Yeomai/FileHost
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

服务器配置

Browse Source
This commit is contained in:
tianmo committed 2026-10-17 16:09:31 +08:00
1 parent a1b4a63552
commit fa7c8244b0
33 files changed
+1882 -363
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

server/api/settings/index.patch.ts
+111
View File
@@ -9,6 +9,12 @@ import {
SETTINGS_STORAGE_USE_DATE_PATH,
SETTINGS_IMAGE_BASE_URL,
SETTINGS_SITE_BASE_URL,
SETTINGS_VIDEO_BASE_URL,
SETTINGS_FILE_BASE_URL,
SETTINGS_DOMAIN_SEPARATION,
SETTINGS_IMAGE_DOMAIN_SEPARATED,
SETTINGS_VIDEO_DOMAIN_SEPARATED,
SETTINGS_FILE_DOMAIN_SEPARATED,
SETTINGS_WEBP_QUALITY,
SETTINGS_LOGIN_VERIFICATION_METHOD,
SETTINGS_TURNSTILE_SITE_KEY,
@@ -28,6 +34,8 @@ import {
parseLoginVerificationMethod,
MAX_AUTO_DELETE_DAYS,
normalizeImageBaseUrl,
normalizeVideoBaseUrl,
normalizeFileBaseUrl,
normalizeRefererHosts,
normalizeSiteBaseUrl,
parseAutoDeleteDays,
@@ -38,6 +46,8 @@ import {
} from '../../utils/env'
import {
normalizeAllowedMimeTypes,
normalizeAllowedVideoExtensions,
normalizeForbiddenFileExtensions,
parseLoginRateMax,
parseLoginRateWindowMinutes,
parseUploadMaxFileSizeMb,
@@ -52,6 +62,11 @@ interface SettingsPatchBody {
allowedRefererHosts?: unknown
siteBaseUrl?: unknown
imageBaseUrl?: unknown
videoBaseUrl?: unknown
fileBaseUrl?: unknown
imageDomainSeparated?: unknown
videoDomainSeparated?: unknown
fileDomainSeparated?: unknown
domainSeparation?: unknown
hideFolderInUrl?: unknown
storageUseDatePath?: unknown
@@ -64,6 +79,8 @@ interface SettingsPatchBody {
capSecret?: unknown
uploadMaxFileSizeMb?: unknown
allowedMimeTypes?: unknown
allowedVideoExtensions?: unknown
forbiddenFileExtensions?: unknown
uploadRateIpMax?: unknown
uploadRateTokenMax?: unknown
uploadRateWindowMinutes?: unknown
@@ -109,8 +126,18 @@ export default defineEventHandler(async (event) => {
const existingSite = normalizeSiteBaseUrl(getSetting(SETTINGS_SITE_BASE_URL) ?? '')
const existingImage = normalizeImageBaseUrl(getSetting(SETTINGS_IMAGE_BASE_URL) ?? '')
const existingVideo = normalizeVideoBaseUrl(getSetting(SETTINGS_VIDEO_BASE_URL) ?? '')
const existingFile = normalizeFileBaseUrl(getSetting(SETTINGS_FILE_BASE_URL) ?? '')
const existingImageSeparated = getSetting(SETTINGS_IMAGE_DOMAIN_SEPARATED) === 'true'
const existingVideoSeparated = getSetting(SETTINGS_VIDEO_DOMAIN_SEPARATED) === 'true'
const existingFileSeparated = getSetting(SETTINGS_FILE_DOMAIN_SEPARATED) === 'true'
let nextSite = existingSite
let nextImage = existingImage
let nextVideo = existingVideo
let nextFile = existingFile
let nextImageSeparated = existingImageSeparated
let nextVideoSeparated = existingVideoSeparated
let nextFileSeparated = existingFileSeparated
if (body.siteBaseUrl !== undefined) {
const configured = normalizeSiteBaseUrl(
@@ -142,6 +169,36 @@ export default defineEventHandler(async (event) => {
nextImage = configured
}
if (body.videoBaseUrl !== undefined) {
const configured = normalizeVideoBaseUrl(
typeof body.videoBaseUrl === 'string' ? body.videoBaseUrl : ''
)
if (configured && !isValidImageBaseUrl(configured)) {
createApiError(event, 'INVALID_REQUEST', '视频域名需为 http(s) 地址，且末尾不加 /', 400)
}
nextVideo = configured
}
if (body.fileBaseUrl !== undefined) {
const configured = normalizeFileBaseUrl(
typeof body.fileBaseUrl === 'string' ? body.fileBaseUrl : ''
)
if (configured && !isValidImageBaseUrl(configured)) {
createApiError(event, 'INVALID_REQUEST', '文件域名需为 http(s) 地址，且末尾不加 /', 400)
