zyc/video-shuoshan
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
25 Commits 8 Branches 0 Tags
Commit Graph

6 Commits

Author SHA1 Message Date
seaislee1209
cfe5031d62 fix: K8s 健康检查 400 + 补充 generation 迁移文件
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 2m18s
Details 
- 健康检查探针添加 Host: localhost 头，解决 Django ALLOWED_HOSTS 拒绝
- 补充 generation 0004 迁移（model choices 标签更新）

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-16 06:59:54 +08:00
seaislee1209
d9a12af078 fix: v0.8.5 安全加固 — CRITICAL/HIGH 漏洞修复 
- C1/C2: 移除 settings.py 中硬编码的数据库密码和 SECRET_KEY 默认值
- K8s: DB_PASSWORD/DB_HOST/DB_USER/DJANGO_SECRET_KEY 改为 secretKeyRef
- H1: DEBUG 默认值从 True 改为 False
- H2: 登录接口添加 ScopedRateThrottle (5/min)，全局限流 (anon 30/min, user 120/min)
- H4: Django Admin 仅在 DEBUG=True 时注册
- H6: PromptInput innerHTML 使用 DOMPurify 消毒防止 XSS
- H7: ALLOWED_HOSTS 从 "*" 收紧为实际域名
- H9: Nginx 添加安全响应头 + server_tokens off
- M1: 密码策略加强 (min 8 + CommonPassword + NumericPassword)
- M5: Django 生产环境安全头配置
- L1: 登录接口改为 POST-only

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-16 02:08:50 +08:00
seaislee1209
32f0ee58f4 feat: v0.8.0 — Seedance API 全流程修复 + TOS 视频持久化 
- 新增音频引用传递给 Seedance API
- 视频生成完成后自动持久化到 TOS（永久 CDN URL）
- 移除 ARK_API_KEY 硬编码默认值
- 前端渐进式轮询（10s/30s/60s）替代固定 3 分钟
- TOS 桶切换到 airdrama-media (cn-beijing)
- K8s Secret 注入 TOS 密钥，CI/CD 同步更新

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-15 21:26:27 +08:00
zyc
c1f29cbf85 feat: integrate Seedance API key via K8s Secret and auto-create admin user
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 3m46s
Details 
- CI/CD creates K8s Secret from Gitea Secrets (ARK_API_KEY not in code)
- Backend deployment reads ARK_API_KEY from secretKeyRef
- Enable SEEDANCE_ENABLED=true in production
- Auto-create admin superuser on container startup if not exists
- Update CLAUDE.md and agent-auto memory docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-15 00:41:22 +08:00
zyc
8ef3d17553 Integrate Log Center for error reporting
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 1m57s
Details 
- Backend: DRF custom exception handler → Log Center (async, non-blocking)
- Frontend: global error handlers + axios 5xx interceptor → Log Center
- CI/CD: failure step reports build/deploy errors with actual logs
- K8S: add LOG_CENTER env vars to backend deployment
- Registered projects: video_backend, video_web
 2026-03-13 10:35:49 +08:00
zyc
f42eb64e25 Add CI/CD pipeline and K8S deployment
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 3m13s
Details 
- Backend/Web Dockerfiles with multi-stage builds
- K8S deployments, services, and ingress for both domains
- Gitea Actions workflow: build → push to SWR → deploy to K3s
- Health check endpoint (/healthz/)
- CORS env var support for production domains
- Nginx reverse proxy for frontend → backend API

Domains:
  - video-huoshan-api.airlabs.art (backend)
  - video-huoshan-web.airlabs.art (frontend)
 2026-03-13 10:24:31 +08:00