fix(deploy): 默认关闭沙箱公网访问

scripts/test-deployment-public-url.sh

@@ -20,6 +20,7 @@ mkdir -p "$TMP_DIR/scripts"
 cp \
     "$REPO_ROOT/scripts/init-security-env.sh" \
     "$REPO_ROOT/scripts/init-public-api-base-url.sh" \
+    "$REPO_ROOT/scripts/init-server-http-bind-ip.sh" \
     "$TMP_DIR/scripts/"
 
 cd "$TMP_DIR"
@@ -48,6 +49,34 @@ assert_compression_config() {
     fi
 }
 
+assert_sandbox_public_access_disabled() {
+    local config_file="$1"
+    grep -q '^    location = /api/sandbox {' "$config_file"
+    grep -q '^    location \^~ /api/sandbox/ {' "$config_file"
+    grep -q '^    location = /jupyterlab {' "$config_file"
+    grep -q '^    location \^~ /jupyterlab/ {' "$config_file"
+    grep -q '^    location = /sandbox {' "$config_file"
+    grep -q '^    location \^~ /sandbox/ {' "$config_file"
+    if grep -Eq 'proxy_pass http://127\.0\.0\.1:(8081|8888)' "$config_file"; then
+        echo "Unexpected public Sandbox/Jupyter proxy in $config_file" >&2
+        return 1
+    fi
+}
+
+assert_compose_exposure() {
+    local expected_server_host_ip="$1"
+    docker compose config --format json | python3 -c '
+import json, sys
+expected = sys.argv[1]
+config = json.load(sys.stdin)
+sandbox_ports = config["services"]["sandbox"].get("ports") or []
+assert sandbox_ports == [], f"sandbox ports published: {sandbox_ports}"
+server_ports = config["services"]["easyai-server"].get("ports") or []
+assert len(server_ports) == 1, server_ports
+assert server_ports[0].get("host_ip") == expected, server_ports
+' "$expected_server_host_ip"
+}
+
 sed -i.bak 's/^SERVER_HTTP_PORT=.*/SERVER_HTTP_PORT=4100/' .env.sample
 rm -f .env.sample.bak
 DEPLOY_NON_INTERACTIVE=1 \
@@ -57,8 +86,9 @@ DEPLOY_NON_INTERACTIVE=1 \
     bash start.sh >/dev/null
 grep -qx 'NUXT_PUBLIC_BASE_APIURL=http://10.0.0.8:4100' .env
 grep -qx 'CONFIG_PUBLIC_API_BASE_URL=http://10.0.0.8:4100' .env
+grep -qx 'SERVER_HTTP_BIND_IP=0.0.0.0' .env
 if command -v docker >/dev/null 2>&1 && docker compose version >/dev/null 2>&1; then
-    docker compose config --quiet
+    assert_compose_exposure 0.0.0.0
 fi
 
 reset_case
@@ -75,6 +105,11 @@ grep -q 'proxy_set_header X-Forwarded-Port $server_port;' demo.example.com.conf
 grep -q "proxy_set_header X-Original-Prefix '/api';" demo.example.com.conf
 grep -q 'location = /api {' demo.example.com.conf
 assert_compression_config demo.example.com.conf
+assert_sandbox_public_access_disabled demo.example.com.conf
+grep -qx 'SERVER_HTTP_BIND_IP=127.0.0.1' .env
+if command -v docker >/dev/null 2>&1 && docker compose version >/dev/null 2>&1; then
+    assert_compose_exposure 127.0.0.1
+fi
 
 # 直接验证 https.sh 的缺省配置生成函数会采用完整模板，而不是只代理 3010。
 eval "$(awk '
@@ -90,6 +125,7 @@ grep -q 'proxy_pass http://127.0.0.1:3001/;' easyai-proxy.conf
 grep -q 'location /socket.io {' easyai-proxy.conf
 grep -q 'proxy_set_header X-Forwarded-Host $easyai_forwarded_host;' easyai-proxy.conf
 assert_compression_config easyai-proxy.conf
+assert_sandbox_public_access_disabled easyai-proxy.conf
 
 reset_case
 DEPLOY_NON_INTERACTIVE=1 \