diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 5df9a37..34d7a66 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -104,6 +104,7 @@ jobs: PROJECT_DIR="$PROJECT" \ PYTHON_BIN="$PYTHON_BIN" \ PREVIOUS_REVISION="$PREVIOUS_REVISION" \ + DEPLOY_HEALTH_HOST="math.jacky0987.xyz" \ DEPLOY_SMOKE_BASE_URL="http://127.0.0.1:4321" \ DEPLOY_SMOKE_WS_URL="ws://127.0.0.1:4321/ws/health/" \ bash scripts/deploy_production.sh diff --git a/backend/common/test_deployment_security.py b/backend/common/test_deployment_security.py index 76e159f..93d822d 100644 --- a/backend/common/test_deployment_security.py +++ b/backend/common/test_deployment_security.py @@ -12,5 +12,6 @@ def test_edge_hsts_ownership_is_explicit_and_verified(): assert 'os.getenv("DJANGO_HSTS_AT_EDGE", "false")' in settings assert '["security.W004"]' in settings assert "DJANGO_HSTS_AT_EDGE=true" in workflow + assert 'DEPLOY_HEALTH_HOST="math.jacky0987.xyz"' in workflow assert "strict-transport-security:.*max-age=[1-9][0-9]*" in deploy assert "DJANGO_HSTS_AT_EDGE=false" in example