Wired up the Website deployment for the POC prototype.

Services/Website/docker-compose.yml

@@ -8,6 +8,9 @@ name: ccn-platform
 #
 # The `-f docker-compose.yml` flag is important in production: it skips the docker-compose.override.yml file, which
 # Compose would otherwise merge in automatically for local development.
+#
+# Run one replica: sessions, passkey ceremonies, and recovery links live in the process's memory, so a second instance
+# would not know the first one's sign-ins — and a restart signs everyone out.
 services:
   website:
     image: ${HOST_CONTAINER}/${HOST_OWNER}/${IMAGE_NAME}:${IMAGE_TAG:-latest}
@@ -19,6 +22,17 @@ services:
     environment:
       LOG_LEVEL: ${LOG_LEVEL:-info}
       HTTP_SERVER_NAME: ${HTTP_SERVER_NAME:-CCNWebsite}
+      # The public origin: scheme and host, no trailing slash. The HTTPS redirect and the canonical links derive from it.
+      SITE_ORIGIN: ${SITE_ORIGIN:-https://ccn.rock-n-co.de}
+      # The origin browsers bind passkeys to: exactly where the sign-in screen is served — same scheme, same host, no
+      # `www.` either way. Left at the app's default (http://localhost:8080) every ceremony fails, so it follows
+      # SITE_ORIGIN unless set apart. It must be HTTPS: browsers run WebAuthn nowhere else but localhost, and it is
+      # what marks the session cookie `Secure`.
+      PASSKEYS_ORIGIN: ${PASSKEYS_ORIGIN:-${SITE_ORIGIN:-https://ccn.rock-n-co.de}}
+      # Empty leaves the tracker off.
+      ANALYTICS_WEBSITE_ID: ${ANALYTICS_WEBSITE_ID:-}
+      ANALYTICS_DOMAINS: ${ANALYTICS_DOMAINS:-}
+      ANALYTICS_RECORDER: ${ANALYTICS_RECORDER:-false}
       # Falls back to the policy the app ships with; set it in `.env` to allow the analytics origin,
       # which must match `String.Analytics.origin`.
       SECURITY_CONTENT_SECURITY_POLICY: "${SECURITY_CONTENT_SECURITY_POLICY:-default-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'}"
@@ -33,9 +47,14 @@ services:
       DATABASE_PASSWORD: ${DATABASE_PASSWORD:?DATABASE_PASSWORD is required}
       DATABASE_TLS: ${DATABASE_TLS:-require}
       DATABASE_POOL_MAX_PER_EVENT_LOOP: ${DATABASE_POOL_MAX_PER_EVENT_LOOP:-4}
+    volumes:
+      # The photos sellers upload. The rest of the image is read-only, and without the volume a redeploy would lose them.
+      - website-uploads:/app/Resources/Static/uploads
     healthcheck:
       test: ["CMD", "curl", "--fail", "--silent", "--show-error", "http://127.0.0.1:8080/health"]
       interval: 30s
       timeout: 5s
       retries: 3
       start_period: 10s
+volumes:
+  website-uploads: