From 45140c7f5a9d97aaab512c6bafe216d871671fca Mon Sep 17 00:00:00 2001
From: chenbowen <you@example.com>
Date: Wed, 3 Dec 2025 09:51:43 +0800
Subject: [PATCH 1/3] =?UTF-8?q?1.=20=E8=B0=83=E6=95=B4=20databus=20?=
 =?UTF-8?q?=E6=A8=A1=E5=9D=97=E5=86=99=E5=85=A5=E6=97=A5=E5=BF=97=E7=9A=84?=
 =?UTF-8?q?=E6=97=B6=E6=9C=BA=EF=BC=8C=E8=A7=A3=E5=86=B3=E8=8E=B7=E5=8F=96?=
 =?UTF-8?q?=E4=B8=8D=E5=88=B0=E7=A7=9F=E6=88=B7=E7=9A=84=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../security/GatewaySecurityFilter.java       | 85 +++++++++----------
 1 file changed, 39 insertions(+), 46 deletions(-)

diff --git a/zt-module-databus/zt-module-databus-server/src/main/java/com/zt/plat/module/databus/framework/integration/gateway/security/GatewaySecurityFilter.java b/zt-module-databus/zt-module-databus-server/src/main/java/com/zt/plat/module/databus/framework/integration/gateway/security/GatewaySecurityFilter.java
index c7b76152..0c9ad557 100644
--- a/zt-module-databus/zt-module-databus-server/src/main/java/com/zt/plat/module/databus/framework/integration/gateway/security/GatewaySecurityFilter.java
+++ b/zt-module-databus/zt-module-databus-server/src/main/java/com/zt/plat/module/databus/framework/integration/gateway/security/GatewaySecurityFilter.java
@@ -59,7 +59,8 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
     private final ObjectMapper objectMapper;
     private final ApiGatewayAccessLogger accessLogger;
     private final AntPathMatcher pathMatcher = new AntPathMatcher();
-    private static final TypeReference<Map<String, Object>> MAP_TYPE = new TypeReference<>() {};
+    private static final TypeReference<Map<String, Object>> MAP_TYPE = new TypeReference<>() {
+    };
 
     @Override
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
@@ -68,32 +69,38 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
         // 仅处理配置的 API 门户路径，不符合的请求直接放行
         boolean matchesPortalPath = properties.getAllBasePaths()
                 .stream()
-                .map(this::normalizeBasePath)
                 .anyMatch(basePath -> pathMatcher.match(basePath + "/**", pathWithinApplication));
         if (!matchesPortalPath) {
             filterChain.doFilter(request, response);
             return;
         }
-        Long accessLogId = accessLogger.logEntrance(request);
-        // 校验访问 IP 是否落在允许范围内
-        if (!isIpAllowed(request)) {
-            log.warn("[API-PORTAL] 拦截来自 IP {} 访问 {} 的请求", request.getRemoteAddr(), pathWithinApplication);
-            response.sendError(HttpStatus.FORBIDDEN.value(), "IP 禁止访问");
-            accessLogger.finalizeEarly(request, HttpStatus.FORBIDDEN.value(), "IP 禁止访问");
-            return;
-        }
+        Long accessLogId = null;
         ApiGatewayProperties.Security security = properties.getSecurity();
         ApiClientCredentialDO credential = null;
-        if (!security.isEnabled()) {
-            byte[] originalBody = StreamUtils.copyToByteArray(request.getInputStream());
-            CachedBodyHttpServletRequest passthroughRequest = new CachedBodyHttpServletRequest(request, originalBody);
-            ApiGatewayAccessLogger.propagateLogIdHeader(passthroughRequest, accessLogId);
-            filterChain.doFilter(passthroughRequest, response);
-            return;
-        }
+        Long tenantId = null;
         boolean dispatchedToGateway = false;
         try {
-            Long tenantId = resolveTenantId(request);
+            tenantId = resolveTenantId(request);
+            if (tenantId != null) {
+                // 绑定租户上下文，保证访问日志与后续数据库操作可写入 tenantId
+                TenantContextHolder.setTenantId(tenantId);
+            }
+            if (!isIpAllowed(request)) {
+                log.warn("[API-PORTAL] 拦截来自 IP {} 访问 {} 的请求", request.getRemoteAddr(), pathWithinApplication);
+                accessLogId = accessLogger.logEntrance(request);
+                response.sendError(HttpStatus.FORBIDDEN.value(), "IP 禁止访问");
+                accessLogger.finalizeEarly(request, HttpStatus.FORBIDDEN.value(), "IP 禁止访问");
+                return;
+            }
+            // IP 校验通过后再补录入口日志，避免无租户信息写库
+            accessLogId = accessLogger.logEntrance(request);
+            if (!security.isEnabled()) {
+                byte[] originalBody = StreamUtils.copyToByteArray(request.getInputStream());
+                CachedBodyHttpServletRequest passthroughRequest = new CachedBodyHttpServletRequest(request, originalBody);
+                ApiGatewayAccessLogger.propagateLogIdHeader(passthroughRequest, accessLogId);
+                filterChain.doFilter(passthroughRequest, response);
+                return;
+            }
             // 从请求头解析 appId 并加载客户端凭证，包含匿名访问配置
             String appId = requireHeader(request, APP_ID_HEADER, "缺少应用标识");
             credential = credentialService.findActiveCredential(appId)
@@ -144,17 +151,27 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
                 responseWrapper.copyBodyToResponse();
             }
         } catch (SecurityValidationException ex) {
+            if (accessLogId == null) {
+                accessLogId = accessLogger.logEntrance(request);
+            }
             log.warn("[API-PORTAL] 安全校验失败: {}", ex.getMessage());
             writeErrorResponse(response, security, credential, ex.status(), ex.getMessage());
             if (!dispatchedToGateway) {
                 accessLogger.finalizeEarly(request, ex.status().value(), ex.getMessage());
             }
         } catch (Exception ex) {
+            if (accessLogId == null) {
+                accessLogId = accessLogger.logEntrance(request);
+            }
             log.error("[API-PORTAL] 处理安全校验时出现异常", ex);
             writeErrorResponse(response, security, credential, HttpStatus.INTERNAL_SERVER_ERROR, "网关安全校验失败");
             if (!dispatchedToGateway) {
                 accessLogger.finalizeEarly(request, HttpStatus.INTERNAL_SERVER_ERROR.value(), "网关安全校验失败");
             }
+        } finally {
+            if (tenantId != null) {
+                TenantContextHolder.clear();
+            }
         }
     }
 
@@ -177,15 +194,6 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
         return requestUri;
     }
 
-    private String normalizeBasePath(String basePath) {
-        String candidate = StringUtils.hasText(basePath) ? basePath : ApiGatewayProperties.DEFAULT_BASE_PATH;
-        candidate = candidate.startsWith("/") ? candidate : "/" + candidate;
-        if (candidate.endsWith("/")) {
-            candidate = candidate.substring(0, candidate.length() - 1);
-        }
-        return candidate;
-    }
-
     private Long resolveTenantId(HttpServletRequest request) {
         if (!properties.isEnableTenantHeader()) {
             return null;
@@ -306,7 +314,6 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
             });
         } catch (IllegalArgumentException ex) {
             log.debug("[API-PORTAL] 解析查询串 {} 失败", queryString, ex);
-            target.put("query", queryString);
         }
     }
 
@@ -321,7 +328,7 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
         if (bodyText.startsWith("{")) {
             try {
                 Map<String, Object> bodyMap = objectMapper.readValue(bodyText, MAP_TYPE);
-                bodyMap.forEach((key, value) -> target.put(key, normalizeValue(value)));
+                target.putAll(bodyMap);
                 return;
             } catch (JsonProcessingException ex) {
                 log.debug("[API-PORTAL] 解析请求体 JSON 失败", ex);
@@ -330,20 +337,6 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
         target.put("body", bodyText);
     }
 
