feat: implement QuestionBank CRUD with pagination and template query
- Add pagination support to findAll (page, limit query params) - Add findByTemplateId method to service - Add GET /by-template/:templateId endpoint to controller - Service already includes CRUD for QuestionBank and QuestionBankItem
This commit is contained in:
@@ -0,0 +1,68 @@
|
||||
# HTTP 重定向到 HTTPS
|
||||
server {
|
||||
listen 80;
|
||||
server_name localhost;
|
||||
return 301 https://$server_name$request_uri;
|
||||
}
|
||||
|
||||
# HTTPS 服务器
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
server_name localhost;
|
||||
|
||||
# SSL 配置
|
||||
ssl_certificate /etc/nginx/conf.d/ssl/cert.pem;
|
||||
ssl_certificate_key /etc/nginx/conf.d/ssl/key.pem;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384;
|
||||
ssl_prefer_server_ciphers off;
|
||||
|
||||
# 安全头
|
||||
add_header X-Frame-Options DENY;
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header X-XSS-Protection "1; mode=block";
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||
|
||||
# 前端静态文件
|
||||
location / {
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
try_files $uri $uri/ /index.html;
|
||||
|
||||
# 静态资源缓存
|
||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
|
||||
expires 1y;
|
||||
add_header Cache-Control "public, immutable";
|
||||
}
|
||||
}
|
||||
|
||||
# API 代理到后端
|
||||
location /api/ {
|
||||
proxy_pass http://server:3001;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
client_max_body_size 100M;
|
||||
|
||||
# 大模型超时配置
|
||||
proxy_connect_timeout 300s;
|
||||
proxy_send_timeout 300s;
|
||||
proxy_read_timeout 300s;
|
||||
}
|
||||
|
||||
# 文件上传代理
|
||||
location /uploads/ {
|
||||
proxy_pass http://server:3001;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
client_max_body_size 100M;
|
||||
|
||||
# 上传超时配置
|
||||
proxy_connect_timeout 60s;
|
||||
proxy_send_timeout 300s;
|
||||
proxy_read_timeout 300s;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,22 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDkTCCAnmgAwIBAgIULBuv66QB9N/vpEjbbm09JBk/2hwwDQYJKoZIhvcNAQEL
|
||||
BQAwWDELMAkGA1UEBhMCQ04xEDAOBgNVBAgMB0JlaWppbmcxEDAOBgNVBAcMB0Jl
|
||||
aWppbmcxETAPBgNVBAoMCFNpbXBsZUtCMRIwEAYDVQQDDAlsb2NhbGhvc3QwHhcN
|
||||
MjUxMjE3MDk1OTEwWhcNMjYxMjE3MDk1OTEwWjBYMQswCQYDVQQGEwJDTjEQMA4G
|
||||
A1UECAwHQmVpamluZzEQMA4GA1UEBwwHQmVpamluZzERMA8GA1UECgwIU2ltcGxl
|
||||
S0IxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
|
||||
AQoCggEBAMP89ErAdnRKBEDHjWZmGdsAsYYQ4zipCvhyUaw1lQoXcDHUlIcSDmSw
|
||||
7oxFd8N+bcbvLA/9ADm5aQq0DzdYtbZhCRtqa0inVdROA231D9bGJGtJISicGze5
|
||||
wmV1fVmFbdsFuHvGLYeUaRoHsbLVjnRjHiOiAi5Ne7X92EeZrsQDeU8/oxQHgFcE
|
||||
UPMpb1U+cRZ2Dtr/1EGT0KkVj9qfL8Oxkdn+bfHtp5lqcXKHVEVi8pD51Ta2OsgT
|
||||
gTE88Czs3eqNheO0kgGx5SCn4xQ6fPR4aOrmt7RsvkBkfMn3MNV2VO5aucPv6fWH
|
||||
4hhn7kVU5aVSx4dOqxp1jEh+xeVVU7cCAwEAAaNTMFEwHQYDVR0OBBYEFFcsTq95
|
||||
70NiO1GvUImpyrmxXsvnMB8GA1UdIwQYMBaAFFcsTq9570NiO1GvUImpyrmxXsvn
|
||||
MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAEVb8okxIwb36FED
|
||||
+eWSetT7MPfyyXyMSmUXfH+fr+qJ1NkaLwIwOH3AUpvxqx5+zAx61McF5dZy/xkD
|
||||
Cms47sic2rbE04ALbAdkBCowuqs5ZzVF+YhWzRMXEkARxz3x+Kz+Elxfwg/9pQgG
|
||||
