Saadi Myftija
1cc62230ab
* Create schema and migration for organization access tokens * Add helpers for creating and authenticating OATs * Adapt the auth service to also accept OATs * Accept OATs in the whoami v2 endpoint * Enable deployments with the CLI using OATs * Avoid reading env variables directly in the token utils * Remove duplicate cli token utils * Validate ENCRYPTION_KEY length when parsing env vars * Make token utils a server-only module * Disallow revoking already revoked OATs * Simplify generics in authenticateRequest * Use 32 bytes mock encryption key in the test setup * Update dummy encryption key values in tests and templates * Add a column in the OATs table to differentiate between user and system generated * Simplify args for v3ProjectPath Co-authored-by: Matt Aitken <matt@mattaitken.com> * Add index on org id and createdAt * Avoid storing the encrypted oat token and its obfuscated version in the DB at all It is a safer approach. Also we do not need to ever read the decrypted token value after creation. * Fix prisma update condition * Add token type to the OAT table index * Accept OATs in the mcp auth flow * Simplify env auth flow around the /projects endpoints --------- Co-authored-by: Matt Aitken <matt@mattaitken.com>
134 lines
2.8 KiB
YAML
134 lines
2.8 KiB
YAML
version: "3"
|
|
|
|
volumes:
|
|
database-data:
|
|
redis-data:
|
|
clickhouse:
|
|
|
|
networks:
|
|
app_network:
|
|
external: false
|
|
|
|
services:
|
|
db:
|
|
container_name: db-dev
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.postgres
|
|
restart: always
|
|
volumes:
|
|
- database-data:/var/lib/postgresql/data/
|
|
environment:
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: postgres
|
|
POSTGRES_DB: postgres
|
|
networks:
|
|
- app_network
|
|
ports:
|
|
- 5432:5432
|
|
command:
|
|
- -c
|
|
- listen_addresses=*
|
|
- -c
|
|
- wal_level=logical
|
|
- -c
|
|
- shared_preload_libraries=pg_partman_bgw
|
|
|
|
electric:
|
|
container_name: electric-dev
|
|
image: electricsql/electric:1.0.0-beta.15@sha256:4ae0f895753b82684aa31ea1c708e9e86d0a9bca355acb7270dcb24062520810
|
|
restart: always
|
|
environment:
|
|
DATABASE_URL: postgresql://postgres:postgres@db:5432/postgres?sslmode=disable
|
|
networks:
|
|
- app_network
|
|
ports:
|
|
- "3060:3000"
|
|
depends_on:
|
|
- db
|
|
|
|
clickhouse:
|
|
image: bitnami/clickhouse:latest
|
|
container_name: clickhouse-dev
|
|
environment:
|
|
CLICKHOUSE_ADMIN_USER: default
|
|
CLICKHOUSE_ADMIN_PASSWORD: password
|
|
ports:
|
|
- "8123:8123"
|
|
- "9000:9000"
|
|
volumes:
|
|
- clickhouse:/bitnami/clickhouse
|
|
networks:
|
|
- app_network
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD",
|
|
"clickhouse-client",
|
|
"--host",
|
|
"localhost",
|
|
"--port",
|
|
"9000",
|
|
"--user",
|
|
"default",
|
|
"--password",
|
|
"password",
|
|
"--query",
|
|
"SELECT 1",
|
|
]
|
|
interval: 3s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
|
|
redis:
|
|
container_name: redis-dev
|
|
image: redis:7
|
|
restart: always
|
|
volumes:
|
|
- redis-data:/data
|
|
networks:
|
|
- app_network
|
|
ports:
|
|
- 6379:6379
|
|
|
|
app:
|
|
build:
|
|
context: ../
|
|
dockerfile: ./docker/Dockerfile
|
|
ports:
|
|
- 3030:3030
|
|
depends_on:
|
|
- db
|
|
- electric
|
|
- clickhouse
|
|
- redis
|
|
env_file:
|
|
- ../.env
|
|
environment:
|
|
DATABASE_URL: postgres://postgres:postgres@db:5432/postgres?schema=public
|
|
DIRECT_URL: postgres://postgres:postgres@db:5432/postgres?schema=public
|
|
CLICKHOUSE_URL: http://default:password@clickhouse:8123
|
|
SESSION_SECRET: secret123
|
|
MAGIC_LINK_SECRET: secret123
|
|
ENCRYPTION_KEY: dummy-encryption-keeeey-32-bytes
|
|
REMIX_APP_PORT: 3030
|
|
PORT: 3030
|
|
networks:
|
|
- app_network
|
|
|
|
ch-ui:
|
|
image: ghcr.io/caioricciuti/ch-ui:latest
|
|
container_name: ch-ui-dev
|
|
restart: always
|
|
ports:
|
|
- "5521:5521"
|
|
environment:
|
|
VITE_CLICKHOUSE_URL: "http://clickhouse:8123"
|
|
VITE_CLICKHOUSE_USER: "default"
|
|
VITE_CLICKHOUSE_PASS: "password"
|
|
depends_on:
|
|
- clickhouse
|
|
networks:
|
|
- app_network
|