refactor(openflare): remove legacy global API rate limit options

Drop unused GlobalApi/Web/Critical rate limit settings migrated from the
old server but never wired up in Wavelet, including validation, defaults,
seed data, and a cleanup migration for existing databases.

Wavelet/internal/apps/openflare/option/validate.go

@@ -13,8 +13,6 @@ import (
 	"github.com/Rain-kl/Wavelet/internal/model"
 )
 
-const rateLimitKeyExpirationSeconds = 1200 // 20 minutes
-
 var (
 	openRestySizePattern          = regexp.MustCompile(`^\d+[kKmMgG]?$`)
 	openRestyProxyBuffersPattern  = regexp.MustCompile(`^\d+\s+\d+[kKmMgG]?$`)
@@ -48,9 +46,6 @@ func validateOptionWithState(option model.OpenFlareOption, state map[string]stri
 		}
 	}
 
-	if err := validateRateLimitOption(option.Key, option.Value); err != nil {
-		return err
-	}
 	if err := validateOpenRestyOption(option.Key, option.Value); err != nil {
 		return err
 	}
@@ -66,25 +61,6 @@ func validateOptionWithState(option model.OpenFlareOption, state map[string]stri
 	return validateUptimeKumaOption(option.Key, option.Value, state)
 }
 
-func validateRateLimitOption(key, value string) error {
-	switch key {
-	case "GlobalApiRateLimitNum", "GlobalWebRateLimitNum", "CriticalRateLimitNum":
-		intValue, err := strconv.Atoi(value)
-		if err != nil || intValue <= 0 {
-			return fmt.Errorf("%s 必须为大于 0 的整数", key)
-		}
-	case "GlobalApiRateLimitDuration", "GlobalWebRateLimitDuration", "CriticalRateLimitDuration":
-		intValue, err := strconv.Atoi(value)
-		if err != nil || intValue <= 0 {
-			return fmt.Errorf("%s 必须为大于 0 的整数秒", key)
-		}
-		if intValue > rateLimitKeyExpirationSeconds {
-			return fmt.Errorf("%s 不能大于 %d 秒", key, rateLimitKeyExpirationSeconds)
-		}
-	}
-	return nil
-}
-
 func validatePositiveIntegerOption(key, value string) error {
 	intValue, err := strconv.Atoi(value)
 	if err != nil || intValue <= 0 {

Wavelet/internal/db/migrator/goose/postgres/202606190001_create_of_options.sql

@@ -60,13 +60,7 @@ INSERT INTO of_options (key, value) VALUES
     ('OpenRestyCacheKeyTemplate', '$scheme$host$request_uri'),
     ('OpenRestyCacheLockEnabled', 'true'),
     ('OpenRestyCacheLockTimeout', '5s'),
-    ('OpenRestyCacheUseStale', 'error timeout updating http_500 http_502 http_503 http_504'),
+    ('OpenRestyCacheUseStale', 'error timeout updating http_500 http_502 http_503 http_504')
-    ('GlobalApiRateLimitNum', '300'),
-    ('GlobalApiRateLimitDuration', '180'),
-    ('GlobalWebRateLimitNum', '300'),
-    ('GlobalWebRateLimitDuration', '180'),
-    ('CriticalRateLimitNum', '100'),
-    ('CriticalRateLimitDuration', '1200')
 ON CONFLICT (key) DO NOTHING;
 
 -- +goose Down

Wavelet/internal/db/migrator/goose/postgres/202606200003_remove_legacy_rate_limit_options.sql

@@ -0,0 +1,20 @@
+-- +goose Up
+DELETE FROM of_options
+WHERE key IN (
+    'GlobalApiRateLimitNum',
+    'GlobalApiRateLimitDuration',
+    'GlobalWebRateLimitNum',
+    'GlobalWebRateLimitDuration',
+    'CriticalRateLimitNum',
+    'CriticalRateLimitDuration'
+);
+
+-- +goose Down
+INSERT INTO of_options (key, value) VALUES
+    ('GlobalApiRateLimitNum', '300'),
+    ('GlobalApiRateLimitDuration', '180'),
+    ('GlobalWebRateLimitNum', '300'),
+    ('GlobalWebRateLimitDuration', '180'),
+    ('CriticalRateLimitNum', '100'),
+    ('CriticalRateLimitDuration', '1200')
+ON CONFLICT (key) DO NOTHING;

