mirror of
https://github.com/reconurge/flowsint.git
synced 2026-07-11 05:13:04 -05:00
82925bec38
Frontend baked VITE_API_URL into the bundle at build time, so published images pointed at whatever URL CI had — "fail to fetch" for every other deployment. Bundle now defaults to same-origin relative URLs and the frontend nginx proxies /api/ to the api service over the Docker network; CORS becomes irrelevant. - docker-compose.prod.yml: use ghcr images (FLOWSINT_VERSION, default latest), drop build sections; bind postgres/redis/neo4j/ api ports to 127.0.0.1 — only 5173 faces the network - nginx: /api/ reverse proxy, request-time DNS resolution, SSE support (proxy_buffering off) - Makefile: prod pulls instead of building; remove dead deploy targets referencing nonexistent docker-compose.deploy.yml - README: network/server deployment section (secrets checklist, version pinning, TLS via reverse proxy)
15 lines
791 B
Plaintext
15 lines
791 B
Plaintext
NODE_ENV=production
|
|
AUTH_SECRET=superscretchangeitplz
|
|
# Generate your own master key by running: python3 -c "import os, base64; key = os.urandom(32); print('base64:' + base64.b64encode(key).decode('utf-8'))"
|
|
MASTER_VAULT_KEY_V1=base64:qnHTmwYb+uoygIw9MsRMY22vS5YPchY+QOi/E79GAvM=
|
|
NEO4J_URI_BOLT=bolt://neo4j:7687
|
|
NEO4J_USERNAME=neo4j
|
|
NEO4J_PASSWORD=password
|
|
# Dev only (vite dev server / docker-compose.yml). Production images use
|
|
# same-origin relative URLs proxied by nginx — leave unset for docker-compose.prod.yml.
|
|
VITE_API_URL=http://localhost:5001
|
|
# Comma-separated CORS allowed origins. Defaults to http://localhost:5173 (Vite dev) when unset.
|
|
ALLOWED_ORIGINS=http://localhost:5173
|
|
DATABASE_URL=postgresql://flowsint:flowsint@localhost:5433/flowsint
|
|
REDIS_URL=redis://redis:6379/0
|