3 Commits

Author	SHA1	Message	Date
zyc	2c3357e33d	ci: trim cyberstar-env Secret to DATABASE_URL only ... Previous commit scoped too broadly. Other env vars (TOS/SMS/WECHAT/etc.) already have application-level fallbacks and aren't required to make the deploy work, so they don't need to be in the workflow yet. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-13 15:27:41 +08:00
zyc	19e789d6ac	ci: sync cyberstar-env Secret from Gitea repo secrets ... Previously cyberstar-env had to be created manually with kubectl, which broke the "git push = full deploy" expectation. Workflow now derives the runtime Secret from Gitea repo secrets each deploy, so DATABASE_URL, AUTH_SECRET, TOS/SMS/WECHAT credentials etc. are kept in one place and applied transactionally with the rest of the manifests. Repo secrets that need to exist in Gitea Settings: DATABASE_URL, REDIS_URL, AUTH_SECRET, TOS_ENDPOINT, TOS_REGION, TOS_BUCKET, TOS_ACCESS_KEY, TOS_SECRET_KEY, NEXT_PUBLIC_TOS_DOMAIN, WECHAT_APP_ID, WECHAT_APP_SECRET, SMS_ACCESS_KEY, SMS_SECRET_KEY, SMS_SIGN_NAME, SMS_TEMPLATE_CODE, HCAPTCHA_SITE_KEY, HCAPTCHA_SECRET Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-13 15:25:47 +08:00
zyc	c19b3b7b05	ci: add CI/CD pipeline for cyberstar.airlabs.art ... - Dockerfile: multi-stage Next.js standalone build with pnpm + prisma - k8s manifests: single web deployment + Traefik ingress + LE TLS - Gitea workflow: build/push to Volcano CR, deploy to K3s, log-center failure reporting - next.config: enable standalone output for slim container image Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-13 13:44:04 +08:00