Wavelet/internal/db/migrator/goose/sqlite/202606190001_create_of_options.sql

@@ -60,13 +60,7 @@ INSERT OR IGNORE INTO of_options (key, value) VALUES
     ('OpenRestyCacheKeyTemplate', '$scheme$host$request_uri'),
     ('OpenRestyCacheLockEnabled', 'true'),
     ('OpenRestyCacheLockTimeout', '5s'),
-    ('OpenRestyCacheUseStale', 'error timeout updating http_500 http_502 http_503 http_504'),
+    ('OpenRestyCacheUseStale', 'error timeout updating http_500 http_502 http_503 http_504');
-    ('GlobalApiRateLimitNum', '300'),
-    ('GlobalApiRateLimitDuration', '180'),
-    ('GlobalWebRateLimitNum', '300'),
-    ('GlobalWebRateLimitDuration', '180'),
-    ('CriticalRateLimitNum', '100'),
-    ('CriticalRateLimitDuration', '1200');
 
 -- +goose Down
 DROP TABLE IF EXISTS of_options;

Wavelet/internal/db/migrator/goose/sqlite/202606200003_remove_legacy_rate_limit_options.sql

@@ -0,0 +1,19 @@
+-- +goose Up
+DELETE FROM of_options
+WHERE key IN (
+    'GlobalApiRateLimitNum',
+    'GlobalApiRateLimitDuration',
+    'GlobalWebRateLimitNum',
+    'GlobalWebRateLimitDuration',
+    'CriticalRateLimitNum',
+    'CriticalRateLimitDuration'
+);
+
+-- +goose Down
+INSERT OR IGNORE INTO of_options (key, value) VALUES
+    ('GlobalApiRateLimitNum', '300'),
+    ('GlobalApiRateLimitDuration', '180'),
+    ('GlobalWebRateLimitNum', '300'),
+    ('GlobalWebRateLimitDuration', '180'),
+    ('CriticalRateLimitNum', '100'),
+    ('CriticalRateLimitDuration', '1200');

Wavelet/internal/model/openflare_option.go

@@ -108,13 +108,7 @@ var (
 	OpenRestyCacheLockEnabled                   = true
 	OpenRestyCacheLockTimeout                   = "5s"
 	OpenRestyCacheUseStale                      = "error timeout updating http_500 http_502 http_503 http_504"
-	OpenRestyMainConfigTemplate                 = defaultOpenRestyMainConfigTemplate
+	OpenRestyMainConfigTemplate = defaultOpenRestyMainConfigTemplate
-	GlobalApiRateLimitNum                       = 300
-	GlobalApiRateLimitDuration            int64 = 3 * 60
-	GlobalWebRateLimitNum                       = 300
-	GlobalWebRateLimitDuration            int64 = 3 * 60
-	CriticalRateLimitNum                        = 100
-	CriticalRateLimitDuration             int64 = 20 * 60
 )
 