JCQvHtYCqrG5XbM8wHBaoSfIfoY5exxLNuevVBqytkKi4qlC/bHuG4CuI7g18N2x
|
||||
ozQGCP3C5F6l80EozaiYPZuNbR0mV6FeL7Lmtkoa1fl02svrKwtv9MX6oaXiAnIF
|
||||
MTxcNK7+QeUdvJLZSv8vWTrbKIIcRkOrcwOrotGt2zfj/RplcrXsayJ1HTViDQ9U
|
||||
yI6Tu74=
|
||||
-----END CERTIFICATE-----
|
||||
@@ -0,0 +1,28 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDD/PRKwHZ0SgRA
|
||||
x41mZhnbALGGEOM4qQr4clGsNZUKF3Ax1JSHEg5ksO6MRXfDfm3G7ywP/QA5uWkK
|
||||
tA83WLW2YQkbamtIp1XUTgNt9Q/WxiRrSSEonBs3ucJldX1ZhW3bBbh7xi2HlGka
|
||||
B7Gy1Y50Yx4jogIuTXu1/dhHma7EA3lPP6MUB4BXBFDzKW9VPnEWdg7a/9RBk9Cp
|
||||
FY/any/DsZHZ/m3x7aeZanFyh1RFYvKQ+dU2tjrIE4ExPPAs7N3qjYXjtJIBseUg
|
||||
p+MUOnz0eGjq5re0bL5AZHzJ9zDVdlTuWrnD7+n1h+IYZ+5FVOWlUseHTqsadYxI
|
||||
fsXlVVO3AgMBAAECggEAG9GvgV7RUY9iDCnnJcZPXDk8eZmzDwtbncloU2flqGGM
|
||||
UN5qWMPU3DELI0kHB25OOcMgP4K7gfYR9W16jXIflOwwJT6VTOJHuhN6xCRZY7SL
|
||||
XdkrBj8mU+IfuFQVf1wDrGei+Jq4QrrrskCuVgKfLmEVWZx478aazUnjZcJoPrU5
|
||||
oooGKvoy/E88PDv4TDaciF2Mh5YFxg3bcfZKhhJtUmp+RQoPWIH8bU/isNXoUxP6
|
||||
f7jz3TZxZMIL+4KnUnLpfo5NMzVrUAkKGiRDSKXUWwp+oaPJOf94fdF5IpuW6qD3
|
||||
CohOHKrunIXnm6y7I91mesjLKTVOZ0/FobK0wL6ZWQKBgQD23Oj3h+7Jkn4DHsv7
|
||||
lT2MVankSL+oCdz6IY6ToSjbhhWpr6Rokrrn8EzQHXErpUK1wJDutevpe9w2oLJN
|
||||
tyealge+/CDFS+e/uFWes0pawC9ADwyS/eJ0ChPzPin8j1zdm6pJpm+icbsXew0x
|
||||
0oB4Wq12nj4f52fc/VaAhWC2SQKBgQDLPf37nXqPe75HBPHuwc767zh8YgyCPc5h
|
||||
hYMJXmiSfno+1k/UA4kUP074+dDDj4Jz1XJ5jITXeilRigsPE52p/hNinAv9i3Dz
|
||||
oi9OPzIuJrkJCuYhvzQSVvQkU8QGmWd6qqxY6sSIpBRy1s5IIoNYVJYngd4R53BX
|
||||
+Z8dgB25/wKBgQCCFOpV9TUo1p68OjA2w++I0WMSvhrwCzJ8Q86DkHqdIsyre7hg
|
||||
umDu8zsmtzz5SL4cU/qLLyW/BNuHlaofNZIS7VfrlaQXEuZtqk7Dr6pQo9DCKqvv
|
||||
kQURLHZSyMELKug+hlZ3NNLCgLebqeXMCSZVRUL+rGgEG8YpNv2r/5x0sQKBgD8R
|
||||
mKwo/SxjWPOO7EiL6d/itiObBYixB0cp+DTDEC5Ngz/Wn2UKR9J5ptcKJqdY9EFf
|
||||
vitL2LlJFmNQNAhUrPtgdcGG7Q2b5Mwlywo8ACVkLM1KjYlxXQZH53EScWUe24as
|
||||
Sdk52Q0R5aqRT+gAlcOmVAYkfbYOnMUgGCk+ZXsfAoGBALsLT1qgIeegx4xdTB4j
|
||||
Ymj8eOOf0v4PDqaqRXswQinDKfZYWzrCz+HXXQuZsw02UIkZE06fH6Vp2lusUA4A
|
||||
1GzmCXfRk3HeAJwmzJ7b/YrLx9fEXvMXb787FjCSXFNcr3UJlebNMeIIKytVBokY
|
||||
y+Yt3QV8/25XqfwMZX5lVRhH
|
||||
-----END PRIVATE KEY-----
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/bash
|
||||
|
||||
# 生成自签名 SSL 证书
|
||||
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
|
||||
-keyout nginx/ssl/key.pem \
|
||||
-out nginx/ssl/cert.pem \
|
||||
-subj "/C=CN/ST=Beijing/L=Beijing/O=SimpleKB/CN=localhost"
|
||||
|
||||
echo "SSL 证书已生成到 nginx/ssl/ 目录"
|
||||
echo "注意: 这是自签名证书,浏览器会显示安全警告"
|
||||
echo "生产环境请使用 Let's Encrypt 或购买正式证书"
|
||||
@@ -0,0 +1,32 @@
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
# 日志格式
|
||||
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||
|
||||
access_log /var/log/nginx/access.log main;
|
||||
error_log /var/log/nginx/error.log;
|
||||
|
||||
# 基本配置
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
keepalive_timeout 65;
|
||||
types_hash_max_size 2048;
|
||||
|
||||
# Gzip 压缩
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_min_length 1024;
|
||||
gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
|
||||
|
||||
# 包含 conf.d 目录下的配置文件
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
}
|
||||
Reference in New Issue
Block a user