- backend/Dockerfile: split builder/runner, runtime libs only, non-root app user, curl for healthcheck, --frozen via new uv.lock - frontend/Dockerfile: npm ci instead of npm install (deterministic), USER node - docker-compose.prod.yml: working backend healthcheck (curl now in image), redis healthcheck, drop dead NEXT_PUBLIC_API_BASE_URL env (Next.js bakes NEXT_PUBLIC_* at build time, runtime override is no-op) - docker-compose.yml: same redis healthcheck, BACKEND_URL for next.config rewrites, drop uv from CMD (not in new image) - Caddyfile: handle (not handle_path) so /api prefix is preserved into FastAPI router - next.config.ts: rewrite /api/* and /health to BACKEND_URL in dev (no Caddy locally) - frontend/src/lib/api.ts: empty default = same-origin relative URLs - Makefile: drop uv run from migrate target - Add backend/uv.lock and frontend/package-lock.json for reproducible builds Verified: docker build succeeds for both, backend container starts, /health responds, curl healthcheck works inside image, container runs as non-root. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
45 lines
1,021 B
Caddyfile
45 lines
1,021 B
Caddyfile
# Caddy config.
|
|
#
|
|
# Two site blocks:
|
|
# 1. :80 — handles all HTTP traffic by IP (no domain yet) for development access.
|
|
# Returns plain HTTP, no TLS. Will be removed once a domain is bought.
|
|
# 2. gendesign.example.ru — production block with auto-TLS via Let's Encrypt.
|
|
# Activates only after DNS A-record is set on this domain.
|
|
#
|
|
# Replace gendesign.example.ru with your actual domain when bought.
|
|
#
|
|
# `handle /api/*` (NOT `handle_path`) — we keep the /api prefix because
|
|
# the FastAPI router is mounted at /api/v1/*.
|
|
|
|
:80 {
|
|
encode zstd gzip
|
|
|
|
handle /api/* {
|
|
reverse_proxy backend:8000
|
|
}
|
|
|
|
handle /health {
|
|
reverse_proxy backend:8000
|
|
}
|
|
|
|
# Frontend (Next.js) — catches everything else
|
|
handle {
|
|
reverse_proxy frontend:3000
|
|
}
|
|
}
|
|
|
|
gendesign.example.ru {
|
|
encode zstd gzip
|
|
|
|
handle /api/* {
|
|
reverse_proxy backend:8000
|
|
}
|
|
|
|
handle /health {
|
|
reverse_proxy backend:8000
|
|
}
|
|
|
|
handle {
|
|
reverse_proxy frontend:3000
|
|
}
|
|
}
|