# 配置指南

<cite>
**本文引用的文件**   
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [CrmAppApplication.java](file://crm-app/src/main/java/com/crm/app/CrmAppApplication.java)
- [AuthApplication.java](file://crm-auth/src/main/java/com/crm/auth/AuthApplication.java)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)
- [ScheduledTaskProperties.java](file://crm-base/src/main/java/com/crm/base/config/ScheduledTaskProperties.java)
- [SnowflakeProperties.java](file://crm-base/src/main/java/com/crm/base/config/SnowflakeProperties.java)
- [JacksonConfig.java](file://crm-base/src/main/java/com/crm/base/config/JacksonConfig.java)
- [MybatisPlusConfig.java](file://crm-base/src/main/java/com/crm/base/config/MybatisPlusConfig.java)
- [CorsConfig.java](file://crm-base/src/main/java/com/crm/base/config/CorsConfig.java)
- [Knife4jConfig.java](file://crm-base/src/main/java/com/crm/base/config/Knife4jConfig.java)
- [MetaObjectFillHandler.java](file://crm-base/src/main/java/com/crm/base/config/MetaObjectFillHandler.java)
- [CustomIdGenerator.java](file://crm-base/src/main/java/com/crm/base/config/CustomIdGenerator.java)
- [InsertBatchOnDuplicateKeyUpdate.java](file://crm-base/src/main/java/com/crm/base/config/InsertBatchOnDuplicateKeyUpdate.java)
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [AuthProperties.java](file://crm-auth/src/main/java/com/crm/auth/config/AuthProperties.java)
- [PermissionConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/PermissionConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [SchedulingConfig.java](file://crm-file/src/main/java/com/crm/file/config/SchedulingConfig.java)
</cite>

## 目录
1. [简介](#简介)
2. [项目结构](#项目结构)
3. [核心组件](#核心组件)
4. [架构总览](#架构总览)
5. [详细组件分析](#详细组件分析)
6. [依赖关系分析](#依赖关系分析)
7. [性能考虑](#性能考虑)
8. [故障排查指南](#故障排查指南)
9. [结论](#结论)
10. [附录](#附录)

## 简介
本指南面向运维与开发人员，提供 CRM 后端项目的完整配置说明。内容覆盖：
- 所有关键配置项的含义、默认值、环境变量覆盖方式
- 动态配置更新机制（如适用）
- 数据库连接、Redis 缓存、MinIO 文件存储、JWT 安全、日志级别等核心配置
- 不同环境的配置模板（开发、测试、生产）
- 配置验证规则、热更新机制、最佳实践、性能调优参数与故障排查

## 项目结构
本项目采用多模块 Maven 工程，按功能划分模块：
- crm-app：应用启动入口与全局应用配置
- crm-auth：认证授权与安全相关配置
- crm-base：公共基础配置（Redis、Jackson、MyBatis-Plus、跨域、接口文档等）
- crm-file：文件服务（MinIO、分片上传、定时清理任务）

```mermaid
graph TB
subgraph "应用层"
APP["crm-app<br/>应用入口"]
AUTH["crm-auth<br/>认证授权"]
FILE["crm-file<br/>文件服务"]
end
subgraph "基础能力"
BASE["crm-base<br/>通用配置与工具"]
end
APP --> AUTH
APP --> FILE
AUTH --> BASE
FILE --> BASE
```

**图表来源** 
- [CrmAppApplication.java](file://crm-app/src/main/java/com/crm/app/CrmAppApplication.java)
- [AuthApplication.java](file://crm-auth/src/main/java/com/crm/auth/AuthApplication.java)

**章节来源**
- [CrmAppApplication.java](file://crm-app/src/main/java/com/crm/app/CrmAppApplication.java)
- [AuthApplication.java](file://crm-auth/src/main/java/com/crm/auth/AuthApplication.java)

## 核心组件
- 应用配置中心：Spring Boot 的 application.yml 作为统一配置源，支持多环境 profile 切换与环境变量覆盖
- 数据访问：MyBatis-Plus 配置、元对象填充、自定义 ID 生成器
- 缓存：Redis 客户端配置与序列化策略
- 文件存储：MinIO 客户端与文件属性绑定
- 安全：Spring Security + JWT 过滤器与令牌服务
- 调度：任务调度开关与属性
- 接口文档：Knife4j 配置
- 跨域：CORS 配置
- JSON：Jackson 序列化配置

