release: simplify unsigned installation

tests/security.test.ts

@@ -27,14 +27,16 @@ describe("部署安全配置", () => {
     expect(loadConfig().trustProxy).toBe(1);
   });
 
-  it("systemd 更新必须绑定主机白名单并默认要求签名", () => {
+  it("systemd 更新必须绑定主机白名单，签名校验默认关闭", () => {
     process.env.TALLYNOTE_UPDATE_STRATEGY = "systemd";
     process.env.TALLYNOTE_PUBLIC_ORIGIN = "https://example.test";
     process.env.TALLYNOTE_COOKIE_SECURE = "true";
     expect(() => loadConfig()).toThrow(/ALLOWED_HOSTS/);
     process.env.TALLYNOTE_UPDATE_ALLOWED_HOSTS = "updates.example";
     const config = loadConfig();
-    expect(config.updateRequireSignature).toBe(true);
+    expect(config.updateRequireSignature).toBe(false);
+    process.env.TALLYNOTE_UPDATE_REQUIRE_SIGNATURE = "true";
+    expect(loadConfig().updateRequireSignature).toBe(true);
   });
 
   it("收紧已有数据目录和数据库文件权限，并拒绝符号链接", () => {