From 4ee77e8eff253ef67e43e9f26087d0108e5f5e17 Mon Sep 17 00:00:00 2001
From: WuYongJie <WuYongJie@local>
Date: Wed, 11 Mar 2026 12:30:56 +0800
Subject: [PATCH] =?UTF-8?q?=E8=B0=83=E6=95=B4=20SQL=20Server=20=E5=90=8C?=
 =?UTF-8?q?=E6=AD=A5=E8=BF=9E=E6=8E=A5=E5=8F=82=E6=95=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                             | 3 +++
 backend/src/services/hrSyncService.ts | 6 ++++--
 docker-compose.yml                    | 2 ++
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index a9f8adb..2797ec7 100644
--- a/README.md
+++ b/README.md
@@ -117,6 +117,8 @@ SQLSERVER_PORT=1433
 SQLSERVER_DATABASE=JSDataMiddlePlatform
 SQLSERVER_USER=nanting
 SQLSERVER_PASSWORD=***
+SQLSERVER_ENCRYPT=false
+SQLSERVER_TRUST_CERT=true
 HR_SYNC_ENABLED=false
 HR_SYNC_SCHEDULE=03:00
 HR_SYNC_INACTIVE_STATUS_VALUES=5
@@ -125,6 +127,7 @@ HR_SYNC_INACTIVE_STATUS_VALUES=5
 - `HR_SYNC_ENABLED=true` 时，后端会启动每日定时同步
 - `HR_SYNC_SCHEDULE` 建议使用 `03:00`
 - `HR_SYNC_INACTIVE_STATUS_VALUES` 用来标记源系统里的非在职状态码
+- 如果源库是较老版本 SQL Server，建议 `SQLSERVER_ENCRYPT=false`
 
 ## 当前线上资源
 
diff --git a/backend/src/services/hrSyncService.ts b/backend/src/services/hrSyncService.ts
index c91a3bc..5749659 100644
--- a/backend/src/services/hrSyncService.ts
+++ b/backend/src/services/hrSyncService.ts
@@ -49,6 +49,8 @@ const getSqlServerConfig = (): any => {
   const database = process.env.SQLSERVER_DATABASE
   const user = process.env.SQLSERVER_USER
   const password = process.env.SQLSERVER_PASSWORD
+  const encrypt = process.env.SQLSERVER_ENCRYPT === 'true'
+  const trustServerCertificate = process.env.SQLSERVER_TRUST_CERT !== 'false'
 
   if (!server || !database || !user || !password) {
     throw new Error('SQL Server 同步配置不完整，请设置 SQLSERVER_HOST / DATABASE / USER / PASSWORD')
@@ -61,8 +63,8 @@ const getSqlServerConfig = (): any => {
     user,
     password,
     options: {
-      encrypt: true,
-      trustServerCertificate: true
+      encrypt,
+      trustServerCertificate
     },
     pool: {
       max: 5,
diff --git a/docker-compose.yml b/docker-compose.yml
index a31046a..4932f87 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -41,6 +41,8 @@ services:
       SQLSERVER_DATABASE: ${SQLSERVER_DATABASE:-}
       SQLSERVER_USER: ${SQLSERVER_USER:-}
       SQLSERVER_PASSWORD: ${SQLSERVER_PASSWORD:-}
+      SQLSERVER_ENCRYPT: ${SQLSERVER_ENCRYPT:-false}
+      SQLSERVER_TRUST_CERT: ${SQLSERVER_TRUST_CERT:-true}
       HR_SYNC_ENABLED: ${HR_SYNC_ENABLED:-false}
       HR_SYNC_SCHEDULE: ${HR_SYNC_SCHEDULE:-03:00}
       HR_SYNC_INACTIVE_STATUS_VALUES: ${HR_SYNC_INACTIVE_STATUS_VALUES:-5}