238 lines
7.1 KiB
YAML
238 lines
7.1 KiB
YAML
# =============================================================================
|
|
# Kong API Gateway - 声明式配置
|
|
# =============================================================================
|
|
# 分布式部署说明:
|
|
# - Kong 服务器: 192.168.1.100
|
|
# - 后端服务器: 192.168.1.111
|
|
#
|
|
# 使用方法:
|
|
# 1. 启动 Kong: ./deploy.sh up
|
|
# 2. 配置会自动加载
|
|
#
|
|
# 文档: https://docs.konghq.com/gateway/latest/
|
|
# =============================================================================
|
|
|
|
_format_version: "3.0"
|
|
_transform: true
|
|
|
|
# =============================================================================
|
|
# Services - 后端微服务定义
|
|
# =============================================================================
|
|
# 注意: 使用外部 IP 地址，因为 Kong 和后端服务在不同服务器上
|
|
# 后端服务器 IP: 192.168.1.111
|
|
# =============================================================================
|
|
services:
|
|
# ---------------------------------------------------------------------------
|
|
# Identity Service - 身份认证服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: identity-service
|
|
url: http://192.168.1.111:3000
|
|
routes:
|
|
- name: identity-auth
|
|
paths:
|
|
- /api/v1/auth
|
|
strip_path: false
|
|
- name: identity-users
|
|
paths:
|
|
- /api/v1/users
|
|
strip_path: false
|
|
- name: identity-health
|
|
paths:
|
|
- /api/v1/identity/health
|
|
strip_path: true
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Wallet Service - 钱包服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: wallet-service
|
|
url: http://192.168.1.111:3001
|
|
routes:
|
|
- name: wallet-api
|
|
paths:
|
|
- /api/v1/wallets
|
|
strip_path: false
|
|
- name: wallet-health
|
|
paths:
|
|
- /api/v1/wallet/health
|
|
strip_path: true
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Backup Service - 备份服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: backup-service
|
|
url: http://192.168.1.111:3002
|
|
routes:
|
|
- name: backup-api
|
|
paths:
|
|
- /api/v1/backups
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Planting Service - 种植服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: planting-service
|
|
url: http://192.168.1.111:3003
|
|
routes:
|
|
- name: planting-api
|
|
paths:
|
|
- /api/v1/plantings
|
|
- /api/v1/trees
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Referral Service - 推荐服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: referral-service
|
|
url: http://192.168.1.111:3004
|
|
routes:
|
|
- name: referral-api
|
|
paths:
|
|
- /api/v1/referrals
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Reward Service - 奖励服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: reward-service
|
|
url: http://192.168.1.111:3005
|
|
routes:
|
|
- name: reward-api
|
|
paths:
|
|
- /api/v1/rewards
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# MPC Service - 多方计算服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: mpc-service
|
|
url: http://192.168.1.111:3006
|
|
routes:
|
|
- name: mpc-api
|
|
paths:
|
|
- /api/v1/mpc
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Leaderboard Service - 排行榜服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: leaderboard-service
|
|
url: http://192.168.1.111:3007
|
|
routes:
|
|
- name: leaderboard-api
|
|
paths:
|
|
- /api/v1/leaderboard
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Reporting Service - 报表服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: reporting-service
|
|
url: http://192.168.1.111:3008
|
|
routes:
|
|
- name: reporting-api
|
|
paths:
|
|
- /api/v1/reports
|
|
- /api/v1/statistics
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Authorization Service - 授权服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: authorization-service
|
|
url: http://192.168.1.111:3009
|
|
routes:
|
|
- name: authorization-api
|
|
paths:
|
|
- /api/v1/authorization
|
|
- /api/v1/permissions
|
|
- /api/v1/roles
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Admin Service - 管理服务 (包含版本管理)
|
|
# ---------------------------------------------------------------------------
|
|
- name: admin-service
|
|
url: http://192.168.1.111:3010
|
|
routes:
|
|
- name: admin-versions
|
|
paths:
|
|
- /api/v1/versions
|
|
strip_path: false
|
|
- name: admin-api
|
|
paths:
|
|
- /api/v1/admin
|
|
strip_path: false
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Presence Service - 在线状态服务
|
|
# ---------------------------------------------------------------------------
|
|
- name: presence-service
|
|
url: http://192.168.1.111:3011
|
|
routes:
|
|
- name: presence-api
|
|
paths:
|
|
- /api/v1/presence
|
|
strip_path: false
|
|
|
|
# =============================================================================
|
|
# Plugins - 全局插件配置
|
|
# =============================================================================
|
|
plugins:
|
|
# CORS 跨域配置
|
|
- name: cors
|
|
config:
|
|
origins:
|
|
- "https://rwaadmin.szaiai.com"
|
|
- "https://update.szaiai.com"
|
|
- "https://app.rwadurian.com"
|
|
- "http://localhost:3000"
|
|
- "http://localhost:3020"
|
|
methods:
|
|
- GET
|
|
- POST
|
|
- PUT
|
|
- PATCH
|
|
- DELETE
|
|
- OPTIONS
|
|
headers:
|
|
- Accept
|
|
- Accept-Version
|
|
- Content-Length
|
|
- Content-MD5
|
|
- Content-Type
|
|
- Date
|
|
- Authorization
|
|
- X-Auth-Token
|
|
exposed_headers:
|
|
- X-Auth-Token
|
|
credentials: true
|
|
max_age: 3600
|
|
|
|
# 请求限流
|
|
- name: rate-limiting
|
|
config:
|
|
minute: 100
|
|
hour: 5000
|
|
policy: local
|
|
|
|
# 请求日志
|
|
- name: file-log
|
|
config:
|
|
path: /tmp/kong-access.log
|
|
reopen: true
|
|
|
|
# 请求/响应大小限制
|
|
- name: request-size-limiting
|
|
config:
|
|
allowed_payload_size: 50
|
|
size_unit: megabytes
|
|
|
|
# Prometheus 监控指标
|
|
- name: prometheus
|
|
config:
|
|
per_consumer: true
|
|
status_code_metrics: true
|
|
latency_metrics: true
|
|
bandwidth_metrics: true
|
|
upstream_health_metrics: true
|