b6fe588a7c
apps/web was never deployed, so /billing on the public domain returned the landing page and d3ro.dev (desktop "upgrade") did not resolve. - apps/web runs with basePath /app and output standalone; /download and /releases redirect to the site's #download. A Dockerfile and a d3ro-web compose service (port 3002) deploy it to the NAS with the other images. - The site bridge worker forwards /app/* to WEB_APP_ORIGIN (the tunnel host) and rewrites upstream redirects; everything else still goes to Pages. With no origin configured /app answers 503 instead of the landing page. - Desktop upgrade, desktop Stripe return, mobile subscription management, the web checkout/portal returns and the site all use billingUrl(); the return query is success=1 / canceled=1, which the billing page reads. The billing page highlights ?tier=pro|pro_plus, and signing in from a billing link returns to the same plan. - auth/callback pins the redirect origin in production and rejects protocol-relative next= values (open redirect). - Mobile legal links use SITE_URLS (fixes the missing slash on /terms). - Compose drops the unused NEXT_PUBLIC_API_URL and the dead wwwroot legal mounts; deploy scripts add the web image and the SUPABASE_* values the NAS compose already required; .dockerignore keeps app .env files out of images. - Supabase auth redirects allow /app/** (remote dashboard must match). Policy: docs/REFACTOR_POLICY.md Wave 3, W3-3 and W3-4.
75 lines
2.9 KiB
YAML
75 lines
2.9 KiB
YAML
# ============================================================================
|
|
# D3RO Voice — Standalone NAS Docker Compose Specification
|
|
# Includes: Core API + Next.js Admin CRM + Web App (/app)
|
|
# 랜딩·법률 문서는 site/(Cloudflare Pages)가 정본이다. 여기서 서빙하지 않는다.
|
|
# ============================================================================
|
|
services:
|
|
d3ro-api-server:
|
|
image: d3ro-voice-api:latest
|
|
container_name: d3ro_voice_api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${PORT:-5050}:5000"
|
|
environment:
|
|
- ASPNETCORE_ENVIRONMENT=Production
|
|
- ASPNETCORE_URLS=http://+:5000
|
|
- DATA_DIR=/app/data
|
|
- JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
|
|
- JWT_ISSUER=${JWT_ISSUER:?JWT_ISSUER is required}
|
|
- JWT_AUDIENCE=${JWT_AUDIENCE:?JWT_AUDIENCE is required}
|
|
- ADMIN_BOOTSTRAP_TOKEN=${ADMIN_BOOTSTRAP_TOKEN:?ADMIN_BOOTSTRAP_TOKEN is required}
|
|
- D3RO_API_TOKEN=${D3RO_API_TOKEN:?D3RO_API_TOKEN is required}
|
|
- CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS:?CORS_ALLOWED_ORIGINS is required}
|
|
- ALLOWED_HOSTS=${ALLOWED_HOSTS:?ALLOWED_HOSTS is required}
|
|
- TZ=${TZ:-Asia/Seoul}
|
|
volumes:
|
|
- ${DATA_PATH:-./data}:/app/data
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
d3ro-admin:
|
|
image: d3ro-voice-admin:latest
|
|
container_name: d3ro_voice_admin
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${ADMIN_PORT:-3001}:3001"
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=3001
|
|
- API_SERVER_URL=${API_SERVER_URL:?API_SERVER_URL is required}
|
|
- ADMIN_SESSION_SECRET=${ADMIN_SESSION_SECRET:?ADMIN_SESSION_SECRET is required}
|
|
- ADMIN_COOKIE_SECURE=${ADMIN_COOKIE_SECURE:-true}
|
|
- SUPABASE_URL=${SUPABASE_URL:?SUPABASE_URL is required}
|
|
- SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY:?SUPABASE_SERVICE_ROLE_KEY is required}
|
|
depends_on:
|
|
- d3ro-api-server
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
# ============================================================================
|
|
# D3RO Voice — Web App (@d3ro/web), 공개 경로 https://d3ro.chanpaca.net/app
|
|
# 사이트 브리지 워커가 /app/* 를 Cloudflare Tunnel 을 거쳐 이 컨테이너로 보낸다.
|
|
# ============================================================================
|
|
d3ro-web:
|
|
image: d3ro-voice-web:latest
|
|
container_name: d3ro_voice_web
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${WEB_PORT:-3002}:3002"
|
|
# NEXT_PUBLIC_SUPABASE_URL / NEXT_PUBLIC_SUPABASE_ANON_KEY / NEXT_PUBLIC_PAYPLE_CLIENT_KEY 는
|
|
# 이미지 빌드 때 번들에 들어간다(build args). 런타임에 넣어도 바뀌지 않으므로 여기 두지 않는다.
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=3002
|
|
- TZ=${TZ:-Asia/Seoul}
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|