Michael Chihlas
c4947218a4
- Gate Swagger/ReDoc/OpenAPI behind DEBUG (no public API schema in prod) - Sentry send_default_pii only in dev (no auth headers/bodies in events) - Remove alembic from Dockerfile CMD (releaseCommand owns migrations; CMD copy raced across replicas/restarts) - Decouple rate limiting from DEBUG via RATE_LIMIT_ENABLED (PR envs with DEBUG=true were unlimited); tests disable the live limiter in conftest - max_instances=1 on the 4 scheduler jobs missing it - Boot-time failure when SELF_SERVE_ENABLED without RESEND_API_KEY/ANTHROPIC_API_KEY/FRONTEND_URL - Reject localhost OAUTH_REDIRECT_BASE outside DEBUG - pool_pre_ping + pool_recycle on the app engine - Frontend: DEV-gate stale-async console.warn; document VITE_SELF_SERVE_ENABLED fallback semantics in Dockerfile Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
59 lines
1.8 KiB
Docker
59 lines
1.8 KiB
Docker
# Build stage
|
|
FROM node:20-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package*.json ./
|
|
|
|
# Install dependencies
|
|
RUN npm ci
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build arguments (set at build time)
|
|
# NOTE: VITE_SELF_SERVE_ENABLED is only a network-error fallback — the live
|
|
# toggle is the backend /config/public flag; rebuilding with a new value here
|
|
# does NOT flip self-serve. VITE_STRIPE_PUBLISHABLE_KEY is currently unused
|
|
# (checkout is fully backend-driven); kept for a future client-side Stripe.js.
|
|
ARG VITE_API_URL
|
|
ARG VITE_SENTRY_DSN
|
|
ARG VITE_PUBLIC_POSTHOG_KEY
|
|
ARG VITE_PUBLIC_POSTHOG_HOST
|
|
ARG VITE_STRIPE_PUBLISHABLE_KEY
|
|
ARG VITE_GOOGLE_CLIENT_ID
|
|
ARG VITE_MS_CLIENT_ID
|
|
ARG VITE_OAUTH_REDIRECT_BASE
|
|
ARG VITE_SELF_SERVE_ENABLED
|
|
ARG VITE_CALENDLY_URL
|
|
ENV VITE_API_URL=$VITE_API_URL
|
|
ENV VITE_SENTRY_DSN=$VITE_SENTRY_DSN
|
|
ENV VITE_PUBLIC_POSTHOG_KEY=$VITE_PUBLIC_POSTHOG_KEY
|
|
ENV VITE_PUBLIC_POSTHOG_HOST=$VITE_PUBLIC_POSTHOG_HOST
|
|
ENV VITE_STRIPE_PUBLISHABLE_KEY=$VITE_STRIPE_PUBLISHABLE_KEY
|
|
ENV VITE_GOOGLE_CLIENT_ID=$VITE_GOOGLE_CLIENT_ID
|
|
ENV VITE_MS_CLIENT_ID=$VITE_MS_CLIENT_ID
|
|
ENV VITE_OAUTH_REDIRECT_BASE=$VITE_OAUTH_REDIRECT_BASE
|
|
ENV VITE_SELF_SERVE_ENABLED=$VITE_SELF_SERVE_ENABLED
|
|
ENV VITE_CALENDLY_URL=$VITE_CALENDLY_URL
|
|
|
|
# Build the application
|
|
RUN npm run build
|
|
|
|
# Production stage
|
|
FROM nginx:alpine
|
|
|
|
# Copy custom nginx config template
|
|
COPY nginx.conf /etc/nginx/templates/default.conf.template
|
|
|
|
# Copy built files from builder stage
|
|
COPY --from=builder /app/dist /usr/share/nginx/html
|
|
|
|
# Railway uses PORT env variable (default to 80 for local)
|
|
ENV PORT=80
|
|
EXPOSE 80
|
|
|
|
# Use envsubst to replace ${PORT} in nginx config, then start nginx
|
|
CMD sh -c "envsubst '\$PORT' < /etc/nginx/templates/default.conf.template > /etc/nginx/conf.d/default.conf && nginx -g 'daemon off;'"
|