Nick SzaunigandClaude Opus 5.5
10cbe9bf2d
Backend - Backup covers every Prisma model (bundle v3); a guard test fails for any new model that is neither backed up nor explicitly excluded. Unsealed bundles may only add rows to 27 legacy master/field tables and never overwrite; counters, ledgers, settings, roles etc. need a sealed file. Shared import limit BACKUP_MAX_IMPORT_BYTES (default 50 MB, max 256 MB) with warnings in log and UI; replaced document files are removed after commit. - Post-commit side effects (automation, calendar sync, webhooks) run via runAfterCommit and never turn a committed write into a 500, so retries with the same Idempotency-Key no longer create duplicates. - Calendar outbox is multi-replica safe: per-entry claims with stale takeover, revision-based settle, new Graph event only on 404/410, transactionId on create, 30 s Graph timeout, URL-encoded ids, GUID validation for groupId, "run now" in background and resets FAILED. - Automation tasks are deduplicated under a row lock on the rule. - Update DTOs follow one null rule: omitted = unchanged, null clears a nullable field, null on a required field is a 400. - Varroa mites/day is recomputed on correction; withdrawal status is checked against the harvest date (?at=), bounded colonyIds; inspection create is audited; updates re-enqueue calendar entries. - Dashboard, statistics and apiary/colony guards treat WEAK, CONSPICUOUS and QUEENLESS colonies as living. - Prisma errors and body-parser errors are logged without query values or request bodies. - Migration 20261012100000_calendar_sync_claims; schema index name aligned with the existing database object. Frontend - Sticky save bar sticks again (no scroll container ancestors, card uses overflow-clip), safe-area insets, scroll-padding, FAB hidden on forms, sticky desktop sidebar. - Inspections record yes / no / not checked instead of silent defaults. - All living colonies are selectable; shared RecordSelect, EnumSelect, ChoiceGroup and TriStateField replace per-page copies; selects show names instead of ids; labels point at real controls. - Emptied optional fields are sent as null (emptyToNull) so every field can be cleared; dates default to the local day and are sent via toApiDate. - Harvest withdrawal warning uses the harvest date; backup page warns when a backup outgrows the import limit and lists skipped tables. Build and docs - Docker builds fail unless lint, typecheck and unit tests pass. - ARCHITECTURE.md updated (assumptions 9-12, 19-21, section 8) and spec docs/superpowers/specs/2026-10-12-plattform-rueckgrat-und-fahrplan-design.md for the backbone (api/worker/job roles, domain event outbox) and the feature roadmap T3-T7. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
36 lines
2.1 KiB
YAML
36 lines
2.1 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: apicore-backend-config
|
|
data:
|
|
PORT: "3001"
|
|
JWT_ACCESS_EXPIRES_IN: "15m"
|
|
JWT_REFRESH_EXPIRES_IN: "7d"
|
|
FRONTEND_ORIGIN: "https://apicore.example.com"
|
|
DOCUMENTS_STORAGE_PATH: "/data/documents"
|
|
# Automatische Backups. Ohne BACKUP_STORAGE_PATH bleibt der Zeitplan
|
|
# deaktiviert. Bei >1 Replica muss dies auf ein geteiltes Volume zeigen,
|
|
# wie DOCUMENTS_STORAGE_PATH.
|
|
BACKUP_STORAGE_PATH: "/data/backups"
|
|
BACKUP_CRON_SCHEDULE: "0 3 * * *"
|
|
BACKUP_RETENTION_COUNT: "14"
|
|
# Optional: groesste einspielbare Backup-Datei in Bytes (Standard 50 MB,
|
|
# hoechstens 256 MB). Export und Zeitplan warnen, sobald ein Backup
|
|
# groesser wird. Ein Body-Limit am Ingress muss mitgezogen werden.
|
|
# BACKUP_MAX_IMPORT_BYTES: "52428800"
|
|
COOKIE_SECURE: "true"
|
|
# Client-IP fuer Rate-Limits und IP-Freigaben der API-Schluessel. Vertraut
|
|
# werden nur das Pod-Netz 10.42.0.0/16 (Traefik) und Cloudflare
|
|
# (https://www.cloudflare.com/ips/), bewusst nicht LAN/uniquelocal: LAN-Clients
|
|
# sind selbst Absender, ihre X-Forwarded-For-Werte verwirft Traefik.
|
|
# Express nimmt den ersten X-Forwarded-For-Eintrag von rechts, der aus keinem
|
|
# dieser Netze kommt: den Client, den Cloudflare angehaengt hat. Mit "1" waere
|
|
# es die Cloudflare-Edge, die sich viele Clients teilen.
|
|
TRUST_PROXY: "loopback, 10.42.0.0/16, 173.245.48.0/20, 103.21.244.0/22, 103.22.200.0/22, 103.31.4.0/22, 141.101.64.0/18, 108.162.192.0/18, 190.93.240.0/20, 188.114.96.0/20, 197.234.240.0/22, 198.41.128.0/17, 162.158.0.0/15, 104.16.0.0/13, 104.24.0.0/14, 172.64.0.0/13, 131.0.72.0/22, 2400:cb00::/32, 2606:4700::/32, 2803:f800::/32, 2405:b500::/32, 2405:8100::/32, 2a06:98c0::/29, 2c0f:f248::/32"
|
|
# Entra ID SSO. Issuer ist die v2.0-Metadaten-URL des Tenants,
|
|
# Redirect-URI muss exakt der im App-Registrierung hinterlegten entsprechen.
|
|
# Ohne diese vier Variablen (siehe secret.example.yaml fuer Client-ID/-Secret)
|
|
# bleibt SSO deaktiviert, /auth/sso/status meldet dann enabled: false.
|
|
OIDC_ISSUER_URL: "https://login.microsoftonline.com/<tenant-id>/v2.0"
|
|
OIDC_REDIRECT_URI: "https://api.apicore.example.com/api/v1/auth/sso/callback"
|