v0.1.0: CRM/ERP 系统内测版本 - 安全加固完成
- Docker bridge 网络隔离（8000 端口封死） - Gunicorn 4 Worker 多进程 - Alembic 数据库迁移基线 - 日志轮转 20m×3 - JWT 密钥 + DB 密码 + CORS 收紧 - 3-2-1 备份链路（NAS + R740-B 冷备） - 连接池 pool_pre_ping + pool_recycle=3600
This commit is contained in:
hankin
@@ -0,0 +1,64 @@
|
||||
# -*- coding: utf-8 -*-
|
||||
"""
|
||||
Alembic 迁移环境配置
|
||||
从 app.core.config 动态获取数据库 URL，自动检测 ORM 模型变更。
|
||||
"""
|
||||
|
||||
from logging.config import fileConfig
|
||||
|
||||
from alembic import context
|
||||
from sqlalchemy import engine_from_config, pool
|
||||
|
||||
from app.core.config import settings
|
||||
from app.core.database import Base
|
||||
|
||||
# 导入所有模型，确保 Alembic 能检测到它们
|
||||
import app.models # noqa: F401
|
||||
|
||||
# Alembic Config 对象
|
||||
config = context.config
|
||||
|
||||
# 动态注入数据库 URL (使用同步驱动，因为 Alembic 不支持异步)
|
||||
config.set_main_option("sqlalchemy.url", settings.DATABASE_URL_SYNC)
|
||||
|
||||
# 日志配置
|
||||
if config.config_file_name is not None:
|
||||
fileConfig(config.config_file_name)
|
||||
|
||||
# MetaData 对象 - Alembic 通过它检测表结构变更
|
||||
target_metadata = Base.metadata
|
||||
|
||||
|
||||
def run_migrations_offline() -> None:
|
||||
"""离线模式：生成 SQL 脚本而不实际连接数据库"""
|
||||
url = config.get_main_option("sqlalchemy.url")
|
||||
context.configure(
|
||||
url=url,
|
||||
target_metadata=target_metadata,
|
||||
literal_binds=True,
|
||||
dialect_opts={"paramstyle": "named"},
|
||||
)
|
||||
with context.begin_transaction():
|
||||
context.run_migrations()
|
||||
|
||||
|
||||
def run_migrations_online() -> None:
|
||||
"""在线模式：连接数据库并直接执行迁移"""
|
||||
connectable = engine_from_config(
|
||||
config.get_section(config.config_ini_section, {}),
|
||||
prefix="sqlalchemy.",
|
||||
poolclass=pool.NullPool,
|
||||
)
|
||||
with connectable.connect() as connection:
|
||||
context.configure(
|
||||
connection=connection,
|
||||
target_metadata=target_metadata,
|
||||
)
|
||||
with context.begin_transaction():
|
||||
context.run_migrations()
|
||||
|
||||
|
||||
if context.is_offline_mode():
|
||||
run_migrations_offline()
|
||||
else:
|
||||
run_migrations_online()
|
||||
@@ -0,0 +1,25 @@
|
||||
"""${message}
|
||||
|
||||
Revision ID: ${up_revision}
|
||||
Revises: ${down_revision | comma,n}
|
||||
Create Date: ${create_date}
|
||||
"""
|
||||
from typing import Sequence, Union
|
||||
|
||||
from alembic import op
|
||||
import sqlalchemy as sa
|
||||
${imports if imports else ""}
|
||||
|
||||
# revision identifiers
|
||||
revision: str = ${repr(up_revision)}
|
||||
down_revision: Union[str, None] = ${repr(down_revision)}
|
||||
branch_labels: Union[str, Sequence[str], None] = ${repr(branch_labels)}
|
||||
depends_on: Union[str, Sequence[str], None] = ${repr(depends_on)}
|
||||
|
||||
|
||||
def upgrade() -> None:
|
||||
${upgrades if upgrades else "pass"}
|
||||
|
||||
|
||||
def downgrade() -> None:
|
||||
${downgrades if downgrades else "pass"}
|
||||
@@ -0,0 +1,143 @@
|
||||
"""initial_full_schema
|
||||
|
||||
Renames legacy tables to *_legacy backup, then creates
|
||||
all tables with correct UUID PKs, types, and constraints.
|
||||
|
||||
Revision ID: 0001
|
||||
Revises:
|
||||
Create Date: 2026-02-24
|
||||
"""
|
||||
from typing import Sequence, Union
|
||||
|
||||
from alembic import op
|
||||
import sqlalchemy as sa
|
||||
|
||||
revision: str = "0001"
|
||||
down_revision: Union[str, None] = None
|
||||
branch_labels: Union[str, Sequence[str], None] = None
|
||||
depends_on: Union[str, Sequence[str], None] = None
|
||||
|
||||
# Legacy tables to rename (preserve data)
|
||||
LEGACY_TABLES = ["users", "clients", "follow_ups", "expenses"]
|
||||
|
||||
|
||||
def upgrade() -> None:
|
||||
conn = op.get_bind()
|
||||
|
||||
# Step 1: Rename legacy tables to *_legacy
|
||||
for table in LEGACY_TABLES:
|
||||
exists = conn.execute(sa.text(
|
||||
f"SELECT EXISTS (SELECT 1 FROM information_schema.tables "
|
||||
f"WHERE table_schema='public' AND table_name='{table}')"
|
||||
)).scalar()
|
||||
if exists:
|
||||
conn.execute(sa.text(
|
||||
f'ALTER TABLE "{table}" RENAME TO "{table}_legacy"'
|
||||
))
|
||||
|
||||
# Step 2: Create new tables with proper schema
|
||||
|
||||
# ---- users ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE users (
|
||||
id UUID PRIMARY KEY,
|
||||
username VARCHAR(50) UNIQUE NOT NULL,
|
||||
password_hash VARCHAR(128) NOT NULL,
|
||||
role VARCHAR(20) NOT NULL DEFAULT 'viewer',
|
||||
permissions JSON DEFAULT '[]',
|
||||
is_active BOOLEAN DEFAULT true,
|
||||
created_at TIMESTAMP DEFAULT now(),
|
||||
updated_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
|
||||
# ---- clients ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE clients (
|
||||
id UUID PRIMARY KEY,
|
||||
name VARCHAR(200) NOT NULL,
|
||||
contact_person VARCHAR(100),
|
||||
phone VARCHAR(30),
|
||||
address VARCHAR(500),
|
||||
notes TEXT,
|
||||
created_at TIMESTAMP DEFAULT now(),
|
||||
updated_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
conn.execute(sa.text(
|
||||
"CREATE INDEX ix_clients_name ON clients (name);"
|
||||
))
|
||||
|
||||
# ---- customer_logs ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE customer_logs (
|
||||
id UUID PRIMARY KEY,
|
||||
customer_id UUID NOT NULL REFERENCES clients(id) ON DELETE CASCADE,
|
||||
content TEXT NOT NULL,
|
||||
created_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
conn.execute(sa.text(
|
||||
"CREATE INDEX ix_customer_logs_cid ON customer_logs (customer_id);"
|
||||
))
|
||||
|
||||
# ---- customer_tags ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE customer_tags (
|
||||
id UUID PRIMARY KEY,
|
||||
customer_id UUID NOT NULL REFERENCES clients(id) ON DELETE CASCADE,
|
||||
tag_name VARCHAR(100) NOT NULL,
|
||||
created_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
conn.execute(sa.text(
|
||||
"CREATE INDEX ix_customer_tags_cid ON customer_tags (customer_id);"
|
||||
))
|
||||
|
||||
# ---- follow_up_todos ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE follow_up_todos (
|
||||
id UUID PRIMARY KEY,
|
||||
customer_id UUID NOT NULL REFERENCES clients(id) ON DELETE CASCADE,
|
||||
task_desc TEXT NOT NULL,
|
||||
status VARCHAR(20) NOT NULL DEFAULT 'pending',
|
||||
created_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
conn.execute(sa.text(
|
||||
"CREATE INDEX ix_follow_up_todos_cid ON follow_up_todos (customer_id);"
|
||||
))
|
||||
|
||||
# ---- sales_opportunities ----
|
||||
conn.execute(sa.text("""
|
||||
CREATE TABLE sales_opportunities (
|
||||
id UUID PRIMARY KEY,
|
||||
customer_id UUID NOT NULL REFERENCES clients(id) ON DELETE CASCADE,
|
||||
amount NUMERIC(12, 2) NOT NULL DEFAULT 0,
|
||||
stage VARCHAR(20) NOT NULL DEFAULT 'intent',
|
||||
created_at TIMESTAMP DEFAULT now()
|
||||
);
|
||||
"""))
|
||||
conn.execute(sa.text(
|
||||
"CREATE INDEX ix_sales_opp_cid ON sales_opportunities (customer_id);"
|
||||
))
|
||||
|
||||
|
||||
def downgrade() -> None:
|
||||
conn = op.get_bind()
|
||||
|
||||
# Drop new tables
|
||||
for t in ["sales_opportunities", "follow_up_todos", "customer_tags",
|
||||
"customer_logs", "clients", "users"]:
|
||||
conn.execute(sa.text(f'DROP TABLE IF EXISTS "{t}" CASCADE'))
|
||||
|
||||
# Restore legacy tables
|
||||
for table in LEGACY_TABLES:
|
||||
exists = conn.execute(sa.text(
|
||||
f"SELECT EXISTS (SELECT 1 FROM information_schema.tables "
|
||||
f"WHERE table_schema='public' AND table_name='{table}_legacy')"
|
||||
)).scalar()
|
||||
if exists:
|
||||
conn.execute(sa.text(
|
||||
f'ALTER TABLE "{table}_legacy" RENAME TO "{table}"'
|
||||
))
|
||||
Reference in New Issue
Block a user