From d037af11b6e093adddd92ff29b0dbd520a4c0808 Mon Sep 17 00:00:00 2001 From: paradox Date: Mon, 3 Aug 2026 18:15:21 +0200 Subject: [PATCH 1/3] redesign widgets --- .gitignore | 1 + src/components/ui/Input.tsx | 2 +- src/components/widgets/BackupWidget.tsx | 2 +- src/components/widgets/ServicesWidget.tsx | 4 ++-- src/components/widgets/SupportCtaWidget.tsx | 10 +++++----- src/styles/Neumorphism.ts | 4 ++-- 6 files changed, 12 insertions(+), 11 deletions(-) diff --git a/.gitignore b/.gitignore index a547bf3..d600b6c 100644 --- a/.gitignore +++ b/.gitignore @@ -22,3 +22,4 @@ dist-ssr *.njsproj *.sln *.sw? + diff --git a/src/components/ui/Input.tsx b/src/components/ui/Input.tsx index afc80d2..bfadd3f 100644 --- a/src/components/ui/Input.tsx +++ b/src/components/ui/Input.tsx @@ -57,7 +57,7 @@ export const Input = forwardRef( "bg-[#e8e8e8] dark:bg-[#1e293b]", "text-slate-800 dark:text-slate-100 font-medium placeholder:text-slate-400 dark:placeholder:text-slate-500", - // 🎯 Utilisation directe de tes constantes Neumorphic creusées + // Utilisation directe de tes constantes Neumorphic creusées NEUMORPHISM.insetLight, NEUMORPHISM.insetDark, diff --git a/src/components/widgets/BackupWidget.tsx b/src/components/widgets/BackupWidget.tsx index 65da02e..a7e8239 100644 --- a/src/components/widgets/BackupWidget.tsx +++ b/src/components/widgets/BackupWidget.tsx @@ -18,7 +18,7 @@ export default function BackupWidget({ onClick }: BackupWidgetProps) { -
+

Dernier snapshot système

Aujourd'hui Ă  03:00 AM

diff --git a/src/components/widgets/ServicesWidget.tsx b/src/components/widgets/ServicesWidget.tsx index b30d5f5..86aaba6 100644 --- a/src/components/widgets/ServicesWidget.tsx +++ b/src/components/widgets/ServicesWidget.tsx @@ -30,10 +30,10 @@ export default function ServicesWidget() { ))}
- - + ); diff --git a/src/components/widgets/SupportCtaWidget.tsx b/src/components/widgets/SupportCtaWidget.tsx index b3a122a..83778cd 100644 --- a/src/components/widgets/SupportCtaWidget.tsx +++ b/src/components/widgets/SupportCtaWidget.tsx @@ -8,14 +8,14 @@ export const SupportCtaWidget: React.FC = () => { return ( - -

Centre de Support

-

+ +

Centre de Support

+

DĂ©clarez un incident critique ou demandez une Ă©volution de votre infrastructure.

- diff --git a/src/styles/Neumorphism.ts b/src/styles/Neumorphism.ts index 35cf721..fd907eb 100644 --- a/src/styles/Neumorphism.ts +++ b/src/styles/Neumorphism.ts @@ -13,8 +13,8 @@ export const NEUMORPHISM = { sizeStyles: { sm: "px-5 py-2 text-sm rounded-md", md: "px-[1.7em] py-[0.7em] text-[18px] rounded-[0.5em]", - lg: "px-10 py-4 text-xl rounded-xl", - icon: "p-3 rounded-lg", + lg: "px-10 py-4 text-sm rounded-xl", + icon: "p-3 rounded-lg", }, // Ombres du bouton ACTIF (effet enfoncé/creusé "inset") insetLight: "!shadow-[inset_4px_4px_8px_#c5c5c5,inset_-4px_-4px_8px_#ffffff]", -- 2.47.3 From 3db249f3e149b3a0bae546fe8aecd3ef63efcaff Mon Sep 17 00:00:00 2001 From: paradox Date: Mon, 3 Aug 2026 20:08:22 +0200 Subject: [PATCH 2/3] little changes to the ui --- src/components/ui/Card.tsx | 2 +- src/components/widgets/BackupWidget.tsx | 4 ++-- src/components/widgets/ServicesWidget.tsx | 4 ++-- src/components/widgets/SupportCtaWidget.tsx | 8 ++++---- src/components/widgets/SupportFooterWidget.tsx | 2 +- src/pages/ServiceDesk.tsx | 2 +- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/src/components/ui/Card.tsx b/src/components/ui/Card.tsx index 8ee89ca..4e0dcf7 100644 --- a/src/components/ui/Card.tsx +++ b/src/components/ui/Card.tsx @@ -43,7 +43,7 @@ export const CardHeader = React.forwardRef - - + +

