failj/ntspi-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
385 Commits 3 Branches 0 Tags
94e17dfbbc006df2cee493d5f09004835fffa443
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
F4ilji 94e17dfbbc fix(vikon): use api_domain for OAuth authorize URL (not auth_domain) 
Original vikon_core used db-nica.ru for /oauth2/authorize, not auth.db-nica.ru.
This was causing 'Client authentication failed' error.
 2026-07-04 13:33:39 +05:00
F4ilji ba99b2a093 fix(vikon): switch validateFileTypes from blacklist to whitelist 
Based on actual file analysis of sveden/abitur/vsoko modules:
- html, css, js, map (content + assets)
- png, jpg, gif, svg, ico, bmp (images)
- ttf, woff, woff2, eot (fonts)
- pdf, doc, docx (documents)
- vikon (module-specific)

No PHP/ASP/executables in allowed list — any non-whitelisted file is blocked.
 2026-07-04 13:21:54 +05:00
F4ilji f4f8bc8e77 feat(vikon): rewrite VikonIntegration from scratch — OAuth + core update 
- HttpTask: Laravel Http facade with SSL enabled, retry, timeout
- ValidateTokenTask: token check via auth.db-nica.ru
- RefreshTokenTask: token refresh via db-nica.ru
- FilesystemTask: path traversal protection, blocked extensions (PHP/ASP/etc)
- AuthenticateAction: OAuth2 code→token exchange
- CheckAccessAction: token validation + filesystem writability check
- CheckVersionAction: version comparison against remote API
- UpdateCoreAction: ZIP download, Zip Slip protection, atomic sync with rollback
- VikonController: thin controller, 7 endpoints with Session-based token storage
- Routes: access-check, dashboard.auth, throttle:30,1 middleware
- Vue 3 Composition API frontend with progress bar
- Config: all secrets in .env via config/vikon.php
- vikon_core kept as fallback (not deleted)
 2026-07-04 12:53:28 +05:00
F4ilji 82df1210c2 feat(vikon): add config/vikon.php with module definitions 2026-07-04 12:41:22 +05:00
F4ilji 47aac647ac feat(vikon): remove broken VikonIntegration container - starting fresh 2026-07-04 12:40:41 +05:00
F4ilji 67b9aae961 feat(ci): add migration rollback and remove duplicate chown in Jenkinsfile 
- Save pre-deploy SHA before git pull for automatic rollback
- On migrate failure: git reset + migrate:rollback + reinstall deps + restart
- Remove duplicate chown from Restart Services stage (already in Fix Permissions)
- Clean up .deploy_prev_sha after deploy completes
 2026-07-03 09:57:34 +05:00
F4ilji 282d5a7c38 Add email attachments cleanup (older than 3 days) 2026-07-02 23:12:29 +05:00
F4ilji d1f216d04a Reduce backup retention to 3 days 2026-07-02 22:31:18 +05:00
F4ilji bb04a1af14 Add DB backup stage before deploy 2026-07-02 22:22:27 +05:00
F4ilji dcb0426264 Fix prod nginx: ^~ for Jenkins proxy 2026-07-02 21:48:07 +05:00
F4ilji b877153f3f Fix: use ^~ for Jenkins to override regex static locations 2026-07-02 21:46:15 +05:00
F4ilji db968ad9b0 Simplify Jenkins proxy: remove port exposure, add proxy_redirect 2026-07-02 21:43:56 +05:00
F4ilji acae8ae59d Fix: use ^~ for Jenkins static assets to override regex 2026-07-02 21:42:16 +05:00
F4ilji b041558cc3 Fix Jenkins proxy: separate static assets location 2026-07-02 21:41:32 +05:00
F4ilji c807947968 Fix Jenkins proxy with sub_filter for static assets 2026-07-02 21:40:29 +05:00
F4ilji e0ceecf157 Add Jenkins prefix /jenkins for nginx proxy 2026-07-02 21:39:35 +05:00
F4ilji aff60841b4 Add Jenkins proxy to test nginx config 2026-07-02 21:38:29 +05:00
F4ilji ba362902e6 Add Jenkins reverse proxy via nginx 2026-07-02 21:36:23 +05:00
F4ilji f652308421 Add jenkins service to docker-compose.yml 2026-07-02 21:15:27 +05:00
F4ilji d87bc581d1 Fix: remove dead placeholder view path in AppServiceProvider 2026-07-02 20:56:37 +05:00
F4ilji acef609a2f Fix composer open_basedir restriction 2026-07-02 20:54:14 +05:00
F4ilji 44ad8ef460 Fix: use docker exec instead of docker compose to avoid container name conflicts 2026-07-02 20:53:04 +05:00
F4ilji 25bc144ac7 Add Jenkinsfile for CI/CD pipeline 2026-07-02 20:51:45 +05:00
F4ilji 709c51ea49 remove: all deploy UI/backend code, keep _deploy folder only 
- Delete DeployRunCommand, DeployController, deploy API routes
- Delete Dashboard/Deploy Vue pages and components
- Remove deploy route from web.php
- Remove deploy quick action from config
- Remove DeployRunCommand from ConsoleKernel
 2026-07-02 17:36:42 +05:00
F4ilji c8693b8f0e fix: replace web middleware with minimal session+CSRF stack for deploy API 2026-07-02 17:34:27 +05:00
F4ilji 48ffd217b8 fix: secure deploy API, remove Docker-in-Docker, add DB backup 
- Add web+superadmin middleware to /api/deploy routes
- Return JSON 403 in EnsureUserIsSuperadmin for API requests
- Remove Docker CLI and docker.sock from app container
- Replace docker compose restart with supervisorctl
- Add mysqldump backup step before migrations
 2026-07-02 17:26:38 +05:00
F4ilji 6ed11cab2d change 2026-07-02 17:11:38 +05:00
F4ilji fce1d3f454 fix: proper route structure - API in api.php, web in web.php 2026-07-02 17:10:44 +05:00
F4ilji b2fec84080 fix: empty api.php since deploy routes moved to web 2026-07-02 17:05:55 +05:00
F4ilji 8b312e0ecd fix: move deploy API routes to web group with session auth 2026-07-02 17:01:32 +05:00
F4ilji 74d7c2b563 fix: add session middleware for API auth 2026-07-02 17:00:32 +05:00
F4ilji e0cb9642cd fix: add better error logging for deploy API 2026-07-02 16:55:43 +05:00
F4ilji 2b5b4ee48f error alert change 2026-07-02 16:49:55 +05:00
F4ilji ae4cdc5efc fix: correct path to API routes file 2026-07-02 16:45:59 +05:00
F4ilji ca23c6d669 fix: use auth:web middleware for API routes 2026-07-02 16:42:39 +05:00
F4ilji c80baf4807 fix: return JSON 401 for unauthenticated API requests 2026-07-02 13:38:03 +05:00
F4ilji aa6c5bc6be error alert change 2026-07-02 13:25:11 +05:00
F4ilji 92bb10faba fix: add CSRF token and cookies to deploy API requests 2026-07-02 13:17:24 +05:00
F4ilji 814c06bbb4 fix: correct path to dashboard API routes 2026-07-02 13:09:55 +05:00
F4ilji c12ac98387 fix: register deploy:run command in ConsoleKernel 2026-07-02 12:57:14 +05:00
F4ilji 6fb0079e7c feat: add deploy route and sidebar navigation 2026-07-02 12:50:09 +05:00
F4ilji 13d7d36088 feat: add deploy dashboard page with components 2026-07-02 12:48:49 +05:00
F4ilji 73d123a62d feat: add deploy API endpoints 2026-07-02 12:48:09 +05:00
F4ilji c216f929d4 feat: add deploy:run artisan command 2026-07-02 12:47:17 +05:00
F4ilji 8bc5c367d6 revert: remove deploy UI, controller, actions, tasks, and routes 
- Remove Deploy/Index.vue, DeployController, DeploySiteAction, DeployTask
- Remove deploy routes from web.php
- Remove deploy menu item from menuConfig
- Remove deploy button and methods from Main.vue
- Remove deploy logging channel from logging.php
- Keep _deploy/ folder for future CI/CD setup
 2026-07-02 12:00:48 +05:00
F4ilji cc98d509e5 fix: add Docker CLI to PHP container for deploy script 
- Install docker-ce-cli + docker-compose-plugin in Dockerfile
- Mount Docker socket in docker-compose.yml
- Add www-data to docker group for socket access
 2026-07-02 01:50:40 +05:00
F4ilji 3da95da099 fix: use X-CSRF-TOKEN header to match Main.vue pattern 
X-XSRF-TOKEN is for Laravel's cookie-based CSRF verification,
but this app uses meta tag CSRF. Main.vue uses X-CSRF-TOKEN
and works correctly.
 2026-07-02 01:36:05 +05:00
F4ilji de4fdc2c72 fix: add credentials same-origin to Deploy fetch calls 
Without this, session cookie is not sent with fetch() requests,
causing server to redirect to login (returning HTML instead of JSON).
 2026-07-02 01:29:05 +05:00
F4ilji b42a733f53 error alert change 2026-07-02 01:24:58 +05:00
F4ilji 8364b220cc feat: add Integration Credentials CRUD and Deploy UI 
Integration Credentials:
- Add IntegrationCredential model with encrypted payload
- Add full CRUD: ManageIntegrationCredentialsAction, 4 Tasks, Controller, Requests
- Add migration for integration_credentials table
- Add Vue pages: Index, Create, Edit
- AI tasks now read API keys from DB instead of .env
- Add sidebar menu item

Deploy UI:
- Add DeployTask with full deploy lifecycle management
- Extend DeployController with index, log, history endpoints
- Add Deploy/Index.vue with live polling and deploy log viewer
- Add sidebar menu item and QuickAction for Sveden

UI:
- Add 'key' icon to SidebarNavItem
- Change deploy button color to amber in Main.vue
 2026-07-02 01:03:13 +05:00
F4ilji 09bba25993 feat: add dedicated deploy logging to storage/logs/deploy.log 
- Add 'deploy' channel in logging.php
- Instrument DeployTask with phpLog() for all state transitions
- Instrument DeploySiteAction with channel('deploy') for triggers, errors, clears
- Logs written to storage/logs/deploy.log (separate from laravel.log)
 2026-07-02 00:57:57 +05:00
F4ilji 8715179ffa chore: remove .qwen directory from git tracking 
Files were added before .gitignore rule was created.
Now properly ignored via .gitignore.
 2026-07-02 00:30:47 +05:00
F4ilji 287b7859c6 chore: cleanup obsolete documentation and rewrite QWEN.md 
- Remove nginx-vikon-security.conf (already applied in docker config)
- Remove page-visual-customization.md (outdated)
- Rewrite QWEN.md to compact bootstrapper format (501→95 lines)
- Add .mimocode, .qwen, QWEN.md, AGENTS.md, docs to .gitignore
 2026-07-02 00:30:38 +05:00
F4ilji 8bc42f3a9b feat: add UUID, slug generation and defaults to educational program creation 
- Auto-generate UUID and unique slug (with education level suffix)
- Set default values for inner_code, learning_forms, direction_study_id
- Slug avoids duplicates by appending numeric suffix
 2026-07-02 00:29:38 +05:00
F4ilji 6750ca8f45 fix: add error flash message to Inertia shared props 
Add error session key to flash messages so frontend can display
error notifications from session flash data.
 2026-07-02 00:29:34 +05:00
F4ilji 2997558a50 refactor: move ByteConverter from Helpers to Services namespace 
- Move ByteConverter class to App\Ship\Services
- Update all imports across Filament form blocks
- Update ByteConverterServiceProvider
- Add INTEGRATION_CREDENTIAL_PREFIX to CacheKeys enum
 2026-07-02 00:29:29 +05:00
F4ilji 938578d217 fix: handle non-JSON server responses in Sveden upload 2026-07-01 13:58:46 +05:00
F4ilji d83ecc3747 debug: show actual error message in Sveden upload 2026-07-01 13:33:49 +05:00
F4ilji 80b88405f1 fix: resolve Sveden upload permissions and CSRF cookie issue 
- Add hostgroup (GID 1000) to Dockerfile so www-data inside container can write to sveden/
- Add credentials: 'same-origin' to fetch calls in Sveden.vue and QuickUpload.vue to send session cookies
 2026-07-01 13:10:59 +05:00
F4ilji c9fca0bf29 feat: add Sveden update feature 
- SvedenController: upload zip and extract to public/sveden
- UpdateSvedenAction: orchestrates temp file handling and extraction
- ExtractSvedenArchiveTask: validates and extracts sveden/abitur folders with security checks
- Sveden.vue: upload UI with progress indicator
- Added routes: GET/POST /dashboard/sveden
- Added quick action: Обновить Sveden
 2026-06-30 16:12:16 +05:00
F4ilji 20f615365b changes 2026-04-17 12:38:39 +05:00
F4ilji 886cac5f95 changes 2026-04-15 16:41:08 +05:00
F4ilji 3669a0d982 changes 2026-04-14 23:10:00 +05:00
F4ilji 9b71f62a04 changes 2026-04-14 22:57:27 +05:00
F4ilji d3433f2a1d changes 2026-04-14 22:52:21 +05:00
F4ilji ad91077263 changes 2026-04-13 20:28:10 +05:00
F4ilji b8c96704c2 changes 2026-04-13 20:23:08 +05:00
F4ilji 2e77978d5c changes 2026-04-13 14:37:57 +05:00
F4ilji 5eb5a7bc06 changes 2026-04-10 10:51:42 +05:00
F4ilji 9e35cf848d changes 2026-04-10 09:01:47 +05:00
F4ilji 1c6f09ed80 changes 2026-04-09 18:17:09 +05:00
F4ilji 0d56ba5a28 changes 2026-04-09 18:09:55 +05:00
F4ilji 419bf112d4 changes 2026-04-09 18:01:10 +05:00
F4ilji 2fc19530ad changes 2026-04-09 17:54:02 +05:00
F4ilji c0babe8277 changes 2026-04-09 17:41:22 +05:00
F4ilji 4aa4b9cadf changes 2026-04-09 17:23:10 +05:00
F4ilji 4bde0b10d0 changes 2026-04-09 13:35:02 +05:00
F4ilji e986940680 changes 2026-04-09 09:09:17 +05:00
F4ilji 169a2f5654 changes 2026-04-08 14:14:38 +05:00
F4iljiandQwen-Coder bd28fc60d7 feat(ssr): вынести обработку SSR ошибок в отдельный файл 
- Создан resources/js/ssr/errorHandler.js для логирования SSR ошибок
- SSR ошибки теперь записываются в storage/logs/ssr-errors.log
- Обновлён ssr.js с использованием кастомного error handler
- Добавлен storage/logs в .gitignore

Теперь SSR ошибки не засоряют основные логи приложения

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 22:55:31 +05:00
F4iljiandQwen-Coder d7c6d23a6b fix(ssr): добавить route mixin для SSR совместимости Ziggy 
- Создан RouteMixin.js для предоставления route() всем компонентам
- Обновлён ssr.js с правильным импортом Router и созданием route функции
- Исправлен BackButton.vue с проверкой this.route перед использованием
- Добавлена обработка ошибок для route() с fallback на '#'

Решает ошибку: ReferenceError: route is not defined at Proxy.resolvedLink

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 22:41:14 +05:00
F4ilji 3798d01da1 changes 2026-04-07 22:30:06 +05:00
F4iljiandQwen-Coder 438f7df855 fix(ssr): пересобрать SSR бандл, Ziggy routes и Livewire ассеты 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 22:15:45 +05:00
F4iljiandQwen-Coder efec5f3508 refactor(email-tasks): понизить уровень логирования с info до debug для успешных операций 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 22:06:37 +05:00
F4iljiandQwen-Coder 662b722ad4 fix(nginx): добавить mc.yandex.ru в CSP для Яндекс.Метрики 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 20:26:05 +05:00
F4iljiandQwen-Coder 736ea7ae3a fix(nginx): добавить cdn.jsdelivr.net в style-src CSP 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 20:21:40 +05:00
F4iljiandQwen-Coder da0215176a fix(nginx): добавить внешние CDN в CSP (TinyMCE, шрифты) и опубликовать Livewire ассеты 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 20:11:58 +05:00
F4ilji c2bf1127a5 fix 2026-04-07 20:01:27 +05:00
F4iljiandQwen-Coder 3f906cbc20 fix(php): добавить /dev/null в open_basedir для composer 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 20:00:58 +05:00
F4iljiandQwen-Coder 2d5b371247 fix(php): разрешить proc_open для Inertia SSR и расширить open_basedir для composer (включая /root) 
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 19:53:33 +05:00
F4ilji 75f9c73dc7 fix(php): добавить /usr/local/bin в open_basedir для работы composer 2026-04-07 18:34:46 +05:00
F4iljiandQwen-Coder 5d946eec3a fix(nginx): разрешить доступ к публичным vendor ассетам (log-viewer) 
Проблема: Правило 'location ~ ^/vendor/ { deny all; }' блокировало
доступ к CSS/JS файлам log-viewer в public/vendor/log-viewer/.