 const defaultOpenRestyMainConfigTemplate = `# This file is generated by OpenFlare. Do not edit manually.
@@ -235,13 +229,7 @@ func DefaultOpenFlareOptions() map[string]string {
 		"OpenRestyCacheLockEnabled":             strconv.FormatBool(OpenRestyCacheLockEnabled),
 		"OpenRestyCacheLockTimeout":             OpenRestyCacheLockTimeout,
 		"OpenRestyCacheUseStale":                OpenRestyCacheUseStale,
-		"OpenRestyMainConfigTemplate":           OpenRestyMainConfigTemplate,
+		"OpenRestyMainConfigTemplate": OpenRestyMainConfigTemplate,
-		"GlobalApiRateLimitNum":                 strconv.Itoa(GlobalApiRateLimitNum),
-		"GlobalApiRateLimitDuration":            strconv.FormatInt(GlobalApiRateLimitDuration, 10),
-		"GlobalWebRateLimitNum":                 strconv.Itoa(GlobalWebRateLimitNum),
-		"GlobalWebRateLimitDuration":            strconv.FormatInt(GlobalWebRateLimitDuration, 10),
-		"CriticalRateLimitNum":                  strconv.Itoa(CriticalRateLimitNum),
-		"CriticalRateLimitDuration":             strconv.FormatInt(CriticalRateLimitDuration, 10),
 	}
 }
 
@@ -434,30 +422,6 @@ func applyOptionMap(key, value string) {
 		if v, err := strconv.Atoi(value); err == nil && v >= 1 {
 			DatabaseAutoCleanupRetentionDays = v
 		}
-	case "GlobalApiRateLimitNum":
-		if v, err := strconv.Atoi(value); err == nil && v > 0 {
-			GlobalApiRateLimitNum = v
-		}
-	case "GlobalApiRateLimitDuration":
-		if v, err := strconv.ParseInt(value, 10, 64); err == nil && v > 0 {
-			GlobalApiRateLimitDuration = v
-		}
-	case "GlobalWebRateLimitNum":
-		if v, err := strconv.Atoi(value); err == nil && v > 0 {
-			GlobalWebRateLimitNum = v
-		}
-	case "GlobalWebRateLimitDuration":
-		if v, err := strconv.ParseInt(value, 10, 64); err == nil && v > 0 {
-			GlobalWebRateLimitDuration = v
-		}
-	case "CriticalRateLimitNum":
-		if v, err := strconv.Atoi(value); err == nil && v > 0 {
-			CriticalRateLimitNum = v
-		}
-	case "CriticalRateLimitDuration":
-		if v, err := strconv.ParseInt(value, 10, 64); err == nil && v > 0 {
-			CriticalRateLimitDuration = v
-		}
 	}
 	OptionMapRWMutex.Unlock()
 }

docs/changelog/index.md

@@ -16,6 +16,10 @@ sidebar: false
 
 ## [Unreleased]
 
+### 移除
+
+- 移除 Wavelet 中从旧系统迁移但未实装的全局 API / Web / 敏感接口限流选项（`GlobalApiRateLimit*`、`GlobalWebRateLimit*`、`CriticalRateLimit*`）及相关校验与数据库种子。
+
 ### 新增
 
 - Wavelet 总览仪表盘图表对齐旧前端 ECharts 样式：24 小时请求/容量趋势补充请求量与错误量展示，新增网络与磁盘趋势、Top 节点榜单、来源分布、状态码分布与 Top Domain 板块。

docs/reference/configuration.md

@@ -92,9 +92,6 @@ go run . --port 3000 --log-dir ./logs
 | `GeoIPProvider` | 节点/IP 归属解析方式 | `ipinfo` |
 | `DatabaseAutoCleanupEnabled` | 是否启用每日自动清理观测数据 | `false` |
 | `DatabaseAutoCleanupRetentionDays` | 自动清理保留天数，至少 1 天 | `30` |
-| `GlobalApiRateLimitNum` / `GlobalApiRateLimitDuration` | 全局 API 限流次数 / 时间窗口 | `300` / `180` |
-| `GlobalWebRateLimitNum` / `GlobalWebRateLimitDuration` | 全局 Web 限流次数 / 时间窗口 | `300` / `180` |
-| `CriticalRateLimitNum` / `CriticalRateLimitDuration` | 敏感接口限流次数 / 时间窗口 | `100` / `1200` |
 | `UptimeKumaEnabled` | 是否启用 Uptime Kuma 自动同步 | `false` |
 | `UptimeKumaUrl` | Uptime Kuma 实例地址 | 空 |
 | `UptimeKumaUsername` | Uptime Kuma 登录用户名 | 空 |