refactor: move sensitive config to .env file for improved security an… #123

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

Rui0828 wants to merge 1 commit into QingdaoU:2.0 from Rui0828:2.0

Rui0828 commented Apr 1, 2025

Important

这次更新不会影响现有功能，仅改进了配置方式，使系统更加安全、易用和可维护。

将配置参数移至 .env 文件

本次更新将 docker-compose.yml 中的重要配置参数移至单独的 .env 文件，主要包括：

将安全令牌 (TOKEN 和 JUDGE_SERVER_TOKEN) 统一放置在 .env 文件
将数据库凭据 (POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD) 集中管理

优势

提高安全性：用户可以一目了然地看到哪些参数需要被修改，避免因未修改默认值而带来的安全隐患
简化配置：用户不需要细读 docker-compose.yml 文件内容，只需要关注 .env 文件即可
便于维护：当需要部署多台评测服务器时，只需管理 .env 文件而无需修改每个 docker-compose.yml
遵循最佳实践：将敏感信息与配置代码分离，符合容器化应用的最佳实践

使用方法

用户只需编辑 .env 文件，设置自定义的安全令牌和数据库凭据，然后运行 docker-compose 即可。README 文件中已添加相关说明，使其更加直观清晰。


          refactor: move sensitive config to .env file for improved security an…

f0a39f7

…d maintainability

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet