新增南网生产配置，漏洞修复

sgzb-auth/pom.xml

@@ -38,8 +38,27 @@
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-classic</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-core</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>1.2.13</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.2.13</version>
         </dependency>
-        
         <!-- SpringBoot Actuator -->
 <!--        <dependency>-->
 <!--            <groupId>org.springframework.boot</groupId>-->

sgzb-auth/src/main/resources/bootstrap-sgzb_cloud_dev.yml

@@ -0,0 +1,42 @@
+# Spring
+spring:
+  cloud:
+    nacos:
+      discovery:
+        # 服务注册地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
+      config:
+        # 配置中心地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        # 配置文件格式
+        file-extension: yml
+        # 共享配置
+        shared-configs:
+          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+
+onlineApprove: /lbcloud-oauth/oauth/token
+wechatAppId: crhmaxnE
+wechatAppsecret: 3893e6ed90d325f00e34583dd970a56580c05549
+getNowPersonDetailData: /lbcloud-user/user/queryLoginUserInfo
+baseUrl: https://test-sso.csgmall.com.cn
+appAppsecret: d8e6db9fa9bb09da0e270fa739233c823bf9c5f0
+personEasyList: /lbcloud-user/api/user/queryAndPaging/basicInfo
+h5Appsecret: 3c4a67b7f6a268b4202a5328e6a1726979d5903b
+h5AppId: G3NksDH2
+appsecret: 596e4863c8d112842ce820c130b236001297ea73
+appId: akvVFYgy
+appAppId: u8LLfynf
+getPersonDetailData: /lbcloud-user/api/user/queryById
+registerPhone: /lbcloud-user/api/user/registrationByPhone
+userBindUrl: /lbcloud-authority/api/RoleClient/bindDefaultSystemRole
+verifyPhoneCode: /lbcloud-mbroker/api/broker/simpleVerificationCode
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false

sgzb-auth/src/main/resources/bootstrap-sgzb_nw_dev.yml

@@ -4,11 +4,11 @@ spring:
     nacos:
       discovery:
         # 服务注册地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
       config:
         # 配置中心地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
         # 配置文件格式
         file-extension: yml

sgzb-gateway/pom.xml

@@ -8,7 +8,7 @@
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
-    <artifactId>sgzb-gateway-nw24.8.3</artifactId>
+    <artifactId>sgzb-gateway-nw</artifactId>
 
     <description>
         sgzb-gateway网关模块
@@ -20,8 +20,27 @@
         <dependency>
             <groupId>org.springframework.cloud</groupId>
             <artifactId>spring-cloud-starter-gateway</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-classic</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-core</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>1.2.13</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.2.13</version>
         </dependency>
-
         <!-- SpringCloud Alibaba Nacos -->
         <dependency>
             <groupId>com.alibaba.cloud</groupId>

sgzb-gateway/src/main/resources/bootstrap-sgzb_cloud_dev.yml

@@ -0,0 +1,49 @@
+# Spring
+spring:
+  cloud:
+    loadbalancer:
+      # 关闭Ribbon的负载均衡器
+      ribbon:
+        enabled: false
+      # 开启Nacos的负载均衡器
+      nacos:
+        enabled: true
+    nacos:
+      discovery:
+        # 服务注册地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
+      config:
+        # 配置中心地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        # 配置文件格式
+        file-extension: yml
+        # 共享配置
+        shared-configs:
+          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+
+    sentinel:
+      # 取消控制台懒加载
+      eager: true
+      transport:
+        # 控制台地址
+        dashboard: 172.16.36.33:8848
+      # nacos配置持久化
+      datasource:
+        ds1:
+          nacos:
+            server-addr: 172.16.36.33:8848
+            dataId: sentinel-sgzb-gateway
+            groupId: DEFAULT_GROUP
+            data-type: json
+            rule-type: gw-flow
+
+
+# Spring Boot Actuator V2中风险漏洞处理，禁止远程端口访问
+management:
+  endpoint:
+    env:
+      enabled: false

sgzb-gateway/src/main/resources/bootstrap-sgzb_nw_dev.yml

@@ -11,11 +11,11 @@ spring:
     nacos:
       discovery:
         # 服务注册地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
       config:
         # 配置中心地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
         # 配置文件格式
         file-extension: yml

sgzb-modules/sgzb-system/pom.xml

@@ -83,6 +83,26 @@
         <dependency>
             <groupId>com.bonus.sgzb</groupId>
             <artifactId>sgzb-common-swagger</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-classic</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>logback-core</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>1.2.13</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.2.13</version>
         </dependency>
         <dependency>
             <groupId>junit</groupId>

sgzb-modules/sgzb-system/src/main/resources/bootstrap-sgzb_cloud_dev.yml

@@ -0,0 +1,72 @@
+# Spring
+spring:
+  servlet:
+    multipart:
+      max-request-size: 50MB
+      max-file-size: 30MB
+  cloud:
+    loadbalancer:
+      # 关闭Ribbon的负载均衡器
+      ribbon:
+        enabled: false
+      # 开启Nacos的负载均衡器
+      nacos:
+        enabled: true
+    nacos:
+      discovery:
+        # 服务注册地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
+      config:
+        # 配置中心地址
+        server-addr: 172.16.36.33:8848
+        namespace: sgzb_cloud_dev
+        # 配置文件格式
+        file-extension: yml
+        # 共享配置
+        shared-configs:
+          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+
+#腾讯云sms
+tencent:
+  sms:
+    #api秘钥标识
+    accessKeyId: AKIDrreCVaRKDtMcgfU5QW9iEfv67tMfldJn
+    #api秘钥
+    accessKeySecret: OXUgeMo0yhBRTGo6sVu3yiFX4rQtAzc3
+    #请求域名
+    endpoint: sms.tencentcloudapi.com
+    #所属区域
+    region: ap-guangzhou
+    #腾讯云申请应用id
+    sdkAppId: 1400494336
+    #签名
+    smsSign: 南方电网互联网
+    #云平台模板id 2116937-验收通知  2115503-登录验证
+    templateId: 2116937,2115503
+  # 腾讯云cos
+  cos:
+    file:
+      # 存储桶所在地域
+      region: ap-guangzhou
+      # 存储桶所在地域
+      bucketregion: ap-guangzhou
+      # 存储桶名称
+      bucketname: prod-rental-1301524038
+      # API账号
+      secretid: AKIDrreCVaRKDtMcgfU5QW9iEfv67tMfldJn
+      # API密钥
+      secretkey: OXUgeMo0yhBRTGo6sVu3yiFX4rQtAzc3
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false
+
+
+
+
+

sgzb-modules/sgzb-system/src/main/resources/bootstrap-sgzb_nw_dev.yml

@@ -15,11 +15,11 @@ spring:
     nacos:
       discovery:
         # 服务注册地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
       config:
         # 配置中心地址
-        server-addr: 192.168.0.119:8848
+        server-addr: 127.0.0.1:8848
         namespace: sgzb_nwjj
         # 配置文件格式
         file-extension: yml