cameleer/cameleer-website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: cameleer:28fcaf16c54fd3677cf9a4cdc265a2e395389ccc
Branches Tags
cameleer:main cameleer:relaunch-2026-04-25 cameleer:feat/initial-build
...
compare: cameleer:461b5e0cd6ca4166cc9301bb64df614344a77ec1
Branches Tags
cameleer:relaunch-2026-04-25 cameleer:main cameleer:feat/initial-build

2 Commits
28fcaf16c5 ... 461b5e0cd6

Author SHA1 Message Date
hsiegeln
461b5e0cd6 Merge branch 'feat/initial-build' into main
Some checks failed
deploy / build (push) Successful in 36s
Details
deploy / deploy (push) Failing after 14s
Details
ci / build-test (push) Successful in 3m54s
Details 
Copy public/.htaccess into dist after Astro build (Astro/Vite drops
dotfiles from public/ otherwise, leaving the origin without HSTS).

# Conflicts:
#	.gitea/workflows/deploy.yml
 2026-04-24 21:09:35 +02:00
hsiegeln
0d743402ac ci(deploy): copy public/.htaccess into dist after build
All checks were successful
ci / build-test (push) Successful in 3m47s
Details 
Astro/Vite drops dotfiles from public/ during build, so .htaccess
never makes it into dist/. The deployed Apache origin then has no
header rules to apply, leaving the site without HSTS, X-Frame-Options,
Referrer-Policy, etc. — caught today by the post-deploy smoke test
("HSTS missing").

Copy the file explicitly after build. test -f makes the step fail
loudly if public/.htaccess goes missing, rather than silently
shipping a header-less site.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-24 21:08:51 +02:00
1 changed files with 9 additions and 0 deletions
Expand all files Collapse all files

9
.gitea/workflows/deploy.yml
View File

@@ -53,6 +53,15 @@ jobs:
- name: Build site - name: Build site
run: npm run build run: npm run build
# Astro/Vite does not copy dotfiles from public/ into dist/, so .htaccess
# never reaches the deployed origin and Apache never sees the security
# headers it sets. Copy it explicitly. Fail if the source is missing
# rather than silently shipping a header-less site.
- name: Copy .htaccess into dist
run: |
test -f public/.htaccess
cp public/.htaccess dist/.htaccess
- name: Guard — no TBD markers may ship in built HTML - name: Guard — no TBD markers may ship in built HTML
run: | run: |
if grep -rlE '(TBD):' dist 2>/dev/null | grep -E '\.(html|svg)$'; then if grep -rlE '(TBD):' dist 2>/dev/null | grep -E '\.(html|svg)$'; then