4 Commits

Author	SHA1	Message	Date
Chever John	24c449ecae	security: remove hardcoded credentials and add WebSocket auth/CORS ... - Clear default passwords in all service configs, require env vars - Add JWT auth + role middleware to WebSocket endpoints - Add origin whitelist to WebSocket upgrader (CORS protection) - Fix goroutine leak in WS proxy (double errCh read) - Update docker-compose to require secrets via ${VAR:?...} syntax - Mark deprecated k8s configmap passwords as REPLACE_AT_DEPLOY_TIME Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-17 23:16:17 +08:00
Chever John	9e25c799d5	fix: use Aliyun Alpine mirror in Dockerfiles ... Alpine CDN (dl-cdn.alpinelinux.org) unreachable from DinD containers. Switch to mirrors.aliyun.com for apk package downloads. Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-17 10:24:59 +08:00
Chever John	475589b23f	fix: use Harbor base images and Chinese Go proxy for CI builds ... Docker Hub and proxy.golang.org are unreachable from k3s cluster (GFW). Switch all Dockerfiles to pull base images from Harbor (harbor-in-k3s.cheverjohn.me/library/) and use goproxy.cn for Go module downloads. Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-17 10:17:36 +08:00
Chever John	9c39c8cbd7	init: iloom WMS monorepo with K8s deployment manifests ... Go workspace (go.work) with 5 microservices + shared library: - gateway (8080), auth-service (8081), purchaser-service (8082) - textile-service (8083), washing-service (8084) - shared: proto definitions, common packages Infrastructure: docker-compose for local dev, K8s manifests for K3s cluster deployment (mysql/redis/etcd + traefik ingress). Frontend (iloom-flatten) added as git submodule. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-06-14 11:33:31 +08:00