{"id":87122,"date":"2026-07-29T20:40:28","date_gmt":"2026-07-29T12:40:28","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/87122.html"},"modified":"2026-07-29T20:40:28","modified_gmt":"2026-07-29T12:40:28","slug":"%e4%bc%81%e4%b8%9a%e7%ba%a7%e9%a1%b9%e7%9b%ae-env-%e9%85%8d%e7%bd%ae%e5%ae%89%e5%85%a8%ef%bc%9a%e4%bb%8e-env-%e5%88%b0-ai-%e9%a1%b9%e7%9b%ae%e5%af%86%e9%92%a5%e6%b2%bb%e7%90%86","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/87122.html","title":{"rendered":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406"},"content":{"rendered":"<h2>\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168&#xff1a;\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406<\/h2>\n<h3>1. \u5f15\u8a00&#xff1a;\u4e3a\u4ec0\u4e48\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e0d\u80fd\u968f\u610f\u7ba1\u7406 .env<\/h3>\n<p>\u5728\u4e2a\u4eba\u9879\u76ee\u6216\u8bfe\u7a0b Demo \u4e2d&#xff0c;\u5f88\u591a\u4eba\u4f1a\u628a\u914d\u7f6e\u5199\u8fdb .env&#xff0c;\u518d\u901a\u8fc7 dotenv\u3001\u6846\u67b6\u914d\u7f6e\u7cfb\u7edf\u6216\u8fd0\u884c\u73af\u5883\u8bfb\u53d6\u3002\u8fd9\u6837\u505a\u5728\u672c\u5730\u5f00\u53d1\u9636\u6bb5\u5f88\u65b9\u4fbf&#xff1a;\u53d8\u91cf\u96c6\u4e2d\u3001\u4fee\u6539\u7b80\u5355\u3001\u4e0d\u4f1a\u628a\u914d\u7f6e\u786c\u7f16\u7801\u8fdb\u4e1a\u52a1\u4ee3\u7801\u3002<\/p>\n<p>\u4f46\u5728\u771f\u6b63\u7684\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e2d&#xff0c;.env \u7edd\u4e0d\u80fd\u53ea\u88ab\u7406\u89e3\u6210\u201c\u653e\u914d\u7f6e\u7684\u6587\u4ef6\u201d\u3002\u4f01\u4e1a\u5173\u6ce8\u7684\u4e0d\u662f\u201c\u7a0b\u5e8f\u80fd\u4e0d\u80fd\u8bfb\u5230\u53d8\u91cf\u201d&#xff0c;\u800c\u662f\u4ee5\u4e0b\u95ee\u9898&#xff1a;<\/p>\n<ul>\n<li>\u8c01\u80fd\u770b\u5230\u8fd9\u4e9b\u914d\u7f6e&#xff1f;<\/li>\n<li>\u54ea\u4e9b\u914d\u7f6e\u662f\u666e\u901a\u914d\u7f6e&#xff0c;\u54ea\u4e9b\u662f\u654f\u611f\u5bc6\u94a5&#xff1f;<\/li>\n<li>\u5f00\u53d1\u3001\u6d4b\u8bd5\u3001\u9884\u53d1\u3001\u751f\u4ea7\u662f\u5426\u4e25\u683c\u9694\u79bb&#xff1f;<\/li>\n<li>\u5bc6\u94a5\u6cc4\u9732\u540e\u80fd\u5426\u5feb\u901f\u540a\u9500\u548c\u8f6e\u6362&#xff1f;<\/li>\n<li>\u8c01\u5728\u4ec0\u4e48\u65f6\u5019\u4fee\u6539\u8fc7\u914d\u7f6e&#xff0c;\u662f\u5426\u53ef\u5ba1\u8ba1&#xff1f;<\/li>\n<li>CI\/CD\u3001\u65e5\u5fd7\u3001Docker \u955c\u50cf\u3001\u6784\u5efa\u4ea7\u7269\u4e2d\u662f\u5426\u4f1a\u610f\u5916\u6cc4\u9732\u5bc6\u94a5&#xff1f;<\/li>\n<li>AI \u9879\u76ee\u4e2d prompt\u3001completion\u3001embedding\u3001RAG \u6570\u636e\u3001\u5de5\u5177\u8c03\u7528\u65e5\u5fd7\u662f\u5426\u4e5f\u4f1a\u643a\u5e26\u654f\u611f\u4fe1\u606f&#xff1f;<\/li>\n<\/ul>\n<p>\u6240\u4ee5&#xff0c;\u4f01\u4e1a\u7ea7 .env \u914d\u7f6e\u5b89\u5168\u7684\u6838\u5fc3\u4e0d\u662f\u201c\u628a\u53d8\u91cf\u653e\u5728\u54ea\u91cc\u201d&#xff0c;\u800c\u662f\u5efa\u7acb\u4e00\u5957\u56f4\u7ed5\u914d\u7f6e\u548c\u5bc6\u94a5\u7684\u6cbb\u7406\u4f53\u7cfb&#xff1a;\u5206\u7c7b\u3001\u9694\u79bb\u3001\u6ce8\u5165\u3001\u6821\u9a8c\u3001\u5ba1\u8ba1\u3001\u8f6e\u6362\u3001\u5e94\u6025\u54cd\u5e94\u3002<\/p>\n<p>\u914d\u7f6e\u6cc4\u9732\u7684\u5f71\u54cd\u4e5f\u5f80\u5f80\u4e0d\u662f\u5c0f\u95ee\u9898\u3002\u6570\u636e\u5e93\u8fde\u63a5\u4e32\u6cc4\u9732\u53ef\u80fd\u5bfc\u81f4\u62d6\u5e93&#xff0c;\u4e91\u5382\u5546 AK\/SK \u6cc4\u9732\u53ef\u80fd\u5bfc\u81f4\u8d44\u6e90\u88ab\u76d7\u5237&#xff0c;\u7b2c\u4e09\u65b9 API Key \u6cc4\u9732\u53ef\u80fd\u5bfc\u81f4\u63a5\u53e3\u88ab\u6ee5\u7528&#xff0c;AI \u9879\u76ee\u7684\u6a21\u578b Key \u6cc4\u9732\u8fd8\u53ef\u80fd\u9020\u6210\u9ad8\u989d token \u8d39\u7528\u3001\u5ba2\u6237\u6570\u636e\u5916\u6cc4\u548c\u5408\u89c4\u98ce\u9669\u3002<\/p>\n<h3>2. \u57fa\u7840\u6982\u5ff5&#xff1a;\u914d\u7f6e\u3001\u73af\u5883\u53d8\u91cf\u3001\u5bc6\u94a5\u4e0d\u662f\u4e00\u56de\u4e8b<\/h3>\n<p>\u5f88\u591a\u521d\u5b66\u8005\u4f1a\u628a\u201c\u914d\u7f6e\u201d\u201c\u73af\u5883\u53d8\u91cf\u201d\u201c.env\u201d\u201cSecret\u201d\u6df7\u4e3a\u4e00\u8c08&#xff0c;\u4f46\u4f01\u4e1a\u5f00\u53d1\u4e2d\u5fc5\u987b\u533a\u5206\u5b83\u4eec\u3002<\/p>\n<h4>2.1 \u914d\u7f6e Configuration<\/h4>\n<p>\u914d\u7f6e\u662f\u5f71\u54cd\u7a0b\u5e8f\u884c\u4e3a\u7684\u53c2\u6570&#xff0c;\u4f8b\u5982&#xff1a;<\/p>\n<ul>\n<li>\u670d\u52a1\u7aef\u53e3&#xff1a;PORT&#061;3000<\/li>\n<li>\u65e5\u5fd7\u7ea7\u522b&#xff1a;LOG_LEVEL&#061;info<\/li>\n<li>\u5f53\u524d\u8fd0\u884c\u73af\u5883&#xff1a;APP_ENV&#061;production<\/li>\n<li>\u8bf7\u6c42\u8d85\u65f6\u65f6\u95f4&#xff1a;REQUEST_TIMEOUT_MS&#061;10000<\/li>\n<li>\u662f\u5426\u5f00\u542f\u67d0\u4e2a\u529f\u80fd&#xff1a;FEATURE_X_ENABLED&#061;false<\/li>\n<\/ul>\n<p>\u914d\u7f6e\u4e0d\u4e00\u5b9a\u654f\u611f\u3002\u6bd4\u5982\u7aef\u53e3\u53f7\u901a\u5e38\u4e0d\u662f\u5bc6\u94a5&#xff0c;\u4f46\u9519\u8bef\u914d\u7f6e\u4ecd\u53ef\u80fd\u5bfc\u81f4\u7ebf\u4e0a\u4e8b\u6545\u3002<\/p>\n<h4>2.2 \u73af\u5883\u53d8\u91cf Environment Variable<\/h4>\n<p>\u73af\u5883\u53d8\u91cf\u662f\u5411\u7a0b\u5e8f\u6ce8\u5165\u914d\u7f6e\u7684\u4e00\u79cd\u65b9\u5f0f\u3002\u7a0b\u5e8f\u542f\u52a8\u65f6\u53ef\u4ee5\u4ece\u64cd\u4f5c\u7cfb\u7edf\u8fdb\u7a0b\u73af\u5883\u4e2d\u8bfb\u53d6\u53d8\u91cf&#xff0c;\u4f8b\u5982 Node.js \u4e2d\u7684 process.env.PORT\u3002<\/p>\n<p>\u73af\u5883\u53d8\u91cf\u672c\u8eab\u4e0d\u662f\u5b89\u5168\u673a\u5236\u3002\u5b83\u53ea\u662f\u4f20\u9012\u914d\u7f6e\u7684\u901a\u9053\u3002\u53d8\u91cf\u662f\u5426\u5b89\u5168&#xff0c;\u53d6\u51b3\u4e8e&#xff1a;<\/p>\n<ul>\n<li>\u503c\u662f\u5426\u654f\u611f\u3002<\/li>\n<li>\u8c01\u80fd\u8bfb\u53d6\u8fd0\u884c\u73af\u5883\u3002<\/li>\n<li>\u662f\u5426\u88ab\u5199\u5165\u65e5\u5fd7\u3001\u6784\u5efa\u4ea7\u7269\u6216\u955c\u50cf\u5c42\u3002<\/li>\n<li>\u662f\u5426\u6709\u8bbf\u95ee\u63a7\u5236\u3001\u5ba1\u8ba1\u548c\u8f6e\u6362\u673a\u5236\u3002<\/li>\n<\/ul>\n<h4>2.3 Secret \/ \u5bc6\u94a5<\/h4>\n<p>Secret \u662f\u5177\u6709\u8bbf\u95ee\u80fd\u529b\u7684\u654f\u611f\u503c&#xff0c;\u4f8b\u5982&#xff1a;<\/p>\n<ul>\n<li>\u6570\u636e\u5e93\u5bc6\u7801&#xff1a;DB_PASSWORD<\/li>\n<li>\u6570\u636e\u5e93\u8fde\u63a5\u4e32&#xff1a;DATABASE_URL<\/li>\n<li>JWT \u7b7e\u540d\u5bc6\u94a5&#xff1a;JWT_SECRET<\/li>\n<li>\u7b2c\u4e09\u65b9\u5e73\u53f0 API Key&#xff1a;PAYMENT_API_KEY<\/li>\n<li>\u4e91\u5382\u5546 AK\/SK&#xff1a;CLOUD_ACCESS_KEY_ID\u3001CLOUD_SECRET_ACCESS_KEY<\/li>\n<li>LLM Provider API Key&#xff1a;LLM_API_KEY<\/li>\n<li>Vector DB Token&#xff1a;VECTOR_DB_API_KEY<\/li>\n<\/ul>\n<p>Secret \u4e00\u65e6\u6cc4\u9732&#xff0c;\u653b\u51fb\u8005\u53ef\u80fd\u76f4\u63a5\u8bbf\u95ee\u6570\u636e\u3001\u8c03\u7528\u63a5\u53e3\u3001\u4f2a\u9020\u8eab\u4efd\u6216\u6d88\u8017\u8d44\u6e90\u3002<\/p>\n<h4>2.4 .env<\/h4>\n<p>.env \u662f\u4e00\u79cd\u5e38\u89c1\u7684\u672c\u5730\u5f00\u53d1\u914d\u7f6e\u6587\u4ef6\u683c\u5f0f\u3002\u5b83\u9002\u5408\u672c\u5730\u5feb\u901f\u542f\u52a8\u9879\u76ee&#xff0c;\u4f46\u4e0d\u7b49\u4e8e\u4f01\u4e1a\u7ea7 Secret \u7ba1\u7406\u7cfb\u7edf\u3002<\/p>\n<p>\u4f01\u4e1a\u4e2d\u53ef\u4ee5\u4f7f\u7528 .env.example \u5e2e\u52a9\u5f00\u53d1\u8005\u4e86\u89e3\u53d8\u91cf\u6e05\u5355&#xff0c;\u4f46\u771f\u5b9e\u503c\u901a\u5e38\u5e94\u7531 Secret Manager\u3001Vault\u3001KMS\u3001CI Secrets\u3001Kubernetes Secret \u6216\u914d\u7f6e\u4e2d\u5fc3\u5728\u8fd0\u884c\u65f6\u6ce8\u5165\u3002<\/p>\n<table>\n<tr>\u7c7b\u578b\u793a\u4f8b\u662f\u5426\u654f\u611f\u63a8\u8350\u7ba1\u7406\u65b9\u5f0f<\/tr>\n<tbody>\n<tr>\n<td>\u666e\u901a\u914d\u7f6e<\/td>\n<td>APP_ENV\u3001PORT\u3001LOG_LEVEL<\/td>\n<td>\u901a\u5e38\u4e0d\u654f\u611f<\/td>\n<td>\u914d\u7f6e\u6587\u4ef6\u3001\u73af\u5883\u53d8\u91cf\u3001\u914d\u7f6e\u4e2d\u5fc3<\/td>\n<\/tr>\n<tr>\n<td>\u534a\u654f\u611f\u914d\u7f6e<\/td>\n<td>INTERNAL_API_BASE_URL<\/td>\n<td>\u89c6\u60c5\u51b5\u800c\u5b9a<\/td>\n<td>\u73af\u5883\u9694\u79bb\u3001\u8bbf\u95ee\u63a7\u5236<\/td>\n<\/tr>\n<tr>\n<td>Secret<\/td>\n<td>DB_PASSWORD\u3001JWT_SECRET\u3001API_KEY<\/td>\n<td>\u654f\u611f<\/td>\n<td>Secret Manager \/ Vault \/ CI Secret<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>3. \u4f01\u4e1a\u7ea7 .env \/ Secret \u7ba1\u7406\u6838\u5fc3\u539f\u5219<\/h3>\n<h4>3.1 \u6c38\u8fdc\u4e0d\u8981\u63d0\u4ea4\u771f\u5b9e .env<\/h4>\n<p>\u771f\u5b9e .env \u6587\u4ef6\u901a\u5e38\u5305\u542b\u6570\u636e\u5e93\u5bc6\u7801\u3001Token\u3001\u79c1\u94a5\u3001\u5185\u90e8\u670d\u52a1\u5730\u5740\u7b49\u5185\u5bb9\u3002\u4e00\u65e6\u63d0\u4ea4\u5230 Git&#xff0c;\u5373\u4f7f\u540e\u6765\u5220\u9664&#xff0c;\u5386\u53f2\u8bb0\u5f55\u4e2d\u4ecd\u53ef\u80fd\u4fdd\u7559\u6cc4\u9732\u526f\u672c\u3002<\/p>\n<p>\u6b63\u786e\u505a\u6cd5\u662f&#xff1a;<\/p>\n<ul>\n<li>\u4ed3\u5e93\u63d0\u4ea4 .env.example \u6216 .env.template\u3002<\/li>\n<li>\u672c\u5730\u5f00\u53d1\u8005\u81ea\u884c\u521b\u5efa .env.local\u3002<\/li>\n<li>\u751f\u4ea7\u3001\u9884\u53d1\u3001\u6d4b\u8bd5\u73af\u5883\u7684\u771f\u5b9e\u5bc6\u94a5\u7531\u5e73\u53f0\u6ce8\u5165\u3002<\/li>\n<li>\u4f7f\u7528 Git secret scanning\u3001pre-commit hook \u6216 CI \u626b\u63cf\u963b\u6b62\u5bc6\u94a5\u8fdb\u5165\u4ed3\u5e93\u3002<\/li>\n<\/ul>\n<h4>3.2 \u4e0d\u540c\u73af\u5883\u5fc5\u987b\u9694\u79bb<\/h4>\n<p>\u4f01\u4e1a\u9879\u76ee\u901a\u5e38\u81f3\u5c11\u533a\u5206\u4ee5\u4e0b\u73af\u5883&#xff1a;<\/p>\n<table>\n<tr>\u73af\u5883\u7528\u9014\u914d\u7f6e\u8981\u6c42<\/tr>\n<tbody>\n<tr>\n<td>local<\/td>\n<td>\u5f00\u53d1\u8005\u672c\u673a<\/td>\n<td>\u53ef\u4ee5\u4f7f\u7528\u672c\u5730 .env.local&#xff0c;\u4e0d\u80fd\u590d\u7528\u751f\u4ea7\u5bc6\u94a5<\/td>\n<\/tr>\n<tr>\n<td>development<\/td>\n<td>\u8054\u8c03\u73af\u5883<\/td>\n<td>\u4f7f\u7528\u5f00\u53d1\u73af\u5883\u6570\u636e\u5e93\u548c\u4f4e\u6743\u9650\u5bc6\u94a5<\/td>\n<\/tr>\n<tr>\n<td>test<\/td>\n<td>\u81ea\u52a8\u5316\u6d4b\u8bd5<\/td>\n<td>\u4f7f\u7528\u6d4b\u8bd5\u4e13\u7528\u8d44\u6e90&#xff0c;\u6570\u636e\u53ef\u91cd\u7f6e<\/td>\n<\/tr>\n<tr>\n<td>staging<\/td>\n<td>\u9884\u53d1\u73af\u5883<\/td>\n<td>\u5c3d\u91cf\u63a5\u8fd1\u751f\u4ea7&#xff0c;\u4f46\u5bc6\u94a5\u4ecd\u5e94\u72ec\u7acb<\/td>\n<\/tr>\n<tr>\n<td>production<\/td>\n<td>\u751f\u4ea7\u73af\u5883<\/td>\n<td>\u6700\u9ad8\u5b89\u5168\u8981\u6c42&#xff0c;\u5fc5\u987b\u5ba1\u8ba1\u3001\u8f6e\u6362\u3001\u6700\u5c0f\u6743\u9650<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4f4e\u73af\u5883\u6cc4\u9732\u4e0d\u5e94\u8be5\u5f71\u54cd\u751f\u4ea7\u3002\u56e0\u6b64&#xff0c;\u4e0d\u8981\u8ba9 local\u3001dev\u3001test\u3001staging\u3001production \u5171\u7528\u540c\u4e00\u7ec4\u6570\u636e\u5e93\u5bc6\u7801\u3001JWT \u5bc6\u94a5\u6216\u7b2c\u4e09\u65b9 API Key\u3002<\/p>\n<h4>3.3 \u6700\u5c0f\u6743\u9650<\/h4>\n<p>\u6700\u5c0f\u6743\u9650\u539f\u5219\u8981\u6c42&#xff1a;\u4e00\u4e2a\u670d\u52a1\u53ea\u62ff\u81ea\u5df1\u771f\u6b63\u9700\u8981\u7684\u5bc6\u94a5\u3002<\/p>\n<p>\u4f8b\u5982&#xff0c;\u4e00\u4e2a\u8ba2\u5355\u670d\u52a1\u53ef\u80fd\u9700\u8981\u652f\u4ed8\u63a5\u53e3 Key&#xff0c;\u4f46\u4e0d\u5e94\u8be5\u62e5\u6709\u7528\u6237\u4e2d\u5fc3\u6570\u636e\u5e93\u7684\u7ba1\u7406\u5458\u5bc6\u7801\u3002\u4e00\u4e2a\u53ea\u8d1f\u8d23\u5411\u91cf\u68c0\u7d22\u7684\u670d\u52a1\u9700\u8981\u8bfb\u53d6\u5411\u91cf\u5e93&#xff0c;\u4f46\u4e0d\u5e94\u8be5\u62e5\u6709\u5220\u9664\u6574\u4e2a\u7d22\u5f15\u7684\u7ba1\u7406\u5458\u6743\u9650\u3002<\/p>\n<p>\u4f01\u4e1a\u4e2d\u5e38\u89c1\u62c6\u5206\u65b9\u5f0f\u5305\u62ec&#xff1a;<\/p>\n<ul>\n<li>\u6309\u670d\u52a1\u62c6\u5206\u5bc6\u94a5\u3002<\/li>\n<li>\u6309\u73af\u5883\u62c6\u5206\u5bc6\u94a5\u3002<\/li>\n<li>\u6309\u7528\u9014\u62c6\u5206\u5bc6\u94a5\u3002<\/li>\n<li>\u6309\u79df\u6237\u62c6\u5206\u5bc6\u94a5\u3002<\/li>\n<li>\u4f7f\u7528\u670d\u52a1\u8d26\u53f7\u800c\u4e0d\u662f\u4e2a\u4eba\u8d26\u53f7\u3002<\/li>\n<\/ul>\n<h4>3.4 \u5bc6\u94a5\u5fc5\u987b\u53ef\u8f6e\u6362\u3001\u53ef\u540a\u9500\u3001\u53ef\u5ba1\u8ba1<\/h4>\n<p>\u5982\u679c\u4e00\u4e2a\u5bc6\u94a5\u6cc4\u9732\u540e\u65e0\u6cd5\u5feb\u901f\u540a\u9500&#xff0c;\u6216\u8005\u4e0d\u77e5\u9053\u54ea\u4e9b\u670d\u52a1\u4f7f\u7528\u5b83&#xff0c;\u8fd9\u5c31\u662f\u6cbb\u7406\u5931\u8d25\u3002<\/p>\n<p>\u4f01\u4e1a\u7ea7 Secret \u7ba1\u7406\u81f3\u5c11\u5e94\u8be5\u56de\u7b54&#xff1a;<\/p>\n<ul>\n<li>\u8c01\u521b\u5efa\u4e86\u8fd9\u4e2a\u5bc6\u94a5&#xff1f;<\/li>\n<li>\u54ea\u4e9b\u670d\u52a1\u80fd\u8bfb\u53d6\u5b83&#xff1f;<\/li>\n<li>\u5b83\u4ec0\u4e48\u65f6\u5019\u88ab\u8bfb\u53d6\u8fc7&#xff1f;<\/li>\n<li>\u5b83\u591a\u4e45\u8f6e\u6362\u4e00\u6b21&#xff1f;<\/li>\n<li>\u6cc4\u9732\u540e\u5982\u4f55\u540a\u9500&#xff1f;<\/li>\n<li>\u65b0\u65e7\u5bc6\u94a5\u5982\u4f55\u5e73\u6ed1\u5207\u6362&#xff1f;<\/li>\n<\/ul>\n<h4>3.5 \u5bc6\u94a5\u503c\u4e0d\u8fdb\u5165 Git\u3001\u65e5\u5fd7\u3001\u955c\u50cf\u5c42\u548c\u5236\u54c1<\/h4>\n<p>\u5bc6\u94a5\u4e0d\u5e94\u8be5\u51fa\u73b0\u5728&#xff1a;<\/p>\n<ul>\n<li>Git \u4ed3\u5e93\u548c Git \u5386\u53f2\u3002<\/li>\n<li>CI\/CD \u65e5\u5fd7\u3002<\/li>\n<li>Dockerfile\u3002<\/li>\n<li>Docker \u955c\u50cf\u5c42\u3002<\/li>\n<li>\u524d\u7aef\u6784\u5efa\u4ea7\u7269\u3002<\/li>\n<li>\u9519\u8bef\u5806\u6808\u548c\u65e5\u5fd7\u5e73\u53f0\u3002<\/li>\n<li>\u5de5\u5355\u3001\u804a\u5929\u8bb0\u5f55\u3001\u622a\u56fe\u3001\u6587\u6863\u3002<\/li>\n<li>AI prompt\u3001completion \u548c\u8c03\u8bd5\u8ffd\u8e2a\u4e2d\u3002<\/li>\n<\/ul>\n<h3>4. \u63a8\u8350\u4ed3\u5e93\u7ed3\u6784\u4e0e .env.example \u793a\u4f8b<\/h3>\n<p>\u4f01\u4e1a\u9879\u76ee\u4e2d&#xff0c;\u4ed3\u5e93\u91cc\u5e94\u8be5\u63d0\u4ea4\u201c\u53d8\u91cf\u6e05\u5355\u201d\u548c\u201c\u5b89\u5168\u5360\u4f4d\u7b26\u201d&#xff0c;\u800c\u4e0d\u662f\u63d0\u4ea4\u771f\u5b9e\u503c\u3002<\/p>\n<p>\u63a8\u8350\u7ed3\u6784\u5982\u4e0b&#xff1a;<\/p>\n<p>project-root\/<br \/>\n\u251c\u2500 .env.example          # \u53ef\u63d0\u4ea4&#xff0c;\u53ea\u653e\u53d8\u91cf\u540d\u548c\u5b89\u5168\u5360\u4f4d\u7b26<br \/>\n\u251c\u2500 .env.local            # \u672c\u5730\u4e2a\u4eba\u914d\u7f6e&#xff0c;\u4e0d\u63d0\u4ea4<br \/>\n\u251c\u2500 .gitignore<br \/>\n\u251c\u2500 src\/<br \/>\n\u2514\u2500 README.md<\/p>\n<p>\u63a8\u8350 .gitignore&#xff1a;<\/p>\n<p>.env<br \/>\n.env.*<br \/>\n!.env.example<br \/>\n!.env.test.example<\/p>\n<p>\u8fd9\u6bb5\u89c4\u5219\u7684\u542b\u4e49\u662f&#xff1a;<\/p>\n<ul>\n<li>\u5ffd\u7565 .env\u3002<\/li>\n<li>\u5ffd\u7565 .env.local\u3001.env.production\u3001.env.staging \u7b49\u771f\u5b9e\u914d\u7f6e\u6587\u4ef6\u3002<\/li>\n<li>\u5141\u8bb8\u63d0\u4ea4 .env.example \u548c .env.test.example \u8fd9\u7c7b\u5b89\u5168\u6a21\u677f\u3002<\/li>\n<\/ul>\n<p>\u793a\u4f8b .env.example&#xff1a;<\/p>\n<p>APP_ENV&#061;local<br \/>\nPORT&#061;3000<br \/>\nLOG_LEVEL&#061;info<\/p>\n<p>DATABASE_URL&#061;__SET_IN_SECRET_MANAGER__<br \/>\nREDIS_URL&#061;__SET_IN_SECRET_MANAGER__<br \/>\nJWT_SECRET&#061;__SET_IN_SECRET_MANAGER__<\/p>\n<p>THIRD_PARTY_API_BASE_URL&#061;https:\/\/api.example.com<br \/>\nTHIRD_PARTY_API_KEY&#061;__SET_IN_SECRET_MANAGER__<\/p>\n<p>.env.example \u7684\u4ef7\u503c\u662f\u8ba9\u65b0\u4eba\u77e5\u9053\u9879\u76ee\u542f\u52a8\u9700\u8981\u54ea\u4e9b\u53d8\u91cf&#xff0c;\u800c\u4e0d\u662f\u544a\u8bc9\u4ed6\u771f\u5b9e\u5bc6\u94a5\u662f\u4ec0\u4e48\u3002\u771f\u5b9e\u503c\u5e94\u901a\u8fc7\u672c\u5730\u5b89\u5168\u6e20\u9053\u3001\u4f01\u4e1a Secret Manager\u3001CI Secret \u6216\u8fd0\u884c\u5e73\u53f0\u6ce8\u5165\u3002<\/p>\n<p>\u9700\u8981\u6ce8\u610f&#xff1a;\u524d\u7aef\u9879\u76ee\u4e2d\u4ee5 PUBLIC_\u3001NEXT_PUBLIC_\u3001VITE_ \u7b49\u524d\u7f00\u66b4\u9732\u7684\u53d8\u91cf\u901a\u5e38\u4f1a\u8fdb\u5165\u6d4f\u89c8\u5668\u6784\u5efa\u4ea7\u7269&#xff0c;\u56e0\u6b64\u4e0d\u80fd\u653e\u4efb\u4f55\u5bc6\u94a5\u3002<\/p>\n<p>\u9519\u8bef\u793a\u4f8b&#xff1a;<\/p>\n<p>VITE_PAYMENT_SECRET_KEY&#061;__DO_NOT_PUT_SECRET_IN_FRONTEND__<\/p>\n<p>\u6b63\u786e\u601d\u8def\u662f&#xff1a;\u524d\u7aef\u53ea\u6301\u6709\u516c\u5f00\u914d\u7f6e&#xff0c;\u771f\u6b63\u7684\u5bc6\u94a5\u7531\u540e\u7aef\u670d\u52a1\u4fdd\u5b58\u548c\u8c03\u7528\u3002<\/p>\n<h3>5. \u5e94\u7528\u542f\u52a8\u65f6\u7684\u914d\u7f6e\u6821\u9a8c<\/h3>\n<p>\u4f01\u4e1a\u9879\u76ee\u4e0d\u80fd\u7b49\u7ebf\u4e0a\u6d41\u91cf\u8fdb\u6765\u540e\u624d\u53d1\u73b0\u914d\u7f6e\u7f3a\u5931\u3002\u914d\u7f6e\u9519\u8bef\u5e94\u8be5\u5728\u5e94\u7528\u542f\u52a8\u9636\u6bb5\u5c31\u5931\u8d25&#xff0c;\u4e5f\u5c31\u662f fail fast\u3002<\/p>\n<p>\u4ee5 TypeScript &#043; Zod \u4e3a\u4f8b&#xff0c;\u53ef\u4ee5\u628a\u73af\u5883\u53d8\u91cf\u96c6\u4e2d\u6821\u9a8c&#xff1a;<\/p>\n<p><span class=\"token keyword\">import<\/span> <span class=\"token punctuation\">{<\/span> z <span class=\"token punctuation\">}<\/span> <span class=\"token keyword\">from<\/span> <span class=\"token string\">&#034;zod&#034;<\/span><\/p>\n<p><span class=\"token keyword\">const<\/span> envSchema <span class=\"token operator\">&#061;<\/span> z<span class=\"token punctuation\">.<\/span><span class=\"token function\">object<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token constant\">APP_ENV<\/span><span class=\"token operator\">:<\/span> z<span class=\"token punctuation\">.<\/span><span class=\"token function\">enum<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;local&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;development&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;test&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;staging&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;production&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token constant\">PORT<\/span><span class=\"token operator\">:<\/span> z<span class=\"token punctuation\">.<\/span>coerce<span class=\"token punctuation\">.<\/span><span class=\"token function\">number<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">int<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">positive<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">default<\/span><span class=\"token punctuation\">(<\/span><span class=\"token number\">3000<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token constant\">DATABASE_URL<\/span><span class=\"token operator\">:<\/span> z<span class=\"token punctuation\">.<\/span><span class=\"token function\">string<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">min<\/span><span class=\"token punctuation\">(<\/span><span class=\"token number\">1<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token constant\">JWT_SECRET<\/span><span class=\"token operator\">:<\/span> z<span class=\"token punctuation\">.<\/span><span class=\"token function\">string<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">min<\/span><span class=\"token punctuation\">(<\/span><span class=\"token number\">32<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token constant\">LOG_LEVEL<\/span><span class=\"token operator\">:<\/span> z<span class=\"token punctuation\">.<\/span><span class=\"token function\">enum<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;debug&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;info&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;warn&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;error&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">default<\/span><span class=\"token punctuation\">(<\/span><span class=\"token string\">&#034;info&#034;<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p><span class=\"token keyword\">export<\/span> <span class=\"token keyword\">const<\/span> env <span class=\"token operator\">&#061;<\/span> envSchema<span class=\"token punctuation\">.