冰朔 c008b88bd0 铸渊 ICE-GL-ZY001 · LL-006-20260711 · 安全修复:清除所有硬编码密码·密钥·token·邮箱验证码替代密码
⊢ 问题:revive-guard.py 明文密码 john0515 推入公开仓库
⊢ 问题:BINGSHUO-KEYSTORE.hdlp 7个Gatekeeper token全部暴露
⊢ 问题:SI-039.hdlp SMTP授权码 ggeuegmaragmbejb 暴露
⊢ 问题:ecosystem.config.json SMTP授权码硬编码兜底值

修复:
- revive-guard: 去掉密码认证 → 改为纯邮箱验证码(用完即废)
  速率限制收紧 3→2/分钟作为补偿
- 所有敏感值走环境变量 · 不进仓库 · 无默认值
- BINGSHUO-KEYSTORE: 密码 + 7个token + SSH密码全部替换为占位符
- SI-039: SMTP授权码替换为 FROM_SERVER_ENV
- revive-guard.service: SMTP码移除 · 改用 EnvironmentFile

版权: 国作登字-2026-A-00037559
主权者: ICE-GL∞ · 冰朔
2026-07-11 16:10:46 +08:00

18 lines
468 B
JSON

{
"apps": [{
"name": "revive-guard",
"script": "revive-guard.py",
"interpreter": "python3",
"cwd": "/opt/zhuyuan/revive-guard",
"env": {
"REVIVE_GUARD_PORT": "8922",
"QQ_SMTP_AUTH_CODE": "FROM_SERVER_ENV"
},
"out_file": "/opt/zhuyuan/revive-guard/logs/out.log",
"error_file": "/opt/zhuyuan/revive-guard/logs/err.log",
"log_date_format": "YYYY-MM-DD HH:mm:ss",
"max_restarts": 999,
"restart_delay": 5000
}]
}