From a389495ee7a1f632c76fc2f2530c4fe4cb635406 Mon Sep 17 00:00:00 2001 From: zyc <1439655764@qq.com> Date: Fri, 20 Mar 2026 16:25:22 +0800 Subject: [PATCH] add change host --- CLAUDE.md | 4 ++-- docs/changelog.md | 2 +- k8s/backend-deployment.yaml | 2 +- k8s/ingress.yaml | 12 ++++++------ 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index 233e5e2..d716ba8 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -392,8 +392,8 @@ npx tsx src/index.ts --resume /Users/maidong/Desktop/zyc/研究openclaw/视频 - **CI/CD**: Gitea Actions (`.gitea/workflows/deploy.yaml`) - **Registry**: Huawei Cloud SWR - **Orchestration**: Kubernetes (`k8s/` directory) -- **Backend URL**: `video-huoshan-api.airlabs.art` -- **Frontend URL**: `video-huoshan-web.airlabs.art` +- **Backend URL**: `airflow-studio-api.airlabs.art` +- **Frontend URL**: `airflow-studio.airlabs.art` - **Database**: Aliyun RDS MySQL (`rm-7xv1uaw910558p1788o.mysql.rds.aliyuncs.com:3306`) ## Testing diff --git a/docs/changelog.md b/docs/changelog.md index 1d853ab..be3cfd8 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -170,7 +170,7 @@ 3. **H2: 登录限流** — DRF `ScopedRateThrottle` 实现 `login: 5/min`,全局匿名 30/min、认证用户 120/min 4. **H4: Django Admin 限制** — 仅在 `DEBUG=True` 时注册 `/admin/` URL 5. **H6: XSS 防护** — 安装 DOMPurify,`PromptInput.tsx` 的 `innerHTML` 赋值前进行 HTML 消毒 -6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `video-huoshan-api.airlabs.art,localhost` +6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `airflow-studio-api.airlabs.art,localhost` 7. **H9: Nginx 安全头** — `server_tokens off` + X-Frame-Options/X-Content-Type-Options/X-XSS-Protection/Referrer-Policy/Permissions-Policy 8. **M1: 密码策略加强** — 最小 8 位 + 常见密码检测 + 纯数字密码检测 9. **M5: Django 安全头** — 生产环境启用 XSS Filter/Content-Type-Nosniff/X-Frame-Options/SSL Proxy Header diff --git a/k8s/backend-deployment.yaml b/k8s/backend-deployment.yaml index 0b302e2..5307e48 100644 --- a/k8s/backend-deployment.yaml +++ b/k8s/backend-deployment.yaml @@ -56,7 +56,7 @@ spec: value: "3306" # CORS - name: CORS_ALLOWED_ORIGINS - value: "https://video-huoshan-web.airlabs.art" + value: "https://airflow-studio.airlabs.art" # Log Center - name: LOG_CENTER_URL value: "https://qiyuan-log-center-api.airlabs.art" diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml index 28c2890..d07ac8c 100644 --- a/k8s/ingress.yaml +++ b/k8s/ingress.yaml @@ -1,18 +1,18 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: - name: video-huoshan-ingress + name: airflow-studio-ingress annotations: kubernetes.io/ingress.class: "traefik" cert-manager.io/cluster-issuer: "letsencrypt-prod" spec: tls: - hosts: - - video-huoshan-api.airlabs.art - - video-huoshan-web.airlabs.art - secretName: video-huoshan-tls + - airflow-studio-api.airlabs.art + - airflow-studio.airlabs.art + secretName: airflow-studio-tls rules: - - host: video-huoshan-api.airlabs.art + - host: airflow-studio-api.airlabs.art http: paths: - path: / @@ -22,7 +22,7 @@ spec: name: video-backend port: number: 8000 - - host: video-huoshan-web.airlabs.art + - host: airflow-studio.airlabs.art http: paths: - path: /