4 Commits

Author	SHA1	Message	Date
Ho Ngoc Hai	b84dfd5cad	fix: Docker build errors — Prisma generate order, .dockerignore multi-service ... - Dockerfile: move prisma generate BEFORE nest build (fixes TS2305 PropertyType) - .dockerignore: remove apps/web + libs/ai-services exclusions (needed by Kaniko) - CI: add pnpm db:generate step before lint/typecheck/build Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>	2026-04-13 15:31:08 +07:00
Ho Ngoc Hai	017d85247e	fix(security): harden security headers across API and Web apps ... - API: set X-Frame-Options to DENY via frameguard, add Permissions-Policy header, widen CSP connect-src for Swagger CDN - Web: add HSTS header (1yr, includeSubDomains, preload), add payment=(self) to Permissions-Policy, make localhost:3001 in CSP connect-src dev-only Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-10 20:10:22 +07:00
Ho Ngoc Hai	2a8799ac5b	fix(ci): correct workflow branch targets from main to master ... All three GitHub Actions workflows (CI, E2E, Deploy) referenced branches: [main] but the repository default branch is master. This meant CI never triggered on pushes or PRs to master. - ci.yml: push/PR triggers → master - e2e.yml: push/PR triggers → master - deploy.yml: push trigger + latest tag condition → master Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-10 19:20:49 +07:00
Ho Ngoc Hai	19dd59e4eb	ci: add GitHub Actions CI/CD pipelines ... - Add ci.yml with lint, typecheck, test, build steps + PostgreSQL service - Add deploy.yml scaffold with Docker build placeholders Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-08 02:04:24 +07:00