S. EsmaeiliandClaude Haiku 5.5
10e453e4be
- API: `pnpm build` bundles dist/ into apps/api/.output (esbuild), with Linux musl native packages for sharp and argon2 kept alongside - docker/api.Dockerfile copies that output; no pnpm install on the server - add dist/migrate.js (prisma migrate deploy equivalent, same _prisma_migrations table and lock) so the Prisma CLI is not needed at runtime - pnpm-workspace: supportedArchitectures for linux/x64/musl - admin: apps/admin/.env.production sets VITE_SITE_URL for the production build - drop NPM_REGISTRY / SITE_URL build args from compose and .env.example - gitignore: anchor node_modules rules so pre-built node_modules are committed - README: describe the pre-built deploy flow Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
32 lines
1.0 KiB
Bash
32 lines
1.0 KiB
Bash
# Production settings for docker-compose.yml — copy to .env and change every secret.
|
|
# Generate secrets with: node -e "console.log(require('crypto').randomBytes(48).toString('base64url'))"
|
|
|
|
# domains (TLS is terminated in front of the gateway: host nginx, Traefik or the CDN)
|
|
SITE_DOMAIN=imenpishgaman.ir
|
|
ADMIN_DOMAIN=admin.imenpishgaman.ir
|
|
# host port of the gateway container
|
|
HTTP_PORT=8080
|
|
# reverse proxies in front of the API: gateway (1) + host TLS proxy (1)
|
|
TRUST_PROXY=2
|
|
# set to false only if the admin is served over plain http
|
|
COOKIE_SECURE=true
|
|
|
|
# database
|
|
POSTGRES_USER=imen
|
|
POSTGRES_PASSWORD=change-me
|
|
POSTGRES_DB=imen
|
|
|
|
# object storage (MinIO container); bucket is created automatically
|
|
S3_BUCKET=imen-media
|
|
S3_ACCESS_KEY=imen
|
|
S3_SECRET_KEY=change-me-at-least-8-chars
|
|
|
|
# auth + cache purge secrets
|
|
JWT_SECRET=change-me-48-random-bytes
|
|
REVALIDATE_SECRET=change-me-too
|
|
|
|
# first admin user (created by: docker compose exec api node dist/seed/seed.js)
|
|
ADMIN_PHONE=09120000000
|
|
ADMIN_PASSWORD=change-me
|
|
ADMIN_NAME=مدیر سایت
|