Skip to content

Fix production runtime configuration#11

Merged
jaeyunha merged 1 commit into
mainfrom
issue-9-prod-runtime-config-20260517
May 17, 2026
Merged

Fix production runtime configuration#11
jaeyunha merged 1 commit into
mainfrom
issue-9-prod-runtime-config-20260517

Conversation

@jaeyunha
Copy link
Copy Markdown
Member

Summary

  • make the Rust API bind to configurable PORT with 3016 default
  • validate staging/production auth/runtime envs at API and web startup, including secure cookies
  • enable Next.js standalone output and document API/web/worker ECS env contract

Validation

  • make doctor
  • ./hack/cargo_locked.sh test -p opengithub-api --lib config -- --nocapture
  • node web/scripts/validate-production-env.mjs
  • APP_ENV=production node web/scripts/validate-production-env.mjs (expected fail-fast)
  • APP_ENV=staging APP_URL=https://app.example.com PUBLIC_APP_URL=https://app.example.com API_URL=https://api.example.com SESSION_SECRET=secret AUTH_GOOGLE_ID=id AUTH_GOOGLE_SECRET=secret SESSION_COOKIE_SECURE=true node web/scripts/validate-production-env.mjs
  • make check
  • make build
  • PORT=4027 .scratch/cargo-target/release/api + curl http://127.0.0.1:4027/health
  • cd /tmp && APP_ENV=production /path/to/api (expected fail-fast)

Closes #9

@jaeyunha jaeyunha merged commit c56fecb into main May 17, 2026
@jaeyunha jaeyunha deleted the issue-9-prod-runtime-config-20260517 branch May 17, 2026 11:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Deployment blocker: harden production runtime configuration

1 participant