<\/span><span class=\"token function\">parse<\/span><span class=\"token punctuation\">(<\/span>process<span class=\"token punctuation\">.<\/span>env<span class=\"token punctuation\">)<\/span><\/p>\n<p>\u7136\u540e\u4e1a\u52a1\u4ee3\u7801\u7edf\u4e00\u4ece env \u5bf9\u8c61\u8bfb\u53d6\u914d\u7f6e&#xff0c;\u800c\u4e0d\u662f\u5230\u5904\u76f4\u63a5\u8bbf\u95ee process.env&#xff1a;<\/p>\n<p><span class=\"token keyword\">import<\/span> <span class=\"token punctuation\">{<\/span> env <span class=\"token punctuation\">}<\/span> <span class=\"token keyword\">from<\/span> <span class=\"token string\">&#034;.\/env&#034;<\/span><\/p>\n<p>app<span class=\"token punctuation\">.<\/span><span class=\"token function\">listen<\/span><span class=\"token punctuation\">(<\/span>env<span class=\"token punctuation\">.<\/span><span class=\"token constant\">PORT<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u8fd9\u6837\u505a\u6709\u51e0\u4e2a\u597d\u5904&#xff1a;<\/p>\n<ul>\n<li>\u5fc5\u586b\u53d8\u91cf\u7f3a\u5931\u65f6&#xff0c;\u670d\u52a1\u542f\u52a8\u7acb\u5373\u5931\u8d25\u3002<\/li>\n<li>\u53d8\u91cf\u7c7b\u578b\u96c6\u4e2d\u8f6c\u6362&#xff0c;\u4f8b\u5982\u628a\u5b57\u7b26\u4e32\u7aef\u53e3\u8f6c\u6362\u6210\u6570\u5b57\u3002<\/li>\n<li>\u751f\u4ea7\u73af\u5883\u4e0d\u4f1a\u610f\u5916\u4f7f\u7528\u5f31\u9ed8\u8ba4\u503c\u3002<\/li>\n<li>\u4e1a\u52a1\u4ee3\u7801\u4e0d\u9700\u8981\u53cd\u590d\u5904\u7406 undefined\u3002<\/li>\n<li>\u53d8\u91cf\u6e05\u5355\u53ef\u4ee5\u548c .env.example \u5bf9\u9f50\u3002<\/li>\n<\/ul>\n<p>\u66f4\u4e25\u683c\u7684\u4f01\u4e1a\u9879\u76ee\u8fd8\u4f1a\u533a\u5206\u4e0d\u540c\u73af\u5883\u7684\u6821\u9a8c\u89c4\u5219\u3002\u4f8b\u5982\u672c\u5730\u53ef\u4ee5\u5141\u8bb8\u67d0\u4e9b Mock \u914d\u7f6e&#xff0c;\u751f\u4ea7\u5fc5\u987b\u8981\u6c42\u771f\u5b9e Secret&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> parsedEnv <span class=\"token operator\">&#061;<\/span> envSchema<span class=\"token punctuation\">.<\/span><span class=\"token function\">parse<\/span><span class=\"token punctuation\">(<\/span>process<span class=\"token punctuation\">.<\/span>env<span class=\"token punctuation\">)<\/span><\/p>\n<p><span class=\"token keyword\">if<\/span> <span class=\"token punctuation\">(<\/span>parsedEnv<span class=\"token punctuation\">.<\/span><span class=\"token constant\">APP_ENV<\/span> <span class=\"token operator\">&#061;&#061;&#061;<\/span> <span class=\"token string\">&#034;production&#034;<\/span> <span class=\"token operator\">&amp;&amp;<\/span> parsedEnv<span class=\"token punctuation\">.<\/span><span class=\"token constant\">JWT_SECRET<\/span><span class=\"token punctuation\">.<\/span>length <span class=\"token operator\">&lt;<\/span> <span class=\"token number\">64<\/span><span class=\"token punctuation\">)<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token keyword\">throw<\/span> <span class=\"token keyword\">new<\/span> <span class=\"token class-name\">Error<\/span><span class=\"token punctuation\">(<\/span><span class=\"token string\">&#034;JWT_SECRET is too weak for production&#034;<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<p><span class=\"token keyword\">export<\/span> <span class=\"token keyword\">const<\/span> env <span class=\"token operator\">&#061;<\/span> parsedEnv<\/p>\n<p>\u8fd9\u91cc\u8981\u6ce8\u610f&#xff1a;\u542f\u52a8\u9519\u8bef\u53ef\u4ee5\u63d0\u793a\u201c\u54ea\u4e2a\u53d8\u91cf\u7f3a\u5931\u6216\u4e0d\u5408\u6cd5\u201d&#xff0c;\u4f46\u4e0d\u8981\u628a\u53d8\u91cf\u771f\u5b9e\u503c\u6253\u5370\u51fa\u6765\u3002<\/p>\n<h3>6. CI\/CD \u4e2d\u5982\u4f55\u5b89\u5168\u6ce8\u5165\u5bc6\u94a5<\/h3>\n<p>\u4f01\u4e1a\u6d41\u6c34\u7ebf\u4e2d&#xff0c;\u5bc6\u94a5\u4e0d\u5e94\u8be5\u5199\u8fdb YAML \u6587\u4ef6\u672c\u8eab&#xff0c;\u800c\u5e94\u8be5\u4fdd\u5b58\u5728 CI\/CD \u5e73\u53f0\u7684 Secrets \u914d\u7f6e\u533a\u3002Pipeline \u8fd0\u884c\u65f6\u518d\u4e34\u65f6\u6ce8\u5165\u4e3a\u73af\u5883\u53d8\u91cf\u3002<\/p>\n<p>\u901a\u7528 CI\/CD \u793a\u4f8b&#xff1a;<\/p>\n<p><span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> deploy<\/p>\n<p><span class=\"token key atrule\">on<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">push<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">branches<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token punctuation\">[<\/span>main<span class=\"token punctuation\">]<\/span><\/p>\n<p><span class=\"token key atrule\">jobs<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">deploy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">runs-on<\/span><span class=\"token punctuation\">:<\/span> ubuntu<span class=\"token punctuation\">&#8211;<\/span>latest<br \/>\n    <span class=\"token key atrule\">env<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">APP_ENV<\/span><span class=\"token punctuation\">:<\/span> production<br \/>\n      <span class=\"token key atrule\">DATABASE_URL<\/span><span class=\"token punctuation\">:<\/span> $<span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">{<\/span> secrets.DATABASE_URL <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">}<\/span><br \/>\n      <span class=\"token key atrule\">JWT_SECRET<\/span><span class=\"token punctuation\">:<\/span> $<span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">{<\/span> secrets.JWT_SECRET <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">}<\/span><br \/>\n    <span class=\"token key atrule\">steps<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">uses<\/span><span class=\"token punctuation\">:<\/span> actions\/checkout&#064;v4<br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> npm ci<br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> npm test<br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> npm run build<\/p>\n<p>\u4e0d\u540c\u5e73\u53f0\u7684\u8bed\u6cd5\u4f1a\u6709\u5dee\u5f02&#xff0c;\u4f8b\u5982 GitHub Actions\u3001Gitee Actions\u3001GitLab CI\u3001Jenkins\u3001\u4e91\u5382\u5546\u6d41\u6c34\u7ebf\u90fd\u6709\u81ea\u5df1\u7684\u5199\u6cd5\u3002\u4f46\u6838\u5fc3\u601d\u60f3\u4e00\u81f4&#xff1a;<\/p>\n<ul>\n<li>Secret \u5b58\u5728\u5e73\u53f0\u5bc6\u94a5\u533a\u3002<\/li>\n<li>\u8fd0\u884c\u65f6\u6ce8\u5165\u3002<\/li>\n<li>\u4e0d\u63d0\u4ea4\u5230 Git\u3002<\/li>\n<li>\u4e0d\u8f93\u51fa\u5230\u65e5\u5fd7\u3002<\/li>\n<li>\u4e0d\u5199\u5165\u6784\u5efa\u4ea7\u7269\u3002<\/li>\n<\/ul>\n<p>CI\/CD \u4e2d\u5e38\u89c1\u5371\u9669\u5199\u6cd5\u5305\u62ec&#xff1a;<\/p>\n<p><span class=\"token key atrule\">steps<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> echo &#034;DATABASE_URL&#061;$DATABASE_URL&#034;<br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> docker build <span class=\"token punctuation\">&#8211;<\/span><span class=\"token punctuation\">&#8211;<\/span>build<span class=\"token punctuation\">&#8211;<\/span>arg JWT_SECRET&#061;$JWT_SECRET .<\/p>\n<p>\u7b2c\u4e00\u884c\u4f1a\u628a\u5bc6\u94a5\u6253\u5370\u8fdb\u65e5\u5fd7\u3002\u7b2c\u4e8c\u884c\u53ef\u80fd\u8ba9\u5bc6\u94a5\u8fdb\u5165\u6784\u5efa\u5386\u53f2\u6216\u955c\u50cf\u5c42\u3002<\/p>\n<p>\u66f4\u5b89\u5168\u7684\u601d\u8def\u662f&#xff1a;\u955c\u50cf\u6784\u5efa\u9636\u6bb5\u53ea\u6784\u5efa\u4ee3\u7801\u548c\u4f9d\u8d56&#xff0c;\u8fd0\u884c\u9636\u6bb5\u518d\u7531\u90e8\u7f72\u5e73\u53f0\u6ce8\u5165\u5bc6\u94a5\u3002<\/p>\n<p><span class=\"token key atrule\">steps<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> docker build <span class=\"token punctuation\">&#8211;<\/span>t your<span class=\"token punctuation\">&#8211;<\/span>service<span class=\"token punctuation\">:<\/span>$<span class=\"token punctuation\">{<\/span><span class=\"token punctuation\">{<\/span> github.sha <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">}<\/span> .<br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">run<\/span><span class=\"token punctuation\">:<\/span> npm run deploy<\/p>\n<p>\u5982\u679c\u786e\u5b9e\u9700\u8981\u5728\u90e8\u7f72\u547d\u4ee4\u4e2d\u4f7f\u7528\u5bc6\u94a5&#xff0c;\u4e5f\u8981\u786e\u8ba4\u5e73\u53f0\u65e5\u5fd7\u4f1a\u81ea\u52a8\u8131\u654f&#xff0c;\u5e76\u907f\u514d\u4f7f\u7528 set -x\u3001printenv\u3001env \u7b49\u4f1a\u6253\u5370\u5168\u90e8\u53d8\u91cf\u7684\u547d\u4ee4\u3002<\/p>\n<h3>7. Docker \/ Docker Compose \/ Kubernetes \u4e2d\u7684\u914d\u7f6e\u4e0e\u5bc6\u94a5<\/h3>\n<h4>7.1 Docker \u672c\u5730\u8fd0\u884c<\/h4>\n<p>\u672c\u5730\u5b66\u4e60\u6216\u5f00\u53d1\u65f6&#xff0c;\u53ef\u4ee5\u4f7f\u7528 &#8211;env-file&#xff1a;<\/p>\n<p>docker run &#8211;env-file .env.local your-service:local<\/p>\n<p>\u4f46\u751f\u4ea7\u73af\u5883\u4e0d\u5e94\u4f9d\u8d56\u5f00\u53d1\u8005\u624b\u52a8\u7ef4\u62a4\u7684 .env.production \u6587\u4ef6&#xff0c;\u800c\u5e94\u7531\u90e8\u7f72\u5e73\u53f0\u3001Secret Manager \u6216\u7f16\u6392\u7cfb\u7edf\u6ce8\u5165\u3002<\/p>\n<h4>7.2 Docker Compose<\/h4>\n<p>\u672c\u5730\u5f00\u53d1\u53ef\u4ee5\u4f7f\u7528 Compose \u7684 env_file&#xff1a;<\/p>\n<p><span class=\"token key atrule\">services<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">api<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> your<span class=\"token punctuation\">&#8211;<\/span>service<span class=\"token punctuation\">:<\/span>local<br \/>\n    <span class=\"token key atrule\">env_file<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> .env.local<br \/>\n    <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;3000:3000&#034;<\/span><\/p>\n<p>\u8fd9\u9002\u5408\u672c\u5730\u5f00\u53d1&#xff0c;\u4f46\u4e0d\u4ee3\u8868\u751f\u4ea7\u5bc6\u94a5\u5df2\u7ecf\u88ab\u5b89\u5168\u6cbb\u7406\u3002\u751f\u4ea7\u73af\u5883\u4ecd\u5e94\u8003\u8651\u8bbf\u95ee\u63a7\u5236\u3001\u5ba1\u8ba1\u3001\u8f6e\u6362\u548c\u5e73\u53f0\u7ea7\u6ce8\u5165\u3002<\/p>\n<h4>7.3 Kubernetes<\/h4>\n<p>Kubernetes \u901a\u5e38\u7528 ConfigMap \u7ba1\u666e\u901a\u914d\u7f6e&#xff0c;\u7528 Secret \u7ba1\u654f\u611f\u914d\u7f6e\u3002<\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Secret<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> app<span class=\"token punctuation\">&#8211;<\/span>secrets<br \/>\n<span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> Opaque<br \/>\n<span class=\"token key atrule\">stringData<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">DATABASE_URL<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;__SET_IN_SECRET_MANAGER_OR_EXTERNAL_SECRET__&#034;<\/span><br \/>\n  <span class=\"token key atrule\">JWT_SECRET<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;__SET_IN_SECRET_MANAGER_OR_EXTERNAL_SECRET__&#034;<\/span><br \/>\n<span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> ConfigMap<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> app<span class=\"token punctuation\">&#8211;<\/span>config<br \/>\n<span class=\"token key atrule\">data<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">APP_ENV<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;production&#034;<\/span><br \/>\n  <span class=\"token key atrule\">LOG_LEVEL<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;info&#034;<\/span><\/p>\n<p>Pod \u4e2d\u5f15\u7528\u793a\u4f8b&#xff1a;<\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> apps\/v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Deployment<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> your<span class=\"token punctuation\">&#8211;<\/span>service<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">replicas<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">2<\/span><br \/>\n  <span class=\"token key atrule\">selector<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">matchLabels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> your<span class=\"token punctuation\">&#8211;<\/span>service<br \/>\n  <span class=\"token key atrule\">template<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> your<span class=\"token punctuation\">&#8211;<\/span>service<br \/>\n    <span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> api<br \/>\n          <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> your<span class=\"token punctuation\">&#8211;<\/span>service<span class=\"token punctuation\">:<\/span>__IMAGE_TAG__<br \/>\n          <span class=\"token key atrule\">envFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">configMapRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> app<span class=\"token punctuation\">&#8211;<\/span>config<br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">secretRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> app<span class=\"token punctuation\">&#8211;<\/span>secrets<\/p>\n<p>\u9700\u8981\u660e\u786e&#xff1a;Kubernetes Secret \u672c\u8eab\u4e0d\u662f\u4f01\u4e1a\u5bc6\u94a5\u6cbb\u7406\u7684\u7ec8\u70b9\u3002\u6210\u719f\u4f01\u4e1a\u8fd8\u4f1a\u5173\u6ce8&#xff1a;<\/p>\n<ul>\n<li>etcd \u52a0\u5bc6\u3002<\/li>\n<li>RBAC \u6700\u5c0f\u6743\u9650\u3002<\/li>\n<li>\u8c01\u80fd\u8bfb\u53d6 Secret\u3002<\/li>\n<li>Secret \u8bbf\u95ee\u5ba1\u8ba1\u3002<\/li>\n<li>\u5bc6\u94a5\u8f6e\u6362\u81ea\u52a8\u5316\u3002<\/li>\n<li>External Secrets\u3001Vault \u6216\u4e91\u5382\u5546 Secret Manager \u96c6\u6210\u3002<\/li>\n<\/ul>\n<h3>8. \u5bc6\u94a5\u751f\u547d\u5468\u671f&#xff1a;\u521b\u5efa\u3001\u5206\u53d1\u3001\u4f7f\u7528\u3001\u8f6e\u6362\u3001\u540a\u9500\u3001\u5ba1\u8ba1<\/h3>\n<p>\u4f01\u4e1a\u7ea7\u5bc6\u94a5\u7ba1\u7406\u5f3a\u8c03\u751f\u547d\u5468\u671f&#xff0c;\u800c\u4e0d\u662f\u53ea\u5f3a\u8c03\u4fdd\u5b58\u4f4d\u7f6e\u3002<\/p>\n<h4>8.1 \u521b\u5efa<\/h4>\n<p>\u751f\u4ea7\u5bc6\u94a5\u4e0d\u5e94\u8be5\u7531\u5f00\u53d1\u8005\u968f\u624b\u5728\u672c\u5730\u751f\u6210\u540e\u590d\u5236\u5230\u5404\u5904\u3002\u66f4\u63a8\u8350\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u521b\u5efa&#xff1a;<\/p>\n<ul>\n<li>\u4e91\u63a7\u5236\u53f0\u6216 Secret Manager\u3002<\/li>\n<li>Vault \/ KMS\u3002<\/li>\n<li>\u5b89\u5168\u56e2\u961f\u6279\u51c6\u7684\u670d\u52a1\u8d26\u53f7\u3002<\/li>\n<li>\u81ea\u52a8\u5316\u57fa\u7840\u8bbe\u65bd\u811a\u672c\u3002<\/li>\n<\/ul>\n<p>\u5bc6\u94a5\u547d\u540d\u4e5f\u5e94\u89c4\u8303&#xff0c;\u4f8b\u5982&#xff1a;<\/p>\n<p>your-service\/production\/database-url<br \/>\nyour-service\/production\/jwt-secret<br \/>\nyour-service\/staging\/llm-api-key<\/p>\n<h4>8.2 \u5206\u53d1<\/h4>\n<p>\u5bc6\u94a5\u5206\u53d1\u5e94\u8be5\u901a\u8fc7\u53d7\u63a7\u7cfb\u7edf\u5b8c\u6210&#xff0c;\u800c\u4e0d\u662f\u901a\u8fc7\u804a\u5929\u8f6f\u4ef6\u3001\u622a\u56fe\u3001\u90ae\u4ef6\u6216\u6587\u6863\u3002<\/p>\n<p>\u5e38\u89c1\u65b9\u5f0f\u5305\u62ec&#xff1a;<\/p>\n<ul>\n<li>CI\/CD Secret \u6ce8\u5165\u3002<\/li>\n<li>Secret Manager \u6309\u670d\u52a1\u8d26\u53f7\u6388\u6743\u8bfb\u53d6\u3002<\/li>\n<li>Kubernetes External Secrets \u540c\u6b65\u3002<\/li>\n<li>Vault Agent \u6ce8\u5165\u3002<\/li>\n<li>\u5e73\u53f0\u8fd0\u884c\u65f6\u73af\u5883\u53d8\u91cf\u6ce8\u5165\u3002<\/li>\n<\/ul>\n<h4>8.3 \u4f7f\u7528<\/h4>\n<p>\u5e94\u7528\u7a0b\u5e8f\u901a\u5e38\u53ea\u9700\u8981\u5728\u8fd0\u884c\u65f6\u8bfb\u53d6\u5bc6\u94a5&#xff0c;\u5e76\u5728\u5185\u5b58\u4e2d\u4f7f\u7528\u3002\u4e0d\u8981\u628a\u5bc6\u94a5\u5199\u5165\u4e34\u65f6\u6587\u4ef6\u3001\u65e5\u5fd7\u3001\u7f13\u5b58\u3001\u524d\u7aef\u9875\u9762\u6216\u9519\u8bef\u54cd\u5e94\u3002<\/p>\n<h4>8.4 \u8f6e\u6362<\/h4>\n<p>\u5bc6\u94a5\u8f6e\u6362\u5305\u62ec\u5b9a\u671f\u8f6e\u6362\u548c\u4e8b\u4ef6\u89e6\u53d1\u8f6e\u6362\u3002<\/p>\n<p>\u5e38\u89c1\u89e6\u53d1\u6761\u4ef6&#xff1a;<\/p>\n<ul>\n<li>\u4eba\u5458\u79bb\u804c\u6216\u6743\u9650\u8c03\u6574\u3002<\/li>\n<li>\u4f9b\u5e94\u5546\u5b89\u5168\u4e8b\u4ef6\u3002<\/li>\n<li>\u65e5\u5fd7\u8bef\u6253\u5370\u3002<\/li>\n<li>Git \u63d0\u4ea4\u6cc4\u9732\u3002<\/li>\n<li>CI\/CD \u65e5\u5fd7\u6cc4\u9732\u3002<\/li>\n<li>\u751f\u4ea7\u8bbf\u95ee\u5f02\u5e38\u3002<\/li>\n<\/ul>\n<p>\u5bf9\u4e8e\u6570\u636e\u5e93\u5bc6\u7801\u3001JWT \u5bc6\u94a5\u7b49\u6838\u5fc3 Secret&#xff0c;\u9700\u8981\u8bbe\u8ba1\u5e73\u6ed1\u8f6e\u6362\u7b56\u7565\u3002\u4f8b\u5982 JWT \u53ef\u4ee5\u652f\u6301\u4e00\u6bb5\u65f6\u95f4\u5185\u540c\u65f6\u9a8c\u8bc1\u65e7\u5bc6\u94a5\u548c\u65b0\u5bc6\u94a5&#xff0c;\u4f46\u53ea\u7528\u65b0\u5bc6\u94a5\u7b7e\u53d1\u65b0 token\u3002<\/p>\n<h4>8.5 \u540a\u9500<\/h4>\n<p>\u53d1\u73b0\u6cc4\u9732\u540e&#xff0c;\u7b2c\u4e00\u4f18\u5148\u7ea7\u4e0d\u662f\u201c\u5220\u9664\u6cc4\u9732\u6587\u4ef6\u201d&#xff0c;\u800c\u662f\u8ba9\u65e7\u5bc6\u94a5\u7acb\u5373\u5931\u6548\u3002\u56e0\u4e3a\u6cc4\u9732\u5185\u5bb9\u53ef\u80fd\u5df2\u7ecf\u88ab\u590d\u5236\u3001\u7f13\u5b58\u6216\u540c\u6b65\u5230\u5176\u4ed6\u5730\u65b9\u3002<\/p>\n<h4>8.6 \u5ba1\u8ba1<\/h4>\n<p>\u5ba1\u8ba1\u5173\u6ce8\u7684\u662f&#xff1a;<\/p>\n<ul>\n<li>\u8c01\u521b\u5efa\u4e86\u5bc6\u94a5\u3002<\/li>\n<li>\u8c01\u4fee\u6539\u4e86\u5bc6\u94a5\u3002<\/li>\n<li>\u54ea\u4e2a\u670d\u52a1\u8bfb\u53d6\u4e86\u5bc6\u94a5\u3002<\/li>\n<li>\u4ec0\u4e48\u65f6\u5019\u8bfb\u53d6\u3002<\/li>\n<li>\u662f\u5426\u51fa\u73b0\u5f02\u5e38\u8bfb\u53d6\u9891\u7387\u3002<\/li>\n<li>\u662f\u5426\u5b58\u5728\u8d8a\u6743\u8bbf\u95ee\u3002<\/li>\n<\/ul>\n<p>\u6cc4\u9732\u5e94\u6025\u6d41\u7a0b\u53ef\u4ee5\u8fd9\u6837\u8bbe\u8ba1&#xff1a;<\/p>\n<p>\u53d1\u73b0\u7591\u4f3c\u6cc4\u9732<br \/>\n  \u2192 \u7acb\u5373\u540a\u9500\u6216\u7981\u7528\u65e7\u5bc6\u94a5<br \/>\n  \u2192 \u751f\u6210\u65b0\u5bc6\u94a5\u5e76\u66f4\u65b0 Secret Manager<br \/>\n  \u2192 \u91cd\u65b0\u90e8\u7f72\u670d\u52a1<br \/>\n  \u2192 \u68c0\u67e5\u8bbf\u95ee\u65e5\u5fd7\u548c\u5f02\u5e38\u8d26\u5355<br \/>\n  \u2192 \u6e05\u7406 Git \u5386\u53f2 \/ CI \u65e5\u5fd7 \/ \u955c\u50cf\u5236\u54c1\u4e2d\u7684\u6cc4\u9732\u526f\u672c<br \/>\n  \u2192 \u590d\u76d8\u5e76\u8865\u5145\u626b\u63cf\u89c4\u5219<\/p>\n<h3>9. \u65e5\u5fd7\u4e0e\u9519\u8bef\u5904\u7406\u4e2d\u7684 Secret \u6cc4\u9732\u98ce\u9669<\/h3>\n<p>\u5f88\u591a\u5bc6\u94a5\u6cc4\u9732\u4e0d\u662f\u56e0\u4e3a\u5f00\u53d1\u8005\u4e3b\u52a8\u63d0\u4ea4 .env&#xff0c;\u800c\u662f\u56e0\u4e3a\u65e5\u5fd7\u3001\u62a5\u9519\u3001\u8c03\u8bd5\u5de5\u5177\u6216\u76d1\u63a7\u7cfb\u7edf\u8bb0\u5f55\u4e86\u654f\u611f\u503c\u3002<\/p>\n<p>\u9519\u8bef\u793a\u4f8b&#xff1a;<\/p>\n<p>logger<span class=\"token punctuation\">.<\/span><span class=\"token function\">error<\/span><span class=\"token punctuation\">(<\/span><span class=\"token string\">&#034;failed to connect database&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  databaseUrl<span class=\"token operator\">:<\/span> process<span class=\"token punctuation\">.<\/span>env<span class=\"token punctuation\">.<\/span><span class=\"token constant\">DATABASE_URL<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  error<br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u8fd9\u4f1a\u628a\u5b8c\u6574\u6570\u636e\u5e93\u8fde\u63a5\u4e32\u5199\u5165\u65e5\u5fd7\u3002\u8fde\u63a5\u4e32\u91cc\u53ef\u80fd\u5305\u542b\u7528\u6237\u540d\u3001\u5bc6\u7801\u3001\u4e3b\u673a\u3001\u5e93\u540d\u7b49\u4fe1\u606f\u3002<\/p>\n<p>\u66f4\u5b89\u5168\u7684\u505a\u6cd5\u662f\u53ea\u8bb0\u5f55\u6392\u969c\u6240\u9700\u7684\u975e\u654f\u611f\u5b57\u6bb5&#xff1a;<\/p>\n<p>logger<span class=\"token punctuation\">.