优化日志记录并改用非 root 运行

backend/internal/config/config.go

@@ -109,7 +109,7 @@ func Load() Config {
 			Level:         getEnv("LOG_LEVEL", "info"),
 			Dir:           getEnv("LOG_DIR", "logs"),
 			EnableConsole: getEnvBool("LOG_ENABLE_CONSOLE", true),
-			EnableFile:    getEnvBool("LOG_ENABLE_FILE", false),
+			EnableFile:    getEnvBool("LOG_ENABLE_FILE", true),
 			RetainDays:    getEnvInt("LOG_RETAIN_DAYS", 14),
 		},
 		RateLimit: RateLimitConfig{

backend/internal/middleware/request_logger.go

@@ -2,6 +2,7 @@ package middleware
 
 import (
 	"net/http"
+	"strings"
 	"time"
 
 	"hfb_sys/backend/pkg/response"
@@ -10,7 +11,7 @@ import (
 	"go.uber.org/zap"
 )
 
-// 正常请求不记录访问日志；只有慢请求、服务端错误、限流和有诊断价值的认证失败会输出。
+// 查询请求默认静默；成功写操作、慢请求、服务端错误、限流和有诊断价值的认证失败会输出。
 const slowRequestThresholdMs = 500
 
 func RequestLogger(logger *zap.Logger) gin.HandlerFunc {
@@ -23,8 +24,9 @@ func RequestLogger(logger *zap.Logger) gin.HandlerFunc {
 		path := c.Request.URL.Path
 		route := c.FullPath()
 		authFailure := meaningfulAuthFailure(c)
+		operation := meaningfulOperation(c.Request.Method, path, status)
 
-		if shouldSkipHTTPLog(path, route, status, latencyMs) && !authFailure {
+		if shouldSkipHTTPLog(path, route, status, latencyMs) && !authFailure && !operation {
 			return
 		}
 
@@ -78,10 +80,33 @@ func RequestLogger(logger *zap.Logger) gin.HandlerFunc {
 			logger.Warn("后台认证失败", fields...)
 		case latencyMs >= slowRequestThresholdMs:
 			logger.Warn("HTTP 慢请求", fields...)
+		case operation:
+			logger.Info("HTTP 操作完成", fields...)
 		}
 	}
 }
 
+func meaningfulOperation(method, path string, status int) bool {
+	if status < 200 || status >= 400 {
+		return false
+	}
+	// 支付回调已有更完整的业务结果日志，不再重复记录一条访问日志。
+	if isPaymentNotifyPath(path) {
+		return false
+	}
+	switch method {
+	case http.MethodPost, http.MethodPut, http.MethodPatch, http.MethodDelete:
+		return true
+	default:
+		return false
+	}
+}
+
+func isPaymentNotifyPath(path string) bool {
+	return (strings.Contains(path, "/payment/") || strings.Contains(path, "/payments/")) &&
+		strings.HasSuffix(strings.TrimSuffix(path, "/"), "/notify")
+}
+
 // shouldSkipHTTPLog 判断是否为无需记录的普通请求。
 func shouldSkipHTTPLog(_, _ string, status int, latencyMs float64) bool {
 	if status >= 500 || status == http.StatusTooManyRequests {

backend/internal/middleware/request_logger_test.go

@@ -29,3 +29,28 @@ func TestShouldSkipHTTPLog(t *testing.T) {
 		})
 	}
 }
+
+func TestMeaningfulOperation(t *testing.T) {
+	tests := []struct {
+		name   string
+		method string
+		path   string
+		status int
+		want   bool
+	}{
+		{name: "创建成功", method: "POST", path: "/api/orders", status: 201, want: true},
+		{name: "更新成功", method: "PUT", path: "/api/orders/1", status: 200, want: true},
+		{name: "删除成功", method: "DELETE", path: "/api/orders/1", status: 204, want: true},
+		{name: "普通查询", method: "GET", path: "/api/orders", status: 200, want: false},
+		{name: "失败写操作", method: "POST", path: "/api/orders", status: 400, want: false},
+		{name: "支付回调已有业务日志", method: "POST", path: "/api/payments/lakala/notify", status: 200, want: false},
+		{name: "支付回调尾部斜杠", method: "POST", path: "/api/payments/leshua/notify/", status: 200, want: false},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := meaningfulOperation(tt.method, tt.path, tt.status); got != tt.want {
+				t.Fatalf("meaningfulOperation() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}