ilia
4273162d9e
CI / skip-ci-check (pull_request) Successful in 4s
CI / docker-ci (pull_request) Successful in 6s
CI / secret-scan (pull_request) Successful in 11s
CI / viewer-unit (pull_request) Failing after 1m3s
CI / admin-unit (pull_request) Failing after 1m1s
CI / e2e (pull_request) Failing after 59s
- upload.smoke.spec.ts / gallery.search-filters.spec.ts: replace
waitForResponse/text-scrape with typed interceptNetworkCall spies (status
+ JSON shape) on the real upload POST and the filtered /api/search GET.
- api.fastapi-login.spec.ts: Zod-validate the FastAPI TokenResponse and
/auth/me UserResponse instead of loose casts. gallery.search-filters.spec.ts
gets the same treatment for the Prisma-backed SearchResponse.
- prod.smoke.spec.ts: opt-in (PROD_BASE_URL) health + login-page check on a
real PROD host; skips as a no-op until the PROD LXC exists (none does yet
per `pct list` — see ROADMAP).
- viewer.write-gates.spec.ts: NextAuth (browser-session) hasWriteAccess gate
on POST /api/faces/{id}/identify — viewer 403s, admin passes through.
Provisioned a third, independent auth-DB user (e2e-viewer@levkine.ca,
hasWriteAccess=false) for this via ansible's provision-punimtag-e2e-user.py
(see that repo for the vault/Infisical/Gitea/Vaultwarden side).
38 lines
1.3 KiB
Bash
38 lines
1.3 KiB
Bash
# Defaults also live in env-defaults.json — override here for local runs.
|
|
# PLAYKIT_BASE_URL / PLAYKIT_API_BASE_URL fall back to that file when unset.
|
|
|
|
PLAYKIT_PROJECT=punimtag
|
|
PLAYKIT_ENV=dev
|
|
|
|
# Dedicated e2e user — prefer e2e@levkine.ca (never commit real passwords)
|
|
# Do not use admin@admin.com for Playwright; that account is bootstrap-only.
|
|
E2E_ADMIN_EMAIL=
|
|
E2E_ADMIN_PASSWORD=
|
|
|
|
# Optional FastAPI bearer tests (separate user DB from NextAuth).
|
|
# E2E_API_USERNAME mirrors e2e@levkine.ca (admin role) in the FastAPI main DB.
|
|
# E2E_API_VIEWER_USERNAME is a viewer-role account used only for role-permission
|
|
# (write-gate) checks — see api.role-permissions.spec.ts.
|
|
# E2E_API_USERNAME=
|
|
# E2E_API_PASSWORD=
|
|
# E2E_API_VIEWER_USERNAME=
|
|
# E2E_API_VIEWER_PASSWORD=
|
|
|
|
# Optional NextAuth (browser-session) viewer — third, independent user store
|
|
# (auth DB, hasWriteAccess=false). Used only for viewer.write-gates.spec.ts.
|
|
# E2E_VIEWER_EMAIL=
|
|
# E2E_VIEWER_PASSWORD=
|
|
|
|
# Homelab Mailpit (preferred for DEV e2e)
|
|
PLAYKIT_MAIL_PROVIDER=mailpit
|
|
MAILPIT_BASE_URL=http://10.0.10.45:8025
|
|
MAILPIT_USER=
|
|
MAILPIT_PASSWORD=
|
|
# E2E_MAIL_TO= # defaults to E2E_ADMIN_EMAIL
|
|
|
|
# Mailtrap Email Testing (optional SaaS fallback)
|
|
# PLAYKIT_MAIL_PROVIDER=mailtrap
|
|
# MAILTRAP_API_TOKEN=
|
|
# MAILTRAP_ACCOUNT_ID=
|
|
# MAILTRAP_INBOX_ID=
|