diff --git a/deploy/env/.env.infra-test.example b/deploy/env/.env.infra-test.example
new file mode 100644
index 000000000..f7899d10c
--- /dev/null
+++ b/deploy/env/.env.infra-test.example
@@ -0,0 +1,7 @@
+# 测试基础设施配置模板。复制为仓库根目录 .env 后填写真实值，禁止提交真实密码。
+INFRA_NETWORK=firstleg-test-infra-network
+MYSQL_ROOT_PASSWORD=CHANGE_ME_TEST_MYSQL_ROOT_PASSWORD
+MYSQL_DATABASE=baiyue
+MYSQL_USER=baiyue
+MYSQL_PASSWORD=CHANGE_ME_TEST_MYSQL_PASSWORD
+REDIS_PASSWORD=CHANGE_ME_TEST_REDIS_PASSWORD
diff --git a/deploy/env/.env.test.example b/deploy/env/.env.test.example
new file mode 100644
index 000000000..811a3d95d
--- /dev/null
+++ b/deploy/env/.env.test.example
@@ -0,0 +1,58 @@
+# 复制本文件仅用于本地验证。Jenkins 中应创建“Secret file”凭据，禁止提交真实 .env。
+DEPLOY_ENV=test
+IMAGE_REPOSITORY=registry.example.com/your-group/baiyue-firstleg
+IMAGE_TAG=latest
+INFRA_NETWORK=firstleg-test-infra-network
+
+SPRING_PROFILES_ACTIVE=cn
+NACOS_SERVER_ADDR=nacos:8848
+NACOS_USERNAME=nacos
+NACOS_PASSWORD=CHANGE_ME_NACOS_PASSWORD
+NACOS_GROUP=BAIYUE
+NACOS_NAMESPACE=public
+
+REDIS_HOST=redis
+REDIS_PORT=6379
+REDIS_PASSWORD=CHANGE_ME_REDIS_PASSWORD
+REDIS_DATABASE=0
+
+JWT_SECRET=CHANGE_ME_TO_A_RANDOM_SECRET_WITH_AT_LEAST_32_BYTES
+INTERNAL_SERVICE_TOKEN=CHANGE_ME_TO_A_DIFFERENT_RANDOM_TOKEN_WITH_32_BYTES
+REGION_CODE=CN
+DEPLOYMENT_CELL=test-cn
+DATA_RESIDENCY=CN
+SWAGGER_ENABLED=true
+CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:5174
+CORS_ALLOW_CREDENTIALS=false
+
+AUTH_DB_URL=jdbc:mysql://mysql:3306/baiyue_auth?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+AUTH_DB_USERNAME=root
+AUTH_DB_PASSWORD=CHANGE_ME_AUTH_DB_PASSWORD
+IAM_DB_URL=jdbc:mysql://mysql:3306/baiyue_iam?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+IAM_DB_USERNAME=root
+IAM_DB_PASSWORD=CHANGE_ME_IAM_DB_PASSWORD
+FIRSTLEG_DB_URL=jdbc:mysql://mysql:3306/baiyue_firstleg?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+FIRSTLEG_DB_USERNAME=root
+FIRSTLEG_DB_PASSWORD=CHANGE_ME_FIRSTLEG_DB_PASSWORD
+ORDER_DB_URL=jdbc:mysql://mysql:3306/baiyue_order?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+ORDER_DB_USERNAME=root
+ORDER_DB_PASSWORD=CHANGE_ME_ORDER_DB_PASSWORD
+WAREHOUSE_DB_URL=jdbc:mysql://mysql:3306/baiyue_warehouse?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+WAREHOUSE_DB_USERNAME=root
+WAREHOUSE_DB_PASSWORD=CHANGE_ME_WAREHOUSE_DB_PASSWORD
+FILE_DB_URL=jdbc:mysql://mysql:3306/baiyue_file?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+FILE_DB_USERNAME=root
+FILE_DB_PASSWORD=CHANGE_ME_FILE_DB_PASSWORD
+PRINT_DB_URL=jdbc:mysql://mysql:3306/baiyue_print?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+PRINT_DB_USERNAME=root
+PRINT_DB_PASSWORD=CHANGE_ME_PRINT_DB_PASSWORD
+EVENT_BRIDGE_DB_URL=jdbc:mysql://mysql:3306/baiyue_event_bridge?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+EVENT_BRIDGE_DB_USERNAME=root
+EVENT_BRIDGE_DB_PASSWORD=CHANGE_ME_EVENT_BRIDGE_DB_PASSWORD
+AUDIT_DB_URL=jdbc:mysql://mysql:3306/baiyue_audit?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai
+AUDIT_DB_USERNAME=root
+AUDIT_DB_PASSWORD=CHANGE_ME_AUDIT_DB_PASSWORD
+
+# 三方集成默认关闭，启用后再在 Jenkins Secret file 中填写密钥。
+BAIDU_OCR_ENABLED=false
+AMAZON_SP_API_ENABLED=false
diff --git a/deploy/maven/settings-cn.xml b/deploy/maven/settings-cn.xml
new file mode 100644
index 000000000..96d2d9207
--- /dev/null
+++ b/deploy/maven/settings-cn.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<settings xmlns="http://maven.apache.org/SETTINGS/1.2.0"
+          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.2.0 https://maven.apache.org/xsd/settings-1.2.0.xsd">
+    <mirrors>
+        <mirror>
+            <id>aliyun-public</id>
+            <name>阿里云 Maven 公共仓库</name>
+            <url>https://maven.aliyun.com/repository/public</url>
+            <mirrorOf>central</mirrorOf>
+        </mirror>
+    </mirrors>
+
+    <profiles>
+        <profile>
+            <id>国内仓库</id>
+            <repositories>
+                <repository>
+                    <id>central</id>
+                    <url>https://repo.maven.apache.org/maven2</url>
+                    <releases><enabled>true</enabled></releases>
+                    <snapshots><enabled>false</enabled></snapshots>
+                </repository>
+            </repositories>
+            <pluginRepositories>
+                <pluginRepository>
+                    <id>central</id>
+                    <url>https://repo.maven.apache.org/maven2</url>
+                    <releases><enabled>true</enabled></releases>
+                    <snapshots><enabled>false</enabled></snapshots>
+                </pluginRepository>
+            </pluginRepositories>
+        </profile>
+    </profiles>
+
+    <activeProfiles>
+        <activeProfile>国内仓库</activeProfile>
+    </activeProfiles>
+</settings>