diff --git a/k8s/secret.yaml b/k8s/secret.yaml
new file mode 100644
index 0000000..2566fba
--- /dev/null
+++ b/k8s/secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: tencentyun-secret
+  namespace: drone
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: base64编码内容
diff --git a/maven-cache-pvc.yaml b/maven-cache-pvc.yaml
new file mode 100644
index 0000000..d01d53b
--- /dev/null
+++ b/maven-cache-pvc.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: maven-cache-pvc
+  namespace: drone
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: local-path
diff --git a/src/main/java/com/example/building/controller/OrderController.java b/src/main/java/com/example/building/controller/OrderController.java
index 0147ac1..2e37418 100644
--- a/src/main/java/com/example/building/controller/OrderController.java
+++ b/src/main/java/com/example/building/controller/OrderController.java
@@ -5,9 +5,12 @@ import com.example.building.common.Result;
 import com.example.building.dto.CreateOrderRequest;
 import com.example.building.entity.Order;
 import com.example.building.service.OrderService;
+import com.example.building.service.SystemConfigService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
 
+import static java.lang.String.defaultString;
+
 import java.util.Map;
 
 /**
@@ -16,6 +19,7 @@ import java.util.Map;
  * - 订单创建：计算原价(total_amount)、优惠金额(discount_amount)、实付金额(actual_amount)
  * - 订单原价 = 商品标价 × 数量之和
  * - 实付金额 = 原价 - 优惠金额
+ * - 顾客角色：只能查看半年内的订单（可配置）
  */
 @RestController
 @RequestMapping("/api/v1/orders")
@@ -24,22 +28,28 @@ public class OrderController {
     @Autowired
     private OrderService orderService;
 
+    @Autowired
+    private SystemConfigService systemConfigService;
+
     /**
      * 创建订单
-     * 核心逻辑：
-     * 1. 计算订单原价(total_amount) = Σ(item.price × item.quantity)
-     * 2. 计算优惠金额(discount_amount) = total_amount × (100 - discount_rate) / 100
-     * 3. 计算实付金额(actual_amount) = total_amount - discount_amount
+     * 顾客角色不允许创建订单
      */
     @PostMapping
     public Result<Order> createOrder(@RequestBody CreateOrderRequest request,
                                      @RequestHeader("X-User-Id") String operatorId,
-                                     @RequestHeader("X-Username") String operatorName) {
+                                     @RequestHeader("X-Username") String operatorName,
+                                     @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        // 顾客角色不允许创建订单
+        if ("customer".equals(role)) {
+            return Result.error("顾客账号不允许创建订单，请联系销售人员");
+        }
         return Result.success(orderService.createOrder(request, operatorId, operatorName));
     }
 
     /**
      * 获取订单列表
+     * 顾客角色只能看到半年内的订单（可配置）
      */
     @GetMapping
     public Result<Page<Order>> getOrders(
@@ -48,16 +58,26 @@ public class OrderController {
             @RequestParam(required = false) String startDate,
             @RequestParam(required = false) String endDate,
             @RequestParam(defaultValue = "1") Integer page,
-            @RequestParam(defaultValue = "20") Integer pageSize) {
+            @RequestParam(defaultValue = "20") Integer pageSize,
+            @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        
+        // 顾客角色：限制时间范围
+        if ("customer".equals(role) && startDate == null) {
+            startDate = systemConfigService.getCustomerOrderStartDate().toString();
+        }
+        
         return Result.success(orderService.getOrders(customerId, status, startDate, endDate, page, pageSize));
     }
 
     /**
      * 获取订单详情
+     * 顾客只能查看自己的订单
      */
     @GetMapping("/{id}")
-    public Result<Map<String, Object>> getOrderDetail(@PathVariable String id) {
-        return Result.success(orderService.getOrderDetail(id));
+    public Result<Map<String, Object>> getOrderDetail(@PathVariable String id,
+                                                       @RequestHeader("X-User-Id") String userId,
+                                                       @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        return Result.success(orderService.getOrderDetail(id, userId, role));
     }
 
