From 2963f82a3e1fe670a045cc2f0cb58a6652d0f407 Mon Sep 17 00:00:00 2001
From: manus-admin <manus@santinova-soft.org>
Date: Sat, 24 Oct 2026 09:20:15 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20d=C3=A9clarer=20un=20routeur=20Traefik?=
 =?UTF-8?q?=20par=20portail?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.yml           | 23 ++++++++++++++++++++---
 test/portal-contract.test.js | 15 +++++++++++++++
 2 files changed, 35 insertions(+), 3 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 2e3b995..9be9998 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,10 +9,27 @@ services:
       - web
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.portail-recette.rule=Host(`portail.recette.santinova-soft.org`,`portail-itinova.recette.santinova-soft.org`,`portail-soins-et-sante.recette.santinova-soft.org`,`portail-santinova.recette.santinova-soft.org`,`portail-santelis.recette.santinova-soft.org`)"
-      - "traefik.http.routers.portail-recette.entrypoints=websecure"
-      - "traefik.http.routers.portail-recette.tls.certresolver=letsencrypt"
       - "traefik.http.services.portail-recette.loadbalancer.server.port=3000"
+      - "traefik.http.routers.portail-legacy-recette.rule=Host(`portail.recette.santinova-soft.org`)"
+      - "traefik.http.routers.portail-legacy-recette.entrypoints=websecure"
+      - "traefik.http.routers.portail-legacy-recette.tls=true"
+      - "traefik.http.routers.portail-legacy-recette.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.portail-itinova-recette.rule=Host(`portail-itinova.recette.santinova-soft.org`)"
+      - "traefik.http.routers.portail-itinova-recette.entrypoints=websecure"
+      - "traefik.http.routers.portail-itinova-recette.tls=true"
+      - "traefik.http.routers.portail-itinova-recette.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.portail-soins-recette.rule=Host(`portail-soins-et-sante.recette.santinova-soft.org`)"
+      - "traefik.http.routers.portail-soins-recette.entrypoints=websecure"
+      - "traefik.http.routers.portail-soins-recette.tls=true"
+      - "traefik.http.routers.portail-soins-recette.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.portail-santinova-recette.rule=Host(`portail-santinova.recette.santinova-soft.org`)"
+      - "traefik.http.routers.portail-santinova-recette.entrypoints=websecure"
+      - "traefik.http.routers.portail-santinova-recette.tls=true"
+      - "traefik.http.routers.portail-santinova-recette.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.portail-santelis-recette.rule=Host(`portail-santelis.recette.santinova-soft.org`)"
+      - "traefik.http.routers.portail-santelis-recette.entrypoints=websecure"
+      - "traefik.http.routers.portail-santelis-recette.tls=true"
+      - "traefik.http.routers.portail-santelis-recette.tls.certresolver=letsencrypt"
 networks:
   web:
     external: true
diff --git a/test/portal-contract.test.js b/test/portal-contract.test.js
index 1dec712..66393cd 100644
--- a/test/portal-contract.test.js
+++ b/test/portal-contract.test.js
@@ -10,6 +10,7 @@ const vm = require('node:vm');
 
 const root = path.join(__dirname, '..');
 const html = fs.readFileSync(path.join(root, 'index.html'), 'utf8');
+const compose = fs.readFileSync(path.join(root, 'docker-compose.yml'), 'utf8');
 const script = html.match(/<script>([\s\S]*?)<\/script>/)?.[1];
 
 assert.ok(script, 'le script de configuration des portails doit être présent');
@@ -91,6 +92,20 @@ for (const [host, env, group, appsUrl] of expected) {
   assert.equal(sandbox.PORTAL.dashboardStatusUrl, appsUrl.replace('/apps', '/status'), `${host} doit appeler le bon endpoint statut`);
 }
 
+for (const host of [hosts.itinovaRecette, hosts.soinsRecette, hosts.santinovaRecette, hosts.santelisRecette]) {
+  assert.match(
+    compose,
+    new RegExp(`traefik\\.http\\.routers\\.portail-[a-z-]+\\.rule=Host\\(\\\`${host.replace(/\./g, '\\.') }\\\`\\)`),
+    `${host} doit avoir un routeur Traefik dédié`
+  );
+}
+assert.match(
+  compose,
+  /traefik\.http\.routers\.portail-legacy-recette\.rule=Host\(`portail\.recette\.santinova-soft\.org`\)/,
+  'l’ancienne URL recette doit garder un routeur de redirection'
+);
+assert.equal((compose.match(/tls\.certresolver=letsencrypt/g) || []).length, 5, 'chaque routeur recette doit demander un certificat TLS');
+
 const recetteApps = [
   { id: 'itinova-contacts', category: 'ITINOVA', urls: { recette: 'https://contacts.recette.santinova-soft.org' } },
   { id: 'gestion-astreintes-had', category: 'SOINS_ET_SANTE', urls: { recette: 'https://astreintes-had.recette.santinova-soft.org' } },