226 lines
8.3 KiB
Markdown
226 lines
8.3 KiB
Markdown
|
|
# 🔐 工程凭证保险箱(Credential Vault)
|
|||
|
|
|
|||
|
|
<aside>
|
|||
|
|
🔐
|
|||
|
|
|
|||
|
|
**系统级机密文档 · 仅限系统内部路由使用**
|
|||
|
|
|
|||
|
|
所有服务器/密钥/证书/账号密码集中存储于此。
|
|||
|
|
|
|||
|
|
广播生成时,系统自动从本页提取对应模块所需凭证,直接写入广播。
|
|||
|
|
|
|||
|
|
**开发者拿到广播就能干活,不用到处找人问。**
|
|||
|
|
|
|||
|
|
</aside>
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 一、凭证保险箱运行机制
|
|||
|
|
|
|||
|
|
```jsx
|
|||
|
|
开发者完成配置类任务 → SYSLOG提交真实信息
|
|||
|
|
↓
|
|||
|
|
系统提取凭证 → 写入本页对应分区
|
|||
|
|
↓
|
|||
|
|
下次出广播时 → 系统查本页 → 自动注入凭证块
|
|||
|
|
↓
|
|||
|
|
开发者拿到广播 → 所有配置信息已就位 → 直接干活
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
**核心原则**:
|
|||
|
|
|
|||
|
|
- 没写进广播的 = 还没做,你去做就好
|
|||
|
|
- 写进广播的 = 已经有了,直接用
|
|||
|
|
- 开发者永远不需要问「服务器地址是什么」「密钥在哪里」
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 二、GitHub 仓库凭证
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 提供者 | 更新时间 |
|
|||
|
|
| --- | --- | --- | --- |
|
|||
|
|
| **仓库地址** | `https://github.com/qinfendebingshuo/guanghulab` | 冰朔 | 2026-03-01 |
|
|||
|
|
| **仓库类型** | Public(公开) | 冰朔 | 2026-03-01 |
|
|||
|
|
| **协作者添加方式** | 冰朔手动添加 GitHub 用户名到 Collaborators | 冰朔 | 2026-03-07 |
|
|||
|
|
| **默认分支** | `main` | 系统 | 2026-03-01 |
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 三、服务器凭证
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 提供者 | 更新时间 |
|
|||
|
|
| --- | --- | --- | --- |
|
|||
|
|
| **域名** | `guanghulab.com` | 冰朔 | 2026-03-08 |
|
|||
|
|
| **服务器IP** | ⬜ 待补充(SYSLOG回流后写入) | — | — |
|
|||
|
|
| **SSH登录命令** | ⬜ 待补充 | — | — |
|
|||
|
|
| **SSH端口** | ⬜ 待补充 | — | — |
|
|||
|
|
| **部署目录** | ⬜ 待补充 | — | — |
|
|||
|
|
| **Nginx配置路径** | ⬜ 待补充 | — | — |
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 四、API密钥 & Token
|
|||
|
|
|
|||
|
|
| 密钥类型 | 值 | 用途 | 提供者 | 更新时间 |
|
|||
|
|
| --- | --- | --- | --- | --- |
|
|||
|
|
| **Notion API Token** | `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` | 网站中继读写Notion | 冰朔 | 2026-03-11(旧token因GitHub泄露被 Notion自动停用,已重新生成) |
|
|||
|
|
| **GitHub Personal Access Token** | ⬜ 待补充 | 网站中继读写GitHub | — | — |
|
|||
|
|
| **DeepSeek API Key** | ⬜ 待补充 | M-AI交互页面后端调用 | — | — |
|
|||
|
|
| **Kimi API Key** | ⬜ 待补充 | M-AI交互页面后端调用 | — | — |
|
|||
|
|
| **飞书 Webhook URL** | ⬜ 待补充(页页已配通?SYSLOG回流确认) | M02后端通知 | DEV-001 页页 | — |
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 五、SSL证书
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 提供者 | 更新时间 |
|
|||
|
|
| --- | --- | --- | --- |
|
|||
|
|
| **证书类型** | ⬜ 待补充(Let's Encrypt / 阿里云 / 其他) | — | — |
|
|||
|
|
| **证书路径** | ⬜ 待补充 | — | — |
|
|||
|
|
| **私钥路径** | ⬜ 待补充 | — | — |
|
|||
|
|
| **到期时间** | ⬜ 待补充 | — | — |
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 六、开发者个人凭证(按DEV编号索引)
|
|||
|
|
|
|||
|
|
<aside>
|
|||
|
|
📋
|
|||
|
|
|
|||
|
|
开发者在SYSLOG中提交的个人配置信息(Git用户名、本地环境等),系统提取后写入此区。
|
|||
|
|
|
|||
|
|
广播生成时,按DEV编号匹配,注入该开发者专属的配置信息。
|
|||
|
|
|
|||
|
|
</aside>
|
|||
|
|
|
|||
|
|
### DEV-001 页页
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | Windows | 画像库 | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-002 肥猫
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | | | |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| **Git用户名** | `飞毛嘴帅气爱` | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Git邮箱** | `feimaozuishuaiqi@gmail.com` | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Git版本** | Git 2.43.0 (Windows) | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Node版本** | v20.11.1 | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **操作系统** | Windows 11 家庭中文版 | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **本地工作目录** | `C:\Users\11621\Desktop\guanghulab` | BC-M14-002-FM + BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **凭证缓存** | wincred | BC-GLOBAL-002 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Collaborator** | ✅ 已添加(冰朔确认 2026-03-08) | 冰朔 · 2026-03-08 | | | |
|
|||
|
|
|
|||
|
|