Dernier snapshot système

Aujourd'hui Ă  03:00 AM

 diff --git a/src/components/widgets/ServicesWidget.tsx b/src/components/widgets/ServicesWidget.tsx index 86aaba6..7a86848 100644 --- a/src/components/widgets/ServicesWidget.tsx +++ b/src/components/widgets/ServicesWidget.tsx @@ -30,8 +30,8 @@ export default function ServicesWidget() { ))} - diff --git a/src/components/widgets/SupportCtaWidget.tsx b/src/components/widgets/SupportCtaWidget.tsx index 83778cd..dbfa776 100644 --- a/src/components/widgets/SupportCtaWidget.tsx +++ b/src/components/widgets/SupportCtaWidget.tsx @@ -8,14 +8,14 @@ export const SupportCtaWidget: React.FC = () => { return ( - -

Centre de Support

-

+ +

Centre de Support

+

DĂ©clarez un incident critique ou demandez une Ă©volution de votre infrastructure.

diff --git a/src/components/widgets/SupportFooterWidget.tsx b/src/components/widgets/SupportFooterWidget.tsx index e83565b..ec1cc53 100644 --- a/src/components/widgets/SupportFooterWidget.tsx +++ b/src/components/widgets/SupportFooterWidget.tsx @@ -16,7 +16,7 @@ export const SupportFooterWidget: React.FC = ({ const navigate = useNavigate(); return ( -
+

