zuul/src/main/resources/application-docker.yml

server:
  port: ${SERVER_PORT:8443}
  ssl:
    enabled: ${SSL_ENABLED:true}
    clientAuth: NEED
    key-store: ${SSL_KEYSTORE_FILE:file:/certs/server/server.keystore}
    key-store-password: ${SSL_KEYSTORE_PASSWORD:}
    trust-store: ${SSL_TRUSTSTORE_FILE:file:/certs/server/server.truststore}
    trust-store-password: ${SSL_TRUSTSTORE_PASSWORD:}
  tomcat: 
    accept-count: ${SERVER_TOMCAT_ACCEPT_COUNT:100}
    max-connections: ${SERVER_TOMCAT_MAX_CONNECTIONS:10000}
    max-threads: ${SERVER_TOMCAT_MAX_THREADS:200}
    min-spare-threads: ${SERVER_TOMCAT_MIN_SPARE_THREADS:10}
    accesslog: 
      enabled: ${TOMCAT_ACCESSLOG_ENABLED:false}
      buffered: ${TOMCAT_ACCESSLOG_BUFFERED:true}
      directory: ${TOMCAT_ACCESSLOG_DIR:log}
      prefix: ${TOMCAT_ACCESSLOG_PREFIX:sa-api-accesslog}
      suffix: ${TOMCAT_ACCESSLOG_SUFFIX:.log}
      file-date-format: ${TOMCAT_ACCESSLOG_FILE_DATE_FORMAT:.yyyy-MM-dd}
      rotate: ${TOMCAT_ACCESSLOG_ROTATE:true}


## logging
logging:
  level:
    root: INFO


spring:
  jackson:
    time-zone: ${JACKSON_TIME_ZONE:Asia/Shanghai}


zuul:
  routes:
    bff-api:
      url: ${SW_BACKEND_BFF_API_URL:https://sw-backend-admin-bff}
    base-api:
      url: ${SW_BACKEND_BASE_API_URL:https://sw-backend-admin-sa}
    system-api:
      url: ${SW_BACKEND_BASE_API_URL:https://sw-backend-admin-sa}
    biz-api:
      url: ${SW_BACKEND_BIZ_API_URL:https://sw-backend-biz-sa}


##
# online-doc
#
infras.online-doc.enabled: ${INFRAS_ONLINE_DOC_ENABLED:false}
infras.online-doc.md-docs.staitc.path: ${INFRAS_ONLINE_DOC_MD_DOCS_STATIC_PATH:/doc/}
infras.online-doc.api-docs.staitc.path: ${INFRAS_ONLINE_DOC_API_DOCS_STATIC_PATH:/api-docs/}


##
# security basic
#
infras.security.basic.enabled: ${INFRAS_SECURITY_BASIC_ENABLED:true}


##
# security jwt
#
infras.security.jwt.enabled: ${INFRAS_SECURITY_JWT_ENABLED:false}

#token过期时长，86400 秒（1天）
infras.security.jwt.expiration: ${INFRAS_SECURITY_JWT_EXPIRATION:86400}

infras.security.jwt.public-key-pem: ${INFRAS_SECURITY_JWT_PUBLIC_KEY_PEM:}
infras.security.jwt.private-key-pem-pkcs8: ${INFRAS_SECURITY_JWT_PRIVATE_KEY_PEM_PKCS8:}


# 
infras.security.jwt.token.generate.type: ${INFRAS_SECURITY_JWT_TOKEN_GENERATE_TYPE:jwt}
infras.security.jwt.token.decrypt.key.private-key-pem-pkcs8: ${INFRAS_SECURITY_JWT_TOKEN_DECRYPT_KEY_PRIVATE_KEY_PEM_PKCS8:}
infras.security.jwt.token.signing.key.url: ${INFRAS_SECURITY_JWT_TOKEN_SIGNING_KEY_URL:}


##
# security cas
#
infras.security.cas.enabled: ${INFRAS_SECURITY_CAS_ENABLED:false}

#应用访问地址
app.server.host.url: ${APP_SERVER_HOST_URL:https://localhost:8443}
#应用登录地址
app.login.url: ${APP_LOGIN_URL:/cas/login}
#应用登出地址
app.logout.url: ${APP_LOGOUT_URL:/cas/logout}

#CAS服务地址
cas.server.host.url: ${CAS_SERVER_HOST_URL:}

##
# 认证时，用户信息服务实现
# memery 内存，用户名密码一致即可登录，测试用，默认；
# base 后端base服务；
# poa 开放平台服务，建议和cas一起使用）
sw-backend-gateway.security.core.userdetails.service.impl: ${SW_BACKEND_GATEWAY_SECURITY_CORE_USERDETAILS_SERVICE_IMPL:memery}


sw-backend-base-api: 
  uri: ${SW_BACKEND_BASE_API_URI:https://sw-backend-admin-sa}
  client-auth:
    enabled: ${SW_BACKEND_BASE_API_CLIENT_AUTH_ENABLED:false}
    key-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEY_PASSWORD:}
    key-store: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEYSTORE_FILE:file:/certs/common/common.keystore}
    key-store-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEYSTORE_PASSWORD:}
    trust-store: ${SW_BACKEND_BASE_API_CLIENT_AUTH_TRUSTSTORE_FILE:file:/certs/common/common.truststore}
    trust-store-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_TRUSTSTORE_PASSWORD:}

sw-backend-agent-poa: 
  uri: ${SW_BACKEND_AGENT_POA_URI:https://sw-backend-agent}
  client-auth:
    enabled: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_ENABLED:false}
    key-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEY_PASSWORD:}
    key-store: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEYSTORE_FILE:file:/certs/common/common.keystore}
    key-store-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEYSTORE_PASSWORD:}
    trust-store: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_TRUSTSTORE_FILE:file:/certs/common/common.truststore}
    trust-store-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_TRUSTSTORE_PASSWORD:}


zuul-httpclient:
  client-auth:
    enabled: ${ZUUL_HTTPCLIENT_CLIENT_AUTH_ENABLED:false}
    key-password: ${ZUUL_HTTPCLIENT_CLIENT_AUTH_KEY_PASSWORD:}
    key-store: ${ZUUL_HTTPCLIENT_CLIENT_AUTH_KEYSTORE_FILE:file:/certs/common/common.keystore}
    key-store-password: ${ZUUL_HTTPCLIENT_CLIENT_AUTH_KEYSTORE_PASSWORD:}