6fada694bb
- Replace docker-compose.yml → compose.yaml (modern Compose Spec, no version header) - Replace docker-compose.monitoring.yml → compose.monitoring.yaml - Remove deprecated version: '3.x' headers from both compose files - Add dedicated app-tier bridge network (no default bridge) - Add restart: unless-stopped to all services - Add deploy.resources.limits (memory + cpu) to all services - Add healthcheck to app service (curl /health) - Add healthchecks to prometheus and grafana in monitoring overlay - Externalize postgres credentials to env vars (POSTGRES_USER/PASSWORD/DB) - Externalize grafana admin password to GF_ADMIN_PASSWORD env var - Make env_file optional (required: false) for CI/field-trial environments - Update Dockerfile: node:18-alpine → node:20.11-bookworm-slim (pinned version) - Add explicit non-root system user/group (nodejs:1001/nodeapp:1001) - Add curl install to final stage for healthcheck probe - Copy src/db/migrations from build stage (not host bind) - Expand .dockerignore: tmp/, temp/, *.env.*, compose files, Dockerfiles - Add .env.example to git (was ignored by .env.* rule — add !.env.example exception) - Add POSTGRES_USER/PASSWORD/DB and GF_ADMIN_PASSWORD to .env.example All compose files pass: docker compose config --quiet ✅ Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
23 lines
297 B
Plaintext
23 lines
297 B
Plaintext
node_modules/
|
|
dist/
|
|
coverage/
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
*.log
|
|
.DS_Store
|
|
|
|
# Next.js build output
|
|
portal/.next/
|
|
portal/node_modules/
|
|
portal/tsconfig.tsbuildinfo
|
|
|
|
# Agent workspace directories
|
|
.cto-workspace/
|
|
.validator-workspace/
|
|
|
|
# Session artifacts
|
|
conversation_backup.txt
|
|
next_steps.md
|
|
vj_notes/
|