feat: 更新环境配置，添加 CORS 支持并修改服务器地址

apps/server/src/config.js

@@ -23,10 +23,15 @@ loadEnv();
 export function getConfig() {
   const serverPort = Number(process.env.SERVER_PORT || 3001);
   const adminEmail = String(process.env.ADMIN_EMAIL || "").trim().toLowerCase();
+  const corsOriginsRaw = String(process.env.CORS_ORIGINS || "").trim();
+  const corsOrigins = corsOriginsRaw
+    ? corsOriginsRaw.split(",").map((item) => item.trim()).filter(Boolean)
+    : true;
 
   return {
     serverPort,
     adminEmail,
+    corsOrigins,
     database: {
       host: process.env.DATABASE_HOST || "127.0.0.1",
       port: Number(process.env.DATABASE_PORT || 5432),

apps/server/src/index.js

@@ -14,8 +14,9 @@ import { syncRoutes } from "./routes/sync.routes.js";
 const app = Fastify({ logger: true });
 
 // Plugins
+const config = getConfig();
 await app.register(cors, {
-  origin: true,
+  origin: config.corsOrigins,
   credentials: true,
   methods: ["GET", "POST", "PATCH", "DELETE", "OPTIONS"],
   allowedHeaders: ["Content-Type", "Authorization", "Accept"]
@@ -69,7 +70,6 @@ app.setErrorHandler((err, _req, reply) => {
 app.get("/health", async () => ({ ok: true }));
 
 // Routes
-const config = getConfig();
 app.decorate("config", config);
 
 await authRoutes(app);