valknar
0eb0fb5ee4
Drizzle ORM mutates client.options (parsers/serializers) after the postgres client is created, which causes the separately-passed password option to be lost on the actual connection attempt. Root cause confirmed on VPS: raw postgres.js query succeeded while drizzle.execute() failed with auth error. Fix: encode the password directly in DATABASE_URL (%23 = #, %5D = ], %3D = =). postgres.js decodes percent-encoding correctly. No separate DB_PASSWORD env var needed in the app container anymore. DB_PASSWORD is still used by the Postgres container (POSTGRES_PASSWORD). Coolify env var to set: DATABASE_URL=postgres://wc:<encoded-pass>@db:5432/worldcup Also adds resolver-level isMissingTable() guards so the app returns empty results instead of GraphQL errors on a fresh deploy before sync runs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
50 lines
1.5 KiB
YAML
50 lines
1.5 KiB
YAML
services:
|
|
app:
|
|
build: .
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: ${DATABASE_URL}
|
|
NODE_ENV: production
|
|
labels:
|
|
- "traefik.enable=${TRAEFIK_ENABLED:-false}"
|
|
- "traefik.http.middlewares.worldcup-redirect-web-secure.redirectscheme.scheme=https"
|
|
- "traefik.http.routers.worldcup-web.middlewares=worldcup-redirect-web-secure"
|
|
- "traefik.http.routers.worldcup-web.rule=Host(`${TRAEFIK_HOST}`)"
|
|
- "traefik.http.routers.worldcup-web.entrypoints=web"
|
|
- "traefik.http.routers.worldcup-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
|
|
- "traefik.http.routers.worldcup-web-secure.tls.certresolver=resolver"
|
|
- "traefik.http.routers.worldcup-web-secure.entrypoints=web-secure"
|
|
- "traefik.http.routers.worldcup-web-secure.middlewares=security-headers@file"
|
|
- "traefik.http.services.worldcup-web-secure.loadbalancer.server.port=3000"
|
|
- "traefik.docker.network=${NETWORK_NAME}"
|
|
networks:
|
|
- compose_network
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: worldcup
|
|
POSTGRES_USER: wc
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U wc -d worldcup"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
networks:
|
|
- compose_network
|
|
|
|
networks:
|
|
compose_network:
|
|
name: ${NETWORK_NAME}
|
|
external: true
|
|
|
|
volumes:
|
|
pgdata:
|