CaIon
56dbaab1d4
- add SESSION_COOKIE_SECURE / SESSION_COOKIE_TRUSTED_URL env vars with startup validation: enabling Secure requires at least one trusted HTTPS entry URL - wire common.SessionCookieSecure into the session cookie store instead of a hardcoded Secure=false - print a startup warning when Secure session cookies are disabled - document the new settings in .env.example and docker-compose files Secure stays off by default because many deployments front new-api with plain-HTTP reverse proxies, where a hardcoded Secure default would break logins entirely; enabling it safely depends on the deployment's TLS setup, so it ships as an opt-in deployment-hardening flag.
77 lines
1.9 KiB
YAML
77 lines
1.9 KiB
YAML
# Frontend Development - Backend built from local source
|
|
#
|
|
# Usage:
|
|
# 1. docker compose -f docker-compose.dev.yml up -d
|
|
# 2. cd web && bun install && bun run dev
|
|
# 3. Open http://localhost:3001 (Rsbuild dev server, API auto-proxied to :3000)
|
|
#
|
|
# Rebuild backend after Go code changes:
|
|
# docker compose -f docker-compose.dev.yml up -d --build new-api
|
|
#
|
|
# Stop:
|
|
# docker compose -f docker-compose.dev.yml down
|
|
#
|
|
# Reset data:
|
|
# docker compose -f docker-compose.dev.yml down -v
|
|
|
|
services:
|
|
new-api:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.dev
|
|
image: new-api-dev:local
|
|
container_name: new-api-dev
|
|
restart: unless-stopped
|
|
ports:
|
|
- "3000:3000"
|
|
volumes:
|
|
- dev_data:/data
|
|
environment:
|
|
- SQL_DSN=postgresql://root:123456@postgres:5432/new-api
|
|
- REDIS_CONN_STRING=redis://redis
|
|
- TZ=Asia/Shanghai
|
|
- BATCH_UPDATE_ENABLED=true
|
|
# Enable only when accessing the dev backend through HTTPS. SESSION_COOKIE_TRUSTED_URL is required when true.
|
|
# - SESSION_COOKIE_SECURE=true
|
|
# - SESSION_COOKIE_TRUSTED_URL=https://example.com,https://admin.example.com
|
|
depends_on:
|
|
redis:
|
|
condition: service_started
|
|
postgres:
|
|
condition: service_healthy
|
|
networks:
|
|
- dev-network
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: new-api-dev-redis
|
|
restart: unless-stopped
|
|
networks:
|
|
- dev-network
|
|
|
|
postgres:
|
|
image: postgres:15-alpine
|
|
container_name: new-api-dev-pg
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: root
|
|
POSTGRES_PASSWORD: 123456
|
|
POSTGRES_DB: new-api
|
|
volumes:
|
|
- dev_pg_data:/var/lib/postgresql/data
|
|
networks:
|
|
- dev-network
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U root -d new-api"]
|
|
interval: 5s
|
|
timeout: 3s
|
|
retries: 5
|
|
|
|
volumes:
|
|
dev_data:
|
|
dev_pg_data:
|
|
|
|
networks:
|
|
dev-network:
|
|
driver: bridge
|