-    private Object normalizeValue(Object value) {
-        if (value == null) {
-            return null;
-        }
-        if (value instanceof Map || value instanceof List) {
-            try {
-                return objectMapper.writeValueAsString(value);
-            } catch (JsonProcessingException ex) {
-                return value.toString();
-            }
-        }
-        return value;
-    }
-
     private String resolveEncryptionType(ApiClientCredentialDO credential, ApiGatewayProperties.Security security) {
         if (credential != null && StringUtils.hasText(credential.getEncryptionType())) {
             return credential.getEncryptionType();
@@ -481,12 +474,12 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
         response.resetBuffer();
         response.setStatus(status.value());
         String resolvedMessage = StringUtils.hasText(message) ? message : status.getReasonPhrase();
-    String traceId = TracerUtils.getTraceId();
-    ApiGatewayResponse envelope = ApiGatewayResponse.builder()
+        String traceId = TracerUtils.getTraceId();
+        ApiGatewayResponse envelope = ApiGatewayResponse.builder()
                 .code(status.value())
                 .message(resolvedMessage)
                 .response(null)
-        .traceId(traceId)
+                .traceId(traceId)
                 .build();
         if (shouldEncryptErrorResponse(security, credential)) {
             String encryptionKey = credential.getEncryptionKey();

From 842155bfbd16915692cba4519b6255d2647c6789 Mon Sep 17 00:00:00 2001
From: chenbowen <you@example.com>
Date: Wed, 3 Dec 2025 12:09:14 +0800
Subject: [PATCH 2/3] =?UTF-8?q?1.=20iwork=20=E5=9B=9E=E8=B0=83=E6=8E=A5?=
 =?UTF-8?q?=E5=8F=A3=E4=B8=8D=E5=B8=A6=E7=A7=9F=E6=88=B7=E4=B8=8E=E8=AE=A4?=
 =?UTF-8?q?=E8=AF=81=E9=99=90=E5=88=B6=EF=BC=8C=E6=94=AF=E6=8C=81=E9=80=9A?=
 =?UTF-8?q?=E8=BF=87=E4=B8=9A=E5=8A=A1=E7=BC=96=E5=8F=B7=E6=9F=A5=E8=AF=A2?=
 =?UTF-8?q?=E4=B8=9A=E5=8A=A1=E9=99=84=E4=BB=B6=E4=BF=A1=E6=81=AF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../businessfile/dto/BusinessFileRespDTO.java |  5 +++++
 .../businessfile/vo/BusinessFileRespVO.java   |  4 ++++
 .../businessfile/BusinessFileDO.java          |  5 +++++
 .../businessfile/BusinessFileServiceImpl.java |  2 ++
 .../iwork/IWorkIntegrationController.java     |  4 +++-
 .../impl/IWorkIntegrationServiceImpl.java     | 20 +++++++++++++++----
 6 files changed, 35 insertions(+), 5 deletions(-)

diff --git a/zt-module-infra/zt-module-infra-api/src/main/java/com/zt/plat/module/infra/api/businessfile/dto/BusinessFileRespDTO.java b/zt-module-infra/zt-module-infra-api/src/main/java/com/zt/plat/module/infra/api/businessfile/dto/BusinessFileRespDTO.java
index 82605536..d6f33774 100644
--- a/zt-module-infra/zt-module-infra-api/src/main/java/com/zt/plat/module/infra/api/businessfile/dto/BusinessFileRespDTO.java
+++ b/zt-module-infra/zt-module-infra-api/src/main/java/com/zt/plat/module/infra/api/businessfile/dto/BusinessFileRespDTO.java
@@ -24,6 +24,11 @@ public class BusinessFileRespDTO implements Serializable {
      */
     private Long id;
 
+    /**
+     * 租户编号
+     */
+    private Long tenantId;
+
     /**
      * 业务Id
      */
diff --git a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/controller/admin/businessfile/vo/BusinessFileRespVO.java b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/controller/admin/businessfile/vo/BusinessFileRespVO.java
index c9990c42..a99ec881 100644
--- a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/controller/admin/businessfile/vo/BusinessFileRespVO.java
+++ b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/controller/admin/businessfile/vo/BusinessFileRespVO.java
@@ -16,6 +16,10 @@ public class BusinessFileRespVO {
     @ExcelProperty("主键ID")
     private Long id;
 
