wangruiguo/Leantime
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

OneBot: Leantime 改造版源码（BOM/Univer 表格/AI 接管/品牌替换等）

Browse Source
This commit is contained in:
wangruiguo
2026-09-03 18:49:20 +08:00
commit d647428529
3501 changed files with 1988906 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

171
config/configuration.sample.php Normal file
View File

@@ -0,0 +1,171 @@
<?php
namespace Leantime\Config;
/***
*
* Config class
* This class is included for backwards compatibility and to be used with subfolder installations
*
* @deprecated Please do not use this file to set you configuration. Use the environment file .env instead
*
* @see config/sample.env
*/
class Config
{
/* General */
public $sitename = 'Leantime'; // Name of your site, can be changed later
public $language = 'en-US'; // Default language
public $logoPath = '/dist/images/logo.svg'; // Default logo path, can be changed later
public $printLogoURL = '/dist/images/logo.png'; // Default logo URL use for printing (must be jpg or png format)
public $appUrl = ''; // Base URL, trailing slash not needed
public $appDir = ''; // Base of application without trailing slash (used for cookies), e.g, /leantime
public $defaultTheme = 'default'; // Default theme
public $primarycolor = '#006d9f'; // Primary Theme color
public $secondarycolor = '#00a886'; // Secondary Theme Color
public $defaultTimezone = 'America/Los_Angeles'; // Set default timezone
public $enableMenuType = false; // Enable to specify menu on a project-by-project basis
public $debug = 0; // Debug flag
public $disableLoginForm = false; // If true then don't show the login form (useful only if additional auth method[s] are available)
/* Database */
public $dbHost = 'localhost'; // Database host
public $dbUser = ''; // Database username
public $dbPassword = ''; // Database password
public $dbDatabase = ''; // Database name
public $dbPort = '3306'; // Database port
/* Fileupload */
public $userFilePath = 'userfiles/'; // Local relative path to store uploaded files (if not using S3)
public $dbBackupPath = 'backupdb/'; // Local relative path to store backup files, need permission to write
/* S3 configuration */
public $useS3 = false; // Set to true if you want to use S3 instead of local files
public $s3Key = ''; // S3 Key
public $s3Secret = ''; // S3 Secret
public $s3Bucket = ''; // Your S3 bucket
public $s3UsePathStyleEndpoint = false; // false => https://[bucket].[endpoint] ; true => https://[endpoint]/[bucket]
public $s3Region = ''; // S3 region
public $s3FolderName = ''; // Foldername within S3 (can be emtpy)
public $s3EndPoint = null; // S3 EndPoint S3 Compatible (https://sfo2.digitaloceanspaces.com)
/* Sessions */
public $sessionPassword = '3evBlq9zdUEuzKvVJHWWx3QzsQhturBApxwcws2m'; // Salting sessions. Replace with a strong password
public $sessionExpiration = 28800; // How many seconds after inactivity should we logout? 28800seconds = 8hours
/* Email */
public $email = ''; // Return email address
public $useSMTP = false; // Use SMTP? If set to false, the default php mail() function will be used
public $smtpHosts = ''; // SMTP host
public $smtpAuth = true; // SMTP use user/password authentication
public $smtpUsername = ''; // SMTP username
public $smtpPassword = ''; // SMTP password
public $smtpAutoTLS = true; // SMTP Enable TLS encryption automatically if a server supports it
public $smtpSecure = ''; // SMTP Security protocol (usually one of: TLS, SSL, STARTTLS)
public $smtpSSLNoverify = false; // SMTP Allow insecure SSL: Don't verify certificate, accept self-signed, etc.
public $smtpPort = ''; // Port (usually one of 25, 465, 587, 2526)
/* LDAP default settings (can be changed in company settings) */
public $useLdap = false; // Set to true if you want to use LDAP
public $ldapType = 'OL'; // Select the correct directory type. Currently Supported: OL - OpenLdap, AD - Active Directory
public $ldapHost = ''; // FQDN
public $ldapPort = 389; // Default Port
public $ldapDn = ''; // Location of users, example: CN=users,DC=example,DC=com
// Default LDAP keys in your directory.
