save checkpoint

devops/compose/docker-compose.stella-ops.yml

@@ -77,6 +77,7 @@ volumes:
   registry-data:
   concelier-jobs:
   scanner-surface-cache:
+  console-dist:
   advisory-ai-queue:
   advisory-ai-plans:
   advisory-ai-outputs:
@@ -207,28 +208,47 @@ services:
   # APPLICATION SERVICES (ordered by port-registry slot)
   # ===========================================================================
 
-  # --- Slot 0: Router Gateway ------------------------------------------------
+  # --- Console builder (init container) ---------------------------------------
+  console-builder:
+    image: stellaops/console:dev
+    container_name: stellaops-console-builder
+    user: "0:0"
+    entrypoint: ["sh", "-c"]
+    command: ["cp -r /usr/share/nginx/html/browser/* /output/ 2>/dev/null || cp -r /usr/share/nginx/html/* /output/"]
+    volumes:
+      - console-dist:/output
+    restart: "no"
+    networks:
+      - stellaops
+
+  # --- Slot 0: Router Gateway (Front Door) -----------------------------------
   router-gateway:
     image: stellaops/router-gateway:dev
     container_name: stellaops-router-gateway
     restart: unless-stopped
-    depends_on: *depends-infra
+    depends_on:
+      <<: *depends-infra
+      console-builder:
+        condition: service_completed_successfully
     environment:
-      ASPNETCORE_URLS: "http://+:8080"
+      ASPNETCORE_URLS: "http://0.0.0.0:8080"
       <<: *kestrel-cert
       ConnectionStrings__Default: *postgres-connection
       ConnectionStrings__Redis: "cache.stella-ops.local:6379"
     volumes:
       - *cert-volume
+      - console-dist:/app/wwwroot:ro
     ports:
-      - "127.1.0.2:80:80"
+      - "127.1.0.1:80:8080"
+      - "127.1.0.1:443:443"
     networks:
       stellaops:
         aliases:
           - router.stella-ops.local
+          - stella-ops.local
       frontdoor: {}
     healthcheck:
-      test: ["CMD-SHELL", "bash -c 'echo > /dev/tcp/$(hostname)/80'"]
+      test: ["CMD-SHELL", "bash -c 'echo > /dev/tcp/localhost/8080'"]
       <<: *healthcheck-tcp
     labels: *release-labels
 
@@ -243,6 +263,8 @@ services:
       <<: *kestrel-cert
       ConnectionStrings__Default: *postgres-connection
       ConnectionStrings__Redis: "cache.stella-ops.local:6379"
+      Platform__Authority__Issuer: "http://stella-ops.local"
+      Platform__Authority__RequireHttpsMetadata: "false"
       STELLAOPS_ROUTER_URL: "http://router.stella-ops.local"
       STELLAOPS_PLATFORM_URL: "http://platform.stella-ops.local"
       STELLAOPS_AUTHORITY_URL: "http://authority.stella-ops.local"
@@ -1889,22 +1911,5 @@ services:
     labels: *release-labels
 
   # --- Console (Angular frontend) -------------------------------------------
-  web-ui:
-    image: stellaops/console:dev
-    container_name: stellaops-web-ui
-    restart: unless-stopped
-    depends_on:
-      - platform
-    environment:
-      STELLAOPS_UI__BACKEND__BASEURL: "http://platform.stella-ops.local"
-    ports:
-      - "127.1.0.1:80:8080"
-    networks:
-      stellaops:
-        aliases:
-          - stella-ops.local
-      frontdoor: {}
-    healthcheck:
-      test: ["CMD", "wget", "-qO-", "http://localhost:8080/"]
-      <<: *healthcheck-tcp
-    labels: *release-labels
+  # web-ui is replaced by router-gateway serving static files from console-dist volume.
+  # The console-builder init container copies Angular dist to the shared volume.