add change host
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 2m21s

This commit is contained in:
zyc 2026-03-20 16:25:22 +08:00
parent e04712cc79
commit a389495ee7
4 changed files with 10 additions and 10 deletions

View File

@ -392,8 +392,8 @@ npx tsx src/index.ts --resume /Users/maidong/Desktop/zyc/研究openclaw/视频
- **CI/CD**: Gitea Actions (`.gitea/workflows/deploy.yaml`) - **CI/CD**: Gitea Actions (`.gitea/workflows/deploy.yaml`)
- **Registry**: Huawei Cloud SWR - **Registry**: Huawei Cloud SWR
- **Orchestration**: Kubernetes (`k8s/` directory) - **Orchestration**: Kubernetes (`k8s/` directory)
- **Backend URL**: `video-huoshan-api.airlabs.art` - **Backend URL**: `airflow-studio-api.airlabs.art`
- **Frontend URL**: `video-huoshan-web.airlabs.art` - **Frontend URL**: `airflow-studio.airlabs.art`
- **Database**: Aliyun RDS MySQL (`rm-7xv1uaw910558p1788o.mysql.rds.aliyuncs.com:3306`) - **Database**: Aliyun RDS MySQL (`rm-7xv1uaw910558p1788o.mysql.rds.aliyuncs.com:3306`)
## Testing ## Testing

View File

@ -170,7 +170,7 @@
3. **H2: 登录限流** — DRF `ScopedRateThrottle` 实现 `login: 5/min`,全局匿名 30/min、认证用户 120/min 3. **H2: 登录限流** — DRF `ScopedRateThrottle` 实现 `login: 5/min`,全局匿名 30/min、认证用户 120/min
4. **H4: Django Admin 限制** — 仅在 `DEBUG=True` 时注册 `/admin/` URL 4. **H4: Django Admin 限制** — 仅在 `DEBUG=True` 时注册 `/admin/` URL
5. **H6: XSS 防护** — 安装 DOMPurify`PromptInput.tsx``innerHTML` 赋值前进行 HTML 消毒 5. **H6: XSS 防护** — 安装 DOMPurify`PromptInput.tsx``innerHTML` 赋值前进行 HTML 消毒
6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `video-huoshan-api.airlabs.art,localhost` 6. **H7: ALLOWED_HOSTS 收紧** — 从 `"*"` 改为 `airflow-studio-api.airlabs.art,localhost`
7. **H9: Nginx 安全头**`server_tokens off` + X-Frame-Options/X-Content-Type-Options/X-XSS-Protection/Referrer-Policy/Permissions-Policy 7. **H9: Nginx 安全头**`server_tokens off` + X-Frame-Options/X-Content-Type-Options/X-XSS-Protection/Referrer-Policy/Permissions-Policy
8. **M1: 密码策略加强** — 最小 8 位 + 常见密码检测 + 纯数字密码检测 8. **M1: 密码策略加强** — 最小 8 位 + 常见密码检测 + 纯数字密码检测
9. **M5: Django 安全头** — 生产环境启用 XSS Filter/Content-Type-Nosniff/X-Frame-Options/SSL Proxy Header 9. **M5: Django 安全头** — 生产环境启用 XSS Filter/Content-Type-Nosniff/X-Frame-Options/SSL Proxy Header

View File

@ -56,7 +56,7 @@ spec:
value: "3306" value: "3306"
# CORS # CORS
- name: CORS_ALLOWED_ORIGINS - name: CORS_ALLOWED_ORIGINS
value: "https://video-huoshan-web.airlabs.art" value: "https://airflow-studio.airlabs.art"
# Log Center # Log Center
- name: LOG_CENTER_URL - name: LOG_CENTER_URL
value: "https://qiyuan-log-center-api.airlabs.art" value: "https://qiyuan-log-center-api.airlabs.art"

View File

@ -1,18 +1,18 @@
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: video-huoshan-ingress name: airflow-studio-ingress
annotations: annotations:
kubernetes.io/ingress.class: "traefik" kubernetes.io/ingress.class: "traefik"
cert-manager.io/cluster-issuer: "letsencrypt-prod" cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec: spec:
tls: tls:
- hosts: - hosts:
- video-huoshan-api.airlabs.art - airflow-studio-api.airlabs.art
- video-huoshan-web.airlabs.art - airflow-studio.airlabs.art
secretName: video-huoshan-tls secretName: airflow-studio-tls
rules: rules:
- host: video-huoshan-api.airlabs.art - host: airflow-studio-api.airlabs.art
http: http:
paths: paths:
- path: / - path: /
@ -22,7 +22,7 @@ spec:
name: video-backend name: video-backend
port: port:
number: 8000 number: 8000
- host: video-huoshan-web.airlabs.art - host: airflow-studio.airlabs.art
http: http:
paths: paths:
- path: / - path: /