### DEV-003 燕樊
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | Windows | 画像库 | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-004 之之
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | | | |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| **Git用户名** | `zhizhi200271` | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Git邮箱** | `zhizhidetou@gmail.com` | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Git版本** | Git 2.49.0 | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **操作系统** | macOS | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **本地工作目录** | `~/Desktop/guanghulab` | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **仓库克隆状态** | ✅ 已克隆 · Push测试成功(main→main) | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **凭证缓存** | osxkeychain | BC-M17-004-ZZ SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Collaborator** | ⬜ 待添加 | — | | | |
|
|||
|
|
|
|||
|
|
### DEV-005 小草莓
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | Windows | 画像库 | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-009 花尔
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | macOS | 画像库 | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-010 桔子
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | | | |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| **Git用户名** | `juzi0412` | credential_report · 2026-03-08 | | | |
|
|||
|
|
| **Git邮箱** | `EMAIL_REDACTED@qq.com` | credential_report · 2026-03-08 | | | |
|
|||
|
|
| **操作系统** | macOS | credential_report · 2026-03-08 | | | |
|
|||
|
|
| **本地工作目录** | `/Users/chenshujun/Desktop/guanghulab`(M11子目录:`style-system`) | credential_report · 2026-03-08 · BC-M11-003-JZ更新 | | | |
|
|||
|
|
| **Collaborator** | ✅ 已添加(冰朔确认 2026-03-08) | 冰朔 · 2026-03-08 | | | |
|
|||
|
|
|
|||
|
|
### DEV-011 匆匆那年
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | ⬜ 待确认 | — | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-012 Awen
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | Git用户名 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| 操作系统 | Windows | 画像库 | 本地工作目录 | ⬜ 待SYSLOG回流 | — |
|
|||
|
|
|
|||
|
|
### DEV-013 小兴
|
|||
|
|
|
|||
|
|
| 项目 | 值 | 来源 | | | |
|
|||
|
|
| --- | --- | --- | --- | --- | --- |
|
|||
|
|
| **Git用户名** | `Xiaoxing` | BC-M-AUTH-002-XX-001 SYSLOG · 2026-03-22 | | | |
|
|||
|
|
| **操作系统** | Windows 11 | BC-000-XX-001 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **本地工作目录** | `C:\Users\许guanghulab` | BC-M-AUTH-002-XX-001 SYSLOG · 2026-03-22 | | | |
|
|||
|
|
| **DevLog路径** | `C:\Users\许\HoloLake-DevLog\` | BC-000-XX-001 SYSLOG · 2026-03-08 | | | |
|
|||
|
|
| **Git Push状态** | ❌ SSH失败 + HTTPS Recv failure · 需修复 | BC-M-AUTH-002-XX-001 SYSLOG · 2026-03-22 | | | |
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 七、凭证回流协议
|
|||
|
|
|
|||
|
|
### 7.1 开发者提交凭证的方式
|
|||
|
|
|
|||
|
|
开发者在SYSLOG中提交配置信息时,使用以下格式:
|
|||
|
|
|
|||
|
|
```xml
|
|||
|
|
<credential_report>
|
|||
|
|
<type>[git_username / server_info / api_key / ssl_cert / other]</type>
|
|||
|
|
<key>[凭证名称]</key>
|
|||
|
|
<value>[真实值]</value>
|
|||
|
|
<scope>[适用范围:global全局 / module模块级 / personal个人]</scope>
|
|||
|
|
</credential_report>
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 7.2 系统处理流程
|
|||
|
|
|
|||
|
|
```jsx
|
|||
|
|
SYSLOG收到credential_report
|
|||
|
|
↓
|
|||
|
|
霜砚提取 → 写入本页对应分区
|
|||
|
|
↓
|
|||
|
|
标记来源DEV + 时间戳
|
|||
|
|
↓
|
|||
|
|
下次该模块出广播时 → 自动注入
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 7.3 广播注入规则
|
|||
|
|
|
|||
|
|
```jsx
|
|||
|
|
出广播前 → 查本页:
|
|||
|
|
1. 该模块需要哪些凭证?(按仓库路径匹配)
|
|||
|
|
2. 全局凭证(GitHub仓库地址、服务器IP等)→ 所有广播都带
|
|||
|
|
3. 模块级凭证(特定API Key等)→ 相关模块广播带
|
|||
|
|
4. 个人凭证(Git用户名、本地目录)→ 按DEV编号匹配注入
|
|||
|
|
|
|||
|
|
注入位置:广播【执行环境声明】之后、【任务目标】之前
|
|||
|
|
注入格式:见广播生成规范 BC-GEN 第⑪步
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**文档版本**:v1.0
|
|||
|
|
|
|||
|
|
**创建时间**:2026-03-08T04:35+08:00
|
|||
|
|
|
|||
|
|
**签发**:霜砚 × 冰朔
|