security:移除硬编码，使用env存储数据库等信息，增加.env.example示例环境配置文件

Author: RMA-MUN

DjangoUserService/.env.example

@@ -0,0 +1,21 @@
+# 环境配置
+
+# JWT 配置
+JWT_SECRET_KEY=YOUR_JWT_SECRET_KEY
+
+# 数据库配置
+DB_PORT=YOUR_DB_PORT
+DB_NAME=YOUR_DB_NAME
+DB_USER=YOUR_DB_USER
+DB_PASSWORD=YOUR_DB_PASSWORD
+DB_HOST=YOUR_DB_HOST
+
+# Celery 配置
+CELERY_BROKER_URL=YOUR_CELERY_BROKER_URL
+CELERY_RESULT_BACKEND=YOUR_CELERY_RESULT_BACKEND
+CELERY_TASK_TIME_LIMIT=YOUR_CELERY_TASK_TIME_LIMIT
+CELERY_TASK_SOFT_TIME_LIMIT=YOUR_CELERY_TASK_SOFT_TIME_LIMIT
+CELERY_RESULT_EXPIRES=YOUR_CELERY_RESULT_EXPIRES
+
+# redis 配置
+REDIS_CACHE_URL=YOUR_REDIS_CACHE_URL

DjangoUserService/DjangoUserService/settings.py

@@ -9,13 +9,15 @@
 For the full list of settings and their values, see
 https://docs.djangoproject.com/en/5.2/ref/settings/
 """
-
+import os
 from pathlib import Path
 
 import pymysql
+from dotenv import load_dotenv
+
 pymysql.install_as_MySQLdb()
 
-from celery import Celery
+load_dotenv()
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
@@ -25,7 +27,7 @@
 # See https://docs.djangoproject.com/en/5.2/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'MY_JWT_SECRET_KWY_FOR_USR_AND_I_JUST_WRITE_THIS'
+SECRET_KEY = os.getenv('JWT_SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
@@ -80,7 +82,6 @@
 
 WSGI_APPLICATION = 'DjangoUserService.wsgi.application'
 
-# settings.py
 # settings.py
 SWAGGER_SETTINGS = {
     'USE_SESSION_AUTH': False,
@@ -100,11 +101,11 @@
 DATABASES = {
     'default': {
         'ENGINE': 'django.db.backends.mysql',
-        'NAME': 'django_user_service',
-        'USER': 'root',
-        'PASSWORD': '060517',
-        'HOST': 'localhost',
-        'PORT': '3306',
+        'NAME': os.getenv('DB_NAME'),
+        'USER': os.getenv('DB_USER'),
+        'PASSWORD': os.getenv('DB_PASSWORD'),
+        'HOST': os.getenv('DB_HOST'),
+        'PORT': os.getenv('DB_PORT'),
         'OPTIONS': {
             'charset': 'utf8mb4',
             'use_unicode': True,
@@ -114,8 +115,8 @@
 }
 
 # Celery 配置
-CELERY_BROKER_URL = 'redis://127.0.0.1:6379/1'
-CELERY_RESULT_BACKEND = 'redis://127.0.0.1:6379/2'
+CELERY_BROKER_URL = os.getenv('CELERY_BROKER_URL')
+CELERY_RESULT_BACKEND = os.getenv('CELERY_RESULT_BACKEND')
 # 统一时区设置
 CELERY_TIMEZONE = 'Asia/Shanghai'
 # 启用UTC
@@ -145,7 +146,7 @@
 CACHES = {
     'default': {
         'BACKEND': 'django.core.cache.backends.redis.RedisCache',
-        'LOCATION': 'redis://127.0.0.1:6379/3',
+        'LOCATION': os.getenv('REDIS_CACHE_URL'),
     }
 }