From c8e5455df0ac892c985c857faa1082893c556874 Mon Sep 17 00:00:00 2001
From: yangjianbo <yangjianbo@leagsoft.com>
Date: Mon, 5 Jan 2026 09:18:17 +0800
Subject: [PATCH] =?UTF-8?q?chore(=E9=85=8D=E7=BD=AE):=20=E6=9B=B4=E6=96=B0?=
 =?UTF-8?q?=E4=B8=8A=E6=B8=B8=E7=99=BD=E5=90=8D=E5=8D=95=E9=BB=98=E8=AE=A4?=
 =?UTF-8?q?=E5=80=BC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

新增 Kimi/BigModel/Minimax 官方域名到 allowlist
保持示例配置与默认值一致
---
 backend/internal/config/config.go | 3 +++
 deploy/config.example.yaml        | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/backend/internal/config/config.go b/backend/internal/config/config.go
index 1d8c64ef..c1b6ddb1 100644
--- a/backend/internal/config/config.go
+++ b/backend/internal/config/config.go
@@ -413,6 +413,9 @@ func setDefaults() {
 	viper.SetDefault("security.url_allowlist.upstream_hosts", []string{
 		"api.openai.com",
 		"api.anthropic.com",
+		"api.kimi.com",
+		"open.bigmodel.cn",
+		"api.minimaxi.com",
 		"generativelanguage.googleapis.com",
 		"cloudcode-pa.googleapis.com",
 		"*.openai.azure.com",
diff --git a/deploy/config.example.yaml b/deploy/config.example.yaml
index 7b2c7d39..0d82006d 100644
--- a/deploy/config.example.yaml
+++ b/deploy/config.example.yaml
@@ -41,6 +41,9 @@ security:
     upstream_hosts:
       - "api.openai.com"
       - "api.anthropic.com"
+      - "api.kimi.com"
+      - "open.bigmodel.cn"
+      - "api.minimaxi.com"
       - "generativelanguage.googleapis.com"
       - "cloudcode-pa.googleapis.com"
       - "*.openai.azure.com"