全项目扫描修复: Docker数据卷修复+安全requireAdmin+12页SEO+API白名单+脚本超时+常量提取+假数据删除

scripts/daily-news.mjs

@@ -4,7 +4,9 @@ import OpenAI from "openai";
 import "dotenv/config";
 import { withRetry } from "./lib/retry.mjs";
 
-const base = (process.env.DATABASE_URL || "mysql://localhost:3306/zhuiguang_ai?charset=utf8mb4").replace("mysql://", "mariadb://");
+const rawUrl = process.env.DATABASE_URL;
+if (!rawUrl) { console.error("DATABASE_URL not set"); process.exit(1); }
+const base = rawUrl.replace("mysql://", "mariadb://");
 const sep = base.includes("?") ? "&" : "?";
 const connectionString = `${base}${sep}connection_limit=20&pool_timeout=30`;
 const adapter = new PrismaMariaDb(connectionString);
@@ -13,6 +15,8 @@ const prisma = new PrismaClient({ adapter });
 const openai = new OpenAI({
   apiKey: process.env.DEEPSEEK_API_KEY,
   baseURL: "https://api.deepseek.com/v1",
+  timeout: 120000,
+  maxRetries: 2,
 });
 
 async function fetchRSS(rssUrl, source) {
@@ -390,4 +394,7 @@ async function main() {
   }
 }
 
-main();
+main()
+  .then(() => { console.log("Done"); process.exit(0); })
+  .catch((e) => { console.error(e); process.exit(1); })
+  .finally(() => prisma.$disconnect());