feat: 初始化安全的项目代码

- 移除所有敏感信息（数据库密码、API密钥等）
- 使用环境变量配置替代硬编码
- 提供完整的配置模板和文档
- 添加安全检查脚本和工具

Author: zhaozhonglin

.env.example

@@ -0,0 +1,80 @@
+# 环境变量配置示例
+# 复制此文件为 .env 并填入实际值
+
+# 数据库配置
+DB_URL=jdbc:mysql://localhost:3306/modules?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=GMT%2B8
+DB_USERNAME=your_db_username
+DB_PASSWORD=your_db_password
+
+# Redis配置
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_PASSWORD=your_redis_password
+
+# 邮件服务器配置
+MAIL_HOST=smtp.qq.com
+MAIL_USERNAME=your_email@qq.com
+MAIL_PASSWORD=your_email_password
+
+# JWT Token密钥 (建议使用强随机字符串)
+JWT_TOKEN_KEY=your_jwt_secret_key_base64_encoded
+
+# 服务器配置
+SERVER_URL=http://localhost:9200/api
+FILE_SERVER=http://localhost:9200
+UPLOAD_PATH=/path/to/uploads/
+LOCAL_UPLOAD_PATH=/path/to/local/uploads/
+
+# 开发环境特定配置
+DEV_SERVER_URL=http://127.0.0.1:9200/api
+DEV_UPLOAD_PATH=/tmp/uploads/
+
+# 生产环境特定配置
+PROD_SERVER_URL=https://your-domain.com/api
+PROD_UPLOAD_PATH=/var/www/uploads/
+LOG_FILE_NAME=websoft-modules.log
+
+# 阿里云OSS配置
+ALIYUN_OSS_ENDPOINT=https://oss-cn-shenzhen.aliyuncs.com
+ALIYUN_ACCESS_KEY_ID=your_access_key_id
+ALIYUN_ACCESS_KEY_SECRET=your_access_key_secret
+ALIYUN_BUCKET_NAME=your_bucket_name
+ALIYUN_BUCKET_DOMAIN=https://your-bucket-domain.com
+ALIYUN_DOMAIN=https://your-aliyun-domain.com
+
+# MQTT配置
+MQTT_ENABLED=false
+MQTT_HOST=tcp://localhost:1883
+MQTT_USERNAME=your_mqtt_username
+MQTT_PASSWORD=your_mqtt_password
+MQTT_CLIENT_ID_PREFIX=app_
+MQTT_TOPIC=/topic/#
+
+# SocketIO配置
+SOCKETIO_HOST=localhost
+
+# Druid监控配置
+DRUID_USERNAME=admin
+DRUID_PASSWORD=your_druid_password
+
+# OpenOffice配置
+OPEN_OFFICE_HOME=C:/OpenOffice4/
+
+# 阿里云翻译服务配置
+ALIYUN_TRANSLATE_ACCESS_KEY_ID=your_translate_access_key_id
+ALIYUN_TRANSLATE_ACCESS_KEY_SECRET=your_translate_access_key_secret
+
+# 微信支付开发环境配置
+WECHAT_PAY_API_V3_KEY=your_wechat_pay_api_v3_key
+WECHAT_PAY_PRIVATE_KEY=path/to/your/private/key.pem
+WECHAT_PAY_APICLIENT_CERT=path/to/your/apiclient/cert.pem
+WECHAT_PAY_PUB_KEY=path/to/your/pub/key.pem
+
+# 微信支付开发环境证书路径
+WECHAT_DEV_PRIVATE_KEY_PATH=path/to/dev/private/key.pem
+WECHAT_DEV_PRIVATE_CERT_PATH=path/to/dev/private/cert.pem
+WECHAT_DEV_WECHATPAY_CERT_PATH=path/to/dev/wechatpay/cert.pem
+
+# AI服务配置
+AI_SERVICE_TOKEN=Bearer your-ai-service-token
+AI_SERVICE_TOKEN_ALT=Bearer your-ai-service-token-alt

.gitignore

@@ -0,0 +1,61 @@
+HELP.md
+target/
+!.mvn/wrapper/maven-wrapper.jar
+!**/src/main/**
+!**/src/test/**
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+build/
+
+### VS Code ###
+.vscode/
+
+### 敏感信息和配置文件 ###
+# 配置文件 - 包含敏感信息
+src/main/resources/application.yml
+src/main/resources/application-dev.yml
+src/main/resources/application-prod.yml
+# 保留模板文件供参考
+!src/main/resources/application*.yml.template
+
+# 证书文件和密钥
+src/main/resources/cert/
+*.pem
+*.crt
+*.key
+*.p12
+*.jks
+
+# 环境变量文件
+.env
+.env.local
+.env.production
+.env.development
+
+# 日志文件
+*.log
+logs/
+
+# 临时文件
+temp/
+tmp/