67787bdf31
PouchDB-style apps call fetch with credentials: 'include' to maintain the CouchDB _session cookie. Without Access-Control-Allow-Credentials: true in the preflight response, the browser silently blocks the mutating request (Firefox HAR shows status 0, _securityState insecure). Switching cors/credentials to true forces enumerating allowed origins (wildcard + credentials is forbidden by the CORS spec). Listed are the common Vite/Next/etc. local dev ports plus the vaquant.at frontend.
75 lines
2.3 KiB
YAML
75 lines
2.3 KiB
YAML
services:
|
|
couchdb:
|
|
image: couchdb:3
|
|
restart: unless-stopped
|
|
environment:
|
|
SERVICE_FQDN_COUCHDB_5984:
|
|
COUCHDB_USER: ${COUCHDB_USER:-admin}
|
|
COUCHDB_PASSWORD: ${COUCHDB_PASSWORD}
|
|
expose:
|
|
- "5984"
|
|
volumes:
|
|
- couchdb_data:/opt/couchdb/data
|
|
networks:
|
|
- default
|
|
- coolify
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=lvw8efvnvsxduodrkg68zul3"
|
|
- "traefik.http.routers.coolcouch.rule=Host(`couch.apoena.dev`)"
|
|
- "traefik.http.routers.coolcouch.entrypoints=https"
|
|
- "traefik.http.routers.coolcouch.tls=true"
|
|
- "traefik.http.services.coolcouch.loadbalancer.server.port=5984"
|
|
|
|
couchdb-init:
|
|
image: curlimages/curl:latest
|
|
restart: "no"
|
|
depends_on:
|
|
- couchdb
|
|
environment:
|
|
COUCHDB_USER: ${COUCHDB_USER:-admin}
|
|
COUCHDB_PASSWORD: ${COUCHDB_PASSWORD}
|
|
entrypoint: ["sh", "-c"]
|
|
command:
|
|
- |
|
|
set -eu
|
|
base="http://$${COUCHDB_USER}:$${COUCHDB_PASSWORD}@couchdb:5984"
|
|
|
|
echo "waiting for couchdb..."
|
|
i=0
|
|
until curl -fsS "http://couchdb:5984/_up" >/dev/null 2>&1; do
|
|
i=$$((i + 1))
|
|
if [ $$i -gt 60 ]; then
|
|
echo "couchdb did not become ready in 120s"; exit 1
|
|
fi
|
|
sleep 2
|
|
done
|
|
echo "couchdb ready"
|
|
|
|
for db in _users _replicator _global_changes; do
|
|
code=$$(curl -s -o /dev/null -w "%{http_code}" -X PUT "$$base/$$db")
|
|
case "$$code" in
|
|
201|202|412) echo "db $$db: ok ($$code)" ;;
|
|
*) echo "db $$db: failed ($$code)"; exit 1 ;;
|
|
esac
|
|
done
|
|
|
|
put_config() {
|
|
curl -fsS -X PUT -H "Content-Type: application/json" \
|
|
"$$base/_node/_local/_config/$$1/$$2" -d "\"$$3\"" >/dev/null
|
|
echo "cfg $$1/$$2 = $$3"
|
|
}
|
|
put_config chttpd enable_cors true
|
|
put_config cors origins 'http://localhost:8080,http://localhost:5173,http://localhost:3000,http://localhost:4173,https://vaquant.at'
|
|
put_config cors credentials true
|
|
put_config cors methods 'GET, PUT, POST, HEAD, DELETE'
|
|
put_config cors headers 'accept, authorization, content-type, origin, referer, x-csrf-token'
|
|
|
|
networks:
|
|
coolify:
|
|
external: true
|
|
name: lvw8efvnvsxduodrkg68zul3
|
|
|
|
volumes:
|
|
couchdb_data:
|