Решение:
- location /vendor/ — разрешает доступ к статическим файлам
- Запрещает выполнение .php файлов (security)
- try_files $uri =404 — отдаёт файлы если существуют
- autoindex off — запрещает листинг директорий

Fix: Log Viewer UI не загружался (app.css failed to load)

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 18:14:38 +05:00
F4iljiandQwen-Coder b1d964a526 fix(nginx): разрешить доступ к публичным файлам storage через symlink 
Проблема: Правило 'location ~ ^/storage/ { deny all; }' блокировало
ВСЕ запросы к /storage/, включая файлы доступные через symlink
public/storage -> storage/app/public.

Решение:
- location /storage/ — разрешает доступ к статическим файлам (изображения, документы)
- Запрещает выполнение .php файлов в storage (security)
- try_files $uri =404 — отдаёт файлы если они существуют
- Запрещает листинг директорий (autoindex off)

Fix: Изображения новостей не загружались (404 ошибка)

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-07 18:08:37 +05:00
F4ilji 936b1fb5b0 changes 2026-04-07 17:54:26 +05:00
F4ilji 04adba6682 Changes 2026-04-07 17:47:00 +05:00
F4iljiandQwen-Coder cc20906062 fix(IMAP): исправить загрузку вложений — setFetchBody(true) необходим для структуры 
Проблема: setFetchBody(false) не загружал структуру письма,
поэтому getAttachments() возвращал пустой список.

Исправления:
- FetchUnreadEmailsTask: setFetchBody(true) для загрузки структуры (вложения)
- FetchUnreadEmailsTask: конвертация Attribute в строку для subject
- config/imap.php: убраны fetch_body/fetch_flags (контроль на уровне Query)
- Обновлена документация

Fix: "В письме не найдено вложений" ошибка при обработке email

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-06 22:17:21 +05:00
F4iljiandQwen-Coder c115a5c7a7 fix(IMAP): оптимизация обработки email для предотвращения memory exhaustion 
Корневая проблема: библиотека webklex/php-imap загружала все тела писем
по умолчанию, что приводило к исчерпанию 256MB памяти при 50+ письмах.

Решение (3 уровня):

Уровень 1 - Конфигурация:
- config/imap.php: добавлены fetch_body=false, fetch_flags=false, fetch_limit=20
- php.ini: увеличен memory_limit с 256M до 1G, добавлены OPcache настройки

Уровень 2 - Оптимизация кода:
- FetchUnreadEmailsTask: setFetchBody(false), лимиты, MemoryAwareTrait
- FetchEmailNewsAction: batch-обработка (10 писем), gc_collect_cycles()
- DownloadAttachmentsTask: lazy load вложений, extension whitelist (security)
- ConnectToImapTask: MemoryAwareTrait для мониторинга

Уровень 3 - Инфраструктура:
- ProcessEmailNewsJob: queue job для асинхронной обработки (3 попытки, 300s timeout)
- FetchEmailNewsCommand: поддержка --async режима
- MemoryAwareTrait: reusable трейт для мониторинга памяти

Security fixes:
- Extension whitelist для предотвращения path traversal
- Убраны реальные email из config/imap.php
- Добавлена проверка на null message объект

Docs:
- README_EMAIL_OPTIMIZATION.md: полная документация по оптимизации

Fixes: Allowed memory size of 268435456 bytes exhausted

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
 2026-04-06 22:08:03 +05:00
F4ilji 4b071d9ef2 Changes 2026-03-27 15:04:43 +05:00
F4ilji 5cf85f08e4 changes 2026-03-23 15:45:49 +05:00
F4ilji c350f712dc changes 2026-03-23 12:05:08 +05:00