}
nextFile = configured
}
if (body.imageDomainSeparated !== undefined) {
nextImageSeparated = Boolean(body.imageDomainSeparated)
}
if (body.videoDomainSeparated !== undefined) {
nextVideoSeparated = Boolean(body.videoDomainSeparated)
}
if (body.fileDomainSeparated !== undefined) {
nextFileSeparated = Boolean(body.fileDomainSeparated)
}
const domainSeparationProvided = body.domainSeparation !== undefined
const wantSeparation = domainSeparationProvided
? Boolean(body.domainSeparation)
@@ -150,19 +207,38 @@ export default defineEventHandler(async (event) => {
const patchError = validateSettingsDomainPatch({
existingSite,
existingImage,
existingVideo,
existingFile,
nextSite,
nextImage,
nextVideo,
nextFile,
wantSeparation,
siteBaseUrlProvided: body.siteBaseUrl !== undefined
})
if (patchError) {
createApiError(event, 'INVALID_REQUEST', patchError, 400)
}
if (wantSeparation === true) {
if (nextImageSeparated && !nextImage) {
createApiError(event, 'INVALID_REQUEST', '开启图片独立域名时必须填写图片域名', 400)
}
if (nextVideoSeparated && !nextVideo) {
createApiError(event, 'INVALID_REQUEST', '开启视频独立域名时必须填写视频域名', 400)
}
if (nextFileSeparated && !nextFile) {
createApiError(event, 'INVALID_REQUEST', '开启文件独立域名时必须填写文件域名', 400)
}
}
if (wantSeparation === false) {
nextSite = ''
}
if (body.domainSeparation !== undefined) {
setSetting(SETTINGS_DOMAIN_SEPARATION, wantSeparation ? 'true' : 'false')
}
if (body.siteBaseUrl !== undefined || body.domainSeparation !== undefined) {
setSetting(SETTINGS_SITE_BASE_URL, nextSite)
}
@@ -170,6 +246,21 @@ export default defineEventHandler(async (event) => {
if (body.imageBaseUrl !== undefined) {
setSetting(SETTINGS_IMAGE_BASE_URL, nextImage)
}
if (body.videoBaseUrl !== undefined || body.domainSeparation !== undefined) {
setSetting(SETTINGS_VIDEO_BASE_URL, nextVideo)
}
if (body.fileBaseUrl !== undefined || body.domainSeparation !== undefined) {
setSetting(SETTINGS_FILE_BASE_URL, nextFile)
}
if (body.imageDomainSeparated !== undefined) {
setSetting(SETTINGS_IMAGE_DOMAIN_SEPARATED, nextImageSeparated ? 'true' : 'false')
}
if (body.videoDomainSeparated !== undefined) {
setSetting(SETTINGS_VIDEO_DOMAIN_SEPARATED, nextVideoSeparated ? 'true' : 'false')
}
if (body.fileDomainSeparated !== undefined) {
setSetting(SETTINGS_FILE_DOMAIN_SEPARATED, nextFileSeparated ? 'true' : 'false')
}
if (body.autoDeleteDays !== undefined) {
const days = parseAutoDeleteDays(String(body.autoDeleteDays))
@@ -289,6 +380,26 @@ export default defineEventHandler(async (event) => {
setUploadPolicySettings({ allowedMimeTypes: normalized })
}
if (body.allowedVideoExtensions !== undefined) {
const raw = Array.isArray(body.allowedVideoExtensions)
? body.allowedVideoExtensions.map(item => String(item))
: String(body.allowedVideoExtensions).split(',')
const normalized = normalizeAllowedVideoExtensions(raw.join(','))
if (normalized.length === 0) {
createApiError(event, 'INVALID_REQUEST', '至少选择一种允许上传的视频格式', 400)
}
setUploadPolicySettings({ allowedVideoExtensions: normalized })
}
if (body.forbiddenFileExtensions !== undefined) {
const raw = Array.isArray(body.forbiddenFileExtensions)
? body.forbiddenFileExtensions.map(item => String(item))
: String(body.forbiddenFileExtensions).split(',')
setUploadPolicySettings({
forbiddenFileExtensions: normalizeForbiddenFileExtensions(raw.join(','))
})
}
if (body.uploadRateIpMax !== undefined) {
const value = parseUploadRateIpMax(String(body.uploadRateIpMax))
if (value === null) {
server/api/setup.post.ts
+32 -2
View File
@@ -4,10 +4,23 @@ import {
createUserAccount,
isInitialized
} from '../utils/auth'
import { setAllowRegistration, setSetting, SETTINGS_IMAGE_BASE_URL, SETTINGS_SITE_BASE_URL } from '../utils/db'
import {
setAllowRegistration,
setSetting,
SETTINGS_IMAGE_BASE_URL,
SETTINGS_SITE_BASE_URL,
SETTINGS_VIDEO_BASE_URL,
SETTINGS_FILE_BASE_URL,
SETTINGS_DOMAIN_SEPARATION,
SETTINGS_IMAGE_DOMAIN_SEPARATED,
SETTINGS_VIDEO_DOMAIN_SEPARATED,
SETTINGS_FILE_DOMAIN_SEPARATED
} from '../utils/db'
import {
normalizeFileBaseUrl,
normalizeImageBaseUrl,
normalizeSiteBaseUrl,
normalizeVideoBaseUrl,
validateDomainSeparationPair
} from '../utils/env'
import { clientIp, logInfo } from '../utils/logger'
@@ -19,6 +32,8 @@ interface SetupBody {
domainSeparation?: boolean
siteBaseUrl?: string
imageBaseUrl?: string
videoBaseUrl?: string
fileBaseUrl?: string
}
export default defineEventHandler(async (event) => {
@@ -42,12 +57,27 @@ export default defineEventHandler(async (event) => {
if (body?.domainSeparation) {
const siteBaseUrl = normalizeSiteBaseUrl(body.siteBaseUrl ?? '')
const imageBaseUrl = normalizeImageBaseUrl(body.imageBaseUrl ?? '')
const pairError = validateDomainSeparationPair(siteBaseUrl, imageBaseUrl)
const videoBaseUrl = normalizeVideoBaseUrl(body.videoBaseUrl ?? '')
const fileBaseUrl = normalizeFileBaseUrl(body.fileBaseUrl ?? '')
const pairError = validateDomainSeparationPair(
siteBaseUrl,
imageBaseUrl,
videoBaseUrl,
fileBaseUrl
)
if (pairError) {
createApiError(event, 'INVALID_REQUEST', pairError, 400)
}
setSetting(SETTINGS_SITE_BASE_URL, siteBaseUrl)
setSetting(SETTINGS_IMAGE_BASE_URL, imageBaseUrl)
setSetting(SETTINGS_VIDEO_BASE_URL, videoBaseUrl)
setSetting(SETTINGS_FILE_BASE_URL, fileBaseUrl)
setSetting(SETTINGS_DOMAIN_SEPARATION, 'true')
setSetting(SETTINGS_IMAGE_DOMAIN_SEPARATED, imageBaseUrl ? 'true' : 'false')
setSetting(SETTINGS_VIDEO_DOMAIN_SEPARATED, videoBaseUrl ? 'true' : 'false')
setSetting(SETTINGS_FILE_DOMAIN_SEPARATED, fileBaseUrl ? 'true' : 'false')
} else {
setSetting(SETTINGS_DOMAIN_SEPARATION, 'false')
}
await createSession(event, user.id)
server/api/upload-policy.get.ts
+14
View File
@@ -0,0 +1,14 @@
import {
getAllowedMimeTypesList,
getAllowedVideoExtensions,
getForbiddenFileExtensions
} from '../utils/upload-policy'
export default defineEventHandler((event) => {
setResponseHeader(event, 'Cache-Control', 'no-store')
return {
allowedMimeTypes: getAllowedMimeTypesList(),
allowedVideoExtensions: getAllowedVideoExtensions(),
forbiddenFileExtensions: getForbiddenFileExtensions()
}
})
server/api/user/api-token.get.ts
+9 -1
View File
@@ -1,6 +1,12 @@
import { requireUserAuth } from '../../utils/access'
import { ensureUserApiToken } from '../../utils/db'
import { getImageBaseUrl, getSiteBaseUrl, isHideFolderInUrl } from '../../utils/env'
import {
getFileBaseUrl,
getImageBaseUrl,
getSiteBaseUrl,
getVideoBaseUrl,
isHideFolderInUrl
} from '../../utils/env'
export default defineEventHandler(async (event) => {
const user = await requireUserAuth(event)
@@ -15,6 +21,8 @@ export default defineEventHandler(async (event) => {
refererConfigured: false,
siteBaseUrl: getSiteBaseUrl(event),
imageBaseUrl: getImageBaseUrl(event),
videoBaseUrl: getVideoBaseUrl(event),
fileBaseUrl: getFileBaseUrl(event),
hideFolderInUrl: isHideFolderInUrl(event),
appVersion: config.appVersion as string
}