merged main

docker-compose.yml

@@ -1,5 +1,4 @@
 services:
-  # --- Backend Service ---
   backend:
     build:
       context: ./backend
@@ -18,26 +17,23 @@ services:
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=narl"
-      # Route /api, /admin, /static and /media traffic to the backend
       - "traefik.http.routers.holy-backend.priority=20"
       - "traefik.http.routers.holy-backend.rule=Host(`holy.narl.io`) && (PathPrefix(`/api`) || PathPrefix(`/admin`) || PathPrefix(`/static`) || PathPrefix(`/media`))"
       - "traefik.http.routers.holy-backend.entrypoints=websecure"
       - "traefik.http.routers.holy-backend.tls.certresolver=https_resolver"
       - "traefik.http.services.holy-backend.loadbalancer.server.port=8000"
 
-  # --- Frontend Service ---
   frontend:
     build:
       context: ./frontend
+      args:
+        # Bake the API URL into the production build
+        - VITE_API_URL=https://holy.narl.io/api/
     container_name: holy-frontend
     restart: unless-stopped
     networks:
       - narl
-    env_file:
-      - ./.env
-    volumes:
-      - ./frontend:/app
-      - /app/node_modules
+    # In production, we don't mount volumes for code to ensure container integrity
     depends_on:
       - backend
     labels:
@@ -47,7 +43,7 @@ services:
       - "traefik.http.routers.holy-frontend.rule=Host(`holy.narl.io`)"
       - "traefik.http.routers.holy-frontend.entrypoints=websecure"
       - "traefik.http.routers.holy-frontend.tls.certresolver=https_resolver"
-      - "traefik.http.services.holy-frontend.loadbalancer.server.port=5173"
+      - "traefik.http.services.holy-frontend.loadbalancer.server.port=80"
 
 networks:
   narl: