diff --git a/api-gateway/src/main/resources/bootstrap-online.yml b/api-gateway/src/main/resources/bootstrap-online.yml
index e774819..a3e7995 100644
--- a/api-gateway/src/main/resources/bootstrap-online.yml
+++ b/api-gateway/src/main/resources/bootstrap-online.yml
@@ -45,4 +45,20 @@ spring:
             # 允许跨域的method， 默认为GET和OPTIONS，设置*为全部
             allowedMethods: "*"
             # 允许跨域请求里的head字段，设置*为全部
-            allowedHeaders: "*"
\ No newline at end of file
+            allowedHeaders: "*"
+# 安全配置
+security:
+  # 防止XSS攻击
+  xss:
+    enabled: false
+    # 排除的路径
+    exclude-urls:
+      - /api-interface/user/login/pwd
+    # ip免登白名单
+    auth-ip: #127.0.0.1,192.168.8.141
+    #免登，免校验url
+    auth-urls:
+#application:
+#  cors:
+#    allowed-crigin-patterns:
+#      - /api-user/user/user/login/pwd
\ No newline at end of file
diff --git a/api-gateway/src/main/resources/bootstrap.yml b/api-gateway/src/main/resources/bootstrap.yml
index abed308..1f9dee8 100644
--- a/api-gateway/src/main/resources/bootstrap.yml
+++ b/api-gateway/src/main/resources/bootstrap.yml
@@ -10,7 +10,8 @@ spring:
     allow-circular-references: true
 
 
-
+logging:
+  config: classpath:log/logback-${spring.profiles.active}.xml
 zuul:
   ribbon:
     eager-load:
diff --git a/api-gateway/src/main/resources/logback-dev.xml b/api-gateway/src/main/resources/log/logback-dev.xml
similarity index 100%
rename from api-gateway/src/main/resources/logback-dev.xml
rename to api-gateway/src/main/resources/log/logback-dev.xml
diff --git a/api-gateway/src/main/resources/logback-prod.xml b/api-gateway/src/main/resources/log/logback-online.xml
similarity index 97%
rename from api-gateway/src/main/resources/logback-prod.xml
rename to api-gateway/src/main/resources/log/logback-online.xml
index 6f6fde7..c3989d4 100644
--- a/api-gateway/src/main/resources/logback-prod.xml
+++ b/api-gateway/src/main/resources/log/logback-online.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <configuration scan="true" scanPeriod="60 seconds" debug="false">
     <!-- 日志存放路径 -->
-    <property name="log.path" value="${user.home}/logs/gateway-api" />
+    <property name="log.path" value="/mnt/admin/eb-service-api/logs/api-gateway" />
    <!-- 日志输出格式 -->
     <property name="log.pattern" value="%d{HH:mm:ss.SSS} [%thread] %-5level %logger{20} - [%method,%line] [%X{logid}]- %msg%n" />
 
diff --git a/api-gateway/src/main/resources/logback-test.xml b/api-gateway/src/main/resources/logback-test.xml
deleted file mode 100644
index 09ffc80..0000000
--- a/api-gateway/src/main/resources/logback-test.xml
+++ /dev/null
@@ -1,84 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration scan="true" scanPeriod="60 seconds" debug="false">
-    <!-- 日志存放路径 -->
-    <property name="log.path" value="${user.home}/logs/gateway-api" />
-   <!-- 日志输出格式 -->
-	<property name="log.pattern" value="%d{HH:mm:ss.SSS} [%thread] %-5level %logger{20} - [%method,%line] [%X{logid}] - %msg%n" />
-
-    <!-- 控制台输出 -->
-    <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
-        <encoder>
-            <pattern>${log.pattern}</pattern>
-            <charset>UTF-8</charset> <!-- 设置字符集 -->
-        </encoder>
-    </appender>
-
-    <!-- 系统日志输出 -->
-    <appender name="file_info" class="ch.qos.logback.core.rolling.RollingFileAppender">
-        <file>${log.path}/all.log</file>
-        <!-- 循环政策：基于时间创建日志文件 -->
-        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
-            <!-- 日志文件名格式 -->
-            <fileNamePattern>${log.path}/%d{yyyy-MM-dd}_all.log</fileNamePattern>
-            <!-- 日志最大的历史 60天 -->
-            <maxHistory>15</maxHistory>
-        </rollingPolicy>
-        <encoder>
-            <pattern>${log.pattern}</pattern>
-            <charset>UTF-8</charset> <!-- 设置字符集 -->
-        </encoder>
-        <filter class="ch.qos.logback.classic.filter.LevelFilter">
-            <!-- 过滤的级别 -->
-            <level>INFO</level>
-
-        </filter>
-    </appender>
-
-    <!-- 系统日志输出 -->
-    <appender name="file_warn" class="ch.qos.logback.core.rolling.RollingFileAppender">
-        <file>${log.path}/warn.log</file>
-        <!-- 循环政策：基于时间创建日志文件 -->
-        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
-            <!-- 日志文件名格式 -->
-            <fileNamePattern>${log.path}/%d{yyyy-MM-dd}_wran.log</fileNamePattern>
-            <!-- 日志最大的历史 60天 -->
-            <maxHistory>15</maxHistory>
-        </rollingPolicy>
-        <encoder>
-            <pattern>${log.pattern}</pattern>
-            <charset>UTF-8</charset> <!-- 设置字符集 -->
-        </encoder>
-        <filter class="ch.qos.logback.classic.filter.LevelFilter">
-            <!-- 过滤的级别 -->
-            <level>WARN</level>
-        </filter>
-    </appender>
-
-    <appender name="file_error" class="ch.qos.logback.core.rolling.RollingFileAppender">
-        <file>${log.path}/error.log</file>
-        <!-- 循环政策：基于时间创建日志文件 -->
-        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
-            <!-- 日志文件名格式 -->
-            <fileNamePattern>${log.path}/%d{yyyy-MM-dd}_error.log</fileNamePattern>
-            <!-- 日志最大的历史 60天 -->
-            <maxHistory>15</maxHistory>
-        </rollingPolicy>
-        <encoder>
-            <pattern>${log.pattern}</pattern>
-            <charset>UTF-8</charset> <!-- 设置字符集 -->
-        </encoder>
-        <filter class="ch.qos.logback.classic.filter.LevelFilter">
-            <!-- 过滤的级别 -->
-            <level>ERROR</level>
-
-        </filter>
-    </appender>
-
-    <!--系统操作日志-->
-    <root level="info">
-        <appender-ref ref="file_info" />
-        <appender-ref ref="file_error" />
-        <appender-ref ref="file_warn" />
-        <appender-ref ref="STDOUT" />
-    </root>
-</configuration>
\ No newline at end of file