refactor: config/apps 目录重组、文档重构、架构图收窄

- 中央：config/(prometheus,alertmanager,grafana)、apps/(tile-cache,topology-editor)
- 边缘：config/(vmagent,blackbox,targets)、apps/(onvif-exporter)
- env: TRAEFIK_PROVIDER、prometheus/env.example 详细说明
- 文档：README/doc 重构，EDGE_CACHE 合并到 EDGE_AGENT_CONFIG
- targets.csv 更新流程说明，ARCHITECTURE 图收窄

Made-with: Cursor

central-server/config/grafana/setup-users.sh

@@ -0,0 +1,164 @@
+#!/bin/bash
+
+# Grafana 多用户和组织配置脚本
+# 使用方法: ./setup-users.sh
+
+set -e
+
+GRAFANA_URL="${GRAFANA_URL:-http://localhost:3000}"
+GRAFANA_ADMIN_USER="${GRAFANA_ADMIN_USER:-admin}"
+GRAFANA_ADMIN_PASSWORD="${GRAFANA_ADMIN_PASSWORD:-admin123}"
+
+echo "=== Grafana 多用户配置脚本 ==="
+echo ""
+
+# 检查 jq 是否安装
+if ! command -v jq &> /dev/null; then
+    echo "❌ jq 未安装，请先安装 jq:"
+    echo "   Ubuntu/Debian: sudo apt-get install jq"
+    echo "   CentOS/RHEL: sudo yum install jq"
+    echo "   Fedora: sudo dnf install jq"
+    exit 1
+fi
+
+# 获取认证 Token
+echo "🔐 获取 Grafana API Token..."
+AUTH_RESPONSE=$(curl -s -X POST \
+  -H "Content-Type: application/json" \
+  -d "{\"user\":\"$GRAFANA_ADMIN_USER\",\"password\":\"$GRAFANA_ADMIN_PASSWORD\"}" \
+  "$GRAFANA_URL/login")
+
+# 检查 Grafana 是否可访问
+if ! curl -s "$GRAFANA_URL/api/health" > /dev/null; then
+    echo "❌ 无法连接到 Grafana: $GRAFANA_URL"
+    echo "   请确保 Grafana 服务正在运行"
+    exit 1
+fi
+
+echo "✅ Grafana 连接成功"
+echo ""
+
+# 创建组织的函数
+create_organization() {
+    local org_name=$1
+    local org_id=$2
+    
+    echo "📁 创建组织: $org_name"
+    
+    # 检查组织是否已存在
+    ORG_EXISTS=$(curl -s -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        "$GRAFANA_URL/api/orgs/name/$org_name" | jq -r '.id // empty')
+    
+    if [ -n "$ORG_EXISTS" ]; then
+        echo "   ⚠️  组织 $org_name 已存在 (ID: $ORG_EXISTS)"
+        return
+    fi
+    
+    # 创建组织
+    ORG_RESPONSE=$(curl -s -X POST \
+        -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        -H "Content-Type: application/json" \
+        -d "{\"name\":\"$org_name\"}" \
+        "$GRAFANA_URL/api/orgs")
+    
+    NEW_ORG_ID=$(echo "$ORG_RESPONSE" | jq -r '.orgId // empty')
+    
+    if [ -n "$NEW_ORG_ID" ]; then
+        echo "   ✅ 组织创建成功 (ID: $NEW_ORG_ID)"
+    else
+        echo "   ❌ 组织创建失败: $ORG_RESPONSE"
+    fi
+}
+
+# 创建用户的函数
+create_user() {
+    local org_name=$1
+    local username=$2
+    local password=$3
+    local email=$4
+    local role=${5:-Viewer}
+    
+    echo "👤 创建用户: $username (组织: $org_name)"
+    
+    # 切换到指定组织
+    ORG_ID=$(curl -s -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        "$GRAFANA_URL/api/orgs/name/$org_name" | jq -r '.id // empty')
+    
+    if [ -z "$ORG_ID" ]; then
+        echo "   ❌ 组织 $org_name 不存在"
+        return
+    fi
+    
+    # 切换到组织
+    curl -s -X POST \
+        -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        "$GRAFANA_URL/api/user/using/$ORG_ID" > /dev/null
+    
+    # 检查用户是否已存在
+    USER_EXISTS=$(curl -s -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        "$GRAFANA_URL/api/users/lookup?loginOrEmail=$email" | jq -r '.id // empty')
+    
+    if [ -n "$USER_EXISTS" ]; then
+        echo "   ⚠️  用户 $username 已存在"
+        # 将用户添加到组织
+        curl -s -X POST \
+            -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+            -H "Content-Type: application/json" \
+            -d "{\"loginOrEmail\":\"$email\",\"role\":\"$role\"}" \
+            "$GRAFANA_URL/api/orgs/$ORG_ID/users" > /dev/null
+        echo "   ✅ 用户已添加到组织"
+        return
+    fi
+    
+    # 创建用户
+    USER_RESPONSE=$(curl -s -X POST \
+        -u "$GRAFANA_ADMIN_USER:$GRAFANA_ADMIN_PASSWORD" \
+        -H "Content-Type: application/json" \
+        -d "{
+            \"name\":\"$username\",
+            \"email\":\"$email\",
+            \"login\":\"$username\",
+            \"password\":\"$password\",
+            \"OrgId\":$ORG_ID
+        }" \
+        "$GRAFANA_URL/api/admin/users")
+    
+    USER_ID=$(echo "$USER_RESPONSE" | jq -r '.id // empty')
+    
+    if [ -n "$USER_ID" ]; then
+        echo "   ✅ 用户创建成功 (ID: $USER_ID)"
+    else
+        echo "   ❌ 用户创建失败: $USER_RESPONSE"
+    fi
+}
+
+# 示例：创建组织和用户
+echo "📝 开始创建组织和用户..."
+echo ""
+
+# 创建示例组织
+create_organization "用户组A" 2
+create_organization "用户组B" 3
+
+# 创建示例用户
+create_user "用户组A" "usera1" "password123" "usera1@example.com" "Viewer"
+create_user "用户组A" "usera2" "password123" "usera2@example.com" "Editor"
+create_user "用户组B" "userb1" "password123" "userb1@example.com" "Viewer"
+create_user "用户组B" "userb2" "password123" "userb2@example.com" "Editor"
+
+echo ""
+echo "✅ 用户配置完成！"
+echo ""
+echo "📋 创建的用户："
+echo "   用户组A:"
+echo "     - usera1 (Viewer) - usera1@example.com / password123"
+echo "     - usera2 (Editor) - usera2@example.com / password123"
+echo "   用户组B:"
+echo "     - userb1 (Viewer) - userb1@example.com / password123"
+echo "     - userb2 (Editor) - userb2@example.com / password123"
+echo ""
+echo "💡 下一步："
+echo "   1. 登录 Grafana 为每个组织配置数据源"
+echo "   2. 创建组织专用的仪表板"
+echo "   3. 配置数据源标签过滤（通过 Prometheus 标签）"
+echo ""