From c79c49e6d0ed1fb501a77d5749a43247bf5fef03 Mon Sep 17 00:00:00 2001
From: Lucas <lucasroyer.dev@gmail.com>
Date: Tue, 27 Jan 2026 11:25:45 +0000
Subject: [PATCH] perf: more secure deploy

---
 .gitignore        |  1 +
 .lighthouserc.cjs |  8 ++++----
 Jenkinsfile       | 29 ++++++++++++++++++++---------
 3 files changed, 25 insertions(+), 13 deletions(-)

diff --git a/.gitignore b/.gitignore
index e69de29..dfd3d22 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+/html-prod
\ No newline at end of file
diff --git a/.lighthouserc.cjs b/.lighthouserc.cjs
index 776f363..827a7e8 100644
--- a/.lighthouserc.cjs
+++ b/.lighthouserc.cjs
@@ -11,10 +11,10 @@ module.exports = {
     assert: {
       // On utilise 'preset: lighthouse:recommended' ou on simplifie les assertions
       assertions: {
-        'categories:performance': ['error', {minScore: 0.1}],
-        'categories:accessibility': ['error', {minScore: 0.1}],
-        'categories:best-practices': ['error', {minScore: 0.1}],
-        'categories:seo': ['error', {minScore: 0.1}],
+        'categories:performance': ['warn', {minScore: 0.1}],
+        'categories:accessibility': ['warn', {minScore: 0.1}],
+        'categories:best-practices': ['warn', {minScore: 0.1}],
+        'categories:seo': ['warn', {minScore: 0.1}],
       },
     },
     upload: {
diff --git a/Jenkinsfile b/Jenkinsfile
index 22501c3..686e90a 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -7,7 +7,7 @@ pipeline {
 
         TOOLBOX_PATH ="/home/lucas/services/static-sites/static-toolbox"
         SOURCE_DIR = "html"
-        DEPLOY_PATH = "/home/lucas/services/static-sites/site-veloboomboom/html-prod"
+        DEPLOY_ROOT = "/home/lucas/services/static-sites/site-veloboomboom"
     }
     stages {
         stage('Check toolbox') {
@@ -39,12 +39,18 @@ pipeline {
                 echo "Running Lighthouse audit..."
                 // Clean old report and prepare reports and npm cache folders
                 sh """
-                    docker run --rm --volumes-from jenkins -w \$(pwd) alpine:latest \
-                    sh -c "rm -rf ./.lighthouseci && mkdir -p ./.lighthouseci && chmod 777 ./.lighthouseci"
-                
-                    # On s'assure que le dossier existe et qu'il est accessible par tous les conteneurs
-                    docker run --rm -v /home/lucas/.npm-cache:/tmp/npm-cache alpine:latest \
-                    sh -c "mkdir -p /tmp/npm-cache && chmod 777 /tmp/npm-cache"
+                    docker run --rm \
+                        --volumes-from jenkins \
+                        -v /home/lucas/.npm-cache:/tmp/npm-cache \
+                        -w \$(pwd) \
+                        alpine:latest \
+                        sh -c " \
+                            rm -rf ./.lighthouseci && \
+                            mkdir -p ./.lighthouseci && \
+                            chmod 777 ./.lighthouseci && \
+                            mkdir -p /tmp/npm-cache && \
+                            chmod 777 /tmp/npm-cache \
+                        "
                 """
                 
                 // Run
@@ -69,10 +75,15 @@ pipeline {
                 sh """
                 docker run --rm \
                     --volumes-from jenkins \
-                    -v /home/lucas/services/static-sites/site-veloboomboom:/home/lucas/services/static-sites/site-veloboomboom \
+                    -v ${env.DEPLOY_ROOT}:/site-deploy \
                     -w \$(pwd) \
                     alpine:latest \
-                    sh -c "mkdir -p ../html-new && cp -R html/* ../html-new/ && mv -T ../html-new ../html-prod"
+                    sh -c " \
+                        mkdir -p /site-deploy/html-new && \
+                        cp -R html/* /site-deploy/html-new/ && \
+                        rm -rf /site-deploy/html-prod && \
+                        mv /site-deploy/html-new /site-deploy/html-prod \
+                    "
                 """
                 
                 echo "Reloading Caddy..."