From 293c4b7af5810ab85ef68c42854929d267ac3076 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Sun, 8 Feb 2026 10:41:25 +0100
Subject: [PATCH] fix: exhaustive pipeline fixes (404, pagespeed auth, directus
 health)

---
 .gitea/workflows/deploy.yml           |  6 +++---
 apps/web/scripts/pagespeed-sitemap.ts | 13 +++++++------
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 08383cb..1f8cedc 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -251,8 +251,8 @@ jobs:
           DIRECTUS_DB_NAME=${{ secrets.DIRECTUS_DB_NAME || vars.DIRECTUS_DB_NAME || 'directus' }}
           DIRECTUS_DB_USER=${{ secrets.DIRECTUS_DB_USER || vars.DIRECTUS_DB_USER || 'directus' }}
           DIRECTUS_DB_PASSWORD=${{ secrets.DIRECTUS_DB_PASSWORD || vars.DIRECTUS_DB_PASSWORD }}
-          DIRECTUS_KEY=${{ secrets.DIRECTUS_KEY || vars.DIRECTUS_KEY }}
-          DIRECTUS_SECRET=${{ secrets.DIRECTUS_SECRET || vars.DIRECTUS_SECRET }}
+          DIRECTUS_KEY=${{ secrets.DIRECTUS_KEY || vars.DIRECTUS_KEY || 'mintel-default-key-32chars-minimum' }}
+          DIRECTUS_SECRET=${{ secrets.DIRECTUS_SECRET || vars.DIRECTUS_SECRET || 'mintel-default-secret-32chars-minimum' }}
           
           # SMTP Config
           SMTP_HOST=${{ secrets.SMTP_HOST || vars.SMTP_HOST }}
@@ -264,7 +264,7 @@ jobs:
           CONTACT_RECIPIENT=${{ secrets.CONTACT_RECIPIENT || vars.CONTACT_RECIPIENT }}
 
           # Authentication
-          GATEKEEPER_PASSWORD=${{ secrets.GATEKEEPER_PASSWORD || vars.GATEKEEPER_PASSWORD }}
+          GATEKEEPER_PASSWORD=${{ secrets.GATEKEEPER_PASSWORD || vars.GATEKEEPER_PASSWORD || 'mintel' }}
           AUTH_COOKIE_NAME=${{ secrets.AUTH_COOKIE_NAME || vars.AUTH_COOKIE_NAME || 'mintel_gatekeeper_session' }}
           COOKIE_DOMAIN=${{ secrets.COOKIE_DOMAIN || vars.COOKIE_DOMAIN || '.mintel.me' }}
           AUTH_MIDDLEWARE=${{ needs.prepare.outputs.auth_middleware }}
diff --git a/apps/web/scripts/pagespeed-sitemap.ts b/apps/web/scripts/pagespeed-sitemap.ts
index 4000be4..a89c61e 100644
--- a/apps/web/scripts/pagespeed-sitemap.ts
+++ b/apps/web/scripts/pagespeed-sitemap.ts
@@ -13,9 +13,10 @@ import * as path from 'path';
  */
 
 const targetUrl =
-  process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'https://testing.klz-cables.com';
-const limit = process.env.PAGESPEED_LIMIT ? parseInt(process.env.PAGESPEED_LIMIT) : 20; // Default limit to avoid infinite runs
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+  process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'https://testing.mintel.me';
+const limit = process.env.PAGESPEED_LIMIT ? parseInt(process.env.PAGESPEED_LIMIT) : 20;
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'mintel';
+const gatekeeperCookie = process.env.AUTH_COOKIE_NAME || 'mintel_gatekeeper_session';
 
 async function main() {
   console.log(`\n🚀 Starting PageSpeed test for: ${targetUrl}`);
@@ -29,7 +30,7 @@ async function main() {
     // We might need to bypass gatekeeper for the sitemap fetch too
     const response = await axios.get(sitemapUrl, {
       headers: {
-        Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
+        Cookie: `${gatekeeperCookie}=${gatekeeperPassword}`,
       },
       validateStatus: (status) => status < 400,
     });
@@ -73,7 +74,7 @@ async function main() {
     // Handle authentication for staging/testing
     // Lighthouse can set cookies via --collect.settings.extraHeaders
     const extraHeaders = JSON.stringify({
-      Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
+      Cookie: `${gatekeeperCookie}=${gatekeeperPassword}`,
     });
 
     const chromePath = process.env.CHROME_PATH || process.env.PUPPETEER_EXECUTABLE_PATH;
@@ -86,7 +87,7 @@ async function main() {
 
     // Using a more robust way to execute and capture output
     // We remove 'npx lhci upload' to keep everything local and avoid Google-hosted reports
-    const lhciCommand = `npx lhci collect ${urlArgs} ${chromePathArg} --collect.settings.chromeFlags='--no-sandbox --disable-setuid-sandbox' --collect.settings.extraHeaders='${extraHeaders}' && npx lhci assert`;
+    const lhciCommand = `npx lhci collect ${urlArgs} ${chromePathArg} --collect.settings.chromeFlags='--no-sandbox --disable-setuid-sandbox --headless' --collect.settings.extraHeaders='${extraHeaders}' && npx lhci assert`;
 
     console.log(`💻 Executing LHCI...`);