     /**
@@ -65,7 +85,12 @@ public class OrderController {
      */
     @PutMapping("/{id}/cancel")
     public Result<Void> cancelOrder(@PathVariable String id,
-                                    @RequestHeader("X-User-Id") String operatorId) {
+                                    @RequestHeader("X-User-Id") String operatorId,
+                                    @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        // 顾客不能取消订单
+        if ("customer".equals(role)) {
+            return Result.error("顾客账号不允许取消订单");
+        }
         orderService.cancelOrder(id, operatorId);
         return Result.success();
     }
@@ -75,7 +100,12 @@ public class OrderController {
      */
     @PutMapping("/{id}/refund")
     public Result<Void> refundOrder(@PathVariable String id,
-                                   @RequestHeader("X-User-Id") String operatorId) {
+                                   @RequestHeader("X-User-Id") String operatorId,
+                                   @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        // 顾客不能退款
+        if ("customer".equals(role)) {
+            return Result.error("顾客账号不允许退款操作");
+        }
         orderService.refundOrder(id, operatorId);
         return Result.success();
     }
@@ -86,7 +116,12 @@ public class OrderController {
     @GetMapping("/statistics")
     public Result<Map<String, Object>> getStatistics(
             @RequestParam(required = false) String startDate,
-            @RequestParam(required = false) String endDate) {
+            @RequestParam(required = false) String endDate,
+            @RequestHeader(value = "X-User-Role", required = defaultString) String role) {
+        // 顾客不能查看统计
+        if ("customer".equals(role)) {
+            return Result.error("顾客账号不允许查看统计");
+        }
         return Result.success(orderService.getStatistics(startDate, endDate));
     }
 }
diff --git a/src/main/java/com/example/building/controller/SystemConfigController.java b/src/main/java/com/example/building/controller/SystemConfigController.java
new file mode 100644
index 0000000..ed188a0
--- /dev/null
+++ b/src/main/java/com/example/building/controller/SystemConfigController.java
@@ -0,0 +1,57 @@
+package com.example.building.controller;
+
+import com.example.building.common.Result;
+import com.example.building.entity.SystemConfig;
+import com.example.building.mapper.SystemConfigMapper;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * 系统配置控制器
+ */
+@RestController
+@RequestMapping("/api/v1/system-config")
+public class SystemConfigController {
+
+    @Autowired
+    private SystemConfigMapper systemConfigMapper;
+
+    /**
+     * 获取所有配置
+     */
+    @GetMapping
+    public Result<Map<String, String>> getAllConfig() {
+        List<SystemConfig> configs = systemConfigMapper.selectList(null);
+        Map<String, String> result = new HashMap<>();
+        for (SystemConfig config : configs) {
+            result.put(config.getConfigKey(), config.getConfigValue());
+        }
+        return Result.success(result);
+    }
+
+    /**
+     * 更新配置
+     */
+    @PutMapping
+    public Result<Void> updateConfig(@RequestBody SystemConfig config) {
+        // 检查是否存在
+        SystemConfig existing = systemConfigMapper.selectOne(
+            new com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<SystemConfig>()
+                .eq(SystemConfig::getConfigKey, config.getConfigKey())
+        );
+        
+        if (existing != null) {
+            existing.setConfigValue(config.getConfigValue());
+            existing.setRemark(config.getRemark());
+            systemConfigMapper.updateById(existing);
+        } else {
+            config.setConfigId(java.util.UUID.randomUUID().toString());
+            systemConfigMapper.insert(config);
+        }
+        return Result.success();
+    }
+}
diff --git a/src/main/java/com/example/building/entity/SystemConfig.java b/src/main/java/com/example/building/entity/SystemConfig.java
new file mode 100644
index 0000000..43d002f
--- /dev/null
+++ b/src/main/java/com/example/building/entity/SystemConfig.java
@@ -0,0 +1,38 @@
+package com.example.building.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+
+import java.time.LocalDateTime;
+
+/**
+ * 系统配置实体
+ */
+@Data
+@TableName("system_config")
+public class SystemConfig {
+
+    @TableId(type = IdType.ASSIGN_UUID)
+    private String configId;
+
+    /**
+     * 配置键
+     */
+    private String configKey;
+
+    /**
+     * 配置值
+     */
+    private String configValue;
+
+    /**
+     * 备注
+     */
+    private String remark;
+
+    @TableField(fill = FieldFill.INSERT)
+    private LocalDateTime createdAt;
+
+    @TableField(fill = FieldFill.INSERT_UPDATE)
+    private LocalDateTime updatedAt;
+}
diff --git a/src/main/java/com/example/building/mapper/SystemConfigMapper.java b/src/main/java/com/example/building/mapper/SystemConfigMapper.java
new file mode 100644
index 0000000..d8c5df3
--- /dev/null
+++ b/src/main/java/com/example/building/mapper/SystemConfigMapper.java
@@ -0,0 +1,9 @@
+package com.example.building.mapper;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.example.building.entity.SystemConfig;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface SystemConfigMapper extends BaseMapper<SystemConfig> {
+}
diff --git a/src/main/java/com/example/building/service/OrderService.java b/src/main/java/com/example/building/service/OrderService.java
index aaf5bd6..1408146 100644
--- a/src/main/java/com/example/building/service/OrderService.java
+++ b/src/main/java/com/example/building/service/OrderService.java
@@ -28,8 +28,9 @@ public interface OrderService {
 
