striker/anotherreflections-website-v2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
27 Commits 1 Branch 0 Tags
7f891c4759e7c1805fba63a504e82bf6907b3199
Commit Graph

4 Commits

Author SHA1 Message Date
Dmitry Gusev
7f891c4759 feat(security): Hadolint + GitLeaks + Semgrep workflow (Layer C)
Some checks failed
deploy / deploy (push) Has been cancelled
Details
security / security (push) Has been cancelled
Details 
Новый workflow .gitea/workflows/security.yml — параллельно с deploy.yml,
запускается на push в main + на PR. Все три инструмента warning-only:

- Hadolint: bad practices в Dockerfile
- GitLeaks: поиск секретов в истории (полный clone fetch-depth: 0)
- Semgrep: SAST с конфигами p/javascript + p/react + p/typescript + p/security-audit

Не блокируют deploy — findings собираются в логи job'а.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 16:51:01 +03:00
striker
bd6ab03b2e feat(seo): discoverability + Schema.org + IndexNow + Trivy (#1)
All checks were successful
deploy / deploy (push) Successful in 3m7s
Details
2026-05-21 14:25:12 +03:00
striker
8cab51d590 ci: workflow по стандартному шаблону Gitea Actions
All checks were successful
deploy / deploy (push) Successful in 46s
Details 
Workflow приведён к шаблону из memory/reference_gitea_actions.md:
- runs-on: ubuntu-latest (act_runner на str-u-01 даёт node:20-bookworm)
- apt-get install openssh-client (нет в node:20 by default)
- secrets: SSH_DEPLOY_KEY (raw private key, не base64) + SSH_KNOWN_HOSTS
- ssh ... bash -s <<'REMOTE' с git clone/pull, docker compose build+up,
  health-check curl, docker image prune retention 7d
 2026-05-21 02:53:52 +03:00
striker
db0d27cf4e build: Dockerfile + nginx.conf + docker-compose + Gitea CI + 404 page
Some checks failed
Deploy to web.hhivp.com / deploy (push) Failing after 3s
Details 
- Dockerfile multi-stage: node:22-alpine builds Astro → nginx:1.29-alpine
  отдаёт dist/. healthcheck wget --spider /
- nginx.conf: gzip с подходящими типами (RSS/JSON/SVG/woff2), кэш /_astro/
  immutable 1y, кэш css/js/img 30d, MIME application/rss+xml для feed,
  text/plain для robots/ai/llms/sitemap, кастомная 404
- docker-compose: контейнер anotherreflections-ru-v2 на 127.0.0.1:4084
  (старый WP на :4080 остаётся для отката)
- .gitea/workflows/deploy.yml: push в main → SSH-деплой на web,
  git fetch+reset → docker compose build → up -d → docker image prune
  (retention 7d по правилу проекта). Verify-шаг curl на :4084
- src/pages/404.astro — тематическая страница «не найдено» с навигацией
 2026-05-21 02:37:46 +03:00