Commit Graph
3 Commits
Author SHA1 Message Date
stroblme 501ff101ce Pin Traefik to 3.6.25 in the dev and production compose files
A floating 3.6 tag left a host on an older cached image that refuses
--accesslog.fields.queryparameters, so the proxy exited on start.
2026-10-15 15:56:14 +02:00
stroblme 9ef7f90dd8 Keep query-string tokens out of the uvicorn, nginx and Traefik access logs 2026-10-06 17:32:51 +02:00
Melvin Strobl e1a783c120 Restructure docker into layered compose files, add a Makefile
Move compose.yml/compose.override.yml/compose.traefik.yml into docker/ and
split into the explicit prod -> dev -> local layering; compose.override.yml
had to be renamed because docker compose auto-loads that filename, which
defeats the layering.

- external network traefik-public -> proxy (shared with the website stack)
- frontend host dashboard.${DOMAIN} -> app.${DOMAIN}
- stable container_names, security_opt no-new-privileges on prod services
- adminer bound to 127.0.0.1 in dev instead of all interfaces
- .env.example replaces the committed .env
- pre-commit biome hook ran npm in a bun repo
2026-08-09 15:21:34 +02:00