-28 14:45:17 +08:00			`DELIVERY_DATA_DISKS=/data,/disk1,/mnt,/opt/mysql-delivery`
feat(delivery): add delivery configuration and environment variables 2026-07-23 12:04:02 +08:00			`AWX_BASE_URL=`
			`AWX_TOKEN=`
feat: switch base delivery to awx task logs 2026-07-23 18:36:24 +08:00			`AWX_USERNAME=`
			`AWX_PASSWORD=`
feat(delivery): switch AWX delivery to callbacks 2026-07-27 15:19:18 +08:00			`AWX_WEBHOOK_TOKEN=`
feat: wire mysql delivery to awx callbacks 2026-07-28 14:45:17 +08:00			`AWX_FACTS_TEMPLATE_ID=`
			`AWX_FACTS_TIMEOUT_SECONDS=45`
feat(delivery): add automatic rollback state machine for failed deployments 2026-07-28 14:29:09 +08:00			`# AWX Job Template ID for ansible/mysql-rollback.yml; required for automatic cleanup`
			`DELIVERY_ROLLBACK_TEMPLATE_ID=0`
feat(delivery): add delivery configuration and environment variables 2026-07-23 12:04:02 +08:00			`DELIVERY_SERVICE_TOKEN=`
			`CLOUDDM_REGISTER_URL=`
			`CLOUDDM_API_TOKEN=`

Add authserver module 2026-07-13 14:39:56 +08:00			`JWT_SECRET=change-this-secret`
			`JWT_ISSUER=authserver`
			`JWT_TTL_MINUTES=120`

			`SAML_ENTITY_ID=http://localhost:8080/api/v1/saml/metadata`
			`SAML_ACS_URL=http://localhost:8080/api/v1/saml/acs`
			`SAML_IDP_METADATA_URL=http://sso-internal.dev.qiniu.io/saml2/meta`
fix(auth): handle saml logout and xml encryption padding 2026-07-17 09:42:12 +08:00			`SAML_LOGOUT_URL=http://sso-internal.dev.qiniu.io/signout`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00			`SAML_IDP_METADATA_CACHE_FILE=`
Add authserver module 2026-07-13 14:39:56 +08:00			`SAML_SP_CERT_FILE=certs/sp.crt`
			`SAML_SP_KEY_FILE=certs/sp.key`
feat: wire delivery result and infra data backends 2026-07-28 17:56:00 +08:00
			`# SINA CMDB machine resources`
			`SINA_BASE_URL=https://sinai.qiniu.io:443`
			`SINA_USERNAME=`
			`SINA_PASSWORD=`