mirror of
https://github.com/labring/FastGPT.git
synced 2026-05-07 01:02:55 +08:00
xqvvu
1cc412e1d0
- Add loginLockout helpers on frequency_limit collection (assert, record, clear, audit log) - Wire loginByPassword: lock before auth, count auth/password failures, clear on success - useIPFrequencyLimit failClosed + authFrequencyLimit strict for Mongo errors - Centralize PASSWORD_LOGIN_LOCK_SECONDS / LOGIN_FAIL_* in env.ts; slim type/env ProcessEnv - Extend loginByPassword API tests (lockout via stubEnv + resetModules) Made-with: Cursor
84 lines
3.5 KiB
TypeScript
84 lines
3.5 KiB
TypeScript
/**
|
|
* 服务包环境变量单一来源：在 `server` schema 中声明，通过导出的 `env` 读取。
|
|
* 勿在 `type/env.ts` 中扩充 `ProcessEnv`。
|
|
*/
|
|
import { createEnv } from '@t3-oss/env-core';
|
|
import { z } from 'zod';
|
|
|
|
const BoolSchema = z
|
|
.string()
|
|
.transform((val) => val === 'true')
|
|
.pipe(z.boolean());
|
|
const NumSchema = z.coerce.number();
|
|
const IntSchema = NumSchema.int();
|
|
const PositiveIntSchema = IntSchema.positive();
|
|
|
|
const LogLevelSchema = z.enum(['trace', 'debug', 'info', 'warning', 'error', 'fatal']);
|
|
|
|
export const env = createEnv({
|
|
server: {
|
|
// ===== Agent sandbox =====
|
|
AGENT_SANDBOX_PROVIDER: z.enum(['sealosdevbox', 'opensandbox', 'e2b']).optional(),
|
|
AGENT_SANDBOX_E2B_API_KEY: z.string().optional(),
|
|
AGENT_SANDBOX_SEALOS_BASEURL: z.string().url().optional(),
|
|
AGENT_SANDBOX_SEALOS_TOKEN: z.string().optional(),
|
|
|
|
AGENT_SANDBOX_OPENSANDBOX_BASEURL: z.string().url().optional(),
|
|
AGENT_SANDBOX_OPENSANDBOX_API_KEY: z.string().optional(),
|
|
AGENT_SANDBOX_OPENSANDBOX_RUNTIME: z.enum(['docker', 'kubernetes']).default('docker'),
|
|
AGENT_SANDBOX_OPENSANDBOX_IMAGE_REPO: z.string().optional(),
|
|
AGENT_SANDBOX_OPENSANDBOX_IMAGE_TAG: z.string().default('latest'),
|
|
AGENT_SANDBOX_OPENSANDBOX_USE_SERVER_PROXY: BoolSchema.default(true),
|
|
AGENT_SANDBOX_ENABLE_VOLUME: BoolSchema.default(false),
|
|
AGENT_SANDBOX_VOLUME_MANAGER_URL: z.string().url().optional(),
|
|
AGENT_SANDBOX_VOLUME_MANAGER_TOKEN: z.string().optional(),
|
|
AGENT_SANDBOX_VOLUME_MANAGER_MOUNT_PATH: z.string().default('/workspace'),
|
|
|
|
AGENT_SKILL_MAX_UPLOAD_SIZE: NumSchema.optional(),
|
|
AGENT_SKILL_MAX_UNCOMPRESSED_SIZE: NumSchema.optional(),
|
|
AGENT_SKILL_MAX_DOWNLOAD_SIZE: NumSchema.optional(),
|
|
AGENT_SKILL_MAX_SANDBOX_SIZE: NumSchema.optional(),
|
|
|
|
AGENT_SANDBOX_MAX_EDIT_DEBUG: NumSchema.optional(),
|
|
AGENT_SANDBOX_MAX_SESSION_RUNTIME: NumSchema.optional(),
|
|
|
|
// ===== Logging =====
|
|
LOG_ENABLE_CONSOLE: BoolSchema.default(true),
|
|
LOG_CONSOLE_LEVEL: LogLevelSchema.default('debug'),
|
|
LOG_ENABLE_OTEL: BoolSchema.default(false),
|
|
LOG_OTEL_LEVEL: LogLevelSchema.default('info'),
|
|
LOG_OTEL_SERVICE_NAME: z.string().default('fastgpt-client'),
|
|
LOG_OTEL_URL: z.url().optional(),
|
|
|
|
METRICS_ENABLE_OTEL: BoolSchema.default(false),
|
|
METRICS_EXPORT_INTERVAL: z.coerce.number().int().positive().default(30000),
|
|
METRICS_OTEL_SERVICE_NAME: z.string().default('fastgpt-client'),
|
|
METRICS_OTEL_URL: z.url().optional(),
|
|
|
|
TRACING_ENABLE_OTEL: BoolSchema.default(false),
|
|
TRACING_OTEL_SERVICE_NAME: z.string().default('fastgpt-client'),
|
|
TRACING_OTEL_URL: z.url().optional(),
|
|
TRACING_OTEL_SAMPLE_RATIO: z.coerce.number().min(0).max(1).optional(),
|
|
|
|
APP_FOLDER_MAX_AMOUNT: z.coerce.number().int().positive().default(1000),
|
|
DATASET_FOLDER_MAX_AMOUNT: z.coerce.number().int().positive().default(1000),
|
|
|
|
// ===== Security =====
|
|
CHECK_INTERNAL_IP: BoolSchema.default(false).meta({ description: '是否启用内网 IP 检查' }),
|
|
|
|
PASSWORD_LOGIN_LOCK_SECONDS: PositiveIntSchema.optional().default(120),
|
|
LOGIN_FAIL_MAX_ATTEMPTS: PositiveIntSchema.optional().default(10),
|
|
LOGIN_FAIL_WINDOW_SECONDS: PositiveIntSchema.optional(),
|
|
|
|
// Beta features
|
|
// Whether the Skill feature is enabled (frontend entries + backend runtime)
|
|
SHOW_SKILL: BoolSchema.default(false)
|
|
},
|
|
emptyStringAsUndefined: true,
|
|
runtimeEnv: process.env,
|
|
onValidationError(issues) {
|
|
const paths = issues.map((issue) => issue.path).join(', ');
|
|
throw new Error(`Invalid environment variables. Please check: ${paths}\n`);
|
|
}
|
|
});
|