feat:图片加密忽略面板页面

docs/file-access/config.example.yml

@@ -8,6 +8,10 @@ file-access:
   public-base-url: https://files.example.com/api
   allowed-origins:
     - https://legacy-files.example.com
+  # Optional: old H5 needs no update; only image reads from this Referer prefix bypass signatures.
+  # Remove this list or set [] to keep all browser sources subject to signing.
+  public-image-referer-prefixes:
+    - https://www.pjzhhq.cn/mobile/
   legacy-dart:
     enabled: true
     extensions: [jpg, jpeg, png, gif, webp, bmp, svg, ico]
@@ -21,6 +25,7 @@ file-access:
       active-kid: v1
       keys: {v1: '${FILE_ACCESS_ADMIN_V1:}'}
     h5:
+      # Optional. Remove the whole h5 node if no H5 signing key is configured.
       active-kid: v1
       keys: {v1: '${FILE_ACCESS_H5_V1:}'}
     mini: