Move compose.yml/compose.override.yml/compose.traefik.yml into docker/ and
split into the explicit prod -> dev -> local layering; compose.override.yml
had to be renamed because docker compose auto-loads that filename, which
defeats the layering.
- external network traefik-public -> proxy (shared with the website stack)
- frontend host dashboard.${DOMAIN} -> app.${DOMAIN}
- stable container_names, security_opt no-new-privileges on prod services
- adminer bound to 127.0.0.1 in dev instead of all interfaces
- .env.example replaces the committed .env
- pre-commit biome hook ran npm in a bun repo
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
49 lines
1.4 KiB
YAML
49 lines
1.4 KiB
YAML
# See https://pre-commit.com for more information
|
|
# See https://pre-commit.com/hooks.html for more hooks
|
|
repos:
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.4.0
|
|
hooks:
|
|
- id: check-added-large-files
|
|
- id: check-toml
|
|
- id: check-yaml
|
|
args:
|
|
- --unsafe
|
|
- id: end-of-file-fixer
|
|
exclude: |
|
|
(?x)^(
|
|
frontend/src/client/.*|
|
|
backend/app/email-templates/build/.*
|
|
)$
|
|
- id: trailing-whitespace
|
|
exclude: ^frontend/src/client/.*
|
|
- repo: local
|
|
hooks:
|
|
- id: local-biome-check
|
|
name: biome check
|
|
entry: bun run lint
|
|
language: system
|
|
types: [text]
|
|
files: ^frontend/
|
|
|
|
- id: local-ruff-check
|
|
name: ruff check
|
|
entry: uv run ruff check --force-exclude --fix --exit-non-zero-on-fix
|
|
require_serial: true
|
|
language: unsupported
|
|
types: [python]
|
|
|
|
- id: local-ruff-format
|
|
name: ruff format
|
|
entry: uv run ruff format --force-exclude --exit-non-zero-on-format
|
|
require_serial: true
|
|
language: unsupported
|
|
types: [python]
|
|
|
|
- id: generate-frontend-sdk
|
|
name: Generate Frontend SDK
|
|
entry: bash ./scripts/generate-client.sh
|
|
pass_filenames: false
|
|
language: unsupported
|
|
files: ^backend/.*$|^scripts/generate-client\.sh$
|