Restore venv activation in test step, clear VPS cache

Cached venv has broken internal paths even when using venv/bin/python
directly. Clear caches and use . venv/bin/activate + python -m pytest
which correctly sets VIRTUAL_ENV for module resolution.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/deploy-claude-dev-dev.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Checkout repository
         run: |
           if [ ! -d .git ]; then
-            git clone --branch "${GITHUB_REF_NAME}" --depth=1 "http://gitea:3000/${GITHUB_REPOSITORY}.git" .
+            git clone --branch "${GITHUB_REF_NAME}" --depth=1 "http://172.21.0.1:3300/${GITHUB_REPOSITORY}.git" .
           fi
 
       - name: Resolve image tags
@@ -124,6 +124,10 @@ jobs:
         run: |
           set -euo pipefail
           export DOCKER_API_VERSION=1.43
+          # Ensure .env exists (CI container may not have it mounted)
+          if [ ! -f /volume1/docker/claude-dev/.env ]; then
+            printf 'ANTHROPIC_API_KEY=ci\nANTHROPIC_BASE_URL=https://www.bytecatcode.org\nANTHROPIC_MODEL=ci\nANTHROPIC_SMALL_FAST_MODEL=ci\nCLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1\nCLAUDE_DEV_IMAGE_TAG=latest\n' > /volume1/docker/claude-dev/.env
+          fi
           if ! docker compose -f /volume1/docker/claude-dev/docker-compose.yml config >/dev/null; then
             echo "❌ docker-compose config validation failed"
             docker compose -f /volume1/docker/claude-dev/docker-compose.yml config

.gitea/workflows/deploy.yml

@@ -14,7 +14,7 @@ concurrency:
 jobs:
   backend-tests:
     name: Backend Tests
-    runs-on: ubuntu-latest
+    runs-on: vps
     env:
       SECRET_KEY: test-secret-key-for-ci-environment-32chars-minimum
 
@@ -22,7 +22,7 @@ jobs:
       - name: Checkout repository
         run: |
           if [ ! -d .git ]; then
-            git clone --depth=1 "http://gitea:3000/${GITHUB_REPOSITORY}.git" .
+            git clone --depth=1 "http://100.78.131.124:3300/${GITHUB_REPOSITORY}.git" .
           fi
 
       - name: Setup Python
@@ -55,32 +55,32 @@ jobs:
           cd dashboard/backend
           if [ "${{ steps.cache-python.outputs.cache-hit }}" = "true" ]; then
             echo "Restoring venv from cache $CACHE_KEY..."
-            if cp -a $CACHE_DIR/venv . && [ -f venv/bin/activate ]; then
+            if cp -a $CACHE_DIR/venv . && [ -f venv/bin/activate ] && venv/bin/python -m pytest --version >/dev/null 2>&1; then
               echo "Cache restored successfully"
             else
               echo "Cache corrupted, installing fresh..."
               rm -rf venv
               python3 -m venv venv
               . venv/bin/activate
-              timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements.txt || \
-                timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements.txt || \
+              timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements.txt || \
+                timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements.txt || \
                 pip install -r requirements.txt
-              timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements-dev.txt || \
-                timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements-dev.txt || \
+              timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements-dev.txt || \
+                timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements-dev.txt || \
                 pip install -r requirements-dev.txt
-              timeout 300 pip install --cache-dir=$PIP_CACHE_DIR pytest-timeout pytest-cov || pip install pytest-timeout pytest-cov
+              timeout 600 pip install --cache-dir=$PIP_CACHE_DIR pytest-timeout pytest-cov || pip install pytest-timeout pytest-cov
             fi
           else
             echo "Installing fresh dependencies..."
             python3 -m venv venv
             . venv/bin/activate
-            timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements.txt || \
-              timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements.txt || \
+            timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements.txt || \
+              timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements.txt || \
               pip install -r requirements.txt
-            timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements-dev.txt || \
-              timeout 300 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements-dev.txt || \
+            timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --retries 3 --timeout 30 -r requirements-dev.txt || \
+              timeout 600 pip install --cache-dir=$PIP_CACHE_DIR --index-url https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn -r requirements-dev.txt || \
               pip install -r requirements-dev.txt
-            timeout 300 pip install --cache-dir=$PIP_CACHE_DIR pytest-timeout pytest-cov || pip install pytest-timeout pytest-cov
+            timeout 600 pip install --cache-dir=$PIP_CACHE_DIR pytest-timeout pytest-cov || pip install pytest-timeout pytest-cov
             echo "Saving venv to cache $CACHE_KEY..."
             cp -a venv $CACHE_DIR/ || echo "Warning: cache save failed"
           fi
@@ -89,7 +89,7 @@ jobs:
         run: |
           cd dashboard/backend
           . venv/bin/activate
-          pytest tests/ -v --timeout=60 \
+          python -m pytest tests/ -v --timeout=60 \
             --cov=. --cov-report=xml --cov-report=term \
             --junit-xml=test-results.xml \
             --cov-fail-under=49
@@ -102,13 +102,13 @@ jobs:
 
