Make the live admin PWA deployment reproducible from the repository:
- deploy/pwa/Dockerfile: multi-stage build (node:22-alpine builds admin/
with the VITE_* build args, failing fast if any is empty; nginx:alpine
pinned to the digest running on the API box serves dist/).
- deploy/pwa/Dockerfile.dockerignore: limits the repo-root context to
admin/ sources and nginx.conf (the root .dockerignore excludes deploy/).
- deploy/pwa/nginx.conf: SPA fallback to index.html, root-served
/sw.js and /manifest.webmanifest, allow-list 10.60.1.33 and
10.60.1.14 only.
- deploy/compose.yaml: pwa service on NESTQUEST_BIND_ADDRESS:8081 with
the build args from deploy/.env; api and litestream unchanged.
- deploy/.env.example: the three public PWA build values.
- deploy/RUNBOOK.md: section 10 (PWA build/serve, nestquest-app Traefik
router, verification) and the router priorities in section 3.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Priorities panel 200 / admin 100 / app 50, the admin rule scoped to
/api/v1/admin plus /health, /openapi.json and /docs, and the live
middleware names nestquest-panel-lan and nestquest-headers.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Maestro task fbd108e4 (Feature 24 - Admin PWA Hosting). Makes the PWA hosting reproducible: deploy/pwa/Dockerfile (multi-stage, pinned node+nginx digests, VITE_* build args), deploy/pwa/nginx.conf (SPA fallback + allow/deny to the reverse proxy/host), a
pwacompose service on :8081, .env.example values, and a runbook section (PWA build/serve + Traefiknestquest-approuter).Head:
13e3796d26(base dev87e3f12)Verified: compose build pwa exit 0 (client id baked in), nginx serves / /auth/callback /manifest /sw.js /assets, non-allowed source 403; suite 1865, admin 189, build ok.
Independent Codex gpt-5.6-terra review completed for this exact commit.