{title}

diff --git a/src/pages/ServiceDesk.tsx b/src/pages/ServiceDesk.tsx index f02754d..59dbb0a 100644 --- a/src/pages/ServiceDesk.tsx +++ b/src/pages/ServiceDesk.tsx @@ -15,7 +15,7 @@ export default function ServiceDesk() { title="Centre de Support (Service Desk)" description="Canal de communication sécurisé avec vos experts GISE." > - -- 2.47.3 From 063f3ecc757562d5099d9482e498b0ae71b8b3fe Mon Sep 17 00:00:00 2001 From: paradox Date: Tue, 4 Aug 2026 14:40:52 +0200 Subject: [PATCH 3/3] add new deploy --- .gitea/workflows/deploy-environments.yml | 88 ++++++++++++++++++++++++ .gitea/workflows/deploy.yml | 61 ---------------- .gitea/workflows/enforce-git-flow.yml | 40 +++++++++++ .gitea/workflows/quality-checks.yml | 59 ++++++++++++++++ 4 files changed, 187 insertions(+), 61 deletions(-) create mode 100644 .gitea/workflows/deploy-environments.yml delete mode 100644 .gitea/workflows/deploy.yml create mode 100644 .gitea/workflows/enforce-git-flow.yml create mode 100644 .gitea/workflows/quality-checks.yml diff --git a/.gitea/workflows/deploy-environments.yml b/.gitea/workflows/deploy-environments.yml new file mode 100644 index 0000000..96159cf --- /dev/null +++ b/.gitea/workflows/deploy-environments.yml @@ -0,0 +1,88 @@ +name: Déploiement AEGIS Portal + +on: + push: + branches: + - dev + - test + - acc + - master + +jobs: + build-and-deploy: + runs-on: ubuntu-latest + env: + GIT_SSL_NO_VERIFY: "true" + NODE_TLS_REJECT_UNAUTHORIZED: "0" + + steps: + - name: Patch DNS local pour Gitea Runner + run: sudo echo "10.10.40.31 git.bunker.lan" | sudo tee -a /etc/hosts + + - name: Configuration de Git pour SSL + run: git config --global http.sslVerify false + + - name: Récupération du code + uses: actions/checkout@v4 + + - name: Configuration de Node.js + uses: actions/setup-node@v4 + with: + node-version: 22 + + - name: Activation de pnpm + run: corepack enable pnpm + + - name: Installation des dépendances + run: pnpm install --frozen-lockfile + + - name: Compilation de la Build + env: + VITE_APP_ENV: ${{ github.ref_name }} + VITE_PB_URL: ${{ secrets.PB_URL }} + run: pnpm run build + + - name: Installation de lftp + run: sudo apt-get update && sudo apt-get install -y lftp + + - name: Routage et Déploiement FTP + env: # 1. On charge tous les secrets de manière sécurisée + SERVER: ${{ secrets.FTP_SERVER }} + DEV_U: ${{ secrets.DEV_FTP_USER }} + DEV_P: ${{ secrets.DEV_FTP_PASSWORD }} + TEST_U: ${{ secrets.TEST_FTP_USER }} + TEST_P: ${{ secrets.TEST_FTP_PASSWORD }} + ACC_U: ${{ secrets.ACC_FTP_USER }} + ACC_P: ${{ secrets.ACC_FTP_PASSWORD }} + PROD_U: ${{ secrets.PROD_FTP_USER }} + PROD_P: ${{ secrets.PROD_FTP_PASSWORD }} + BRANCH: ${{ github.ref_name }} + run: | + # 2. On attribue les bons identifiants selon la branche + if [ "$BRANCH" == "master" ]; then + TARGET_USER=$PROD_U; TARGET_PASS=$PROD_P; + elif [ "$BRANCH" == "acc" ]; then + TARGET_USER=$ACC_U; TARGET_PASS=$ACC_P; + elif [ "$BRANCH" == "test" ]; then + TARGET_USER=$TEST_U; TARGET_PASS=$TEST_P; + else + TARGET_USER=$DEV_U; TARGET_PASS=$DEV_P; + fi + + echo "Déploiement de la branche [$BRANCH]" + + # 3. Exécution du script FTP + cat << EOF > script.lftp + set ftp:passive-mode true + set ftp:ssl-allow no + set ssl:verify-certificate no + set net:timeout 5 + set net:max-retries 2 + set dns:fatal-timeout 2 + open -u "${TARGET_USER}","${TARGET_PASS}" "${SERVER}" + cd home/${TARGET_USER} + mirror -R --delete --verbose dist/ ./ + quit + EOF + + lftp -f script.lftp \ No newline at end of file diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml deleted file mode 100644 index 4eb6716..0000000 --- a/.gitea/workflows/deploy.yml +++ /dev/null @@ -1,61 +0,0 @@ -name: Deploy Aegis Portal - -on: - push: - branches: - - master # Branche principale confirmée - -jobs: - build-and-deploy: - runs-on: ubuntu-latest - - # 1. On désactive la vérification SSL pour tout le conteneur du job (Node.js et Git) - env: - GIT_SSL_NO_VERIFY: "true" - NODE_TLS_REJECT_UNAUTHORIZED: "0" - - steps: - - name: Patch DNS local pour Gitea Runner - run: sudo echo "10.10.40.31 git.bunker.lan" | sudo tee -a /etc/hosts - - # 2. On force l'exécutable Git interne à ignorer la vérification de l'autorité locale - - name: Configuration de Git pour SSL - run: git config --global http.sslVerify false - - - name: Récupération du code - uses: actions/checkout@v4 - - - name: Configuration de Node.js - uses: actions/setup-node@v4 - with: - node-version: 22 - - - name: Installation des dépendances (React/Vite) - run: npm ci - - - name: Compilation de la Build (Aegis) - run: npm run build - - - name: Installation de lftp - run: sudo apt-get update && sudo apt-get install -y lftp - - - name: Déploiement FTP (10.10.40.12) - env: - FTP_USER: ${{ secrets.FTP_USER }} # Le compte FTP enfermé dans aegis.gise.be - FTP_PASSWORD: ${{ secrets.FTP_PASSWORD }} - FTP_SERVER: ${{ secrets.FTP_SERVER }} # Doit contenir : 10.10.40.12 - run: | - cat << EOF > script.lftp - set ftp:passive-mode true - set ftp:ssl-allow no - set ssl:verify-certificate no - set net:timeout 5 - set net:max-retries 2 - set dns:fatal-timeout 2 - open -u "${FTP_USER}","${FTP_PASSWORD}" "${FTP_SERVER}" - cd home/${FTP_USER} - mirror -R --delete --verbose dist/ ./ - quit - EOF - - lftp -f script.lftp \ No newline at end of file diff --git a/.gitea/workflows/enforce-git-flow.yml b/.gitea/workflows/enforce-git-flow.yml new file mode 100644 index 0000000..ffeb441 --- /dev/null +++ b/.gitea/workflows/enforce-git-flow.yml @@ -0,0 +1,40 @@ +name: Sécurité - Architecture Git-Flow + +on: + pull_request: + branches: + - dev + - test + - acc + - master + +jobs: + validate-flow: + runs-on: ubuntu-latest + steps: + - name: Vérification du flux de promotion + run: | + TARGET_BRANCH="${{ github.base_ref }}" + SOURCE_BRANCH="${{ github.head_ref }}" + + echo "Tentative de promotion : $SOURCE_BRANCH ➔ $TARGET_BRANCH" + + # Règle 1 : Vers TEST (Doit venir de DEV) + if [ "$TARGET_BRANCH" == "test" ] && [ "$SOURCE_BRANCH" != "dev" ]; then + echo "ERREUR : L'environnement TEST ne peut recevoir que du code de DEV." + exit 1 + fi + + # Règle 2 : Vers ACC (Doit venir de TEST) + if [ "$TARGET_BRANCH" == "acc" ] && [ "$SOURCE_BRANCH" != "test" ]; then + echo "ERREUR : L'environnement d'ACCEPTATION ne peut recevoir que du code de TEST." + exit 1 + fi + + # Règle 3 : Vers PROD (Doit venir de ACC) + if [ "$TARGET_BRANCH" == "master" ] && [ "$SOURCE_BRANCH" != "acc" ]; then + echo "ERREUR : La PRODUCTION ne peut recevoir que du code validé en ACCEPTATION (acc)." + exit 1 + fi + + echo "Flux réglementaire respecté ! Promotion autorisée." \ No newline at end of file diff --git a/.gitea/workflows/quality-checks.yml b/.gitea/workflows/quality-checks.yml new file mode 100644 index 0000000..2783909 --- /dev/null +++ b/.gitea/workflows/quality-checks.yml @@ -0,0 +1,59 @@ +name: Contrôle Qualité & Sécurité (QA) + +on: + pull_request: + branches: + - dev + - test + - acc + - master + +jobs: + quality-gate: + name: qa-s-check + runs-on: ubuntu-latest + + env: + GIT_SSL_NO_VERIFY: "true" + NODE_TLS_REJECT_UNAUTHORIZED: "0" + + steps: + - name: Patch DNS local pour Gitea Runner + run: sudo echo "10.10.40.31 git.bunker.lan" | sudo tee -a /etc/hosts + + - name: Configuration de Git pour SSL + run: git config --global http.sslVerify false + + - name: Récupération du code source + uses: actions/checkout@v4 + + - name: Configuration de Node.js (v22) + uses: actions/setup-node@v4 + with: + node-version: 22 + + - name: Activation de pnpm + run: corepack enable pnpm + + - name: Installation des dépendances + run: pnpm install --frozen-lockfile + + # Étape 1 : ESLint (Syntaxe et conventions) + - name: Analyse Linter (ESLint) + run: pnpm run lint + + # Étape 2 : Verification stricte des types TypeScript (sans émettre de fichiers) + - name: Verification des Types TypeScript + run: pnpm exec tsc --noEmit + + # Étape 3 : Exécution des tests unitaires + - name: Tests Unitaires (Vitest) + run: pnpm run test -- --run + + # Étape 4 : Audit des vulnérabilités npm (Niveau High/Critical) + - name: Audit de Sécurité des Dépendances + run: pnpm audit --audit-level=high + + # Étape 5 : Validation de la compilation ViteJS + - name: Validation du Build de Production + run: pnpm run build \ No newline at end of file -- 2.47.3