+    @Schema(description = "租户编号", example = "1024")
+    @ExcelProperty("租户编号")
+    private Long tenantId;
+
     @Schema(description = "业务Id", requiredMode = Schema.RequiredMode.REQUIRED, example = "24322")
     @ExcelProperty("业务Id")
     private Long businessId;
diff --git a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/dal/dataobject/businessfile/BusinessFileDO.java b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/dal/dataobject/businessfile/BusinessFileDO.java
index 84df46e9..4c067913 100644
--- a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/dal/dataobject/businessfile/BusinessFileDO.java
+++ b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/dal/dataobject/businessfile/BusinessFileDO.java
@@ -24,6 +24,11 @@ public class BusinessFileDO extends BaseDO {
     @TableId(type = IdType.ASSIGN_ID)
     private Long id;
     /**
+    * 租户编号
+    */
+    @TableField("TENANT_ID")
+    private Long tenantId;
+    /**
     * 业务Id
     */
     @TableField("BSN_ID")
diff --git a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/service/businessfile/BusinessFileServiceImpl.java b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/service/businessfile/BusinessFileServiceImpl.java
index 4a30d7fa..92722f96 100644
--- a/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/service/businessfile/BusinessFileServiceImpl.java
+++ b/zt-module-infra/zt-module-infra-server/src/main/java/com/zt/plat/module/infra/service/businessfile/BusinessFileServiceImpl.java
@@ -5,6 +5,7 @@ import com.zt.plat.framework.common.pojo.PageResult;
 import com.zt.plat.framework.common.util.object.BeanUtils;
 import com.zt.plat.framework.common.util.user.UserNameEnrichUtils;
 import com.zt.plat.framework.mybatis.core.query.LambdaQueryWrapperX;
+import com.zt.plat.framework.tenant.core.aop.TenantIgnore;
 import com.zt.plat.module.infra.controller.admin.businessfile.vo.BusinessFilePageReqVO;
 import com.zt.plat.module.infra.controller.admin.businessfile.vo.BusinessFileRespVO;
 import com.zt.plat.module.infra.controller.admin.businessfile.vo.BusinessFileSaveReqVO;
@@ -101,6 +102,7 @@ public class BusinessFileServiceImpl implements BusinessFileService {
     }
 
     @Override
+    @TenantIgnore
     public BusinessFileDO getBusinessFileByBusinessCode(String businessCode) {
         if (!StringUtils.hasText(businessCode)) {
             throw exception(BUSINESS_FILE_NOT_EXISTS);
diff --git a/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/controller/admin/integration/iwork/IWorkIntegrationController.java b/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/controller/admin/integration/iwork/IWorkIntegrationController.java
index fb69b185..e69863fe 100644
--- a/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/controller/admin/integration/iwork/IWorkIntegrationController.java
+++ b/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/controller/admin/integration/iwork/IWorkIntegrationController.java
@@ -1,12 +1,14 @@
 package com.zt.plat.module.system.controller.admin.integration.iwork;
 
 import com.zt.plat.framework.common.pojo.CommonResult;
+import com.zt.plat.framework.tenant.core.aop.TenantIgnore;
 import com.zt.plat.module.system.controller.admin.integration.iwork.vo.*;
 import com.zt.plat.module.system.service.integration.iwork.IWorkIntegrationService;
 import com.zt.plat.module.system.service.integration.iwork.IWorkOrgRestService;
 import com.zt.plat.module.system.service.integration.iwork.IWorkSyncService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.annotation.security.PermitAll;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.validation.annotation.Validated;
@@ -14,7 +16,6 @@ import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
-import jakarta.annotation.security.PermitAll;
 
 import static com.zt.plat.framework.common.pojo.CommonResult.success;
 
