chore(ci): restore qa.yml target to test.e-tib.com

chore(ci): point qa.yml to branch domain for verification
fix(ci): bypass Gatekeeper for /assets and disable TLS rejection in loopback
2026-07-09 11:46:10 +02:00 · 2026-07-09 11:42:32 +02:00 · 2026-07-09 11:35:45 +02:00
2 changed files with 4 additions and 1 deletions
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -333,6 +333,9 @@ jobs:
          {
            echo "# Generated by CI - $TARGET"
            echo "IMAGE_TAG=$IMAGE_TAG"
+            if [[ "$TARGET" != "production" ]]; then
+              echo "NODE_TLS_REJECT_UNAUTHORIZED=0"
+            fi
            echo "NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL"
            echo "GATEKEEPER_ORIGIN=$GATEKEEPER_ORIGIN"
            echo "SENTRY_DSN=$SENTRY_DSN"
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -27,7 +27,7 @@ services:
      - "traefik.http.routers.${PROJECT_NAME:-klz}.middlewares=${AUTH_MIDDLEWARE:-etib-ratelimit,etib-forward,etib-compress}"

      # Public Router – paths that bypass Gatekeeper auth (health, SEO, static assets, OG images)
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?(health|login|gatekeeper|uploads|media|robots\\.txt|manifest\\.webmanifest|sitemap(-[0-9]+)?\\.xml|(.*/)?api/og(/.*)?|(.*/)?opengraph-image.*)`)"
+      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?(health|login|gatekeeper|uploads|media|assets|robots\\.txt|manifest\\.webmanifest|sitemap(-[0-9]+)?\\.xml|(.*/)?api/og(/.*)?|(.*/)?opengraph-image.*)`)"
      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.tls=${TRAEFIK_TLS:-false}"
Author	SHA1	Message	Date
Marc Mintel	adf2851504	chore(ci): restore qa.yml target to test.e-tib.com All checks were successful Build & Deploy / 🔍 Prepare (push) Successful in 21s Details Build & Deploy / 🧪 QA (push) Successful in 1m23s Details Build & Deploy / 🏗️ Build (push) Successful in 2m33s Details Build & Deploy / 🚀 Deploy (push) Successful in 27s Details Build & Deploy / 🧪 Post-Deploy Verification (push) Successful in 54s Details Build & Deploy / 🔔 Notify (push) Successful in 4s Details	2026-07-09 11:46:10 +02:00
Marc Mintel	e398fbceed	chore(ci): point qa.yml to branch domain for verification Some checks failed Build & Deploy / 🔍 Prepare (push) Successful in 49s Details Build & Deploy / 🏗️ Build (push) Has been cancelled Details Build & Deploy / 🚀 Deploy (push) Has been cancelled Details Build & Deploy / 🧪 Post-Deploy Verification (push) Has been cancelled Details Build & Deploy / 🔔 Notify (push) Has been cancelled Details Build & Deploy / 🧪 QA (push) Has been cancelled Details	2026-07-09 11:42:32 +02:00
Marc Mintel	850d9e392e	fix(ci): bypass Gatekeeper for /assets and disable TLS rejection in loopback All checks were successful Build & Deploy / 🔍 Prepare (push) Successful in 53s Details Build & Deploy / 🧪 QA (push) Successful in 1m18s Details Build & Deploy / 🏗️ Build (push) Successful in 2m25s Details Build & Deploy / 🚀 Deploy (push) Successful in 27s Details Build & Deploy / 🧪 Post-Deploy Verification (push) Has been skipped Details Build & Deploy / 🔔 Notify (push) Successful in 4s Details	2026-07-09 11:35:45 +02:00