save checkpoint
This commit is contained in:
master
@@ -22,7 +22,9 @@ ARG DIST_DIR=dist
|
||||
ENV APP_PORT=${APP_PORT}
|
||||
USER 101
|
||||
WORKDIR /
|
||||
COPY --from=build /app/${DIST_DIR}/ /usr/share/nginx/html/
|
||||
# Angular 19+ outputs to a browser/ subdirectory inside the dist folder.
|
||||
# Copy only the browser/ contents so that index.html lives at the nginx root.
|
||||
COPY --from=build /app/${DIST_DIR}/browser/ /usr/share/nginx/html/
|
||||
COPY devops/docker/healthcheck-frontend.sh /usr/local/bin/healthcheck-frontend.sh
|
||||
RUN rm -f /etc/nginx/conf.d/default.conf && \
|
||||
cat > /etc/nginx/conf.d/default.conf <<CONF
|
||||
@@ -234,15 +236,77 @@ server {
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
}
|
||||
|
||||
# Environment settings (direct access alias)
|
||||
# sub_filter rewrites absolute Docker-internal URLs to relative paths so the
|
||||
# Environment settings — SPA fetches /platform/envsettings.json at startup.
|
||||
# sub_filter rewrites Docker-internal hostnames to relative paths so the
|
||||
# browser routes all API calls through this nginx reverse proxy (CORS fix).
|
||||
# The authority issuer URL is rewritten to empty so OIDC stays same-origin.
|
||||
location = /platform/envsettings.json {
|
||||
proxy_pass http://platform.stella-ops.local/platform/envsettings.json;
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header Accept-Encoding "";
|
||||
sub_filter_types application/json;
|
||||
sub_filter_once off;
|
||||
sub_filter '"http://stella-ops.local/connect/authorize"' '"/connect/authorize"';
|
||||
sub_filter '"http://stella-ops.local/connect/token"' '"/connect/token"';
|
||||
sub_filter '"http://stella-ops.local/connect/logout"' '"/connect/logout"';
|
||||
sub_filter '"http://stella-ops.local"' '""';
|
||||
sub_filter '"http://gateway.stella-ops.local"' '"/gateway"';
|
||||
sub_filter '"http://platform.stella-ops.local"' '"/platform"';
|
||||
sub_filter '"http://authority.stella-ops.local"' '"/authority"';
|
||||
sub_filter '"http://scanner.stella-ops.local"' '"/scanner"';
|
||||
sub_filter '"http://policy-gateway.stella-ops.local"' '"/policy"';
|
||||
sub_filter '"http://concelier.stella-ops.local"' '"/concelier"';
|
||||
sub_filter '"http://attestor.stella-ops.local"' '"/attestor"';
|
||||
sub_filter '"http://notify.stella-ops.local"' '"/notify"';
|
||||
sub_filter '"http://scheduler.stella-ops.local"' '"/scheduler"';
|
||||
sub_filter '"http://signals.stella-ops.local"' '"/signals"';
|
||||
sub_filter '"http://excititor.stella-ops.local"' '"/excitor"';
|
||||
sub_filter '"http://findings.stella-ops.local"' '"/ledger"';
|
||||
sub_filter '"http://vexhub.stella-ops.local"' '"/vex"';
|
||||
sub_filter '"http://vexlens.stella-ops.local"' '"/vexlens"';
|
||||
sub_filter '"http://registry-token.stella-ops.local"' '"/registry-token"';
|
||||
sub_filter '"http://binaryindex.stella-ops.local"' '"/binaryindex"';
|
||||
sub_filter '"http://symbols.stella-ops.local"' '"/symbols"';
|
||||
sub_filter '"http://unknowns.stella-ops.local"' '"/unknowns"';
|
||||
sub_filter '"http://advisoryai.stella-ops.local"' '"/advisoryai"';
|
||||
sub_filter '"http://airgap-controller.stella-ops.local"' '"/airgap"';
|
||||
sub_filter '"http://integrations.stella-ops.local"' '"/integrations"';
|
||||
sub_filter '"http://smremote.stella-ops.local"' '"/smremote"';
|
||||
sub_filter '"http://taskrunner.stella-ops.local"' '"/taskrunner"';
|
||||
sub_filter '"http://sbomservice.stella-ops.local"' '"/sbomservice"';
|
||||
sub_filter '"http://timelineindexer.stella-ops.local"' '"/timelineindexer"';
|
||||
sub_filter '"http://issuerdirectory.stella-ops.local"' '"/issuerdirectory"';
|
||||
sub_filter '"http://packsregistry.stella-ops.local"' '"/packsregistry"';
|
||||
sub_filter '"http://exportcenter.stella-ops.local"' '"/exportcenter"';
|
||||
sub_filter '"http://graph.stella-ops.local"' '"/graph"';
|
||||
sub_filter '"http://policy-engine.stella-ops.local"' '"/policy-engine"';
|
||||
sub_filter '"http://cartographer.stella-ops.local"' '"/cartographer"';
|
||||
sub_filter '"http://vulnexplorer.stella-ops.local"' '"/vulnexplorer"';
|
||||
sub_filter '"http://doctor.stella-ops.local"' '"/doctor"';
|
||||
sub_filter '"http://orchestrator.stella-ops.local"' '"/orchestrator"';
|
||||
sub_filter '"http://reachgraph.stella-ops.local"' '"/reachgraph"';
|
||||
sub_filter '"http://signer.stella-ops.local"' '"/signer"';
|
||||
sub_filter '"http://router.stella-ops.local"' '"/router"';
|
||||
sub_filter '"http://opsmemory.stella-ops.local"' '"/opsmemory"';
|
||||
sub_filter '"http://timeline.stella-ops.local"' '"/timeline"';
|
||||
sub_filter '"http://riskengine.stella-ops.local"' '"/riskengine"';
|
||||
sub_filter '"http://replay.stella-ops.local"' '"/replay"';
|
||||
sub_filter '"http://evidencelocker.stella-ops.local"' '"/evidencelocker"';
|
||||
sub_filter '"http://notifier.stella-ops.local"' '"/notifier"';
|
||||
sub_filter '"http://airgap-time.stella-ops.local"' '"/airgap-time"';
|
||||
}
|
||||
|
||||
# Legacy /envsettings.json alias (some clients may still use this path)
|
||||
location = /envsettings.json {
|
||||
proxy_pass http://platform.stella-ops.local/envsettings.json;
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header Accept-Encoding "";
|
||||
sub_filter_types application/json;
|
||||
sub_filter_once off;
|
||||
sub_filter '"http://stella-ops.local/connect/authorize"' '"/connect/authorize"';
|
||||
sub_filter '"http://stella-ops.local/connect/token"' '"/connect/token"';
|
||||
sub_filter '"http://stella-ops.local/connect/logout"' '"/connect/logout"';
|
||||
sub_filter '"http://stella-ops.local"' '""';
|
||||
sub_filter '"http://gateway.stella-ops.local"' '"/gateway"';
|
||||
sub_filter '"http://platform.stella-ops.local"' '"/platform"';
|
||||
sub_filter '"http://authority.stella-ops.local"' '"/authority"';
|
||||
|
||||
Reference in New Issue
Block a user