a3245b249a
- API Key: run.md/.env/seed_model_providers.sql 中明文Key替换为占位符 - 认证: JWT从localStorage迁移到HttpOnly Cookie,移除后端body返回token - 前端: api.ts/knowledge/page.tsx/auth.ts 全面改用Cookie认证 - postcss XSS: package.json添加overrides强制升级到8.5.15 - gitignore: 添加server/.env和.env排除规则 - lint: 移除tenant.go中未使用的roleKey常量 - 文档: 新增docs/security-audit-report.md和hardware-requirements.md
75 lines
872 B
Plaintext
75 lines
872 B
Plaintext
# ===== Environment =====
|
|
# .env 和 server/.env 包含密钥,不得纳入版本控制
|
|
.env
|
|
.env.local
|
|
server/.env
|
|
server/.env.local
|
|
!.env.example
|
|
!.server/.env.example
|
|
|
|
# ===== Go =====
|
|
server/server
|
|
server/server-*
|
|
server/tmp/
|
|
server/bin/
|
|
server/cmd/test-*/
|
|
*.exe
|
|
*.exe~
|
|
*.dll
|
|
*.so
|
|
*.dylib
|
|
*.test
|
|
*.out
|
|
vendor/
|
|
|
|
# ===== Node.js / Next.js =====
|
|
node_modules/
|
|
apps/web/.next/
|
|
apps/web/out/
|
|
.turbo/
|
|
.vercel/
|
|
|
|
# ===== IDE =====
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# ===== OS =====
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# ===== Docker =====
|
|
pgdata/
|
|
redisdata/
|
|
miniodata/
|
|
caddydata/
|
|
dify-data/
|
|
|
|
# ===== Build =====
|
|
dist/
|
|
build/
|
|
*.log
|
|
|
|
# ===== Secrets =====
|
|
*.pem
|
|
*.key
|
|
credentials.json
|
|
|
|
# ===== Playwright MCP (临时文件) =====
|
|
.playwright-mcp/
|
|
|
|
# ===== Demo & 截图 =====
|
|
demo-screenshots*/
|
|
demo-*.mp4
|
|
|
|
# ===== Python =====
|
|
__pycache__/
|
|
*.pyc
|
|
venv/
|
|
.venv/
|
|
|
|
# ===== AI/IDE =====
|
|
.ai-switch/
|