fix: 移除 Sa-Token/Redis 配置，改用实际的 Spring Security + JWT 环境变量

Author: longsizhuo

.env.example

@@ -1,52 +1,30 @@
-# --- 数据库与基础设施 (针对 Neon 或本地 Docker) ---
-PGHOST=localhost
-PGPORT=5432
-PGUSER=neondb_owner
-PGPASSWORD=change_me
-PGDATABASE=neondb
-PGSSLMODE=disable
-
-# 你也可以直接提供单一条目 (Spring Boot 将优先尝试解析 individual 变量)
-DATABASE_URL=postgresql://neondb_owner:change_me@localhost:5432/neondb?sslmode=disable
+# --- 数据库（本地 Docker postgres 服务）---
+POSTGRES_DB=involution_hell
+POSTGRES_USER=involution
+POSTGRES_PASSWORD=change_me
+SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/involution_hell
 
-# --- Spring Security OAuth2 (针对 GitHub 认证) ---
-# 请从 GitHub Developer Settings 获取以下信息
+# --- Spring Security OAuth2（GitHub 登录）---
+# 从 GitHub Developer Settings 获取
 AUTH_GITHUB_ID=
 AUTH_GITHUB_SECRET=
 AUTH_SECRET=
 
-# --- 应用基本设置 ---
-SPRING_APPLICATION_NAME=backend
-SERVER_PORT=8080
-SPRING_PROFILES_ACTIVE=default
-SPRING_SQL_INIT_MODE=always
-
-# --- OpenAI 与 AI 助手 ---
+# --- OpenAI ---
 OPENAI_API_KEY=
 OPENAI_API_URL=https://api.openai.com/v1
 OPENAI_MODEL=gpt-4.1
 
-# --- 监控与 Actuator ---
-MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health,info,metrics
-MANAGEMENT_ENDPOINT_HEALTH_PROBES_ENABLED=true
-MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS=always
-
-# --- 缓存 (Redis) ---
-REDIS_PASSWORD=change-me
+# --- 应用基本设置 ---
+SERVER_PORT=8080
+SPRING_APPLICATION_NAME=backend
+SPRING_SQL_INIT_MODE=always
 
-# --- 网关与代理 (Caddy) ---
+# --- 网关（Caddy）---
 CADDY_SITE_ADDRESS=:80
 CADDY_HTTP_PORT=80
 CADDY_HTTPS_PORT=443
 CADDY_UPSTREAM=backend:8080
 
 # --- Docker 镜像 ---
 BACKEND_IMAGE_NAME=ghcr.io/involutionhell/involutionhell-backend:latest
-
-# --- 数据库（本地 Docker postgres 服务）---
-POSTGRES_DB=involution_hell
-POSTGRES_USER=involution
-POSTGRES_PASSWORD=change_me
-SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/involution_hell
-SPRING_DATASOURCE_USERNAME=involution
-SPRING_DATASOURCE_PASSWORD=change_me

docker-compose.yml

@@ -9,22 +9,23 @@ services:
       - .env
     environment:
       SERVER_PORT: ${SERVER_PORT:-8080}
-      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-default}
       SPRING_APPLICATION_NAME: ${SPRING_APPLICATION_NAME:-backend}
+      # 数据库连接（使用 PG* 变量，与 application.properties 保持一致）
       SPRING_DATASOURCE_URL: ${SPRING_DATASOURCE_URL:-jdbc:postgresql://postgres:5432/involution_hell}
-      SPRING_DATASOURCE_USERNAME: ${SPRING_DATASOURCE_USERNAME:-involution}
-      SPRING_DATASOURCE_PASSWORD: ${SPRING_DATASOURCE_PASSWORD:-change_me}
+      PGUSER: ${POSTGRES_USER:-involution}
+      PGPASSWORD: ${POSTGRES_PASSWORD:-change_me}
       SPRING_SQL_INIT_MODE: ${SPRING_SQL_INIT_MODE:-always}
-      SA_TOKEN_TOKEN_NAME: ${SA_TOKEN_TOKEN_NAME:-satoken}
-      SA_TOKEN_TIMEOUT: ${SA_TOKEN_TIMEOUT:-2592000}
-      SA_TOKEN_ACTIVE_TIMEOUT: ${SA_TOKEN_ACTIVE_TIMEOUT:-7200}
-      SA_TOKEN_IS_CONCURRENT: ${SA_TOKEN_IS_CONCURRENT:-true}
-      SA_TOKEN_IS_SHARE: ${SA_TOKEN_IS_SHARE:-false}
-      SA_TOKEN_TOKEN_STYLE: ${SA_TOKEN_TOKEN_STYLE:-random-64}
-      SA_TOKEN_IS_LOG: ${SA_TOKEN_IS_LOG:-true}
+      # GitHub OAuth2
+      AUTH_GITHUB_ID: ${AUTH_GITHUB_ID:-}
+      AUTH_GITHUB_SECRET: ${AUTH_GITHUB_SECRET:-}
+      AUTH_SECRET: ${AUTH_SECRET:-}
+      # OpenAI
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      OPENAI_API_URL: ${OPENAI_API_URL:-https://api.openai.com/v1}
+      OPENAI_MODEL: ${OPENAI_MODEL:-gpt-4.1}
+      # Actuator
       MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE: ${MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE:-health}
       MANAGEMENT_ENDPOINT_HEALTH_PROBES_ENABLED: ${MANAGEMENT_ENDPOINT_HEALTH_PROBES_ENABLED:-true}
-      MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS: ${MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS:-never}
     expose:
       - "${SERVER_PORT:-8080}"
     healthcheck:
@@ -40,8 +41,6 @@ services:
         condition: service_started
       postgres:
         condition: service_healthy
-      redis:
-        condition: service_healthy
 
   postgres:
     image: postgres:18-alpine
@@ -64,27 +63,6 @@ services:
     networks:
       - InvolutionHell-net
 
-  redis:
-    image: redis:7-alpine
-    container_name: involution-redis
-    restart: unless-stopped
-    command: >
-      redis-server
-      --appendonly yes
-      --requirepass ${REDIS_PASSWORD:-change_me}
-    volumes:
-      - involution-redis-data:/data
-    ports:
-      - "6382:6379"
-      - "16382:16379"
-    healthcheck:
-      test: ["CMD-SHELL", "redis-cli -a ${REDIS_PASSWORD:-change_me} ping | grep PONG"]
-      interval: 10s
-      timeout: 5s
-      retries: 10
-    networks:
-      - InvolutionHell-net
-
   caddy:
     image: caddy:2.10-alpine
     container_name: involution-hell-caddy
@@ -107,6 +85,5 @@ networks:
 
 volumes:
   involution-postgres-data:
-  involution-redis-data:
   involution-caddy-data:
   involution-caddy-config: