urbanLifeline/urbanLifelineServ/gateway/src/main/resources/application.yml

server:
  port: 8180

spring:
  application:
    name: gateway-service
  
  # Gateway 必须使用 reactive 模式（WebFlux），不能使用 Spring MVC
  main:
    web-application-type: reactive
  
  # 配置中心
  cloud:
    nacos:
      discovery:
        server-addr: ${NACOS_SERVER_ADDR:localhost:8848}
        namespace: dev
        group: DEFAULT_GROUP
      config:
        server-addr: ${NACOS_SERVER_ADDR:localhost:8848}
        file-extension: yml
        namespace: dev
        group: DEFAULT_GROUP
    
    # Gateway 路由配置（使用新的 webflux 配置路径）
    gateway:
      server:
        webflux:
          # 服务发现路由（自动路由）
          discovery:
            locator:
              enabled: false  # 关闭自动路由，使用手动配置
          
          # 手动配置路由
          routes:
            # ==================== 认证服务路由 ====================
            - id: auth-service
              uri: lb://auth-service
              predicates:
                - Path=/urban-lifeline/auth/**
              filters:
                # 不需要重写，直接转发保持原路径
                - name: RequestRateLimiter
                  args:
                    redis-rate-limiter.replenishRate: 100
                    redis-rate-limiter.burstCapacity: 200
            
            # ==================== 系统服务路由 ====================
            - id: system-service
              uri: lb://system-service
              predicates:
                - Path=/urban-lifeline/system/**
            
            # ==================== 日志服务路由 ====================
            - id: log-service
              uri: lb://log-service
              predicates:
                - Path=/urban-lifeline/log/**
            
            # ==================== 文件服务路由 ====================
            - id: file-service
              uri: lb://file-service
              predicates:
                - Path=/urban-lifeline/file/**
            
            # ==================== 消息服务路由 ====================
            - id: message-service
              uri: lb://message-service
              predicates:
                - Path=/urban-lifeline/message/**
            
            # ==================== 招投标服务路由 ====================
            - id: bidding-service
              uri: lb://bidding-service
              predicates:
                - Path=/urban-lifeline/bidding/**
            
            # ==================== 平台服务路由 ====================
            - id: platform-service
              uri: lb://platform-service
              predicates:
                - Path=/urban-lifeline/platform/**
            
            # ==================== 工单服务路由 ====================
            - id: workcase-service
              uri: lb://workcase-service
              predicates:
                - Path=/urban-lifeline/workcase/**
            
            # ==================== 定时任务服务路由 ====================
            - id: crontab-service
              uri: lb://crontab-service
              predicates:
                - Path=/urban-lifeline/crontab/**
            
            # ==================== AI Agent 服务路由 ====================
            - id: agent-service
              uri: lb://agent-service
              predicates:
                - Path=/urban-lifeline/agent/**
          
          # 全局跨域配置
          globalcors:
            cors-configurations:
              '[/**]':
                allowedOriginPatterns: "*"
                allowedMethods:
                  - GET
                  - POST
                  - PUT
                  - DELETE
                  - OPTIONS
                allowedHeaders: "*"
                allowCredentials: true
                maxAge: 3600
  datasource:
    # 按你的实际库名改一下，比如 urban-lifeline_system
    url: jdbc:postgresql://127.0.0.1:5432/urban_lifeline   # 换成你的 PG 库名
    username: postgres                                      # PG 用户
    password: postgres                                     # PG 密码
    driver-class-name: org.postgresql.Driver
  # Redis 配置（用于限流、缓存）
  data:
    redis:
      host: ${REDIS_HOST:localhost}
      port: ${REDIS_PORT:6379}
      password: 123456
      database: 0
      timeout: 5000ms
      lettuce:
        pool:
          max-active: 20
          max-wait: -1ms
          max-idle: 10
          min-idle: 5

# 认证配置
auth:
  enabled: true
  gateway-mode: true
  token-header: Authorization
  token-prefix: "Bearer "
  # 认证接口白名单（login/logout/captcha/refresh）
  login-path: /urban-lifeline/auth/login
  logout-path: /urban-lifeline/auth/logout
  captcha-path: /urban-lifeline/auth/captcha
  refresh-path: /urban-lifeline/auth/refresh
  # 通用白名单（Swagger、健康检查等）
  whitelist:
    - /actuator/**
    - /v3/api-docs/**
    - /swagger-ui/**
    - /swagger-resources/**
    - /webjars/**
    - /doc.html
    - /favicon.ico
    - /error
security:
  aes:
    secret-key: MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTI=  # Base64 编码，32字节（256位）
# Actuator 监控端点
management:
  endpoints:
    web:
      exposure:
        include: health,info,gateway
  endpoint:
    health:
      show-details: always

# 日志配置（详细配置见 log4j2.xml）
logging:
  config: classpath:log4j2.xml
  charset:
    console: UTF-8
    file: UTF-8