Merge branch 'master' of https://gitea.violin-work.online/violin/violin-iam

.drone.yml

@@ -6,6 +6,11 @@ name: build-and-deploy-dev
 # clone:
 #  disable: true
 
+host_aliases:
+  - ip: "192.168.3.49"       # ← 替换为 gitea.violin-work.online 的实际 IP
+    hostnames:
+      - gitea.violin-work.online
+
 volumes:
   - name: maven-cache
     claim:
@@ -29,8 +34,7 @@ steps:
     commands:
       - mkdir -p /root/.m2
       - cp /config/settings.xml /root/.m2/settings.xml
-      - ulimit -n 65536
-      - MAVEN_OPTS="-Dmaven.watcher.disabled=true" mvn clean install -U -DskipTests
+      - mvn clean install -U -DskipTests
     volumes:
       - name: maven-cache
         path: /root/.m2

src/main/resources/application.yml

@@ -31,24 +31,24 @@ violin:
   auth:
     exclude-paths: /error
     anonymous-message-code: AUTHORIZATION_MISSING
-iam:
-  service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
-  url: ${VIOLIN_IAM_URL:http://localhost:8080}
-  context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
-  service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
-  service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
-  profile: ${SPRING_PROFILES_ACTIVE:local}
-  oidc:
-    client:
-      issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
-      client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
-      client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
-      redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
-      scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
-    authentik:
-      token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
-      userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
-      authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
+  iam:
+    service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
+    url: ${VIOLIN_IAM_URL:http://localhost:8080}
+    context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
+    service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
+    service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
+    profile: ${SPRING_PROFILES_ACTIVE:local}
+    oidc:
+      client:
+        issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
+        client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
+        client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
+        redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
+        scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
+      authentik:
+        token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
+        userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
+        authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
 
 management:
   endpoints: