移动端和 PC 端登录页都加了“图形验证码

scripts/deploy-prod.sh

@@ -128,6 +128,7 @@ validate_env() {
   fi
 
   local app_env caddy_domain caddy_email mysql_dsn redis_addr storage_endpoint
+  local minio_root_user minio_root_password storage_access_key_id storage_secret_access_key
   app_env="$(require_env APP_ENV)"
   caddy_domain="$(require_env CADDY_DOMAIN)"
   caddy_email="$(require_env CADDY_EMAIL)"
@@ -139,10 +140,10 @@ validate_env() {
   require_env MYSQL_USER >/dev/null
   require_env MYSQL_PASSWORD >/dev/null
   require_env JWT_SECRET >/dev/null
-  require_env MINIO_ROOT_USER >/dev/null
-  require_env MINIO_ROOT_PASSWORD >/dev/null
-  require_env STORAGE_ACCESS_KEY_ID >/dev/null
-  require_env STORAGE_SECRET_ACCESS_KEY >/dev/null
+  minio_root_user="$(require_env MINIO_ROOT_USER)"
+  minio_root_password="$(require_env MINIO_ROOT_PASSWORD)"
+  storage_access_key_id="$(require_env STORAGE_ACCESS_KEY_ID)"
+  storage_secret_access_key="$(require_env STORAGE_SECRET_ACCESS_KEY)"
 
   if [[ "${app_env}" != "production" ]]; then
     log_warn "APP_ENV 当前是 ${app_env}，生产部署建议改为 production"
@@ -173,6 +174,12 @@ validate_env() {
     log_error "STORAGE_ENDPOINT 仍指向本机，请改为 http://minio:9000"
     exit 1
   fi
+  if [[ "${storage_endpoint}" == "http://minio:9000" || "${storage_endpoint}" == "minio:9000" ]]; then
+    if [[ "${storage_access_key_id}" != "${minio_root_user}" || "${storage_secret_access_key}" != "${minio_root_password}" ]]; then
+      log_error "使用内置 MinIO 时，STORAGE_ACCESS_KEY_ID/SECRET_ACCESS_KEY 必须和 MINIO_ROOT_USER/ROOT_PASSWORD 保持一致"
+      exit 1
+    fi
+  fi
   if awk -F= '/^[A-Z0-9_]+=/{ if ($0 ~ /=(change-|保持你的|你的)/) found=1 } END { exit found ? 0 : 1 }' "${BACKEND_ENV}"; then
     log_error "backend/.env 里还有占位值，请先替换后再部署"
     exit 1