ehoandClaude Sonnet 5
3588057a75
CI / changes (push) Successful in 8s
CI / lint (push) Successful in 12s
CI / frontend (push) Successful in 14s
CI / storybook-a11y (push) Successful in 17s
CI / backend (push) Successful in 1m51s
CI / semgrep (push) Successful in 1m13s
CI / e2e (push) Successful in 2m56s
CI / api-client-drift (push) Successful in 1m41s
docker-compose.openzaak.prod.yml layers real SECRET_KEY/DB password/site
domain/allowed-hosts (all required, fail-fast via ${VAR:?...}) on top of the
WP-54 dev harness, switches Postgres off trust auth, and sets IS_HTTPS for a
front-facing reverse-proxy TLS setup. The ZGW client secret lives inside a
file setup_configuration reads rather than a compose env var, so it's
templated (data.prod.yaml.template, no secret) and rendered host-side via
render-prod-secrets.sh into a gitignored data.prod.yaml, mounted over the
container's dev data.yaml. ZgwOptions.cs already binds from IConfiguration,
so the BFF side needed no code change.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
60 lines
994 B
Plaintext
60 lines
994 B
Plaintext
# See https://docs.github.com/get-started/getting-started-with-git/ignoring-files for more about ignoring files.
|
|
|
|
# Compiled output
|
|
/dist
|
|
/tmp
|
|
/out-tsc
|
|
/bazel-out
|
|
|
|
# Node
|
|
/node_modules
|
|
npm-debug.log
|
|
yarn-error.log
|
|
|
|
# IDEs and editors
|
|
.idea/
|
|
.project
|
|
.classpath
|
|
.c9/
|
|
*.launch
|
|
.settings/
|
|
*.sublime-workspace
|
|
|
|
# Visual Studio Code
|
|
.vscode/*
|
|
!.vscode/settings.json
|
|
!.vscode/tasks.json
|
|
!.vscode/launch.json
|
|
!.vscode/extensions.json
|
|
!.vscode/mcp.json
|
|
.history/*
|
|
|
|
# Miscellaneous
|
|
/.angular/cache
|
|
.sass-cache/
|
|
/connect.lock
|
|
/coverage
|
|
/libpeerconnection.log
|
|
testem.log
|
|
/typings
|
|
__screenshots__/
|
|
|
|
# System files
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
*storybook.log
|
|
storybook-static
|
|
|
|
# Playwright e2e
|
|
/test-results
|
|
/playwright-report
|
|
/blob-report
|
|
/playwright/.cache
|
|
|
|
# WP-54: bootstrap-catalogus.sh's own record of what it seeded into a local OpenZaak run
|
|
backend/openzaak/seeded.env
|
|
|
|
# WP-55: render-prod-secrets.sh's output — the real client secret, never committed
|
|
backend/openzaak/setup_configuration/data.prod.yaml
|