sciagent code + Gitea Actions CI/CD

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 09:38:30 +07:00
commit 688fac73e9
1167 changed files with 158244 additions and 0 deletions
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  web.config cho DYD.Api — ASP.NET Core 10 out-of-process / in-process hosting
+  Đặt ở: C:\inetpub\DYD.Api\web.config
+  Robocopy /XF web.config để không bị overwrite khi deploy.
+-->
+<configuration>
+  <location path="." inheritInChildApplications="false">
+    <system.webServer>
+      <handlers>
+        <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
+      </handlers>
+      <aspNetCore processPath="dotnet"
+                  arguments=".\DYD.Api.dll"
+                  stdoutLogEnabled="true"
+                  stdoutLogFile=".\logs\stdout"
+                  hostingModel="InProcess"
+                  forwardWindowsAuthToken="false">
+        <environmentVariables>
+          <environmentVariable name="ASPNETCORE_ENVIRONMENT" value="Production" />
+          <!-- Nếu dùng User Secrets / env var cho JWT key, set ở đây hoặc qua IIS Configuration Editor -->
+          <!--
+          <environmentVariable name="ConnectionStrings__DefaultConnection" value="Server=..." />
+          <environmentVariable name="Jwt__SigningKey" value="..." />
+          -->
+        </environmentVariables>
+      </aspNetCore>
+
+      <!-- Security headers -->
+      <httpProtocol>
+        <customHeaders>
+          <add name="X-Content-Type-Options" value="nosniff" />
+          <add name="X-Frame-Options" value="DENY" />
+          <add name="Referrer-Policy" value="strict-origin-when-cross-origin" />
+          <add name="Permissions-Policy" value="geolocation=(), microphone=(), camera=()" />
+        </customHeaders>
+      </httpProtocol>
+
+      <!-- Gzip compression -->
+      <httpCompression>
+        <dynamicTypes>
+          <add mimeType="application/json" enabled="true" />
+          <add mimeType="application/json; charset=utf-8" enabled="true" />
+        </dynamicTypes>
+      </httpCompression>
+
+      <!-- Larger file upload (cho InitiativeAttachments) -->
+      <security>
+        <requestFiltering>
+          <!-- 50MB = 52428800 bytes -->
+          <requestLimits maxAllowedContentLength="52428800" />
+        </requestFiltering>
+      </security>
+    </system.webServer>
+  </location>
+</configuration>
@@ -0,0 +1,77 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  web.config cho React SPA (fe0 / fe-admin)
+  Đặt ở: C:\inetpub\DYD.User\web.config và C:\inetpub\DYD.Admin\web.config
+
+  Mục đích:
+  - URL Rewrite: React Router HTML5 history API → fallback /index.html
+  - Cache static assets 1 năm (hash filename đảm bảo bust cache khi build mới)
+  - Security headers
+  - MIME types cho font/webmanifest
+
+  Deploy: Robocopy /XF web.config để không bị overwrite.
+-->
+<configuration>
+  <system.webServer>
+    <!-- React Router rewrite -->
+    <rewrite>
+      <rules>
+        <rule name="React Router SPA" stopProcessing="true">
+          <match url=".*" />
+          <conditions logicalGrouping="MatchAll">
+            <add input="{REQUEST_FILENAME}" matchType="IsFile"      negate="true" />
+            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
+            <!-- Không rewrite /api/* (nếu có reverse proxy) -->
+            <add input="{REQUEST_URI}"      pattern="^/(api)"       negate="true" />
+          </conditions>
+          <action type="Rewrite" url="/index.html" />
+        </rule>
+      </rules>
+    </rewrite>
+
+    <!-- MIME types -->
+    <staticContent>
+      <remove fileExtension=".webmanifest" />
+      <mimeMap fileExtension=".webmanifest" mimeType="application/manifest+json" />
+      <remove fileExtension=".woff2" />
+      <mimeMap fileExtension=".woff2" mimeType="font/woff2" />
+      <!-- Cache static 1 năm (Vite build hash filename bust cache tự động) -->
+      <clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="365.00:00:00" />
+    </staticContent>
+
+    <!-- Security headers -->
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Content-Type-Options"   value="nosniff" />
+        <add name="X-Frame-Options"          value="DENY" />
+        <add name="Referrer-Policy"          value="strict-origin-when-cross-origin" />
+        <add name="Permissions-Policy"       value="geolocation=(), microphone=(), camera=()" />
+        <!-- CSP strict (điều chỉnh nếu cần CDN): -->
+        <!-- <add name="Content-Security-Policy" value="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://api.ski-ump.com.vn" /> -->
+      </customHeaders>
+    </httpProtocol>
+
+    <!-- Gzip compression -->
+    <httpCompression>
+      <dynamicTypes>
+        <add mimeType="text/*"                   enabled="true" />
+        <add mimeType="application/javascript"   enabled="true" />
+        <add mimeType="application/json"         enabled="true" />
+      </dynamicTypes>
+      <staticTypes>
+        <add mimeType="text/*"                    enabled="true" />
+        <add mimeType="application/javascript"    enabled="true" />
+        <add mimeType="application/json"          enabled="true" />
+        <add mimeType="application/manifest+json" enabled="true" />
+      </staticTypes>
+    </httpCompression>
+
+    <!-- Default document -->
+    <defaultDocument>
+      <files>
+        <clear />
+        <add value="index.html" />
+      </files>
+    </defaultDocument>
+  </system.webServer>
+</configuration>