     /**
      * 获取订单详情(含明细)
+     * 顾客只能查看自己的订单
      */
-    Map<String, Object> getOrderDetail(String orderId);
+    Map<String, Object> getOrderDetail(String orderId, String userId, String role);
 
     /**
      * 取消订单
diff --git a/src/main/java/com/example/building/service/SystemConfigService.java b/src/main/java/com/example/building/service/SystemConfigService.java
new file mode 100644
index 0000000..22256c5
--- /dev/null
+++ b/src/main/java/com/example/building/service/SystemConfigService.java
@@ -0,0 +1,43 @@
+package com.example.building.service;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.example.building.entity.SystemConfig;
+import com.example.building.mapper.SystemConfigMapper;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Service;
+
+import java.time.LocalDate;
+
+@Service
+public class SystemConfigService {
+
+    @Autowired
+    private SystemConfigMapper systemConfigMapper;
+
+    /**
+     * 获取顾客订单可见天数配置
+     * 默认180天（半年）
+     */
+    public int getCustomerOrderVisibleDays() {
+        LambdaQueryWrapper<SystemConfig> wrapper = new LambdaQueryWrapper<>();
+        wrapper.eq(SystemConfig::getConfigKey, "customer_order_visible_days");
+        SystemConfig config = systemConfigMapper.selectOne(wrapper);
+        
+        if (config != null && config.getConfigValue() != null) {
+            try {
+                return Integer.parseInt(config.getConfigValue());
+            } catch (NumberFormatException e) {
+                return 180;
+            }
+        }
+        return 180; // 默认半年
+    }
+
+    /**
+     * 获取顾客可见订单开始日期
+     */
+    public LocalDate getCustomerOrderStartDate() {
+        int days = getCustomerOrderVisibleDays();
+        return LocalDate.now().minusDays(days);
+    }
+}
diff --git a/src/main/java/com/example/building/service/impl/OrderServiceImpl.java b/src/main/java/com/example/building/service/impl/OrderServiceImpl.java
index e834cee..32b26ea 100644
--- a/src/main/java/com/example/building/service/impl/OrderServiceImpl.java
+++ b/src/main/java/com/example/building/service/impl/OrderServiceImpl.java
@@ -171,14 +171,20 @@ public class OrderServiceImpl implements OrderService {
 
     /**
      * 获取订单详情(含明细)
+     * 顾客只能查看自己的订单
      */
     @Override
-    public Map<String, Object> getOrderDetail(String orderId) {
+    public Map<String, Object> getOrderDetail(String orderId, String userId, String role) {
         Order order = orderMapper.selectById(orderId);
         if (order == null) {
             throw new RuntimeException("订单不存在");
         }
 
+        // 顾客只能查看自己的订单
+        if ("customer".equals(role) && !userId.equals(order.getCustomerId())) {
+            throw new RuntimeException("无权查看该订单");
+        }
+
         List<OrderItem> items = orderItemMapper.selectList(new LambdaQueryWrapper<OrderItem>()
                 .eq(OrderItem::getOrderId, orderId));