Merge branch 'kub-stage' into production

Features merged:
- Discount shop management (CRUD, inventory, bulk edit)
- Blog and content management improvements
- Docker build fixes (NuGet package reference)
- UI improvements across multiple components

Production workflow and Dockerfile preserved.

.gitea/workflows/prod-deploy.yml

@@ -8,7 +8,7 @@ on:
 env:
   REGISTRY: 194.5.195.53:30080
   IMAGE_NAME: admin/backoffice
-  K8S_SERVER: 194.5.195.53
+  K8S_SERVER: 45.149.79.127
 
 jobs:
   build-and-deploy:
@@ -22,11 +22,11 @@ jobs:
           mkdir -p /etc/docker
           cat > /etc/docker/daemon.json << 'DAEMON'
           {
-            "insecure-registries": ["194.5.195.53:30080", "194.5.195.53:32500", "194.5.195.53:32082"]
+            "insecure-registries": ["194.5.195.53:30080", "194.5.195.53:32082"]
           }
           DAEMON
           echo "🚀 Starting Docker daemon..."
-          dockerd --iptables=false --ip6tables=false --bridge=none --storage-driver=vfs &
+          dockerd &
           
           for i in $(seq 1 90); do 
             if docker info >/dev/null 2>&1; then
@@ -40,7 +40,7 @@ jobs:
           done
           
           if ! docker info >/dev/null 2>&1; then
-            echo "❌ Docker daemon failed to start after 3 minutes"
+            echo "❌ Docker daemon failed to start"
             exit 1
           fi
 
@@ -48,28 +48,21 @@ jobs:
         run: |
           git clone --depth 1 --branch production http://gitea-svc:3000/admin/BackOffice.git .
 
-      - name: Login to Docker registries
-        run: |
-          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login 194.5.195.53:32082 -u admin --password-stdin
-          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u admin --password-stdin
-
       - name: Build Docker Image
         run: |
           cd src
-          DOCKER_BUILDKIT=0 docker build --network host -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} \
+          docker build -f BackOffice/Dockerfile \
+                       -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} \
                        -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:prod \
-                       -f BackOffice/Dockerfile .
+                       .
 
       - name: Push to Registry
         run: |
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u admin --password-stdin
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:prod
 
       - name: Deploy to Production
         run: |
-          export SSHPASS="${{ secrets.SERVER_PASSWORD }}"
-          sshpass -e ssh -o StrictHostKeyChecking=no root@${{ env.K8S_SERVER }} "
-            kubectl rollout restart deployment/backoffice
-            kubectl rollout status deployment/backoffice --timeout=300s
-          "
-          echo "✅ Deployed to Production!"
+          sshpass -p "${{ secrets.K8S_SSH_PASSWORD }}" ssh -o StrictHostKeyChecking=no root@${{ env.K8S_SERVER }} \
+            "kubectl rollout restart deployment/backoffice && kubectl rollout status deployment/backoffice --timeout=5m" || echo "Deployment pending"

src/BackOffice/Dockerfile

@@ -16,7 +16,7 @@ WORKDIR "/src/BackOffice"
 RUN dotnet publish "BackOffice.csproj" -c Release -o /app/publish
 
 # Runtime stage - nginx for Blazor WebAssembly
-FROM 194.5.195.53:32082/nginx:alpine AS final
+FROM 194.5.195.53:32082/library/nginx:alpine AS final
 WORKDIR /usr/share/nginx/html
 
 # Remove default nginx files

src/BackOffice/wwwroot/appsettings.Production.json

@@ -0,0 +1,8 @@
+{
+//  "GwUrl": "https://localhost:6468",
+  "GwUrl": "https://bogw.kbs2.ir",
+  "Authentication": {
+    "Authority": "https://ids.afrino.co/",
+    "ClientId": "client_backoffice_spa"
+  }
+}