fix(config): Correction propriétés multipart et ingress aligné sur btpxpress

- Remplacement des propriétés obsolètes multipart par quarkus.http.limits.max-body-size
- Mise à jour de l'ingress avec le bon nom de service et annotations lionsctl
- Utilisation du certificat partagé api-lions-dev-tls
- Ajout du support WebSocket dans l'ingress

kubernetes/afterwork-ingress.yaml

@@ -1,36 +1,55 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: afterwork-api
+  name: mic-after-work-server-impl-quarkus-main-ingress
   namespace: applications
+  labels:
+    app: mic-after-work-server-impl-quarkus-main
   annotations:
     # SSL/TLS
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
+
+    # Metadata
+    description: "Ingress for afterwork-api application on api.lions.dev/afterwork"
+    kubernetes.io/ingress.class: nginx
+    lionsctl.lions.dev/deployed-by: lionsctl
+    lionsctl.lions.dev/domain: api.lions.dev
+    lionsctl.lions.dev/path: /afterwork
 
     # Proxy settings
-    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
+    nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+    nginx.ingress.kubernetes.io/proxy-buffering: "on"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
 
     # WebSocket support
-    nginx.ingress.kubernetes.io/websocket-services: "afterwork-api"
     nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
     nginx.ingress.kubernetes.io/configuration-snippet: |
       proxy_set_header Upgrade $http_upgrade;
       proxy_set_header Connection "upgrade";
 
-    # Security headers
+    # Security headers and CORS
     nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/cors-allow-origin: "https://afterwork.lions.dev"
+    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
     nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS, PATCH"
     nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
-    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,Origin"
+    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization"
     nginx.ingress.kubernetes.io/cors-expose-headers: "Content-Length,Content-Range,Content-Disposition"
     nginx.ingress.kubernetes.io/cors-max-age: "86400"
 
+    # Compression
+    nginx.ingress.kubernetes.io/enable-compression: "true"
+    nginx.ingress.kubernetes.io/compression-types: "text/plain,text/css,application/json,application/javascript,text/xml,application/xml,application/xml+rss,text/javascript"
+
+    # Rate limiting
+    nginx.ingress.kubernetes.io/rate-limit: "1000"
+    nginx.ingress.kubernetes.io/rate-limit-window: "1m"
+
     # Rewrite (important pour /afterwork)
+    nginx.ingress.kubernetes.io/use-regex: "true"
     nginx.ingress.kubernetes.io/rewrite-target: /$2
 
 spec:
@@ -38,15 +57,15 @@ spec:
   tls:
   - hosts:
     - api.lions.dev
-    secretName: afterwork-api-tls
+    secretName: api-lions-dev-tls
   rules:
   - host: api.lions.dev
     http:
       paths:
       - path: /afterwork(/|$)(.*)
-        pathType: Prefix
+        pathType: ImplementationSpecific
         backend:
           service:
-            name: afterwork-api
+            name: mic-after-work-server-impl-quarkus-main-service
             port:
-              number: 8080
+              number: 80

src/main/resources/application-prod.properties

@@ -1,21 +1,18 @@
 # ====================================================================
 # AfterWork Server - Configuration de Production
 # ====================================================================
+# IMPORTANT: Les propriétés build-time (app.name, root-path, compression)
+# sont définies dans application.properties et ne peuvent pas être changées ici
 
-# Application
-quarkus.application.name=afterwork-api
-quarkus.application.version=1.0.0
-
-# HTTP Configuration
+# HTTP Configuration (runtime only)
 quarkus.http.host=0.0.0.0
 quarkus.http.port=8080
-quarkus.http.root-path=/afterwork
 
 # Base de données PostgreSQL (Production)
 quarkus.datasource.db-kind=postgresql
-quarkus.datasource.jdbc.url=jdbc:postgresql://${DB_HOST:postgresql}:${DB_PORT:5432}/${DB_NAME:afterwork_db}
-quarkus.datasource.username=${DB_USERNAME:afterwork}
-quarkus.datasource.password=${DB_PASSWORD:changeme}
+quarkus.datasource.jdbc.url=jdbc:postgresql://${DB_HOST:postgresql}:${DB_PORT:5432}/${DB_NAME:mic-after-work-server-impl-quarkus-main}
+quarkus.datasource.username=${DB_USERNAME:lionsuser}
+quarkus.datasource.password=${DB_PASSWORD:LionsUser2025!}
 quarkus.datasource.jdbc.driver=org.postgresql.Driver
 quarkus.datasource.jdbc.max-size=20
 quarkus.datasource.jdbc.min-size=5
@@ -44,32 +41,19 @@ quarkus.log.category."com.lions.dev".level=INFO
 quarkus.log.category."org.hibernate".level=WARN
 quarkus.log.category."io.quarkus".level=INFO
 
-# OpenAPI/Swagger (Désactivé en production pour sécurité)
-quarkus.swagger-ui.always-include=false
-quarkus.swagger-ui.enable=false
-quarkus.smallrye-openapi.enable=false
+# OpenAPI/Swagger - Configuration build-time dans application.properties
 
-# Health checks
-quarkus.smallrye-health.root-path=/q/health
-quarkus.smallrye-health.liveness-path=/live
-quarkus.smallrye-health.readiness-path=/ready
+# Health checks - Utilise les valeurs par défaut de Quarkus
 
-# Métriques
-quarkus.micrometer.enabled=true
-quarkus.micrometer.export.prometheus.enabled=true
-quarkus.micrometer.export.prometheus.path=/q/metrics
+# Métriques - Configuration build-time dans application.properties
 
 # WebSocket
 quarkus.websocket.max-frame-size=65536
 
 # Upload de fichiers
 quarkus.http.body.uploads-directory=/tmp/uploads
-quarkus.http.body.multipart.max-request-size=10M
-quarkus.http.body.multipart.max-file-size=5M
 
-# Compression HTTP
-quarkus.http.enable-compression=true
-quarkus.http.compress-media-types=text/html,text/plain,text/xml,text/css,text/javascript,application/javascript,application/json
+# Compression HTTP - Configuration build-time dans application.properties
 
 # SSL/TLS (géré par le reverse proxy)
 quarkus.http.ssl.certificate.files=

src/main/resources/application.properties

@@ -56,8 +56,7 @@ quarkus.hibernate-orm.log.sql=false
 
 # Activer le support multipart pour l'upload de fichiers
 quarkus.http.body.uploads-directory=/tmp/uploads
-quarkus.http.body.multipart.max-request-size=10M
-quarkus.http.body.multipart.max-file-size=5M
+quarkus.http.limits.max-body-size=10M
 
 # Écouter sur toutes les interfaces réseau (0.0.0.0) pour être accessible depuis le Samsung
 quarkus.http.host=0.0.0.0