From cae2d0715cd177ae75176bd4e031fbd47c0ceb23 Mon Sep 17 00:00:00 2001 From: Michael Schiemer Date: Mon, 27 Oct 2025 13:15:06 +0100 Subject: [PATCH] chore: update deployment --- deployment/infrastructure/playbooks/deploy-rsync-based.yml | 4 ++-- .../Http/Middlewares/ProductionSecurityMiddleware.php | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/deployment/infrastructure/playbooks/deploy-rsync-based.yml b/deployment/infrastructure/playbooks/deploy-rsync-based.yml index 66efe7f8..4c818018 100644 --- a/deployment/infrastructure/playbooks/deploy-rsync-based.yml +++ b/deployment/infrastructure/playbooks/deploy-rsync-based.yml @@ -423,9 +423,9 @@ pause: seconds: 10 - - name: Health check - Summary endpoint (HTTPS) + - name: Health check - Nginx ping endpoint (HTTPS) uri: - url: "https://{{ ansible_host }}/health/summary" + url: "https://{{ ansible_host }}/ping" method: GET return_content: yes status_code: 200 diff --git a/src/Framework/Http/Middlewares/ProductionSecurityMiddleware.php b/src/Framework/Http/Middlewares/ProductionSecurityMiddleware.php index b11f0f16..7c3084ac 100644 --- a/src/Framework/Http/Middlewares/ProductionSecurityMiddleware.php +++ b/src/Framework/Http/Middlewares/ProductionSecurityMiddleware.php @@ -25,7 +25,7 @@ final readonly class ProductionSecurityMiddleware implements HttpMiddleware /** * Routes that should be blocked in production */ - private const BLOCKED_ROUTES = [ + private const array BLOCKED_ROUTES = [ '/admin/discovery', '/admin/routes', '/admin/performance', @@ -38,7 +38,7 @@ final readonly class ProductionSecurityMiddleware implements HttpMiddleware /** * Routes that require IP whitelist in production */ - private const IP_RESTRICTED_ROUTES = [ + private const array IP_RESTRICTED_ROUTES = [ '/admin', '/analytics', '/health', @@ -48,7 +48,7 @@ final readonly class ProductionSecurityMiddleware implements HttpMiddleware /** * Allowed IPs for admin access in production */ - private const ALLOWED_IPS = [ + private const array ALLOWED_IPS = [ '127.0.0.1', '::1', // Add your office/home IP here for production admin access