Security-Base

docker-compose up -d --build

# 1. Cloner le repository
git clone https://github.com/Ninewashburn/security-base.git
cd security-base

# 2. Installation Frontend (Angular)
cd frontend
npm install
cp src/environments/environment.example.ts src/environments/environment.ts
# Éditer environment.ts avec vos configurations

# 3. Installation Backend (Laravel)
cd ../backend
composer install
cp .env.example .env
php artisan key:generate
# Éditer .env avec vos configurations database

# 4. Créer la base de données
mysql -u root -p -e "CREATE DATABASE security-base CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"

# 5. Lancer les migrations
php artisan migrate --seed

# 6. Démarrer les serveurs de développement
# Terminal 1 - Frontend
cd frontend
ng serve
# Accessible sur http://localhost:4200

# Terminal 2 - Backend
cd backend
php artisan serve
# Accessible sur http://localhost:8000

# Frontend
cd frontend
docker build -t security-base-frontend .
docker run -p 4200:4200 security-base-frontend

# Backend avec Laravel Sail
cd backend
composer require laravel/sail --dev
php artisan sail:install
./vendor/bin/sail up -d
./vendor/bin/sail artisan migrate --seed

# .env
APP_NAME="Security-Base API"
APP_ENV=local
APP_DEBUG=true
APP_URL=http://localhost:8000
APP_TIMEZONE=UTC  # IMPORTANT: Toujours UTC

# Base de données
DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=security-base
DB_USERNAME=root
DB_PASSWORD=
DB_TIMEZONE=+00:00  # Force UTC pour éviter problèmes timezone

# Cache (Redis en production)
CACHE_DRIVER=redis
REDIS_HOST=127.0.0.1
REDIS_PASSWORD=null
REDIS_PORT=6379

# Mail (SMTP en production)
MAIL_MAILER=smtp
MAIL_HOST=smtp.washburn.internal
MAIL_PORT=587
MAIL_USERNAME=noreply@washburn.internal
MAIL_PASSWORD=
MAIL_ENCRYPTION=tls
MAIL_FROM_ADDRESS="noreply@washburn.com"
MAIL_FROM_NAME="${APP_NAME}"

# CORS
SANCTUM_STATEFUL_DOMAINS=localhost:4200,app.washburn.internal

# JWT
JWT_SECRET=your-secret-key
JWT_TTL=3600  # 1 heure

# Header requis pour toutes les requêtes
Authorization: Bearer {JWT_TOKEN}
Content-Type: application/json
Accept: application/json

# Créer un incident
curl -X POST http://localhost:8000/api/incidents \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "object": "Intrusion détectée",
    "description": "Tentative d accès non autorisé",
    "domains": ["Informatique"],
    "gravity": "tres_grave",
    "status": "ouvert",
    "sites": ["Site A", "Site B"]
  }'

# Récupérer les incidents avec filtres
curl -X GET "http://localhost:8000/api/incidents?status=ouvert&gravity=grave&page=1&per_page=25" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

# Archiver un incident
curl -X PATCH http://localhost:8000/api/incidents/1/archive \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"notes": "Archivage automatique après résolution"}'

# Export Excel avec filtres
curl -X GET "http://localhost:8000/api/export/xlsx?status=ouvert&startDate=2025-01-01" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  --output incidents.xlsx

# Objectifs de performance
- API response time P95: < 100ms
- Frontend initial load: < 2s
- Time to interactive: < 3s
- Bundle size: < 500KB (gzipped)
- Database query time: < 50ms
- Cache hit rate: > 80%

# 1. Build de production
cd frontend
npm run build -- --configuration production

# 2. Le dossier dist/ contient les fichiers à déployer
# Configuration Nginx
server {
    listen 80;
    server_name app.ninewashburn.recouv;
    
    root /var/www/security-base/frontend/dist/security-base;
    index index.html;
    
    location / {
        try_files $uri $uri/ /index.html;
    }
    
    location /api {
        proxy_pass http://localhost:8000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    
    # Gzip compression
    gzip on;
    gzip_types text/css application/javascript application/json;
    