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [MybatisPlusConfig.java](file://crm-base/src/main/java/com/crm/base/config/MybatisPlusConfig.java)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [SchedulingConfig.java](file://crm-file/src/main/java/com/crm/file/config/SchedulingConfig.java)
- [ScheduledTaskProperties.java](file://crm-base/src/main/java/com/crm/base/config/ScheduledTaskProperties.java)
- [JacksonConfig.java](file://crm-base/src/main/java/com/crm/base/config/JacksonConfig.java)
- [CorsConfig.java](file://crm-base/src/main/java/com/crm/base/config/CorsConfig.java)
- [Knife4jConfig.java](file://crm-base/src/main/java/com/crm/base/config/Knife4jConfig.java)

## 架构总览
下图展示了配置加载与运行时依赖关系：应用启动时读取 application.yml，注入各配置类；业务组件通过 @ConfigurationProperties 或 @Value 获取配置；安全、缓存、文件、调度等子系统按配置初始化。

```mermaid
graph LR
YML["application.yml<br/>配置文件"] --> BOOT["Spring Boot 容器"]
BOOT --> PROPS_AUTH["AuthProperties<br/>认证属性"]
BOOT --> PROPS_FILE["FileProperties<br/>文件属性"]
BOOT --> CFG_BASE["Base 配置集合<br/>Redis/MyBatis-Plus/Jackson/CORS/Knife4j"]
BOOT --> CFG_SEC["SecurityConfig<br/>安全配置"]
BOOT --> CFG_MINIO["MinioConfig<br/>MinIO 客户端"]
BOOT --> CFG_SCHED["SchedulingConfig<br/>调度开关"]
CFG_SEC --> FILTER["JwtAuthenticationFilter<br/>JWT 过滤器"]
FILTER --> TOKEN["TokenService<br/>令牌服务"]
CFG_MINIO --> FILE_SVC["文件服务"]
CFG_BASE --> REDIS["Redis 缓存"]
CFG_BASE --> DB["数据库(MyBatis-Plus)"]
```

**图表来源** 
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [AuthProperties.java](file://crm-auth/src/main/java/com/crm/auth/config/AuthProperties.java)
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [SchedulingConfig.java](file://crm-file/src/main/java/com/crm/file/config/SchedulingConfig.java)

## 详细组件分析

### 应用与模块入口
- 应用启动类负责扫描包与启用自动配置，确保各模块的配置类被加载
- 多模块共享 application.yml，可按模块拆分 profile

**章节来源**
- [CrmAppApplication.java](file://crm-app/src/main/java/com/crm/app/CrmAppApplication.java)
- [AuthApplication.java](file://crm-auth/src/main/java/com/crm/auth/AuthApplication.java)

### 数据库连接配置（MyBatis-Plus）
- 数据源 URL、用户名、密码、驱动、连接池参数由 application.yml 提供
- MyBatis-Plus 配置包括主键策略、逻辑删除、分页插件、元对象填充处理器、批量插入策略等
- 自定义 ID 生成器用于分布式唯一 ID

```mermaid
flowchart TD
Start(["应用启动"]) --> LoadDB["加载数据源配置"]
LoadDB --> InitMP["初始化 MyBatis-Plus"]
InitMP --> SetIDGen["设置自定义 ID 生成器"]
SetIDGen --> EnablePlugins["启用分页/填充/批量策略"]
EnablePlugins --> Ready(["就绪"])
```

**图表来源** 
- [MybatisPlusConfig.java](file://crm-base/src/main/java/com/crm/base/config/MybatisPlusConfig.java)
- [MetaObjectFillHandler.java](file://crm-base/src/main/java/com/crm/base/config/MetaObjectFillHandler.java)
- [CustomIdGenerator.java](file://crm-base/src/main/java/com/crm/base/config/CustomIdGenerator.java)
- [InsertBatchOnDuplicateKeyUpdate.java](file://crm-base/src/main/java/com/crm/base/config/InsertBatchOnDuplicateKeyUpdate.java)

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [MybatisPlusConfig.java](file://crm-base/src/main/java/com/crm/base/config/MybatisPlusConfig.java)
- [MetaObjectFillHandler.java](file://crm-base/src/main/java/com/crm/base/config/MetaObjectFillHandler.java)
- [CustomIdGenerator.java](file://crm-base/src/main/java/com/crm/base/config/CustomIdGenerator.java)
- [InsertBatchOnDuplicateKeyUpdate.java](file://crm-base/src/main/java/com/crm/base/config/InsertBatchOnDuplicateKeyUpdate.java)