@@ -57,6 +58,7 @@ public class IWorkIntegrationController {
     }
 
     @PermitAll
+    @TenantIgnore
     @PostMapping("/callback/file")
     @Operation(summary = "iWork 文件回调：根据文件 URL 保存为附件并创建业务附件关联")
     public CommonResult<Long> callbackFile(@Valid @RequestBody IWorkFileCallbackReqVO reqVO) {
diff --git a/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/service/integration/iwork/impl/IWorkIntegrationServiceImpl.java b/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/service/integration/iwork/impl/IWorkIntegrationServiceImpl.java
index d1d7108a..c3a7a5cd 100644
--- a/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/service/integration/iwork/impl/IWorkIntegrationServiceImpl.java
+++ b/zt-module-system/zt-module-system-server/src/main/java/com/zt/plat/module/system/service/integration/iwork/impl/IWorkIntegrationServiceImpl.java
@@ -19,6 +19,7 @@ import com.zt.plat.module.infra.api.file.dto.FileRespDTO;
 import com.zt.plat.module.system.controller.admin.integration.iwork.vo.*;
 import com.zt.plat.module.system.framework.integration.iwork.config.IWorkProperties;
 import com.zt.plat.module.system.service.integration.iwork.IWorkIntegrationService;
+import com.zt.plat.framework.tenant.core.util.TenantUtils;
 import lombok.Getter;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
@@ -37,6 +38,7 @@ import java.security.*;
 import java.security.spec.X509EncodedKeySpec;
 import java.time.Instant;
 import java.util.*;
+import java.util.concurrent.atomic.AtomicReference;
 
 import static com.zt.plat.module.system.service.integration.iwork.IWorkIntegrationErrorCodeConstants.*;
 
@@ -171,11 +173,21 @@ public class IWorkIntegrationServiceImpl implements IWorkIntegrationService {
         }
 
         BusinessFileRespDTO referenceBusinessFile = loadBusinessFileByBusinessCode(businessCode);
+        Long tenantId = referenceBusinessFile.getTenantId();
+        if (tenantId == null) {
+            throw new ServiceException(IWORK_CONFIGURATION_INVALID.getCode(), "业务附件缺少租户信息，无法创建回调附件: " + businessCode);
+        }
+
+        AtomicReference<Long> attachmentIdRef = new AtomicReference<>();
+        TenantUtils.execute(tenantId, () -> attachmentIdRef.set(saveCallbackAttachment(fileUrl, reqVO.getFileName(), referenceBusinessFile)));
+        return attachmentIdRef.get();
+    }
+
+    private Long saveCallbackAttachment(String fileUrl, String overrideFileName, BusinessFileRespDTO referenceBusinessFile) {
         Long businessId = referenceBusinessFile.getBusinessId();
 
-        // 通过文件 API 创建文件
         FileCreateReqDTO fileCreateReqDTO = new FileCreateReqDTO();
-        fileCreateReqDTO.setName(resolveFileName(reqVO.getFileName(), fileUrl));
+        fileCreateReqDTO.setName(resolveFileName(overrideFileName, fileUrl));
         fileCreateReqDTO.setDirectory(null);
         fileCreateReqDTO.setType(null);
         fileCreateReqDTO.setContent(downloadFileBytes(fileUrl));
@@ -188,8 +200,8 @@ public class IWorkIntegrationServiceImpl implements IWorkIntegrationService {
         Long fileId = fileResult.getData().getId();
 
         BusinessFileSaveReqDTO businessReq = BusinessFileSaveReqDTO.builder()
-            .businessId(businessId)
-            .businessCode(referenceBusinessFile.getBusinessCode())
+                .businessId(businessId)
+                .businessCode(referenceBusinessFile.getBusinessCode())
                 .fileId(fileId)
                 .fileName(fileResult.getData().getName())
                 .source("iwork")

