gateway/src/main/resources/application-docker.yml

server:
  port: ${SERVER_PORT:8443}
  ssl:
    enabled: ${SSL_ENABLED:true}
    clientAuth: NEED
    key-store: ${SSL_KEYSTORE_FILE:file:/certs/server/server.keystore}
    key-store-password: ${SSL_KEYSTORE_PASSWORD:}
    trust-store: ${SSL_TRUSTSTORE_FILE:file:/certs/server/server.truststore}
    trust-store-password: ${SSL_TRUSTSTORE_PASSWORD:}
  tomcat: 
    accept-count: ${SERVER_TOMCAT_ACCEPT_COUNT:100}
    max-connections: ${SERVER_TOMCAT_MAX_CONNECTIONS:10000}
    max-threads: ${SERVER_TOMCAT_MAX_THREADS:200}
    min-spare-threads: ${SERVER_TOMCAT_MIN_SPARE_THREADS:10}
    accesslog: 
      enabled: ${TOMCAT_ACCESSLOG_ENABLED:false}
      buffered: ${TOMCAT_ACCESSLOG_BUFFERED:true}
      directory: ${TOMCAT_ACCESSLOG_DIR:log}
      prefix: ${TOMCAT_ACCESSLOG_PREFIX:sa-api-accesslog}
      suffix: ${TOMCAT_ACCESSLOG_SUFFIX:.log}
      file-date-format: ${TOMCAT_ACCESSLOG_FILE_DATE_FORMAT:.yyyy-MM-dd}
      rotate: ${TOMCAT_ACCESSLOG_ROTATE:true}


##
# logging
#
logging:
  level:
    root: INFO
    com.supwisdom: INFO


spring:
  jackson:
    time-zone: ${JACKSON_TIME_ZONE:Asia/Shanghai}

##
# spring cloud gateway
#
  cloud:
    gateway:
      metrics:
        enabled: true
      routes:
      - id: bff-api
        uri: ${SW_BACKEND_BFF_API_URI:https://sw-backend-admin-bff}
        predicates:
        - Path=/api/bff/**
        filters:
        - RewritePath=/api/bff/(?<suffix>.*), /$\{suffix}
      - id: base-api
        uri: ${SW_BACKEND_BASE_API_URI:https://sw-backend-admin-sa}
        predicates:
        - Path=/api/base/**
        filters:
        - RewritePath=/api/base/(?<suffix>.*), /$\{suffix}
      - id: system-api
        uri: ${SW_BACKEND_SYSTEM_API_URI:https://sw-backend-admin-sa}
        predicates:
        - Path=/api/system/**
        filters:
        - RewritePath=/api/system/(?<suffix>.*), /$\{suffix}
      - id: biz-api
        uri: ${SW_BACKEND_BIZ_API_URI:https://sw-backend-biz-sa}
        predicates:
        - Path=/api/biz/**
        filters:
        - RewritePath=/api/biz/(?<suffix>.*), /$\{suffix}


##
# infras.online-doc
#
infras.online-doc.enabled: ${INFRAS_ONLINE_DOC_ENABLED:false}
infras.online-doc.md-docs.staitc.path: ${INFRAS_ONLINE_DOC_MD_DOCS_STATIC_PATH:/doc/}
infras.online-doc.api-docs.staitc.path: ${INFRAS_ONLINE_DOC_API_DOCS_STATIC_PATH:/api-docs/}


##
# infras.security basic
#
infras.security.basic.reactive.enabled: ${INFRAS_SECURITY_BASIC_REACTIVE_ENABLED:true}


##
# infras.security jwt
#
infras.security.jwt.enabled: ${INFRAS_SECURITY_JWT_REACTIVE_ENABLED:false}

infras.security.jwt.public-key-pem: ${INFRAS_SECURITY_JWT_PUBLIC_KEY_PEM:}
infras.security.jwt.private-key-pem-pkcs8: ${INFRAS_SECURITY_JWT_PRIVATE_KEY_PEM_PKCS8:}


##
# infras.security cas
#
infras.security.cas.enabled: ${INFRAS_SECURITY_CAS_REACTIVE_ENABLED:false}

#应用访问地址
app.server.host.url: ${APP_SERVER_HOST_URL:https://localhost:8443}
#应用登录地址
app.login.url: ${APP_LOGIN_URL:/cas/login}
#应用登出地址
app.logout.url: ${APP_LOGOUT_URL:/cas/logout}

#CAS服务地址
cas.server.host.url: ${CAS_SERVER_HOST_URL:https://cas-server/cas}


##
# 认证时，用户信息服务实现
# memery 内存，用户名密码一致即可登录，测试用，默认；
# base 后端base服务；
# poa 开放平台服务，建议和cas一起使用）
sw-backend-gateway.security.core.userdetails.service.impl: ${SW_BACKEND_GATEWAY_SECURITY_CORE_USERDETAILS_SERVICE_IMPL:base}


sw-backend-base-api: 
  uri: ${SW_BACKEND_BASE_API_URI:https://sw-backend-admin-sa}
  client-auth:
    enabled: ${SW_BACKEND_BASE_API_CLIENT_AUTH_ENABLED:false}
    key-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEY_PASSWORD:}
    key-store: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEYSTORE_FILE:file:/certs/common/common.keystore}
    key-store-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_KEYSTORE_PASSWORD:}
    trust-store: ${SW_BACKEND_BASE_API_CLIENT_AUTH_TRUSTSTORE_FILE:file:/certs/common/common.truststore}
    trust-store-password: ${SW_BACKEND_BASE_API_CLIENT_AUTH_TRUSTSTORE_PASSWORD:}

sw-backend-agent-poa: 
  uri: ${SW_BACKEND_AGENT_POA_URI:https://sw-backend-agent}
  client-auth:
    enabled: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_ENABLED:false}
    key-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEY_PASSWORD:}
    key-store: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEYSTORE_FILE:file:/certs/common/common.keystore}
    key-store-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_KEYSTORE_PASSWORD:}
    trust-store: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_TRUSTSTORE_FILE:file:/certs/common/common.truststore}
    trust-store-password: ${SW_BACKEND_AGENT_POA_CLIENT_AUTH_TRUSTSTORE_PASSWORD:}