Merge branch 'mike/deployment'
This commit is contained in:
@@ -354,7 +354,8 @@ func (h *AccountHandler) SyncFromCRS(c *gin.Context) {
|
|||||||
SyncProxies: syncProxies,
|
SyncProxies: syncProxies,
|
||||||
})
|
})
|
||||||
if err != nil {
|
if err != nil {
|
||||||
response.ErrorFrom(c, err)
|
// Provide detailed error message for CRS sync failures
|
||||||
|
response.InternalError(c, "CRS sync failed: "+err.Error())
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -32,6 +32,8 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
# Data persistence (config.yaml will be auto-generated here)
|
# Data persistence (config.yaml will be auto-generated here)
|
||||||
- sub2api_data:/app/data
|
- sub2api_data:/app/data
|
||||||
|
# Mount custom config.yaml (optional, overrides auto-generated config)
|
||||||
|
- ./config.yaml:/app/data/config.yaml:ro
|
||||||
environment:
|
environment:
|
||||||
# =======================================================================
|
# =======================================================================
|
||||||
# Auto Setup (REQUIRED for Docker deployment)
|
# Auto Setup (REQUIRED for Docker deployment)
|
||||||
@@ -95,6 +97,12 @@ services:
|
|||||||
- GEMINI_OAUTH_CLIENT_SECRET=${GEMINI_OAUTH_CLIENT_SECRET:-}
|
- GEMINI_OAUTH_CLIENT_SECRET=${GEMINI_OAUTH_CLIENT_SECRET:-}
|
||||||
- GEMINI_OAUTH_SCOPES=${GEMINI_OAUTH_SCOPES:-}
|
- GEMINI_OAUTH_SCOPES=${GEMINI_OAUTH_SCOPES:-}
|
||||||
- GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
|
- GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
|
||||||
|
|
||||||
|
# =======================================================================
|
||||||
|
# Security Configuration (URL Allowlist)
|
||||||
|
# =======================================================================
|
||||||
|
# Allow private IP addresses for CRS sync (for internal deployments)
|
||||||
|
- SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS=${SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS:-true}
|
||||||
depends_on:
|
depends_on:
|
||||||
postgres:
|
postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
|||||||
@@ -28,6 +28,8 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
# Data persistence (config.yaml will be auto-generated here)
|
# Data persistence (config.yaml will be auto-generated here)
|
||||||
- sub2api_data:/app/data
|
- sub2api_data:/app/data
|
||||||
|
# Mount custom config.yaml (optional, overrides auto-generated config)
|
||||||
|
- ./config.yaml:/app/data/config.yaml:ro
|
||||||
environment:
|
environment:
|
||||||
# =======================================================================
|
# =======================================================================
|
||||||
# Auto Setup (REQUIRED for Docker deployment)
|
# Auto Setup (REQUIRED for Docker deployment)
|
||||||
@@ -93,9 +95,11 @@ services:
|
|||||||
- GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
|
- GEMINI_QUOTA_POLICY=${GEMINI_QUOTA_POLICY:-}
|
||||||
|
|
||||||
# =======================================================================
|
# =======================================================================
|
||||||
# Security Configuration
|
# Security Configuration (URL Allowlist)
|
||||||
# =======================================================================
|
# =======================================================================
|
||||||
- SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS=${SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS:-}
|
- SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS=${SECURITY_URL_ALLOWLIST_UPSTREAM_HOSTS:-}
|
||||||
|
# Allow private IP addresses for CRS sync (for internal deployments)
|
||||||
|
- SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS=${SECURITY_URL_ALLOWLIST_ALLOW_PRIVATE_HOSTS:-false}
|
||||||
depends_on:
|
depends_on:
|
||||||
postgres:
|
postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
|||||||
Reference in New Issue
Block a user