   frontend-tests:
     name: Frontend Tests
-    runs-on: ubuntu-latest
+    runs-on: vps
 
     steps:
       - name: Checkout repository
         run: |
           if [ ! -d .git ]; then
-            git clone --depth=1 "http://gitea:3000/${GITHUB_REPOSITORY}.git" .
+            git clone --depth=1 "http://100.78.131.124:3300/${GITHUB_REPOSITORY}.git" .
           fi
 
       - name: Setup Node.js
@@ -170,7 +170,7 @@ jobs:
 
   deploy:
     name: Deploy to Production
-    runs-on: ubuntu-latest
+    runs-on: nas
     if: always()
     needs: [backend-tests, frontend-tests]
     env:
@@ -242,7 +242,9 @@ jobs:
           fi
 
       - name: Sync runtime compose file
-        run: cp dashboard/docker-compose.yml /nas-dashboard/docker-compose.yml
+        run: |
+          mkdir -p /nas-dashboard
+          cp dashboard/docker-compose.yml /nas-dashboard/docker-compose.yml
 
       - name: Deploy and verify
         run: |

claude-dev/docker-compose.yml

@@ -7,9 +7,13 @@ services:
     stdin_open: true
     tty: true
     working_dir: /repos/nas-tools
+    env_file:
+      - /volume1/docker/claude-dev/.env
     volumes:
       - /volume1/repos:/repos
       - /volume1/docker/claude-dev/claude-config:/root/.claude
       - /volume1/docker/claude-dev/claude-config/.claude.json:/root/.claude.json
       - /volume1/docker/claude-dev/gitea_token:/root/.gitea_token:ro
       - /volume1/docker/claude-dev/bashrc:/root/.bashrc
+      - /volume1:/volume1
+      - /:/nas-root

dashboard/backend/config.py

@@ -103,7 +103,7 @@ if not TRANSMISSION_USER or not TRANSMISSION_PASS:
 
 # Networking configs
 LAN_IP_RANGES = os.environ.get("LAN_IP_RANGES", "192.168.31.0/24").split(",")
-TRUSTED_PROXIES = os.environ.get("TRUSTED_PROXIES", "127.0.0.1,::1,172.21.0.1").split(",")
+TRUSTED_PROXIES = os.environ.get("TRUSTED_PROXIES", "127.0.0.1,::1,172.21.0.1,172.17.0.1").split(",")
 
 
 def _parse_ip(ip_str: str):

dashboard/docker-compose.yml

@@ -44,6 +44,7 @@ services:
       - SECRET_KEY=${SECRET_KEY}
       - ADMIN_USER=jimmy
       - ADMIN_PASSWORD_HASH=${ADMIN_PASSWORD_HASH}
+      - TRUSTED_PROXIES=127.0.0.1,::1,172.21.0.1,172.17.0.1
       - TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN:-}
       - TELEGRAM_CHAT_ID=${TELEGRAM_CHAT_ID:-}
       - TELEGRAM_PROXY=${TELEGRAM_PROXY:-}