Merge pull request #6494 from jumpserver/pr@dev@add_watermark

perf: 添加配置文件，控制luna水印

apps/jumpserver/conf.py

@@ -264,6 +264,7 @@ class Config(dict):
         'SECURITY_INSECURE_COMMAND_LEVEL': 5,
         'SECURITY_INSECURE_COMMAND_EMAIL_RECEIVER': '',
         'SECURITY_LUNA_REMEMBER_AUTH': True,
+        'SECURITY_WATERMARK_ENABLED': False,
 
         'HTTP_BIND_HOST': '0.0.0.0',
         'HTTP_LISTEN_PORT': 8080,

apps/jumpserver/settings/custom.py

@@ -128,5 +128,6 @@ HEALTH_CHECK_TOKEN = CONFIG.HEALTH_CHECK_TOKEN
 
 TERMINAL_RDP_ADDR = CONFIG.TERMINAL_RDP_ADDR
 SECURITY_LUNA_REMEMBER_AUTH = CONFIG.SECURITY_LUNA_REMEMBER_AUTH
+SECURITY_WATERMARK_ENABLED = CONFIG.SECURITY_WATERMARK_ENABLED
 
 LOGIN_REDIRECT_TO_BACKEND = CONFIG.LOGIN_REDIRECT_TO_BACKEND

apps/settings/api/common.py

@@ -129,6 +129,7 @@ class PublicSettingApi(generics.RetrieveAPIView):
                 },
                 "AUTH_WECOM": settings.AUTH_WECOM,
                 "AUTH_DINGTALK": settings.AUTH_DINGTALK,
+                'SECURITY_WATERMARK_ENABLED': settings.SECURITY_WATERMARK_ENABLED
             }
         }
         return instance

config_example.yml

@@ -129,3 +129,24 @@ REDIS_PORT: 6379
 #
 # Windows 登录跳过手动输入密码
 # WINDOWS_SKIP_ALL_MANUAL_PASSWORD: False
+
+# 是否开启 Luna 水印
+# SECURITY_WATERMARK_ENABLED: False
+
+# 健康检查的token，默认是空
+# HEALTH_CHECK_TOKEN: ''
+
+# 浏览器关闭页面后，会话过期
+# SESSION_EXPIRE_AT_BROWSER_CLOSE_FORCE: False
+
+# 每次api请求，session续期
+# SESSION_SAVE_EVERY_REQUEST: True
+
+# 硬盘检查
+# DISK_CHECK_ENABLED: True
+
+# 仅允许用户从来源处登录
+# ONLY_ALLOW_AUTH_FROM_SOURCE: False
+
+# 仅允许已存在的用户登录，不允许第三方认证后，自动创建用户
+# ONLY_ALLOW_EXIST_USER_AUTH: False