// Works for OL
public $ldapKeys = '{
"username":"uid",
"groups":"memberof",
"email":"mail",
"firstname":"displayname",
"lastname":"",
"phone":"",
"jobTitle":"title",
"jobLevel":"level",
"department":"department"
}';
// For AD use
/*
public $ldapKeys = '{
"username":"cn",
"groups":"memberof",
"email":"mail",
"firstname":"givenname",
"lastname":"sn",
"phone":"",
"jobTitle":"title",
"jobLevel":"level",
"department":"department"
}';
*/
// Default role assignments upon first login. (Optional) Can be updated in user settings for each user
public $ldapLtGroupAssignments = '{
"5": {
"ltRole":"readonly",
"ldapRole":""
},
"10": {
"ltRole":"commenter",
"ldapRole":""
},
"20": {
"ltRole":"editor",
"ldapRole":""
},
"30": {
"ltRole":"manager",
"ldapRole":""
},
"40": {
"ltRole":"admin",
"ldapRole":""
},
"50": {
"ltRole":"owner",
"ldapRole":"administrators"
}
}';
public $ldapDefaultRoleKey = 20; // Default Leantime Role on creation. (set to editor)
}

220
config/sample.env Normal file
View File

@@ -0,0 +1,220 @@
# This is a sample configuration file with all possible configuration options.
# If you don't want to maintain a file like this you can pass in all variables via Server Variables
## Minimum Configuration, these are required for installation
LEAN_APP_URL = '' # Base URL, only needed for subfolder installation
LEAN_APP_DIR = '' # Base of application without trailing slash (used for cookies), e.g, /leantime
LEAN_DEBUG = 0 # Debug flag
# LEAN_PERMISSIONS_ENFORCE = true # Enforce #[RequiresPermission] denials (403 / RPC -32001). Set false for audit/log-only mode.
# Database
LEAN_DB_HOST = 'localhost' # Database host
LEAN_DB_USER = '' # Database username
LEAN_DB_PASSWORD = '' # Database password
LEAN_DB_DATABASE = '' # Database name
LEAN_DB_PORT = '3306' # Database port (3306 for MySQL, 5432 for PostgreSQL)
## Database Driver Selection (Advanced)
# LEAN_DB_DEFAULT_CONNECTION = 'mysql' # Options: 'mysql', 'pgsql'. Default: mysql
## PostgreSQL-specific options (only when LEAN_DB_DEFAULT_CONNECTION = 'pgsql')
# LEAN_DB_SCHEMA = 'public' # PostgreSQL schema (default: public)
# LEAN_DB_SSLMODE = 'prefer' # SSL mode: disable, allow, prefer, require, verify-ca, verify-full
## Database Connection Management (Advanced)
LEAN_DB_PERSISTENT_CONNECTIONS = true # Enable persistent database connections for connection pooling
LEAN_DB_MAX_CONNECTIONS = 100 # Maximum number of database connections in pool
LEAN_DB_MIN_CONNECTIONS = 1 # Minimum number of database connections in pool
LEAN_DB_CONNECTION_TIMEOUT = 30 # Database connection timeout in seconds
LEAN_DB_IDLE_TIMEOUT = 300 # Database idle timeout in seconds (5 minutes)
## Session Management
LEAN_SESSION_PASSWORD = '3evBlq9zdUEuzKvVJHWWx3QzsQhturBApxwcws2m' # Salting sessions, replace with a strong password
LEAN_SESSION_EXPIRATION = 480 # Session idle timeout in MINUTES. Forwarded directly to Laravel's `session.lifetime` config (which is in minutes, not seconds). 480 minutes = 8 hours. The Helm chart (`helm/values.yaml` -> `app.session.expiration`) must use the same unit.
## Session & Security
# LEAN_SESSION_SECURE= # Set to true to force secure cookies (auto-detected if not set)
# LEAN_HSTS_ENABLED=false # Set to true to enable HSTS header (auto-enabled on HTTPS)
## Optional Configuration, you may omit these from your .env file
## Default Settings
LEAN_SITENAME = 'OneBot' # Name of your site, can be changed later
LEAN_LANGUAGE = 'en-US' # Default language
LEAN_DEFAULT_TIMEZONE = 'America/Los_Angeles' # Set default timezone
LEAN_LOG_PATH = '' # Default Log Path (including filename), if not set /logs/error.log will be used
LEAN_LOG_CHANNELS = 'single,syslog,sentry' # Logging channels (comma-separated): single, syslog, sentry, stderr. Use 'stderr' for container logging.