From 69bcd6697b1b7e6800a1223cd694cdfe81721961 Mon Sep 17 00:00:00 2001
From: chenbowen <you@example.com>
Date: Wed, 3 Dec 2025 17:59:56 +0800
Subject: [PATCH 3/3] =?UTF-8?q?=E6=8F=90=E5=8D=87=E7=9B=B8=E5=85=B3?=
 =?UTF-8?q?=E6=9C=8D=E5=8A=A1=E7=9A=84=20xmx=20=E8=87=B3=201024mb?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 zt-gateway/Dockerfile                                   | 2 +-
 zt-module-ai/zt-module-ai-server/Dockerfile             | 2 +-
 zt-module-bpm/zt-module-bpm-server/Dockerfile           | 2 +-
 zt-module-infra/zt-module-infra-server/Dockerfile       | 2 +-
 zt-module-mp/zt-module-mp-server/Dockerfile             | 2 +-
 zt-module-report/zt-module-report-server/Dockerfile     | 2 +-
 zt-module-system/zt-module-system-server/Dockerfile     | 2 +-
 zt-module-template/zt-module-template-server/Dockerfile | 2 +-
 zt-server/Dockerfile                                    | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/zt-gateway/Dockerfile b/zt-gateway/Dockerfile
index 9c33b9bf..47876e4d 100644
--- a/zt-gateway/Dockerfile
+++ b/zt-gateway/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-gateway.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48080
diff --git a/zt-module-ai/zt-module-ai-server/Dockerfile b/zt-module-ai/zt-module-ai-server/Dockerfile
index 286ab90d..246697fb 100644
--- a/zt-module-ai/zt-module-ai-server/Dockerfile
+++ b/zt-module-ai/zt-module-ai-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-ai-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48090
diff --git a/zt-module-bpm/zt-module-bpm-server/Dockerfile b/zt-module-bpm/zt-module-bpm-server/Dockerfile
index 230aa5c7..868eec5c 100644
--- a/zt-module-bpm/zt-module-bpm-server/Dockerfile
+++ b/zt-module-bpm/zt-module-bpm-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-bpm-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48083
diff --git a/zt-module-infra/zt-module-infra-server/Dockerfile b/zt-module-infra/zt-module-infra-server/Dockerfile
index 6f55bb34..49d73456 100644
--- a/zt-module-infra/zt-module-infra-server/Dockerfile
+++ b/zt-module-infra/zt-module-infra-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-infra-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48082
diff --git a/zt-module-mp/zt-module-mp-server/Dockerfile b/zt-module-mp/zt-module-mp-server/Dockerfile
index 18036673..ed023332 100644
--- a/zt-module-mp/zt-module-mp-server/Dockerfile
+++ b/zt-module-mp/zt-module-mp-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-mp-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48086
diff --git a/zt-module-report/zt-module-report-server/Dockerfile b/zt-module-report/zt-module-report-server/Dockerfile
index 53fd8763..0a9a86cf 100644
--- a/zt-module-report/zt-module-report-server/Dockerfile
+++ b/zt-module-report/zt-module-report-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-report-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48084
diff --git a/zt-module-system/zt-module-system-server/Dockerfile b/zt-module-system/zt-module-system-server/Dockerfile
index bce59094..6e8a12d8 100644
--- a/zt-module-system/zt-module-system-server/Dockerfile
+++ b/zt-module-system/zt-module-system-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-system-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48081
diff --git a/zt-module-template/zt-module-template-server/Dockerfile b/zt-module-template/zt-module-template-server/Dockerfile
index 4e36f207..e32668f2 100644
--- a/zt-module-template/zt-module-template-server/Dockerfile
+++ b/zt-module-template/zt-module-template-server/Dockerfile
@@ -10,7 +10,7 @@ COPY ./target/zt-module-template-server.jar app.jar
 
 ## 设置 TZ 时区
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx512m"
+ENV TZ=Asia/Shanghai JAVA_OPTS="-Xms512m -Xmx1024m"
 
 ## 暴露后端项目的 48080 端口
 EXPOSE 48100
diff --git a/zt-server/Dockerfile b/zt-server/Dockerfile
index e9725022..fd0d36b0 100644
--- a/zt-server/Dockerfile
+++ b/zt-server/Dockerfile
@@ -11,7 +11,7 @@ COPY ./target/zt-server.jar app.jar
 ## 设置 TZ 时区
 ENV TZ=Asia/Shanghai
 ## 设置 JAVA_OPTS 环境变量，可通过 docker run -e "JAVA_OPTS=" 进行覆盖
-ENV JAVA_OPTS="-Xms512m -Xmx512m -Djava.security.egd=file:/dev/./urandom"
+ENV JAVA_OPTS="-Xms512m -Xmx1024m -Djava.security.egd=file:/dev/./urandom"
 
 ## 应用参数
 ENV ARGS=""