test: add functional portal suite

2026-06-24 09:25:28 +02:00
parent 4886516aa3
commit 1e3685bab8
12 changed files with 358 additions and 4 deletions
@@ -22,6 +22,10 @@
 - NGINX forwards the original host and standard client/protocol headers. The local
  configuration is HTTP-only; production must add TLS and ensure application ports are
  not externally reachable.
+- The Playwright image is pinned and enabled only through the test Compose profile. It
+  receives no credentials, publishes no host ports, and tests only the local portal.
+  The override uses a separate PostgreSQL volume so its seed cannot overwrite normal
+  CMS content.

 Manual production hardening remains required for reverse proxy headers, TLS, media
 storage, backup retention, monitoring, and admin network policy.