LEAN_LOG_DEPRECATIONS = 0 # Write PHP deprecation notices to logs/deprecations.log (off by default; also enabled by LEAN_DEBUG)
LEAN_DISABLE_LOGIN_FORM = false # If true then don't show the login form (useful only if additional auth method[s] are available)
#LEAN_TRUSTED_PROXIES = '127.0.0.1,REMOTE_ADDR' # Set trusted proxy ips. Can be used to restrict access or define access from certain proxies only. Default is access from anywhere
## Look & Feel, these settings are available in the UI and can be overwritten there.
LEAN_LOGO_PATH = '/dist/images/logo.svg' # Default logo path, can be changed later
LEAN_PRINT_LOGO_URL = '/dist/images/logo.png' # Default logo URL use for printing (must be jpg or png format)
LEAN_DEFAULT_THEME = 'default' # Default theme
LEAN_PRIMARY_COLOR = '#006d9f' # Primary Theme color
LEAN_SECONDARY_COLOR =' #00a886' # Secondary Theme Color
## File Uploads
# Local File Uploads
LEAN_USER_FILE_PATH = 'userfiles/' # Local relative path to store uploaded files (if not using S3)
LEAN_DB_BACKUP_PATH = 'backupdb/' # Local relative path to store backup files, need permission to write
# S3 File Uploads
LEAN_USE_S3 = false # Set to true if you want to use S3 instead of local files
LEAN_S3_KEY = '' # S3 Key
LEAN_S3_SECRET = '' # S3 Secret
LEAN_S3_BUCKET = '' # Your S3 bucket
LEAN_S3_USE_PATH_STYLE_ENDPOINT = false # Sets the endpoint style: false => https://[bucket].[endpoint] ; true => https://[endpoint]/[bucket]
LEAN_S3_REGION = '' # S3 region
LEAN_S3_FOLDER_NAME = '' # Foldername within S3 (can be empty)
LEAN_S3_END_POINT = null # S3 EndPoint S3 Compatible (https://sfo2.digitaloceanspaces.com)
## Email
LEAN_EMAIL_RETURN = '' # Return email address, needs to be valid email address format
LEAN_EMAIL_USE_SMTP = false # Use SMTP? If set to false, the default php mail() function will be used
LEAN_EMAIL_SMTP_HOSTS = '' # SMTP host
LEAN_EMAIL_SMTP_AUTH = true # SMTP authentication required
LEAN_EMAIL_SMTP_USERNAME = '' # SMTP username
LEAN_EMAIL_SMTP_PASSWORD = '' # SMTP password
LEAN_EMAIL_SMTP_AUTO_TLS = true # SMTP Enable TLS encryption automatically if a server supports it
LEAN_EMAIL_SMTP_SECURE = '' # SMTP Security protocol (usually one of: TLS, SSL, STARTTLS)
LEAN_EMAIL_SMTP_SSLNOVERIFY = false # SMTP Allow insecure SSL: Don't verify certificate, accept self-signed, etc.
LEAN_EMAIL_SMTP_PORT = '' # Port (usually one of 25, 465, 587, 2526)
## LDAP
LEAN_LDAP_USE_LDAP = false # Set to true if you want to use LDAP
LEAN_LDAP_LDAP_DOMAIN = '' # Domain name after username@ so users can login without domain definition
LEAN_LDAP_LDAP_TYPE = 'OL' # Select the correct directory type. Currently Supported: OL - OpenLdap, AD - Active Directory
LEAN_LDAP_HOST = '' # FQDN
LEAN_LDAP_PORT = 389 # Default Port
LEAN_LDAP_URI = '' # LDAP URI as alternative to hostname and port. Uses ldap://hostname:port
LEAN_LDAP_DN = '' # Location of users, example: CN=users,DC=example,DC=com
# Leantime->Ldap attribute mapping
LEAN_LDAP_KEYS="{
\"username\":\"uid\",
\"groups\":\"memberOf\",
\"email\":\"mail\",
\"firstname\":\"displayname\",
\"lastname\":\"\",
\"phone\":\"telephoneNumber\",
\"jobTitle\":\"title\"
\"jobLevel\":\"level\"
\"department\":\"department\"
}"
# For AD use these default attributes
# LEAN_LDAP_KEYS="{
# \"username\":\"cn\",
# \"groups\":\"memberOf\",
# \"email\":\"mail\",
# \"firstname\":\"givenName\",
# \"lastname\":\"sn\",
# \"phone\":\"telephoneNumber\",
# \"jobTitle\":\"title\"
# \"jobLevel\":\"level\"
# \"department\":\"department\"
# }"
LEAN_LDAP_DEFAULT_ROLE_KEY = 20 # Default Leantime Role on creation. (set to editor)
# Default role assignments upon first login.
# optional - Can be updated later in user settings for each user
LEAN_LDAP_GROUP_ASSIGNMENT="{
\"5\": {
\"ltRole\":\"readonly\",
\"ldapRole\":\"readonly\"
},
\"10\": {
\"ltRole\":\"commenter\",
\"ldapRole\":\"commenter\"
},
\"20\": {
\"ltRole\":\"editor\",
\"ldapRole\":\"editor\"
},
\"30\": {
\"ltRole\":\"manager\",
\"ldapRole\":\"manager\"
},
\"40\": {
\"ltRole\":\"admin\",
\"ldapRole\":\"administrators\"
},
\"50\": {
\"ltRole\":\"owner\",
\"ldapRole\":\"administrators\"
}
}"
## OpenID Connect
# required
LEAN_OIDC_ENABLE = false
LEAN_OIDC_CLIENT_ID =
LEAN_OIDC_CLIENT_SECRET =
# required - the URL for your provider (examples down below)
#LEAN_OIDC_PROVIDER_URL =
#Create User if it doesn't exist in Leantime db, otherwise fail login
LEAN_OIDC_CREATE_USER = false
# Default role for users created via OIDC (20 is editor)
LEAN_OIDC_DEFAULT_ROLE = 20
# optional - these will be read from the well-known configuration if possible
#LEAN_OIDC_AUTH_URL_OVERRIDE =
#LEAN_OIDC_TOKEN_URL_OVERRIDE =
#LEAN_OIDC_JWKS_URL_OVERRIDE =
#LEAN_OIDC_USERINFO_URL_OVERRIDE =
# optional - override the public key for RSA validation
#LEAN_OIDC_CERTIFICATE_STRING =
#LEAN_OIDC_CERTIFICATE_FILE =
# optional - override the requested scopes
#LEAN_OIDC_SCOPES =
# optional - override the keys used for these fields
#LEAN_OIDC_FIELD_EMAIL =
#LEAN_OIDC_FIELD_FIRSTNAME =
#LEAN_OIDC_FIELD_LASTNAME =
#LEAN_OIDC_FIELD_PHONE =
#LEAN_OIDC_FIELD_JOBTITLE =
#LEAN_OIDC_FIELD_JOBLEVEL=
#LEAN_OIDC_FIELD_DEPARTMENT =
## OpenID Connect setting for GitHub
#LEAN_OIDC_PROVIDER_URL = https://token.actions.githubusercontent.com/
#LEAN_OIDC_AUTH_URL_OVERRIDE = https://github.com/login/oauth/authorize
#LEAN_OIDC_TOKEN_URL_OVERRIDE = https://github.com/login/oauth/access_token
#LEAN_OIDC_USERINFO_URL_OVERRIDE = https://api.github.com/user,https://api.github.com/user/emails
#LEAN_OIDC_SCOPES = user:email,read:user
#LEAN_OIDC_FIELD_EMAIL = 0.email
#LEAN_OIDC_FIELD_FIRSTNAME = name
## Redis (for session storage and cache)
LEAN_USE_REDIS = false # Set to true to use redis as session cache
LEAN_REDIS_URL = '' # Add URL path such as tcp://1.2.3.4:6379. If you are using a password, add ?auth=yourverycomplexpasswordhere to your URL
LEAN_REDIS_HOST = ''
LEAN_REDIS_PORT = 6379
LEAN_REDIS_PASSWORD = ''
LEAN_REDIS_SCHEME = ''
LEAN_REDIS_SESSION_DB = 1 # Redis database for SESSIONS. Set this to a different DB than the cache connection (LEAN_REDIS_DB, default 0) so cache FLUSHDB can never log users out. Non-cluster setups only.
## Rate limiting (per minute; keyed by client IP + session user id when available)
LEAN_RATELIMIT_GENERAL = 2000 # Cron (/cron) and other non-API requests routed through the limiter
LEAN_RATELIMIT_API = 120 # API (JSON-RPC) requests; 2 req/s sustained
LEAN_RATELIMIT_AUTH = 20 # Login attempts — keep low (brute-force protection)
LEAN_RATELIMIT_MCP = 300 # MCP endpoint requests; shares the same limiter key as API/general
LEAN_RATELIMIT_SIGNUP = 5 # Signup + user-invite POSTs per IP per minute (invite-spam protection)
LEAN_RATELIMIT_INVITES_USER = 10 # User invites per inviting user per HOUR
LEAN_RATELIMIT_INVITES_TENANT = 30 # User invites per installation per DAY (raise for bulk onboarding/imports)
## News Service
LEAN_NEWS_ENABLED = true # Set to false to disable news service in airgapped environments