fix(infra): point PROCUREMENT_CASDOOR_ISSUER at the public auth host
The base file bakes http://localhost:8080 as the JWT issuer; casdoor's production origin is https://${AUTH_HOST}, so token iss checks would reject every login. The merged Coolify file now derives the issuer from ${AUTH_HOST} like the casdoor origin.
This commit is contained in:
@@ -20,7 +20,7 @@ services:
|
|||||||
PROCUREMENT_CASDOOR_CLIENT_ID: inventory-app-client
|
PROCUREMENT_CASDOOR_CLIENT_ID: inventory-app-client
|
||||||
PROCUREMENT_CASDOOR_CLIENT_SECRET: inventory-app-secret-2026
|
PROCUREMENT_CASDOOR_CLIENT_SECRET: inventory-app-secret-2026
|
||||||
PROCUREMENT_CASDOOR_ENDPOINT: http://casdoor:8000
|
PROCUREMENT_CASDOOR_ENDPOINT: http://casdoor:8000
|
||||||
PROCUREMENT_CASDOOR_ISSUER: http://localhost:8080
|
PROCUREMENT_CASDOOR_ISSUER: https://${AUTH_HOST}
|
||||||
PROCUREMENT_CASDOOR_ORGANIZATION: inventory
|
PROCUREMENT_CASDOOR_ORGANIZATION: inventory
|
||||||
PROCUREMENT_DATABASE_URL: postgresql+asyncpg://postgres:postgres@postgres:5432/procurement
|
PROCUREMENT_DATABASE_URL: postgresql+asyncpg://postgres:postgres@postgres:5432/procurement
|
||||||
PROCUREMENT_MINIO_ACCESS_KEY: minioadmin
|
PROCUREMENT_MINIO_ACCESS_KEY: minioadmin
|
||||||
|
|||||||
Reference in New Issue
Block a user