fix: favicon and ci deployment checks

.gitea/workflows/browser-e2e.yml

@@ -49,12 +49,13 @@ jobs:
             # Suppress stderr and allow failures to handle transition/down periods cleanly
             VERSION_BODY="$(curl -fsS "http://${DEPLOY_HOST}/taxbaik/version.json" 2>/dev/null || true)"
             BLOG_STATUS="$(curl -s -o /dev/null -w '%{http_code}' "http://${DEPLOY_HOST}/taxbaik/blog/accountant-mistakes-5" || true)"
-            if echo "$VERSION_BODY" | grep -q "\"version\": \"${SHORT_VERSION}\"" && [ "$BLOG_STATUS" = "200" ]; then
+            LOGIN_STATUS="$(curl -s -o /dev/null -w '%{http_code}' "http://${DEPLOY_HOST}/taxbaik/admin/login" || true)"
+            if echo "$VERSION_BODY" | grep -q "\"version\": \"${SHORT_VERSION}\"" && [ "$BLOG_STATUS" = "200" ] && [ "$LOGIN_STATUS" = "200" ]; then
               echo "✓ Deployment ready for ${SHORT_VERSION} (attempt $i/20)"
               exit 0
             fi
             if [ $i -lt 20 ]; then
-              echo "  Attempt $i/20: waiting for deployment... (blog=${BLOG_STATUS:-?}, version=${VERSION_BODY:0:30}...)"
+              echo "  Attempt $i/20: waiting for deployment... (blog=${BLOG_STATUS:-?}, login=${LOGIN_STATUS:-?}, version=${VERSION_BODY:0:30}...)"
               sleep 3
             fi
           done
@@ -72,6 +73,23 @@ jobs:
           echo "Running E2E tests on Desktop Chrome (production verification)"
           npx playwright test --project="Desktop Chrome" --reporter=html --reporter=list
 
+      - name: API smoke verification
+        env:
+          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
+          E2E_ADMIN_USERNAME: test_admin
+          E2E_ADMIN_PASSWORD: TestAdmin@123456
+        run: |
+          set -e
+          TOKEN="$(curl -s -X POST "http://${DEPLOY_HOST}/taxbaik/api/auth/login" -H "Content-Type: application/json" -d "{\"username\":\"${E2E_ADMIN_USERNAME}\",\"password\":\"${E2E_ADMIN_PASSWORD}\"}" | python3 -c 'import sys, json; print(json.load(sys.stdin)["accessToken"])')"
+          test -n "$TOKEN"
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/blog/admin?page=1&pageSize=1" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/faq" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/announcement" >/dev/null
+          curl -fsS -H "Authorization: Bearer $TOKEN" "http://${DEPLOY_HOST}/taxbaik/api/inquiry?page=1&pageSize=1" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/favicon.svg" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/favicon.ico" >/dev/null
+          curl -fsS "http://${DEPLOY_HOST}/taxbaik/robots.txt" >/dev/null
+
       - name: Browser E2E summary
         if: always()
         run: |

.gitea/workflows/deploy.yml

@@ -1,7 +1,6 @@
 name: TaxBaik CI/CD
 
 on:
-  workflow_dispatch:
   push:
     branches:
       - master
@@ -33,6 +32,9 @@ jobs:
       - name: Publish Web
         run: dotnet publish TaxBaik.Web/ -c Release -o ./publish --no-restore
 
+      - name: Publish Proxy
+        run: dotnet publish TaxBaik.Proxy/ -c Release -o ./publish/proxy --no-restore
+
       - name: Write production secrets
         run: |
           set -e
@@ -67,6 +69,11 @@ jobs:
           )'
           test -s ./publish/appsettings.Production.json || { echo "appsettings.Production.json is empty" >&2; exit 1; }
 
+      - name: Verify proxy artifact
+        run: |
+          test -s ./publish/proxy/TaxBaik.Proxy.dll || { echo "TaxBaik.Proxy.dll missing" >&2; exit 1; }
+          test -s ./publish/proxy/TaxBaik.Proxy.runtimeconfig.json || { echo "TaxBaik.Proxy.runtimeconfig.json missing" >&2; exit 1; }
+
       - name: Copy migrations
         run: cp -r db/migrations ./publish/migrations || true
 
@@ -107,6 +114,7 @@ jobs:
       - name: Deploy & verify on server
         run: |
           set -e
+          export TAXBAIK_DEPLOY_FROM_CI=1
           TIMESTAMP=$(date +%Y%m%d_%H%M%S)
           COMMIT=$(git rev-parse --short HEAD)
           DEPLOY_HOST="${{ secrets.DEPLOY_HOST }}"
@@ -163,6 +171,8 @@ jobs:
           echo "--- [2/5] 운영 설정 검증 ---"
           test -s "\$DEPLOY_DIR/appsettings.Production.json" \
             || { echo "FATAL: appsettings.Production.json 없음" >&2; exit 1; }
+          test -s "\$DEPLOY_DIR/proxy/TaxBaik.Proxy.dll" \
+            || { echo "FATAL: TaxBaik.Proxy.dll 없음" >&2; exit 1; }
 
           echo "--- [3/4] Green-Blue 배포 실행 ---"
           chmod +x "\$DEPLOY_DIR/deploy_gb.sh"
@@ -190,13 +200,20 @@ jobs:
               fi
               echo "✓ [3/4] 버전 정보 확인 완료"
 
-              # 검증 3: 관리자 로그인 페이지
+              # 검증 4: 5001 프록시 확인
+              if ! ss -tlnp | grep -q ':5001 '; then
+                echo "❌ 5001 프록시가 실행 중이 아님" >&2
+                exit 1
+              fi
+              echo "✓ [4/5] 5001 프록시 확인 완료"
+
+              # 검증 5: 관리자 로그인 페이지
               LOGIN_STATUS=\$(curl -sf -o /dev/null -w '%{http_code}' http://127.0.0.1:5001/taxbaik/admin/login 2>/dev/null || echo "000")
               if [ "\$LOGIN_STATUS" != "200" ]; then
                 echo "❌ 관리자 로그인 페이지 로드 실패 (상태: \$LOGIN_STATUS)" >&2
                 exit 1
               fi
-              echo "✓ [4/4] 관리자 페이지 로드 완료"
+              echo "✓ [5/5] 관리자 페이지 로드 완료"
 
               echo "✓ 서비스 정상 (시도 \$i/\$ATTEMPTS)"
               # 구 배포 디렉토리 정리 (최근 5개 보존)