diff --git a/yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py b/yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py index b37dd3d5..4b00becc 100644 --- a/yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py +++ b/yuqei-contract-platform/services/contract-api/tests/test_rc06_publication_deployment.py @@ -187,6 +187,11 @@ def test_production_compose_and_edge_expose_only_the_hardened_facade() -> None: assert edge["networks"]["default"]["aliases"] == [ "${RC06_AI_INTERNAL_SERVER_NAME:?RC06_AI_INTERNAL_SERVER_NAME is required}" ] + assert any( + item.startswith("${RC06_AI_INTERNAL_SERVER_NAME:") + and item.endswith(":127.0.0.1") + for item in edge["extra_hosts"] + ) nginx = ( REPO_ROOT / "yuqei-infra/nginx/templates/default.conf.template" ).read_text(encoding="utf-8") diff --git a/yuqei-infra/compose/docker-compose.production.yml b/yuqei-infra/compose/docker-compose.production.yml index b485e67b..41ce312f 100644 --- a/yuqei-infra/compose/docker-compose.production.yml +++ b/yuqei-infra/compose/docker-compose.production.yml @@ -167,6 +167,7 @@ services: - ${BACKEND_TLS_TRUSTED_CA_FILE:?BACKEND_TLS_TRUSTED_CA_FILE is required}:/etc/nginx/trusted-ca.pem:ro extra_hosts: - "${BACKEND_SERVER_NAME:?BACKEND_SERVER_NAME is required}:127.0.0.1" + - "${RC06_AI_INTERNAL_SERVER_NAME:?RC06_AI_INTERNAL_SERVER_NAME is required}:127.0.0.1" networks: default: aliases: