From 2de226f1fd2c851fc8519a7c7f3cb998d31f686c Mon Sep 17 00:00:00 2001 From: AdrianoDev Date: Mon, 21 Sep 2026 23:22:39 +0200 Subject: [PATCH] fix(deploy): APP_ENV esplicito nei compose (#33) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit docker-compose.yml (produzione) non impostava APP_ENV: la guardia _refuse_default_secrets_outside_dev in src/backend/config.py non scattava mai perché il default è "dev". Aggiunto APP_ENV: production al servizio server; docker-compose.dev.yml imposta APP_ENV: dev in modo esplicito. Tabella env in docs/DEPLOYMENT.md aggiornata. Co-Authored-By: Claude Sonnet 5 --- docker-compose.dev.yml | 1 + docker-compose.yml | 1 + docs/DEPLOYMENT.md | 1 + 3 files changed, 3 insertions(+) diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml index ec964a1..9951adf 100644 --- a/docker-compose.dev.yml +++ b/docker-compose.dev.yml @@ -31,6 +31,7 @@ services: env_file: - .env environment: + APP_ENV: dev DB_HOST: mysql UPLOAD_DIR: uploads VISION_WORKER_URL: http://vision:8100 diff --git a/docker-compose.yml b/docker-compose.yml index 0b9cd70..a3f688b 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -31,6 +31,7 @@ services: env_file: - .env environment: + APP_ENV: production DB_HOST: mysql UPLOAD_DIR: uploads VISION_WORKER_URL: http://vision:8100 diff --git a/docs/DEPLOYMENT.md b/docs/DEPLOYMENT.md index 8d0d302..ebbe539 100644 --- a/docs/DEPLOYMENT.md +++ b/docs/DEPLOYMENT.md @@ -146,6 +146,7 @@ Introdotte dalla revisione del 21/09/2026: | Variable | Type | Default | Description | |----------|------|---------|-------------| +| `APP_ENV` | string | dev | Ambiente di esecuzione. `dev`/`test` saltano il controllo sui segreti di default; qualsiasi altro valore lo attiva. `docker-compose.yml` lo imposta a `production`, `docker-compose.dev.yml` a `dev` | | `APP_DOMAIN` | string | *(nessuno, obbligatoria)* | Dominio pubblico dell'installazione, usato nelle rule Traefik di `docker-compose.yml` (solo produzione) | | `TRUSTED_PROXY_COUNT` | int | 1 | Quanti hop di reverse proxy fidati stanno davanti al server, per calcolare l'IP reale del tablet | | `WEB_CONCURRENCY` | int | 1 | Numero di worker Uvicorn del server; il `Dockerfile` ne avvia 4 di default indipendentemente da questa variabile |