Commit graph

10 commits

Author SHA1 Message Date
6b2187de2a Security hardening for production deployment
- Remove secrets from Dockerfile build args, pass as runtime env vars only
- Add non-root user to Docker container
- Add SKU format validation to prevent S3 key injection
- Sanitize error responses in sanity-lookup route
- Fix zod import to use @medusajs/framework/zod
- Clean up .env.template defaults and .dockerignore
2026-02-24 17:19:13 +01:00
94c22ab013 Add trptk-pricing.json to Dockerfile 2026-02-24 16:46:02 +01:00
0cd1a5e8d1 Change Dockerfile and start.sh to not skip devDependencies 2026-02-24 16:15:03 +01:00
bada2bd1f1 Set ARGs as ENV vars for medusa build 2026-02-24 16:06:39 +01:00
3197f7bf1a Pass env vars to build stage for admin dashboard 2026-02-24 15:58:42 +01:00
41aff1c8bc Run database migrations on startup 2026-02-24 15:42:03 +01:00
4ec3d91b5d Copy full app to runtime container 2026-02-24 15:33:58 +01:00
2dc37efc98 Copy medusa-config and tsconfig into runtime container 2026-02-24 15:29:48 +01:00
1a093cb236 Fix npm peer dependency conflict in Dockerfile 2026-02-24 15:21:57 +01:00
4bedad944a Initial commit 2026-02-24 15:06:43 +01:00