<\/span><span class=\"token function\">error<\/span><span class=\"token punctuation\">(<\/span><span class=\"token string\">&#034;failed to connect database&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  host<span class=\"token operator\">:<\/span> <span class=\"token keyword\">new<\/span> <span class=\"token class-name\"><span class=\"token constant\">URL<\/span><\/span><span class=\"token punctuation\">(<\/span>process<span class=\"token punctuation\">.<\/span>env<span class=\"token punctuation\">.<\/span><span class=\"token constant\">DATABASE_URL<\/span><span class=\"token operator\">!<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span>hostname<span class=\"token punctuation\">,<\/span><br \/>\n  errorName<span class=\"token operator\">:<\/span> error <span class=\"token keyword\">instanceof<\/span> <span class=\"token class-name\">Error<\/span> <span class=\"token operator\">?<\/span> error<span class=\"token punctuation\">.<\/span>name <span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;UnknownError&#034;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u4f01\u4e1a\u9879\u76ee\u4e2d\u5efa\u8bae\u4f7f\u7528 allowlist \u601d\u8def&#xff1a;\u53ea\u5141\u8bb8\u660e\u786e\u5b89\u5168\u7684\u5b57\u6bb5\u8fdb\u5165\u65e5\u5fd7&#xff0c;\u800c\u4e0d\u662f\u628a\u6574\u4e2a\u5bf9\u8c61\u5c55\u5f00\u6253\u5370\u3002<\/p>\n<p>\u5371\u9669\u793a\u4f8b&#xff1a;<\/p>\n<p>logger<span class=\"token punctuation\">.<\/span><span class=\"token function\">info<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span> env<span class=\"token operator\">:<\/span> process<span class=\"token punctuation\">.<\/span>env <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><br \/>\nlogger<span class=\"token punctuation\">.<\/span><span class=\"token function\">error<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span> requestHeaders<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>headers <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><br \/>\nlogger<span class=\"token punctuation\">.<\/span><span class=\"token function\">debug<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span> config <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u66f4\u5b89\u5168\u7684\u8131\u654f\u793a\u4f8b&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> <span class=\"token constant\">SECRET_PATTERNS<\/span> <span class=\"token operator\">&#061;<\/span> <span class=\"token punctuation\">[<\/span><br \/>\n    <span class=\"token comment\">\/\/ \u89c4\u52191&#xff1a;\u5339\u914d Bearer Token&#xff0c;\u4f8b\u5982 Authorization: Bearer sk-xxxxxx<\/span><br \/>\n  <span class=\"token operator\">\/<\/span>Bearer\\\\s<span class=\"token operator\">&#043;<\/span><span class=\"token punctuation\">[<\/span><span class=\"token constant\">A<\/span><span class=\"token operator\">&#8211;<\/span>Za<span class=\"token operator\">&#8211;<\/span>z0<span class=\"token operator\">&#8211;<\/span><span class=\"token number\">9<\/span><span class=\"token punctuation\">.<\/span>_<span class=\"token operator\">&#8211;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token operator\">&#043;<\/span><span class=\"token operator\">\/<\/span>g<span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token regex\"><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-source language-regex\">(api[_-]?key|token|secret|password)&#061;([^&amp;\\\\s]&#043;)<\/span><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-flags\">gi<\/span><\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token regex\"><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-source language-regex\">(DATABASE_URL|REDIS_URL|JWT_SECRET)&#061;([^\\\\s]&#043;)<\/span><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-flags\">g<\/span><\/span><br \/>\n<span class=\"token punctuation\">]<\/span><\/p>\n<p><span class=\"token keyword\">function<\/span> <span class=\"token function\">redactText<\/span><span class=\"token punctuation\">(<\/span>input<span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><span class=\"token punctuation\">)<\/span><span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token keyword\">return<\/span> <span class=\"token constant\">SECRET_PATTERNS<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">reduce<\/span><span class=\"token punctuation\">(<\/span><br \/>\n    <span class=\"token punctuation\">(<\/span>text<span class=\"token punctuation\">,<\/span> pattern<span class=\"token punctuation\">)<\/span> <span class=\"token operator\">&#061;&gt;<\/span> text<span class=\"token punctuation\">.<\/span><span class=\"token function\">replace<\/span><span class=\"token punctuation\">(<\/span>pattern<span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;$1&#061;[REDACTED]&#034;<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n    input<br \/>\n  <span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<p>logger<span class=\"token punctuation\">.<\/span><span class=\"token function\">info<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  requestId<span class=\"token punctuation\">,<\/span><br \/>\n  message<span class=\"token operator\">:<\/span> <span class=\"token function\">redactText<\/span><span class=\"token punctuation\">(<\/span>message<span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u4e0a\u9762\u7684\u793a\u4f8b\u5c55\u793a\u7684\u662f\u601d\u8def&#xff1a;\u751f\u4ea7\u9879\u76ee\u901a\u5e38\u8fd8\u5e94\u7ed3\u5408\u65e5\u5fd7\u6846\u67b6\u3001\u7f51\u5173\u3001APM\u3001\u9519\u8bef\u8ffd\u8e2a\u5e73\u53f0\u63d0\u4f9b\u7684\u8131\u654f\u80fd\u529b&#xff0c;\u5e76\u901a\u8fc7\u6d4b\u8bd5\u786e\u4fdd\u654f\u611f\u5b57\u6bb5\u4e0d\u4f1a\u8fdb\u5165\u65e5\u5fd7\u3002<\/p>\n<h3>10. AI \u9879\u76ee\u7684\u989d\u5916\u7279\u6b8a\u89c4\u8303<\/h3>\n<p>AI \u9879\u76ee\u4e0d\u662f\u201c\u666e\u901a\u9879\u76ee\u591a\u4e00\u4e2a API Key\u201d\u8fd9\u4e48\u7b80\u5355\u3002\u5b83\u7684\u7279\u6b8a\u6027\u5728\u4e8e&#xff1a;\u6a21\u578b\u8c03\u7528\u94fe\u8def\u91cc\u4f1a\u7ecf\u8fc7 prompt\u3001completion\u3001embedding\u3001RAG \u6587\u6863\u3001\u5411\u91cf\u6570\u636e\u5e93\u3001\u5de5\u5177\u8c03\u7528\u3001Agent \u6267\u884c\u65e5\u5fd7\u7b49\u6570\u636e&#xff0c;\u800c\u8fd9\u4e9b\u5185\u5bb9\u90fd\u53ef\u80fd\u5305\u542b\u654f\u611f\u4fe1\u606f\u3002<\/p>\n<p>AI \u9879\u76ee\u8fd8\u5e38\u5e38\u6309 token\u3001\u6a21\u578b\u7b49\u7ea7\u3001\u4e0a\u4e0b\u6587\u957f\u5ea6\u3001\u5e76\u53d1\u91cf\u8ba1\u8d39\u3002\u56e0\u6b64\u5b83\u4e0d\u4ec5\u6709\u4f20\u7edf\u5b89\u5168\u98ce\u9669&#xff0c;\u8fd8\u6709\u8d39\u7528\u5931\u63a7\u548c\u6570\u636e\u5408\u89c4\u98ce\u9669\u3002<\/p>\n<h4>10.1 LLM Provider API Key \u7ba1\u7406<\/h4>\n<p>AI \u9879\u76ee\u7684\u6a21\u578b API Key \u5e94\u8be5\u548c\u666e\u901a\u7b2c\u4e09\u65b9 API Key \u4e00\u6837\u8fdb\u5165 Secret Manager\u3001Vault\u3001CI Secret \u6216\u8fd0\u884c\u5e73\u53f0\u5bc6\u94a5\u533a\u3002<\/p>\n<p>\u63a8\u8350\u539f\u5219&#xff1a;<\/p>\n<ul>\n<li>local\u3001dev\u3001staging\u3001production \u4f7f\u7528\u4e0d\u540c Key\u3002<\/li>\n<li>Chat\u3001Embedding\u3001Eval\u3001Batch Job \u4f7f\u7528\u4e0d\u540c Key\u3002<\/li>\n<li>\u751f\u4ea7\u7981\u6b62\u4f7f\u7528\u5f00\u53d1\u8005\u4e2a\u4eba Key\u3002<\/li>\n<li>Key \u7ed1\u5b9a\u670d\u52a1\u8d26\u53f7\u6216\u7ec4\u7ec7\u7ea7\u8d26\u53f7\u3002<\/li>\n<li>Key \u6743\u9650\u5c3d\u91cf\u6700\u5c0f\u5316\u3002<\/li>\n<li>\u8bbe\u7f6e\u8c03\u7528\u989d\u5ea6\u3001\u901f\u7387\u9650\u5236\u548c\u544a\u8b66\u3002<\/li>\n<\/ul>\n<p>Provider-neutral \u7684 .env.example \u53ef\u4ee5\u8fd9\u6837\u5199&#xff1a;<\/p>\n<p>LLM_PROVIDER&#061;example-provider<br \/>\nLLM_MODEL&#061;example-chat-model<br \/>\nLLM_API_KEY&#061;__SET_IN_SECRET_MANAGER__<\/p>\n<p>EMBEDDING_PROVIDER&#061;example-provider<br \/>\nEMBEDDING_MODEL&#061;example-embedding-model<br \/>\nEMBEDDING_API_KEY&#061;__SET_IN_SECRET_MANAGER__<\/p>\n<p>VECTOR_DB_URL&#061;__SET_IN_SECRET_MANAGER__<br \/>\nVECTOR_DB_API_KEY&#061;__SET_IN_SECRET_MANAGER__<\/p>\n<p>LLM_MAX_OUTPUT_TOKENS&#061;4096<br \/>\nLLM_REQUEST_TIMEOUT_MS&#061;60000<br \/>\nLLM_MONTHLY_BUDGET_USD&#061;500<br \/>\nLLM_PROMPT_LOGGING_MODE&#061;metadata_only<br \/>\nMODEL_DATA_RETENTION_POLICY&#061;zero_retention_required<\/p>\n<p>\u8fd9\u91cc\u7684\u91cd\u70b9\u4e0d\u662f\u67d0\u4e2a\u5177\u4f53\u6a21\u578b\u4f9b\u5e94\u5546&#xff0c;\u800c\u662f\u914d\u7f6e\u8bbe\u8ba1&#xff1a;\u6a21\u578b\u4f9b\u5e94\u5546\u3001\u6a21\u578b\u540d\u3001API Key\u3001\u5411\u91cf\u5e93\u51ed\u8bc1\u3001\u8d85\u65f6\u3001token \u4e0a\u9650\u3001\u9884\u7b97\u3001\u65e5\u5fd7\u6a21\u5f0f\u548c\u6570\u636e\u4fdd\u7559\u7b56\u7565\u90fd\u5e94\u8be5\u663e\u5f0f\u914d\u7f6e\u5e76\u53d7\u63a7\u3002<\/p>\n<h4>10.2 Chat Key\u3001Embedding Key\u3001Eval Key \u5206\u79bb<\/h4>\n<p>\u5f88\u591a AI \u9879\u76ee\u4f1a\u540c\u65f6\u505a&#xff1a;<\/p>\n<ul>\n<li>\u5728\u7ebf\u5bf9\u8bdd\u3002<\/li>\n<li>\u6587\u6863 embedding\u3002<\/li>\n<li>\u79bb\u7ebf\u8bc4\u6d4b\u3002<\/li>\n<li>\u6279\u91cf\u603b\u7ed3\u3002<\/li>\n<li>Agent \u5de5\u5177\u8c03\u7528\u3002<\/li>\n<\/ul>\n<p>\u5982\u679c\u6240\u6709\u4efb\u52a1\u5171\u7528\u4e00\u4e2a\u9ad8\u6743\u9650 Key&#xff0c;\u4e00\u65e6\u6cc4\u9732\u5c31\u4f1a\u5f71\u54cd\u6240\u6709\u80fd\u529b\u3002\u66f4\u597d\u7684\u505a\u6cd5\u662f\u6309\u7528\u9014\u62c6\u5206&#xff1a;<\/p>\n<table>\n<tr>\u7528\u9014\u793a\u4f8b\u53d8\u91cf\u6743\u9650\u5efa\u8bae<\/tr>\n<tbody>\n<tr>\n<td>\u5728\u7ebf\u5bf9\u8bdd<\/td>\n<td>LLM_API_KEY<\/td>\n<td>\u9650\u5236\u6a21\u578b\u3001\u9650\u989d\u3001\u9650\u6d41<\/td>\n<\/tr>\n<tr>\n<td>Embedding<\/td>\n<td>EMBEDDING_API_KEY<\/td>\n<td>\u53ea\u5141\u8bb8 embedding \u76f8\u5173\u80fd\u529b<\/td>\n<\/tr>\n<tr>\n<td>\u79bb\u7ebf\u8bc4\u6d4b<\/td>\n<td>EVAL_LLM_API_KEY<\/td>\n<td>\u53ef\u4f4e\u4f18\u5148\u7ea7\u3001\u72ec\u7acb\u9884\u7b97<\/td>\n<\/tr>\n<tr>\n<td>\u540e\u53f0\u6279\u5904\u7406<\/td>\n<td>BATCH_LLM_API_KEY<\/td>\n<td>\u72ec\u7acb\u961f\u5217\u548c\u9884\u7b97<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>10.3 \u6a21\u578b\u767d\u540d\u5355\u4e0e\u8d39\u7528\u63a7\u5236<\/h4>\n<p>AI \u9879\u76ee\u4e2d&#xff0c;\u4e0d\u80fd\u8ba9\u7528\u6237\u4ece\u524d\u7aef\u4efb\u610f\u4f20\u5165\u6a21\u578b\u540d\u3001max tokens \u6216 temperature \u7b49\u5173\u952e\u53c2\u6570\u3002<\/p>\n<p>\u9519\u8bef\u793a\u4f8b&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> result <span class=\"token operator\">&#061;<\/span> <span class=\"token keyword\">await<\/span> llm<span class=\"token punctuation\">.<\/span><span class=\"token function\">chat<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  model<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>model<span class=\"token punctuation\">,<\/span><br \/>\n  maxTokens<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>maxTokens<span class=\"token punctuation\">,<\/span><br \/>\n  messages<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>messages<br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u66f4\u5b89\u5168\u7684\u505a\u6cd5\u662f\u5728\u670d\u52a1\u7aef\u7ef4\u62a4\u6a21\u578b\u767d\u540d\u5355\u548c\u53c2\u6570\u4e0a\u9650&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> <span class=\"token constant\">MODEL_ALLOWLIST<\/span> <span class=\"token operator\">&#061;<\/span> <span class=\"token keyword\">new<\/span> <span class=\"token class-name\">Set<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;example-chat-model&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;example-fast-model&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token keyword\">const<\/span> requestedModel <span class=\"token operator\">&#061;<\/span> <span class=\"token function\">String<\/span><span class=\"token punctuation\">(<\/span>req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>model <span class=\"token operator\">??<\/span> <span class=\"token string\">&#034;example-chat-model&#034;<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token keyword\">const<\/span> model <span class=\"token operator\">&#061;<\/span> <span class=\"token constant\">MODEL_ALLOWLIST<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">has<\/span><span class=\"token punctuation\">(<\/span>requestedModel<span class=\"token punctuation\">)<\/span> <span class=\"token operator\">?<\/span> requestedModel <span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;example-chat-model&#034;<\/span><br \/>\n<span class=\"token keyword\">const<\/span> maxTokens <span class=\"token operator\">&#061;<\/span> Math<span class=\"token punctuation\">.<\/span><span class=\"token function\">min<\/span><span class=\"token punctuation\">(<\/span><span class=\"token function\">Number<\/span><span class=\"token punctuation\">(<\/span>req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>maxTokens <span class=\"token operator\">??<\/span> <span class=\"token number\">1024<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span> env<span class=\"token punctuation\">.<\/span><span class=\"token constant\">LLM_MAX_OUTPUT_TOKENS<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p><span class=\"token keyword\">const<\/span> result <span class=\"token operator\">&#061;<\/span> <span class=\"token keyword\">await<\/span> llm<span class=\"token punctuation\">.<\/span><span class=\"token function\">chat<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  model<span class=\"token punctuation\">,<\/span><br \/>\n  maxTokens<span class=\"token punctuation\">,<\/span><br \/>\n  messages<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>messages<br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u4f01\u4e1a\u9879\u76ee\u8fd8\u5e94\u505a&#xff1a;<\/p>\n<ul>\n<li>\u7528\u6237\u7ea7\u9650\u6d41\u3002<\/li>\n<li>\u79df\u6237\u7ea7\u9650\u6d41\u3002<\/li>\n<li>\u6708\u5ea6\u9884\u7b97\u3002<\/li>\n<li>\u5355\u6b21\u8bf7\u6c42 token \u4e0a\u9650\u3002<\/li>\n<li>\u9ad8\u4ef7\u6a21\u578b\u5ba1\u6279\u3002<\/li>\n<li>\u5f02\u5e38\u8c03\u7528\u544a\u8b66\u3002<\/li>\n<\/ul>\n<h4>10.4 Prompt \/ Completion \u4e5f\u662f\u654f\u611f\u6570\u636e<\/h4>\n<p>AI \u9879\u76ee\u7684 prompt \u53ef\u80fd\u5305\u542b&#xff1a;<\/p>\n<ul>\n<li>\u7528\u6237\u4e2a\u4eba\u4fe1\u606f\u3002<\/li>\n<li>\u5ba2\u6237\u5408\u540c\u3002<\/li>\n<li>\u6e90\u7801\u7247\u6bb5\u3002<\/li>\n<li>\u5185\u90e8\u6587\u6863\u3002<\/li>\n<li>\u6570\u636e\u5e93\u67e5\u8be2\u7ed3\u679c\u3002<\/li>\n<li>API Key \u6216 Token\u3002<\/li>\n<li>\u5de5\u5177\u8c03\u7528\u53c2\u6570\u3002<\/li>\n<\/ul>\n<p>\u56e0\u6b64&#xff0c;\u751f\u4ea7\u73af\u5883\u4e0d\u5e94\u8be5\u9ed8\u8ba4\u8bb0\u5f55\u5b8c\u6574 prompt \u548c completion\u3002\u66f4\u63a8\u8350\u9ed8\u8ba4\u8bb0\u5f55 metadata&#xff1a;<\/p>\n<ul>\n<li>requestId<\/li>\n<li>tenantId<\/li>\n<li>userId<\/li>\n<li>model<\/li>\n<li>token usage<\/li>\n<li>latency<\/li>\n<li>status<\/li>\n<li>error type<\/li>\n<\/ul>\n<p>\u5982\u786e\u5b9e\u9700\u8981\u91c7\u6837\u4fdd\u5b58 prompt \u7528\u4e8e\u8c03\u8bd5\u6216\u8bc4\u6d4b&#xff0c;\u4e5f\u5e94\u6ee1\u8db3&#xff1a;<\/p>\n<ul>\n<li>\u660e\u786e\u7528\u6237\u6388\u6743\u6216\u4f01\u4e1a\u5408\u89c4\u4f9d\u636e\u3002<\/li>\n<li>\u8131\u654f\u540e\u4fdd\u5b58\u3002<\/li>\n<li>\u91c7\u6837\u6bd4\u4f8b\u53d7\u63a7\u3002<\/li>\n<li>\u4fdd\u7559\u65f6\u95f4\u77ed\u3002<\/li>\n<li>\u53ef\u67e5\u8be2\u3001\u53ef\u5220\u9664\u3001\u53ef\u5ba1\u8ba1\u3002<\/li>\n<\/ul>\n<p>AI \u8bf7\u6c42\u65e5\u5fd7\u8131\u654f\u793a\u4f8b&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> <span class=\"token constant\">SECRET_PATTERNS<\/span> <span class=\"token operator\">&#061;<\/span> <span class=\"token punctuation\">[<\/span><br \/>\n  <span class=\"token regex\"><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-source language-regex\">sk-[A-Za-z0-9_-]{20,}<\/span><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-flags\">g<\/span><\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token regex\"><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-source language-regex\">Bearer\\\\s&#043;[A-Za-z0-9._-]&#043;<\/span><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-flags\">g<\/span><\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token regex\"><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-source language-regex\">(api[_-]?key|token|secret|password)&#061;([^&amp;\\\\s]&#043;)<\/span><span class=\"token regex-delimiter\">\/<\/span><span class=\"token regex-flags\">gi<\/span><\/span><br \/>\n<span class=\"token punctuation\">]<\/span><\/p>\n<p><span class=\"token keyword\">function<\/span> <span class=\"token function\">redactText<\/span><span class=\"token punctuation\">(<\/span>input<span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><span class=\"token punctuation\">)<\/span><span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token keyword\">return<\/span> <span class=\"token constant\">SECRET_PATTERNS<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">reduce<\/span><span class=\"token punctuation\">(<\/span><br \/>\n    <span class=\"token punctuation\">(<\/span>text<span class=\"token punctuation\">,<\/span> pattern<span class=\"token punctuation\">)<\/span> <span class=\"token operator\">&#061;&gt;<\/span> text<span class=\"token punctuation\">.<\/span><span class=\"token function\">replace<\/span><span class=\"token punctuation\">(<\/span>pattern<span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;[REDACTED]&#034;<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">,<\/span><br \/>\n    input<br \/>\n  <span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<p><span class=\"token keyword\">function<\/span> <span class=\"token function\">safeLogLLMRequest<\/span><span class=\"token punctuation\">(<\/span>req<span class=\"token operator\">:<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  requestId<span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><br \/>\n  tenantId<span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><br \/>\n  model<span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><br \/>\n  prompt<span class=\"token operator\">?<\/span><span class=\"token operator\">:<\/span> <span class=\"token builtin\">string<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  logger<span class=\"token punctuation\">.<\/span><span class=\"token function\">info<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n    requestId<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>requestId<span class=\"token punctuation\">,<\/span><br \/>\n    tenantId<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>tenantId<span class=\"token punctuation\">,<\/span><br \/>\n    model<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>model<span class=\"token punctuation\">,<\/span><br \/>\n    promptPreview<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>prompt <span class=\"token operator\">?<\/span> <span class=\"token function\">redactText<\/span><span class=\"token punctuation\">(<\/span>req<span class=\"token punctuation\">.<\/span>prompt<span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">.