    # Cache static assets
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
    }
}

# 1. Optimisations Laravel
cd backend

# Cache de configuration
php artisan config:cache

# Cache des routes
php artisan route:cache

# Cache des vues
php artisan view:cache

# Optimiser l'autoloader Composer
composer install --optimize-autoloader --no-dev

# 2. Configuration .env production
APP_ENV=production
APP_DEBUG=false
APP_URL=https://api.ninewashburn

DB_CONNECTION=mysql
DB_HOST=db-prod.ninewashburn
DB_DATABASE=security-base
DB_USERNAME=security-ninewashburn
DB_PASSWORD=STRONG_PASSWORD

CACHE_DRIVER=redis
SESSION_DRIVER=redis
QUEUE_CONNECTION=redis

REDIS_HOST=redis-prod.ninewashburn
REDIS_PASSWORD=REDIS_PASSWORD

# 3. Configuration Nginx pour Laravel
server {
    listen 443 ssl http2;
    server_name api.ninewashburn;
    
    root /var/www/security-base/backend/public;
    index index.php;
    
    ssl_certificate /etc/ssl/certs/ninewashburn.crt;
    ssl_certificate_key /etc/ssl/private/ninewashburn.key;
    
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    
    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php/php8.4-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
    
    location ~ /\.(?!well-known).* {
        deny all;
    }
}

# 4. Supervisor pour Queue Workers
# /etc/supervisor/conf.d/security-base-worker.conf
[program:security-base-worker]
process_name=%(program_name)s_%(process_num)02d
command=php /var/www/security-base/backend/artisan queue:work redis --sleep=3 --tries=3 --max-time=3600
autostart=true
autorestart=true
user=www-data
numprocs=4
redirect_stderr=true
stdout_logfile=/var/www/security-base/backend/storage/logs/worker.log

# Tests unitaires
cd frontend
npm test

# Tests avec couverture
npm run test:coverage

# Tests e2e
npm run e2e

# Lint
npm run lint

# Tests unitaires et feature
cd backend
php artisan test

# Tests avec couverture
php artisan test --coverage

# Tests spécifiques
php artisan test --filter IncidentControllerTest

# PHPStan (analyse statique)
./vendor/bin/phpstan analyse

# Apache Bench
ab -n 1000 -c 10 -H "Authorization: Bearer TOKEN" \
   http://localhost:8000/api/incidents

# Artillery (load testing)
artillery quick --count 100 --num 10 http://localhost:8000/api/incidents

# Lighthouse (frontend performance)
npm install -g lighthouse
lighthouse http://localhost:4200 --view

# Format: <type>(<scope>): <subject>

# Types
feat:     Nouvelle fonctionnalité
fix:      Correction de bug
docs:     Documentation uniquement
style:    Formatage (sans changement de code)
refactor: Refactoring (sans feat/fix)
perf:     Amélioration performance
test:     Ajout/modification de tests
chore:    Maintenance (build, CI, etc.)

# Exemples
git commit -m "feat(incidents): add PDF export functionality"
git commit -m "fix(auth): resolve JWT token expiration issue"
git commit -m "docs(readme): update installation instructions"
git commit -m "refactor(services): simplify cache management"
git commit -m "perf(queries): add database indexes for search"
git commit -m "test(export): add unit tests for XLSX generation"

# 1. Fork le repository
git clone https://github.com/YOUR_USERNAME/security-base.git
cd security-base

# 2. Créer une branche feature
git checkout -b feature/amazing-feature

# 3. Développer et commit
git add .
git commit -m "feat(module): add amazing feature"

# 4. Pousser vers le fork
git push origin feature/amazing-feature

# 5. Créer une Pull Request sur GitHub

# 6. Après review et merge
git checkout main
git pull upstream main
git branch -d feature/amazing-feature