jackyu66gitandCursor
0f320e040b
Add host-first environment contracts (Local vs CI vs Prod), deps-only compose, and the Profile → Portrait → deep-access mock payment slice with device identity and auto-migrate on API startup. Co-authored-by: Cursor <cursoragent@cursor.com>
26 lines
809 B
YAML
26 lines
809 B
YAML
# Production compose skeleton — NOT for daily local coding.
|
|
# Activate only when images/Dockerfiles exist for a release.
|
|
# Policy: .ai/deployment.md · .ai/docker.md
|
|
#
|
|
# Example (uncomment and set registry tags when shipping):
|
|
#
|
|
# services:
|
|
# api:
|
|
# image: registry.example.com/yuxingu-api:${TAG:-v0.0.0}
|
|
# env_file: [.env.prod]
|
|
# ports: ["8080:8080"]
|
|
# web:
|
|
# image: registry.example.com/yuxingu-user-h5:${TAG:-v0.0.0}
|
|
# ports: ["80:80"]
|
|
|
|
services:
|
|
# Keeps file valid; profile "prod" must be enabled explicitly — never default local.
|
|
postgres:
|
|
profiles: ["prod"]
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_USER: yuxingu
|
|
POSTGRES_PASSWORD: change-me
|
|
POSTGRES_DB: yuxingu
|
|
# Do not expose 5432 publicly in real prod without network policy.
|