From 3c3880aec9d6f209f83cac413ecfa85a08fd75f8 Mon Sep 17 00:00:00 2001 From: "reza.g" Date: Tue, 8 Sep 2026 18:10:37 +0330 Subject: [PATCH] fix(infra): point PROCUREMENT_CASDOOR_ISSUER at the public auth host The base file bakes http://localhost:8080 as the JWT issuer; casdoor's production origin is https://${AUTH_HOST}, so token iss checks would reject every login. The merged Coolify file now derives the issuer from ${AUTH_HOST} like the casdoor origin. --- docker-compose.coolify.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.coolify.yml b/docker-compose.coolify.yml index 9a51e1e..bdc8e3d 100644 --- a/docker-compose.coolify.yml +++ b/docker-compose.coolify.yml @@ -20,7 +20,7 @@ services: PROCUREMENT_CASDOOR_CLIENT_ID: inventory-app-client PROCUREMENT_CASDOOR_CLIENT_SECRET: inventory-app-secret-2026 PROCUREMENT_CASDOOR_ENDPOINT: http://casdoor:8000 - PROCUREMENT_CASDOOR_ISSUER: http://localhost:8080 + PROCUREMENT_CASDOOR_ISSUER: https://${AUTH_HOST} PROCUREMENT_CASDOOR_ORGANIZATION: inventory PROCUREMENT_DATABASE_URL: postgresql+asyncpg://postgres:postgres@postgres:5432/procurement PROCUREMENT_MINIO_ACCESS_KEY: minioadmin