Feat/ci cd securisation infcdaal3 #1

Merged
sam merged 6 commits from feat/ci-cd-securisation-infcdaal3 into main 2026-07-08 16:47:05 +00:00

6 Commits

Author SHA1 Message Date
sam 89b4107266 docs: dossier de deploiement/securisation, presentation BLOC 3 et CHANGELOG
CI - Web (Laravel) / quality-and-tests (pull_request) Failing after 4m4s
- docs/Dossier_Deploiement_Securisation_CESIZen.docx (15-20 pages)
- presentation_bloc3.js -> CESIZen_Presentation_Bloc3.pptx (10 slides)
- diagrammes architecture et CI/CD (docs/img)
- CHANGELOG.md (versionnage semantique)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:44:13 +02:00
sam 70d4767890 chore(app): mises a jour applicatives et normalisation du code (Laravel Pint)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:44:13 +02:00
sam c51f17a74c test: fiabilisation de la suite de tests
- BusinessLogicTest: utilise le vrai modele StressEvent + auth Sanctum
- AdminAccessTest: compte actif requis pour l'acces au panel
- SecurityHeadersTest: verifie les en-tetes de securite
- suppression du modele orphelin EvenementStress

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:44:13 +02:00
sam ebe1836f7e feat(securite): en-tetes HTTP, trust proxies et configuration de production durcie
- middleware SecurityHeaders (HSTS, CSP, X-Frame-Options, etc.)
- trustProxies pour le reverse proxy Nginx Proxy Manager
- .env.production.example (APP_DEBUG=false, sessions chiffrees, cookies Secure)
- politique de securite SECURITY.md

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:43:17 +02:00
sam d75afe0aac ci: pipelines Gitea Actions (CI/CD) + modeles de tickets et runner
- ci.yml: tests PHPUnit, Pint, audit securite, build Vite
- deploy.yml: build image -> registre Gitea -> webhook Portainer -> health check
- modeles d'issues (incident / evolution) et de Pull Request
- docker-compose du runner act_runner

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:43:17 +02:00
sam c3e1c95f1b chore(repo): ajout du .gitignore racine et arret du suivi de node_modules/.idea
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-08 18:43:17 +02:00