<\/span><span class=\"token function\">slice<\/span><span class=\"token punctuation\">(<\/span><span class=\"token number\">0<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token number\">200<\/span><span class=\"token punctuation\">)<\/span> <span class=\"token operator\">:<\/span> <span class=\"token keyword\">undefined<\/span><br \/>\n  <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<h4>10.5 RAG \/ \u5411\u91cf\u6570\u636e\u5e93\u51ed\u8bc1\u5b89\u5168<\/h4>\n<p>RAG \u9879\u76ee\u901a\u5e38\u4f1a\u5f15\u5165\u6587\u6863\u89e3\u6790\u3001embedding\u3001\u5411\u91cf\u5e93\u5199\u5165\u3001\u5411\u91cf\u68c0\u7d22\u3001\u7b54\u6848\u751f\u6210\u7b49\u94fe\u8def\u3002\u4e0d\u540c\u94fe\u8def\u9700\u8981\u4e0d\u540c\u6743\u9650\u3002<\/p>\n<p>\u63a8\u8350\u62c6\u5206&#xff1a;<\/p>\n<table>\n<tr>\u670d\u52a1\u9700\u8981\u7684\u6743\u9650\u4e0d\u5e94\u8be5\u62e5\u6709\u7684\u6743\u9650<\/tr>\n<tbody>\n<tr>\n<td>ingestion worker<\/td>\n<td>\u5199\u5165\u6587\u6863\u3001\u5199\u5165\u5411\u91cf<\/td>\n<td>\u5220\u9664\u5168\u90e8\u79df\u6237\u6570\u636e<\/td>\n<\/tr>\n<tr>\n<td>retrieval service<\/td>\n<td>\u8bfb\u53d6\u5f53\u524d\u79df\u6237\u5411\u91cf<\/td>\n<td>\u8bfb\u53d6\u5176\u4ed6\u79df\u6237\u6570\u636e<\/td>\n<\/tr>\n<tr>\n<td>admin job<\/td>\n<td>\u7d22\u5f15\u7ef4\u62a4<\/td>\n<td>\u5728\u7ebf\u56de\u7b54\u7528\u6237\u95ee\u9898<\/td>\n<\/tr>\n<tr>\n<td>eval job<\/td>\n<td>\u8bfb\u53d6\u8bc4\u6d4b\u96c6<\/td>\n<td>\u8bbf\u95ee\u751f\u4ea7\u5ba2\u6237\u539f\u59cb\u6570\u636e<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>RAG \u591a\u79df\u6237\u9879\u76ee\u4e2d&#xff0c;tenantId \u5fc5\u987b\u6765\u81ea\u670d\u52a1\u7aef\u8ba4\u8bc1\u4e0a\u4e0b\u6587&#xff0c;\u800c\u4e0d\u662f\u6765\u81ea\u7528\u6237\u8bf7\u6c42\u4f53\u3002<\/p>\n<p><span class=\"token keyword\">const<\/span> docs <span class=\"token operator\">&#061;<\/span> <span class=\"token keyword\">await<\/span> vectorDb<span class=\"token punctuation\">.<\/span><span class=\"token function\">search<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  query<span class=\"token punctuation\">,<\/span><br \/>\n  filter<span class=\"token operator\">:<\/span> <span class=\"token punctuation\">{<\/span> tenantId<span class=\"token operator\">:<\/span> req<span class=\"token punctuation\">.<\/span>body<span class=\"token punctuation\">.<\/span>tenantId <span class=\"token punctuation\">}<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<p>\u4e0a\u9762\u8fd9\u79cd\u5199\u6cd5\u662f\u5371\u9669\u7684&#xff0c;\u56e0\u4e3a\u7528\u6237\u53ef\u4ee5\u4f2a\u9020 tenantId \u8d8a\u6743\u68c0\u7d22\u3002<\/p>\n<p>\u66f4\u5b89\u5168\u7684\u5199\u6cd5&#xff1a;<\/p>\n<p><span class=\"token keyword\">const<\/span> tenantId <span class=\"token operator\">&#061;<\/span> req<span class=\"token punctuation\">.<\/span>auth<span class=\"token punctuation\">.<\/span>tenantId<\/p>\n<p><span class=\"token keyword\">const<\/span> docs <span class=\"token operator\">&#061;<\/span> <span class=\"token keyword\">await<\/span> vectorDb<span class=\"token punctuation\">.<\/span><span class=\"token function\">search<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span><br \/>\n  query<span class=\"token punctuation\">,<\/span><br \/>\n  filter<span class=\"token operator\">:<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n    tenantId<span class=\"token punctuation\">,<\/span><br \/>\n    visibility<span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;active&#034;<\/span><br \/>\n  <span class=\"token punctuation\">}<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">)<\/span><\/p>\n<h4>10.6 \u6a21\u578b\u6570\u636e\u4fdd\u7559\u4e0e\u5408\u89c4<\/h4>\n<p>\u4f01\u4e1a AI \u9879\u76ee\u9700\u8981\u786e\u8ba4\u6a21\u578b\u4f9b\u5e94\u5546\u6216\u8fd0\u884c\u5e73\u53f0\u7684\u6570\u636e\u7b56\u7565&#xff1a;<\/p>\n<ul>\n<li>prompt \u548c completion \u662f\u5426\u4f1a\u88ab\u4fdd\u7559&#xff1f;<\/li>\n<li>\u662f\u5426\u4f1a\u7528\u4e8e\u8bad\u7ec3&#xff1f;<\/li>\n<li>\u6570\u636e\u4fdd\u7559\u591a\u4e45&#xff1f;<\/li>\n<li>\u662f\u5426\u652f\u6301 zero retention \u6216\u4f01\u4e1a\u6570\u636e\u534f\u8bae&#xff1f;<\/li>\n<li>\u662f\u5426\u6d89\u53ca\u8de8\u5883\u4f20\u8f93&#xff1f;<\/li>\n<li>\u662f\u5426\u6ee1\u8db3\u884c\u4e1a\u5408\u89c4\u8981\u6c42&#xff1f;<\/li>\n<li>\u5220\u9664\u8bf7\u6c42\u662f\u5426\u53ef\u6267\u884c\u3001\u53ef\u5ba1\u8ba1&#xff1f;<\/li>\n<\/ul>\n<p>\u8fd9\u4e9b\u5185\u5bb9\u4e0d\u5e94\u8be5\u7531\u5f00\u53d1\u8005\u51ed\u611f\u89c9\u51b3\u5b9a&#xff0c;\u800c\u5e94\u7531\u6280\u672f\u3001\u6cd5\u52a1\u3001\u5b89\u5168\u3001\u5408\u89c4\u548c\u4e1a\u52a1\u5171\u540c\u786e\u8ba4\u3002<\/p>\n<h4>10.7 BYOK \u573a\u666f<\/h4>\n<p>BYOK \u6307 Bring Your Own Key&#xff0c;\u5ba2\u6237\u81ea\u5e26\u6a21\u578b Key \u6216\u52a0\u5bc6 Key\u3002\u5b83\u5e38\u89c1\u4e8e ToB SaaS\u3001\u79c1\u6709\u5316\u90e8\u7f72\u548c\u591a\u79df\u6237 AI \u5e73\u53f0\u3002<\/p>\n<p>BYOK \u7684\u5b89\u5168\u8981\u6c42\u5305\u62ec&#xff1a;<\/p>\n<ul>\n<li>\u6bcf\u4e2a\u79df\u6237 Key \u72ec\u7acb\u4fdd\u5b58\u3002<\/li>\n<li>Key \u52a0\u5bc6\u5b58\u50a8\u3002<\/li>\n<li>\u8fd0\u884c\u65f6\u6309\u79df\u6237\u52a8\u6001\u8bfb\u53d6\u3002<\/li>\n<li>\u79df\u6237\u53ef\u81ea\u884c\u8f6e\u6362\u548c\u540a\u9500\u3002<\/li>\n<li>\u670d\u52a1\u7aef\u4e0d\u80fd\u628a A \u79df\u6237 Key \u7528\u5230 B \u79df\u6237\u8bf7\u6c42\u4e2d\u3002<\/li>\n<li>\u65e5\u5fd7\u4e2d\u4e0d\u80fd\u51fa\u73b0\u5ba2\u6237 Key\u3002<\/li>\n<\/ul>\n<h4>10.8 Agent \/ MCP \/ \u5de5\u5177\u8c03\u7528\u7684\u5bc6\u94a5\u8fb9\u754c<\/h4>\n<p>AI Agent \u9879\u76ee\u5f80\u5f80\u4f1a\u8fde\u63a5 Git\u3001\u6570\u636e\u5e93\u3001\u5de5\u5355\u7cfb\u7edf\u3001\u804a\u5929\u5de5\u5177\u3001\u6d4f\u89c8\u5668\u3001\u4e91\u8d44\u6e90\u7b49\u5916\u90e8\u5de5\u5177\u3002\u6b64\u65f6\u98ce\u9669\u4e0d\u53ea\u6765\u81ea\u6a21\u578b API Key&#xff0c;\u8fd8\u6765\u81ea\u5de5\u5177\u51ed\u8bc1\u3002<\/p>\n<p>\u5173\u952e\u539f\u5219&#xff1a;<\/p>\n<ul>\n<li>\u5de5\u5177\u51ed\u8bc1\u4e0d\u80fd\u5199\u8fdb prompt\u3002<\/li>\n<li>\u6a21\u578b\u4e0d\u5e94\u8be5\u76f4\u63a5\u770b\u5230\u539f\u59cb Secret\u3002<\/li>\n<li>\u5de5\u5177\u8c03\u7528\u5e94\u7531\u670d\u52a1\u7aef\u6309\u6743\u9650\u6267\u884c\u3002<\/li>\n<li>\u9ad8\u98ce\u9669\u64cd\u4f5c\u9700\u8981\u5ba1\u6279\u6216\u7b56\u7565\u9650\u5236\u3002<\/li>\n<li>\u4e0d\u540c\u5de5\u5177\u4f7f\u7528\u4e0d\u540c\u670d\u52a1\u8d26\u53f7\u3002<\/li>\n<li>\u5de5\u5177\u6267\u884c\u65e5\u5fd7\u5fc5\u987b\u8131\u654f\u3002<\/li>\n<\/ul>\n<p>\u4f8b\u5982&#xff0c;Agent \u53ef\u4ee5\u8bf7\u6c42\u201c\u67e5\u8be2\u67d0\u4e2a\u5de5\u5355\u201d&#xff0c;\u4f46\u771f\u6b63\u7684\u5de5\u5355\u7cfb\u7edf Token \u5e94\u7531\u540e\u7aef\u5de5\u5177\u5c42\u4fdd\u5b58\u548c\u4f7f\u7528&#xff0c;\u800c\u4e0d\u662f\u4f5c\u4e3a\u6587\u672c\u585e\u8fdb\u6a21\u578b\u4e0a\u4e0b\u6587\u3002<\/p>\n<h3>11. \u5e38\u89c1\u53cd\u6a21\u5f0f\u4e0e\u6b63\u786e\u505a\u6cd5<\/h3>\n<table>\n<tr>\u53cd\u6a21\u5f0f\u4e3a\u4ec0\u4e48\u5371\u9669\u6b63\u786e\u505a\u6cd5<\/tr>\n<tbody>\n<tr>\n<td>\u628a .env \u63d0\u4ea4\u5230 Git<\/td>\n<td>Git \u5386\u53f2\u957f\u671f\u4fdd\u7559&#xff0c;\u6cc4\u9732\u540e\u96be\u6e05\u7406<\/td>\n<td>\u63d0\u4ea4 .env.example&#xff0c;\u771f\u5b9e\u503c\u8fdb Secret Manager<\/td>\n<\/tr>\n<tr>\n<td>\u751f\u4ea7\u4f7f\u7528\u5f00\u53d1\u8005\u4e2a\u4eba Key<\/td>\n<td>\u4eba\u5458\u79bb\u804c\u6216\u6743\u9650\u53d8\u5316\u4f1a\u5f71\u54cd\u751f\u4ea7<\/td>\n<td>\u4f7f\u7528\u670d\u52a1\u8d26\u53f7\u6216\u7ec4\u7ec7\u7ea7\u51ed\u8bc1<\/td>\n<\/tr>\n<tr>\n<td>\u6240\u6709\u73af\u5883\u5171\u7528\u4e00\u4e2a\u6570\u636e\u5e93\u5bc6\u7801<\/td>\n<td>\u4f4e\u73af\u5883\u6cc4\u9732\u53ef\u5f71\u54cd\u751f\u4ea7<\/td>\n<td>\u6309\u73af\u5883\u9694\u79bb\u5bc6\u94a5\u548c\u6743\u9650<\/td>\n<\/tr>\n<tr>\n<td>\u5728\u65e5\u5fd7\u4e2d\u6253\u5370 process.env<\/td>\n<td>\u5bc6\u94a5\u8fdb\u5165\u65e5\u5fd7\u5e73\u53f0<\/td>\n<td>\u7ed3\u6784\u5316\u65e5\u5fd7 allowlist &#043; \u8131\u654f<\/td>\n<\/tr>\n<tr>\n<td>Dockerfile \u5199\u5165 ENV SECRET&#061;xxx<\/td>\n<td>\u5bc6\u94a5\u8fdb\u5165\u955c\u50cf\u5c42<\/td>\n<td>\u8fd0\u884c\u65f6\u6ce8\u5165 Secret<\/td>\n<\/tr>\n<tr>\n<td>\u524d\u7aef\u73af\u5883\u53d8\u91cf\u4fdd\u5b58 Secret<\/td>\n<td>\u6d4f\u89c8\u5668\u4ea7\u7269\u53ef\u88ab\u7528\u6237\u770b\u5230<\/td>\n<td>Secret \u53ea\u653e\u540e\u7aef\u6216\u5e73\u53f0\u5bc6\u94a5\u533a<\/td>\n<\/tr>\n<tr>\n<td>CI \u4e2d echo $TOKEN<\/td>\n<td>Token \u8fdb\u5165\u6d41\u6c34\u7ebf\u65e5\u5fd7<\/td>\n<td>\u907f\u514d\u6253\u5370&#xff0c;\u4f9d\u8d56\u5e73\u53f0\u8131\u654f\u80fd\u529b<\/td>\n<\/tr>\n<tr>\n<td>.env.example \u5199\u771f\u5b9e\u793a\u4f8b\u5bc6\u7801<\/td>\n<td>\u65b0\u4eba\u53ef\u80fd\u7167\u6284&#xff0c;\u751a\u81f3\u8bef\u8fde\u5171\u4eab\u8d44\u6e90<\/td>\n<td>\u53ea\u5199\u5b89\u5168\u5360\u4f4d\u7b26<\/td>\n<\/tr>\n<tr>\n<td>AI \u9879\u76ee\u8bb0\u5f55\u5b8c\u6574 prompt<\/td>\n<td>prompt \u53ef\u80fd\u5305\u542b PII\u3001\u5408\u540c\u3001\u6e90\u7801\u3001\u5bc6\u94a5<\/td>\n<td>\u9ed8\u8ba4 metadata_only&#xff0c;\u5fc5\u8981\u65f6\u8131\u654f\u91c7\u6837<\/td>\n<\/tr>\n<tr>\n<td>RAG tenantId \u6765\u81ea\u524d\u7aef<\/td>\n<td>\u7528\u6237\u53ef\u4f2a\u9020 tenantId \u8d8a\u6743\u68c0\u7d22<\/td>\n<td>tenantId \u6765\u81ea\u8ba4\u8bc1\u4e0a\u4e0b\u6587<\/td>\n<\/tr>\n<tr>\n<td>\u7528\u6237\u53ef\u4f20\u4efb\u610f model id<\/td>\n<td>\u6210\u672c\u548c\u6570\u636e\u7b56\u7565\u5931\u63a7<\/td>\n<td>\u670d\u52a1\u7aef\u6a21\u578b\u767d\u540d\u5355<\/td>\n<\/tr>\n<tr>\n<td>Agent \u5de5\u5177 Token \u8fdb\u5165 prompt<\/td>\n<td>\u6a21\u578b\u4e0a\u4e0b\u6587\u548c\u65e5\u5fd7\u53ef\u80fd\u6cc4\u9732\u51ed\u8bc1<\/td>\n<td>Token \u7559\u5728\u670d\u52a1\u7aef\u5de5\u5177\u5c42<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12. \u4f01\u4e1a\u843d\u5730\u68c0\u67e5\u6e05\u5355<\/h3>\n<ul>\n<li class=\"task-list-item\"> \u662f\u5426\u53ea\u63d0\u4ea4 .env.example&#xff0c;\u4e0d\u63d0\u4ea4\u771f\u5b9e .env&#xff1f;<\/li>\n<li class=\"task-list-item\"> .gitignore \u662f\u5426\u8986\u76d6 .env\u3001.env.* \u5e76\u4fdd\u7559\u793a\u4f8b\u6587\u4ef6&#xff1f;<\/li>\n<li class=\"task-list-item\"> local\u3001development\u3001test\u3001staging\u3001production \u662f\u5426\u4f7f\u7528\u4e0d\u540c\u5bc6\u94a5&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u751f\u4ea7\u5bc6\u94a5\u662f\u5426\u7531 Secret Manager \/ Vault \/ CI Secret \u7ba1\u7406&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u5e94\u7528\u542f\u52a8\u65f6\u662f\u5426\u6821\u9a8c\u5fc5\u8981\u914d\u7f6e&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u751f\u4ea7\u73af\u5883\u662f\u5426\u7981\u6b62\u5f31\u9ed8\u8ba4\u5bc6\u94a5&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u65e5\u5fd7\u662f\u5426\u907f\u514d\u8f93\u51fa\u73af\u5883\u53d8\u91cf\u3001\u8fde\u63a5\u4e32\u3001Token \u548c\u8bf7\u6c42\u5934&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u65e5\u5fd7\u5e73\u53f0\u3001\u9519\u8bef\u8ffd\u8e2a\u5e73\u53f0\u548c APM \u662f\u5426\u914d\u7f6e\u8131\u654f\u89c4\u5219&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u5bc6\u94a5\u662f\u5426\u6709\u8f6e\u6362\u3001\u540a\u9500\u3001\u5ba1\u8ba1\u6d41\u7a0b&#xff1f;<\/li>\n<li class=\"task-list-item\"> CI\/CD \u662f\u5426\u907f\u514d\u5728\u65e5\u5fd7\u548c\u5236\u54c1\u4e2d\u6cc4\u9732\u5bc6\u94a5&#xff1f;<\/li>\n<li class=\"task-list-item\"> Docker \u955c\u50cf\u662f\u5426\u907f\u514d\u628a\u5bc6\u94a5\u5199\u5165\u6784\u5efa\u5c42&#xff1f;<\/li>\n<li class=\"task-list-item\"> Kubernetes Secret \u662f\u5426\u914d\u5408 RBAC\u3001\u5ba1\u8ba1\u3001\u52a0\u5bc6\u548c\u5916\u90e8\u5bc6\u94a5\u7cfb\u7edf&#xff1f;<\/li>\n<li class=\"task-list-item\"> AI Key \u662f\u5426\u6309\u73af\u5883\u3001\u7528\u9014\u3001\u79df\u6237\u9694\u79bb&#xff1f;<\/li>\n<li class=\"task-list-item\"> Prompt \/ Completion \u662f\u5426\u9ed8\u8ba4\u4e0d\u8bb0\u5f55\u5168\u6587&#xff1f;<\/li>\n<li class=\"task-list-item\"> RAG \/ Vector DB \u662f\u5426\u505a\u79df\u6237\u9694\u79bb\u548c\u6700\u5c0f\u6743\u9650&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u662f\u5426\u8bbe\u7f6e token\u3001\u8d39\u7528\u3001\u5e76\u53d1\u548c\u6a21\u578b\u767d\u540d\u5355&#xff1f;<\/li>\n<li class=\"task-list-item\"> Agent \/ \u5de5\u5177\u8c03\u7528\u51ed\u8bc1\u662f\u5426\u7559\u5728\u670d\u52a1\u7aef\u5de5\u5177\u5c42&#xff0c;\u800c\u4e0d\u662f\u8fdb\u5165\u6a21\u578b\u4e0a\u4e0b\u6587&#xff1f;<\/li>\n<li class=\"task-list-item\"> \u5bc6\u94a5\u6cc4\u9732\u65f6\u662f\u5426\u6709\u660e\u786e\u5e94\u6025\u6d41\u7a0b&#xff1f;<\/li>\n<\/ul>\n<h3>13. \u603b\u7ed3<\/h3>\n<p>\u4f01\u4e1a\u7ea7 .env \u914d\u7f6e\u5b89\u5168\u7684\u91cd\u70b9&#xff0c;\u4e0d\u662f\u7b80\u5355\u5730\u628a\u53d8\u91cf\u653e\u8fdb\u67d0\u4e2a\u6587\u4ef6&#xff0c;\u800c\u662f\u5efa\u7acb\u5b8c\u6574\u7684\u914d\u7f6e\u548c\u5bc6\u94a5\u6cbb\u7406\u4f53\u7cfb&#xff1a;\u914d\u7f6e\u5206\u7c7b\u3001\u73af\u5883\u9694\u79bb\u3001\u6700\u5c0f\u6743\u9650\u3001\u8fd0\u884c\u65f6\u6ce8\u5165\u3001\u542f\u52a8\u6821\u9a8c\u3001\u65e5\u5fd7\u8131\u654f\u3001\u8f6e\u6362\u540a\u9500\u3001\u5ba1\u8ba1\u8ffd\u8e2a\u548c\u6cc4\u9732\u5e94\u6025\u3002<\/p>\n<p>.env \u66f4\u9002\u5408\u4f5c\u4e3a\u672c\u5730\u5f00\u53d1\u4fbf\u5229\u5de5\u5177&#xff1b;.env.example \u9002\u5408\u4f5c\u4e3a\u5b89\u5168\u53d8\u91cf\u6a21\u677f&#xff1b;\u751f\u4ea7\u73af\u5883\u7684\u771f\u5b9e Secret \u5e94\u8fdb\u5165 Secret Manager\u3001Vault\u3001KMS\u3001CI Secret\u3001Kubernetes Secret \u6216\u4f01\u4e1a\u914d\u7f6e\u5e73\u53f0&#xff0c;\u5e76\u901a\u8fc7\u6743\u9650\u548c\u5ba1\u8ba1\u8fdb\u884c\u6cbb\u7406\u3002<\/p>\n<p>AI \u9879\u76ee\u8fd8\u9700\u8981\u989d\u5916\u5173\u6ce8 prompt\u3001completion\u3001embedding\u3001RAG\u3001\u5411\u91cf\u6570\u636e\u5e93\u3001\u6a21\u578b\u8c03\u7528\u3001Agent \u5de5\u5177\u51ed\u8bc1\u3001\u6570\u636e\u4fdd\u7559\u548c token \u8d39\u7528\u63a7\u5236\u3002\u771f\u6b63\u6210\u719f\u7684 AI \u5de5\u7a0b\u5b9e\u8df5&#xff0c;\u4e0d\u53ea\u662f\u80fd\u8c03\u7528\u6a21\u578b&#xff0c;\u800c\u662f\u80fd\u5728\u5b89\u5168\u3001\u5408\u89c4\u3001\u6210\u672c\u548c\u53ef\u7ef4\u62a4\u6027\u4e4b\u95f4\u5efa\u7acb\u7a33\u5b9a\u8fb9\u754c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168&#xff1a;\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406<br \/>\n1. \u5f15\u8a00&#xff1a;\u4e3a\u4ec0\u4e48\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e0d\u80fd\u968f\u610f\u7ba1\u7406 .env<br \/>\n\u5728\u4e2a\u4eba\u9879\u76ee\u6216\u8bfe\u7a0b Demo \u4e2d&#xff0c;\u5f88\u591a\u4eba\u4f1a\u628a\u914d\u7f6e\u5199\u8fdb .env&#xff0c;\u518d\u901a\u8fc7 dotenv\u3001\u6846\u67b6\u914d\u7f6e\u7cfb\u7edf\u6216\u8fd0\u884c\u73af\u5883\u8bfb\u53d6\u3002\u8fd9\u6837\u505a\u5728\u672c\u5730\u5f00\u53d1\u9636\u6bb5\u5f88\u65b9\u4fbf&#xff1a;\u53d8\u91cf\u96c6\u4e2d\u3001\u4fee\u6539\u7b80\u5355\u3001\u4e0d\u4f1a\u628a\u914d\u7f6e\u786c\u7f16\u7801\u8fdb\u4e1a\u52a1\u4ee3\u7801\u3002<br \/>\n\u4f46\u5728\u771f\u6b63\u7684\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e2d&#xff0c;.env \u7edd\u4e0d\u80fd\u53ea\u88ab\u7406\u89e3\u6210\u201c\u653e\u914d\u7f6e\u7684\u6587\u4ef6\u201d\u3002\u4f01\u4e1a\u5173\u6ce8\u7684\u4e0d\u662f\u201c\u7a0b<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[50,323,61],"topic":[],"class_list":["post-87122","post","type-post","status-publish","format-standard","hentry","category-server","tag-50","tag-323","tag-61"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/87122.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168&#xff1a;\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 1. \u5f15\u8a00&#xff1a;\u4e3a\u4ec0\u4e48\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e0d\u80fd\u968f\u610f\u7ba1\u7406 .env \u5728\u4e2a\u4eba\u9879\u76ee\u6216\u8bfe\u7a0b Demo \u4e2d&#xff0c;\u5f88\u591a\u4eba\u4f1a\u628a\u914d\u7f6e\u5199\u8fdb .env&#xff0c;\u518d\u901a\u8fc7 dotenv\u3001\u6846\u67b6\u914d\u7f6e\u7cfb\u7edf\u6216\u8fd0\u884c\u73af\u5883\u8bfb\u53d6\u3002\u8fd9\u6837\u505a\u5728\u672c\u5730\u5f00\u53d1\u9636\u6bb5\u5f88\u65b9\u4fbf&#xff1a;\u53d8\u91cf\u96c6\u4e2d\u3001\u4fee\u6539\u7b80\u5355\u3001\u4e0d\u4f1a\u628a\u914d\u7f6e\u786c\u7f16\u7801\u8fdb\u4e1a\u52a1\u4ee3\u7801\u3002 \u4f46\u5728\u771f\u6b63\u7684\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e2d&#xff0c;.env \u7edd\u4e0d\u80fd\u53ea\u88ab\u7406\u89e3\u6210\u201c\u653e\u914d\u7f6e\u7684\u6587\u4ef6\u201d\u3002\u4f01\u4e1a\u5173\u6ce8\u7684\u4e0d\u662f\u201c\u7a0b\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/87122.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-29T12:40:28+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/87122.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/87122.html\",\"name\":\"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-07-29T12:40:28+00:00\",\"dateModified\":\"2026-07-29T12:40:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/87122.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/87122.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/87122.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/87122.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168&#xff1a;\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 1. \u5f15\u8a00&#xff1a;\u4e3a\u4ec0\u4e48\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e0d\u80fd\u968f\u610f\u7ba1\u7406 .env \u5728\u4e2a\u4eba\u9879\u76ee\u6216\u8bfe\u7a0b Demo \u4e2d&#xff0c;\u5f88\u591a\u4eba\u4f1a\u628a\u914d\u7f6e\u5199\u8fdb .env&#xff0c;\u518d\u901a\u8fc7 dotenv\u3001\u6846\u67b6\u914d\u7f6e\u7cfb\u7edf\u6216\u8fd0\u884c\u73af\u5883\u8bfb\u53d6\u3002\u8fd9\u6837\u505a\u5728\u672c\u5730\u5f00\u53d1\u9636\u6bb5\u5f88\u65b9\u4fbf&#xff1a;\u53d8\u91cf\u96c6\u4e2d\u3001\u4fee\u6539\u7b80\u5355\u3001\u4e0d\u4f1a\u628a\u914d\u7f6e\u786c\u7f16\u7801\u8fdb\u4e1a\u52a1\u4ee3\u7801\u3002 \u4f46\u5728\u771f\u6b63\u7684\u4f01\u4e1a\u7ea7\u9879\u76ee\u4e2d&#xff0c;.env \u7edd\u4e0d\u80fd\u53ea\u88ab\u7406\u89e3\u6210\u201c\u653e\u914d\u7f6e\u7684\u6587\u4ef6\u201d\u3002\u4f01\u4e1a\u5173\u6ce8\u7684\u4e0d\u662f\u201c\u7a0b","og_url":"https:\/\/www.wsisp.com\/helps\/87122.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-07-29T12:40:28+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"8 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/87122.html","url":"https:\/\/www.wsisp.com\/helps\/87122.html","name":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-07-29T12:40:28+00:00","dateModified":"2026-07-29T12:40:28+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/87122.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/87122.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/87122.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4f01\u4e1a\u7ea7\u9879\u76ee env \u914d\u7f6e\u5b89\u5168\uff1a\u4ece .env \u5230 AI \u9879\u76ee\u5bc6\u94a5\u6cbb\u7406"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/87122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=87122"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/87122\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=87122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=87122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=87122"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=87122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}