2 Commits

Author	SHA1	Message	Date
Sepehr Ramezani	97163bfb89	fix: production deployment hardening ... Docker: - Restrict PostgreSQL port to 127.0.0.1 only (not exposed to LAN) - Add APP_BASE_URL for MCP server to reach Next.js via Docker network - Fix MCP healthcheck (remove always-passing fallback) - Add resource limits to mcp-server container Dockerfile: - Remove full node_modules copy (standalone already includes deps) Reduces image size by ~500MB+ Config: - Add MCP_SERVER_MODE and MCP_SERVER_URL to deploy.sh and .env.docker.example - Deploy script now auto-sets MCP_SERVER_URL based on NEXTAUTH_URL Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-04-21 23:09:22 +02:00
Sepehr Ramezani	f3b58b32fd	ci: add deploy script and simplify CI/CD workflow ... - scripts/deploy.sh: automated deployment with interactive env setup (--env-only, --build, --full) - Supports OpenRouter, OpenAI, Ollama, DeepSeek providers - Auto-generates NEXTAUTH_SECRET and postgres password - Waits for healthchecks, initializes DB, shows status - CI/CD workflow simplified to call deploy.sh --build Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-04-21 22:55:15 +02:00