chore: checkpoint before switching to main

infrastructure/.env.example

@@ -2,15 +2,13 @@
 # 丹阳公益婚恋服务平台 — 生产环境环境变量
 # ============================================
 # ⚠️  此文件为模板，请勿提交真实值到 Git
-# ⚠️  生产密钥必须通过 k8s secret / Vault / 密钥管理服务注入
+# ⚠️  数据库密码写入 infrastructure/secrets/db_password.txt，其余密钥由部署环境注入
 # ============================================
 
 # --- Database ---
 DB_NAME=danyang_match
 DB_USER=danyang
-DB_PASSWORD_FILE=/run/secrets/db_password   # Docker Swarm secret 文件路径
-# PostgreSQL 连接参数（如不使用 Docker secrets 则直接设置 DB_PASSWORD）
-# DB_PASSWORD=your-secure-password-here
+# DB 密码不写在本文件中
 
 # --- Redis ---
 REDIS_HOST=redis
@@ -36,8 +34,14 @@ ENCRYPTION_KEY=32539f3d2fa8123dcec899cc3dbee7347034123a126ac22fcb4702e10c454d50
 WECHAT_APP_ID=your-wechat-app-id
 WECHAT_APP_SECRET=your-wechat-app-secret
 
+# --- 实名核验提供方（生产禁止使用 mock） ---
+VERIFICATION_PROVIDER=your-provider-code
+
+# --- Spring Security 后备账号随机密码（后备账号不用于业务登录） ---
+SPRING_SECURITY_FALLBACK_PASSWORD=your-random-fallback-password
+
 # --- Feature Flags ---
 FEATURES_APPEAL_ENABLED=false
 
 # --- Spring Boot ---
-SPRING_PROFILES_ACTIVE=production
+SPRING_PROFILES_ACTIVE=docker,production

infrastructure/scripts/restore.sh

@@ -33,7 +33,7 @@ gunzip -c "${BACKUP_FILE}" | psql \
   -h "${DB_HOST}" \
   -U "${DB_USER}" \
   -d "${DB_NAME}" \
-  --On-error-stop
+  --set ON_ERROR_STOP=on
 
 echo "[$(date '+%Y-%m-%d %H:%M:%S')] 恢复完成"
 

infrastructure/scripts/smoke-test.sh

@@ -51,7 +51,6 @@ check "举报提交接口" "/api/v1/risk/reports" "401"
 echo ""
 echo "【Nginx】"
 check "Nginx首页" "/" "200"
-check "HTTPS生效" "https://${BASE_URL##*://}/" "200"
 
 echo ""
 echo "============================================"