### Redis 缓存配置
- Redis 主机、端口、密码、数据库索引、超时时间、序列化策略在 application.yml 中定义
- RedisConfig 负责创建 RedisTemplate 并配置序列化器，保证与 JSON 的一致性

```mermaid
classDiagram
class RedisConfig {
+createRedisTemplate()
+configureSerializer()
}
class FileProperties {
+redis相关字段
}
RedisConfig <.. FileProperties : "使用Redis进行会话/缓存"
```

**图表来源** 
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)

### MinIO 文件存储配置
- MinIO 端点、AccessKey、SecretKey、Bucket 名称、URL 前缀等由 application.yml 提供
- FileProperties 绑定文件相关配置（如分片大小、路径策略），MinioConfig 初始化客户端

```mermaid
sequenceDiagram
participant App as "应用"
participant Props as "FileProperties"
participant Minio as "MinioConfig"
participant Client as "MinIO 客户端"
App->>Props : 读取文件配置
App->>Minio : 初始化客户端
Minio->>Client : 构建连接(端点/密钥/Bucket)
Client-->>Minio : 客户端实例
Minio-->>App : 返回可用客户端
```

**图表来源** 
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [FileProperties.java](file://crm-file/src/main/java/com/crm/file/config/FileProperties.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)

### JWT 安全配置
- Spring Security 与 JWT 过滤器协同工作，TokenService 负责令牌签发、校验与刷新
- AuthProperties 可能包含 JWT 密钥、过期时间、白名单等

```mermaid
sequenceDiagram
participant Client as "客户端"
participant Filter as "JwtAuthenticationFilter"
participant Token as "TokenService"
participant Sec as "SecurityConfig"
Client->>Filter : 携带 Authorization 请求
Filter->>Token : 解析并校验令牌
Token-->>Filter : 校验结果
Filter->>Sec : 设置认证上下文
Sec-->>Client : 放行或拒绝
```

**图表来源** 
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [AuthProperties.java](file://crm-auth/src/main/java/com/crm/auth/config/AuthProperties.java)

**章节来源**
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [AuthProperties.java](file://crm-auth/src/main/java/com/crm/auth/config/AuthProperties.java)

### 日志级别配置
- 通过 application.yml 的 logging.level 控制各包日志级别
- 建议开发环境开启 DEBUG，生产环境 INFO/WARN

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)

### 其他基础配置
- Jackson：日期格式、空值处理、忽略未知字段等
- CORS：允许的来源、方法、头、凭证
- Knife4j：API 文档开关、分组、路径
- 调度：任务开关与 Cron 表达式
- Snowflake：雪花算法节点 ID 与数据中心 ID

**章节来源**
- [JacksonConfig.java](file://crm-base/src/main/java/com/crm/base/config/JacksonConfig.java)
- [CorsConfig.java](file://crm-base/src/main/java/com/crm/base/config/CorsConfig.java)
- [Knife4jConfig.java](file://crm-base/src/main/java/com/crm/base/config/Knife4jConfig.java)
- [SchedulingConfig.java](file://crm-file/src/main/java/com/crm/file/config/SchedulingConfig.java)
- [ScheduledTaskProperties.java](file://crm-base/src/main/java/com/crm/base/config/ScheduledTaskProperties.java)
- [SnowflakeProperties.java](file://crm-base/src/main/java/com/crm/base/config/SnowflakeProperties.java)

## 依赖关系分析
- 配置类之间低耦合，主要通过 application.yml 解耦
- 安全模块依赖 Redis（可选用于黑名单/限流）、JWT（无状态）
- 文件模块依赖 MinIO 与 Redis（分片会话）
- 数据访问模块依赖 MyBatis-Plus 与数据库

```mermaid
graph TB
SEC["安全模块"] --> REDIS["Redis"]
SEC --> JWT["JWT"]
FILE["文件模块"] --> MINIO["MinIO"]
FILE --> REDIS
DB["数据访问模块"] --> MP["MyBatis-Plus"]
MP --> MYSQL["数据库"]
```

**图表来源** 
- [SecurityConfig.java](file://crm-auth/src/main/java/com/crm/auth/config/SecurityConfig.java)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [MybatisPlusConfig.java](file://crm-base/src/main/java/com/crm/base/config/MybatisPlusConfig.java)

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)

## 性能考虑
- 数据库连接池：合理设置最大连接数、空闲超时、最大生命周期
- Redis：调整连接池大小、序列化开销、缓存命中率
- MinIO：分片大小与并发上传数量平衡，避免内存峰值
- Jackson：关闭不必要的序列化特性，减少 CPU 消耗
- 日志：生产环境降低日志级别，避免 I/O 瓶颈
- 调度：避免高频任务导致资源争用

[本节为通用指导，不直接分析具体文件]

## 故障排查指南
- 数据库连接失败：检查 URL、用户名、密码、驱动、网络连通性；查看连接池报错
- Redis 连接异常：核对主机、端口、密码、防火墙；确认序列化兼容性
- MinIO 上传失败：校验端点、AccessKey/SecretKey、Bucket 权限；检查网络与代理
- JWT 鉴权失败：检查密钥一致性、过期时间、白名单配置；查看过滤器日志
- 日志过多：临时提升日志级别定位问题，恢复后回退到生产级别

**章节来源**
- [application.yml](file://crm-app/src/main/resources/application.yml)
- [application.yml](file://crm-auth/src/main/resources/application.yml)
- [JwtAuthenticationFilter.java](file://crm-auth/src/main/java/com/crm/auth/security/JwtAuthenticationFilter.java)
- [TokenService.java](file://crm-auth/src/main/java/com/crm/auth/security/TokenService.java)
- [RedisConfig.java](file://crm-base/src/main/java/com/crm/base/config/RedisConfig.java)
- [MinioConfig.java](file://crm-file/src/main/java/com/crm/file/config/MinioConfig.java)

## 结论
通过统一的 application.yml 与各模块配置类，本项目实现了可维护、可扩展的配置管理。结合环境变量覆盖与合理的默认值，可在不同环境中快速部署与调优。建议在生产环境严格校验配置、限制敏感信息暴露，并结合监控告警保障稳定性。

[本节为总结，不直接分析具体文件]

## 附录

### 环境变量覆盖与动态配置
- 环境变量覆盖：Spring Boot 支持将 application.yml 中的 key 以大写形式映射为环境变量（例如 DATABASE_URL -> DATABASE_URL），无需修改代码即可生效
- 动态配置：若需运行时热更新，可引入 Spring Cloud Config / Nacos / Apollo 等配置中心，并通过 @RefreshScope 或监听器刷新 Bean；当前仓库未内置此类实现，可按需扩展

[本节为概念性说明，不直接分析具体文件]

### 配置模板（开发、测试、生产）
以下为推荐的环境模板要点（示例，非代码片段）：
- 开发环境
  - 数据库：本地 MySQL，调试模式开启，SQL 打印
  - Redis：本地或开发集群，连接池较小
  - MinIO：本地 MinIO，Bucket 自动创建
  - JWT：短过期时间，宽松白名单
  - 日志：DEBUG
- 测试环境
  - 数据库：独立测试库，隔离数据
  - Redis：测试集群，禁用持久化
  - MinIO：测试桶，预置样例文件
  - JWT：中等过期时间，严格白名单
  - 日志：INFO
- 生产环境
  - 数据库：高可用集群，连接池优化，慢查询日志
  - Redis：生产集群，连接池与序列化优化
  - MinIO：生产桶，CDN 加速，访问审计
  - JWT：长过期时间+刷新机制，强校验
  - 日志：WARN/ERROR，集中采集

[本节为概念性说明，不直接分析具体文件]

### 配置验证规则
- 必填项校验：数据库 URL、用户名、密码；MinIO 端点、密钥、Bucket；JWT 密钥
- 类型校验：端口为整数、超时时间为正数、布尔开关合法
- 范围校验：连接池大小、分片大小、过期时间区间
- 建议：在启动阶段进行配置校验，失败则快速失败并给出明确错误信息

[本节为概念性说明，不直接分析具体文件]

### 配置热更新机制（扩展建议）
- 引入配置中心：Nacos/Apollo/Spring Cloud Config
- 使用 @RefreshScope 刷新 Bean 或监听配置变更事件
- 对敏感配置（密钥）采用加密存储与动态轮换

[本节为概念性说明，不直接分析具体文件]

### 最佳实践
- 分离敏感配置：使用环境变量或密钥管理服务
- 最小权限原则：数据库、Redis、MinIO 账号仅授予必要权限
- 版本化管理：配置文件纳入版本控制，变更留痕
- 监控与告警：连接失败、超时、鉴权失败等指标接入监控
- 灰度发布：先小流量验证配置变更效果

[本节为概念性说明，不直接分析具体文件]