- AZURE_AD_REDIRECT_URI set to https://optical-dev.oliver.solutions/ppt-tool/ - Root page intercepts ?code= from Azure AD and forwards to backend callback - Post-OAuth redirect uses NEXT_PUBLIC_BASE_PATH env var (/ppt-tool/dashboard) - Cookie secure flag driven by COOKIE_SECURE env var (true in prod) - Dev login now works alongside Azure AD when DEV_AUTH_PASSWORD is set - Login page shows both Microsoft SSO and dev form when both modes enabled - docker-compose.prod.yml: add COOKIE_SECURE=true and NEXT_PUBLIC_BASE_PATH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
40 lines
1,013 B
YAML
40 lines
1,013 B
YAML
# Production overrides for DeckForge
|
|
# Usage: docker compose -f docker-compose.yml -f docker-compose.prod.yml <command>
|
|
#
|
|
# Changes from base:
|
|
# - All ports bound to 127.0.0.1 (Apache reverse proxy, Docker bypasses UFW otherwise)
|
|
# - postgres/redis ports removed (internal Docker network only)
|
|
# - nginx service excluded (Apache on host replaces it)
|
|
# - PYTHONUNBUFFERED=1 on api for log visibility
|
|
# - basePath env vars for Next.js
|
|
#
|
|
# Note: uses !override (not !reset) to REPLACE port lists, not clear them
|
|
|
|
services:
|
|
postgres:
|
|
ports: !override []
|
|
|
|
redis:
|
|
ports: !override []
|
|
|
|
api:
|
|
ports: !override
|
|
- "127.0.0.1:${API_PORT:-8000}:8000"
|
|
environment:
|
|
PYTHONUNBUFFERED: "1"
|
|
NEXT_PUBLIC_BASE_PATH: "/ppt-tool"
|
|
COOKIE_SECURE: "true"
|
|
|
|
worker:
|
|
environment:
|
|
PYTHONUNBUFFERED: "1"
|
|
|
|
web:
|
|
ports: !override
|
|
- "127.0.0.1:${WEB_PORT:-3000}:3000"
|
|
environment:
|
|
NEXT_PUBLIC_BASE_PATH: "/ppt-tool"
|
|
|
|
nginx:
|
|
profiles:
|
|
- disabled
|