Merge branch 'main' of https://gitea.airlabs.art/zyc/video-shuoshan

CLAUDE.md

@@ -392,8 +392,8 @@ npx tsx src/index.ts --resume /Users/maidong/Desktop/zyc/研究openclaw/视频
 - **CI/CD**: Gitea Actions (`.gitea/workflows/deploy.yaml`)
 - **Registry**: Huawei Cloud SWR
 - **Orchestration**: Kubernetes (`k8s/` directory)
-- **Backend URL**: `video-huoshan-api.airlabs.art`
-- **Frontend URL**: `video-huoshan-web.airlabs.art`
+- **Backend URL**: `airflow-studio-api.airlabs.art`
+- **Frontend URL**: `airflow-studio.airlabs.art`
 - **Database**: Aliyun RDS MySQL (`rm-7xv1uaw910558p1788o.mysql.rds.aliyuncs.com:3306`)
 
 ## Testing

docs/changelog.md

@@ -170,7 +170,7 @@
 3. **H2: 登录限流** — DRF `ScopedRateThrottle` 实现 `login: 5/min`，全局匿名 30/min、认证用户 120/min
 4. **H4: Django Admin 限制** — 仅在 `DEBUG=True` 时注册 `/admin/` URL
 5. **H6: XSS 防护** — 安装 DOMPurify，`PromptInput.tsx` 的 `innerHTML` 赋值前进行 HTML 消毒
-6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `video-huoshan-api.airlabs.art,localhost`
+6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `airflow-studio-api.airlabs.art,localhost`
 7. **H9: Nginx 安全头** — `server_tokens off` + X-Frame-Options/X-Content-Type-Options/X-XSS-Protection/Referrer-Policy/Permissions-Policy
 8. **M1: 密码策略加强** — 最小 8 位 + 常见密码检测 + 纯数字密码检测
 9. **M5: Django 安全头** — 生产环境启用 XSS Filter/Content-Type-Nosniff/X-Frame-Options/SSL Proxy Header

k8s/backend-deployment.yaml

@@ -56,7 +56,7 @@ spec:
           value: "3306"
         # CORS
         - name: CORS_ALLOWED_ORIGINS
-          value: "https://video-huoshan-web.airlabs.art"
+          value: "https://airflow-studio.airlabs.art"
         # Log Center
         - name: LOG_CENTER_URL
           value: "https://qiyuan-log-center-api.airlabs.art"

k8s/ingress.yaml

@@ -1,18 +1,18 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: video-huoshan-ingress
+  name: airflow-studio-ingress
   annotations:
     kubernetes.io/ingress.class: "traefik"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   tls:
   - hosts:
-    - video-huoshan-api.airlabs.art
-    - video-huoshan-web.airlabs.art
-    secretName: video-huoshan-tls
+    - airflow-studio-api.airlabs.art
+    - airflow-studio.airlabs.art
+    secretName: airflow-studio-tls
   rules:
-  - host: video-huoshan-api.airlabs.art
+  - host: airflow-studio-api.airlabs.art
     http:
       paths:
       - path: /
@@ -22,7 +22,7 @@ spec:
             name: video-backend
             port:
               number: 8000
-  - host: video-huoshan-web.airlabs.art
+  - host: airflow-studio.airlabs.art
     http:
       paths:
       - path: /