保护所有配置文件，使用环境变量管理敏感信息

Author: Layau-code

.github/workflows/deploy.yml

@@ -52,21 +52,20 @@ jobs:
           script: |
             cd /opt/TinyFlow
             git pull origin master
-            
+                  
             # 重新构建前端
             cd web
             npm ci
             npm run build
-            
+                  
             # 重新构建后端
             cd ..
             mvn clean package -DskipTests
-            
-            # 重启服务
+                  
+            # 重启服务（自动加载环境变量）
             systemctl restart tinyflow
-            systemctl restart nginx
-            
-            echo " 部署完成！"
+                  
+            echo "✅ 部署完成！"
 
       # 7. 部署成功通知（可选）
       - name: Deployment Success

src/main/resources/application.yml

@@ -8,7 +8,7 @@ spring:
   datasource:
     url: jdbc:mysql://localhost:3306/tiny-flow?useSSL=false&serverTimezone=UTC&allowPublicKeyRetrieval=true&useUnicode=true&characterEncoding=utf8&connectionCollation=utf8mb4_unicode_ci
     username: root
-    password: CHANGE_ME_DB_PASSWORD
+    password: ${DB_PASSWORD}
     driver-class-name: com.mysql.cj.jdbc.Driver
     hikari:
       maximum-pool-size: 100
@@ -26,7 +26,7 @@ spring:
     redis:
       host: 47.97.110.128
       port: 6379
-      password: 123456
+      password: ${REDIS_PASSWORD}
       timeout: 2s
       lettuce:
           pool:
@@ -82,7 +82,7 @@ server:
 
 
 app:
-  domain: http://47.97.110.128
+  domain: ${APP_DOMAIN}
 
 shortcode:
   minLen: 4
@@ -213,6 +213,6 @@ resilience4j:
 # JWT 配置
 jwt:
   # 密钥（生产环境请使用环境变量或加密存储，至少256位）
-  secret: CHANGE_ME_SECRET_KEY
+  secret: ${JWT_SECRET}
   # 过期时间（毫秒），默认7天
   expiration: 604800000