Build [v1.8.0]

docker-compose.yml

@@ -8,7 +8,9 @@ services:
     networks:
       - inventory_net
     ports:
-      - "8000:8000"
+      - "${BACKEND_PORT:-8000}:8000"
+    env_file:
+      - ./config/network_config.env
     volumes:
       - ./data:/app/data
       - ./logs:/app/logs
@@ -16,8 +18,8 @@ services:
     environment:
       - DATA_DIR=/app/data
       - LOGS_DIR=/app/logs
-      # [M-01] CORS allowed origins — customize for production
-      - ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3002
+      # [M-01] CORS allowed origins — dynamically constructed from config
+      - ALLOWED_ORIGINS=http://localhost:${FRONTEND_PORT:-3001},https://localhost:${FRONTEND_SSL_PORT:-3003},http://${SERVER_IP:-localhost}:${FRONTEND_PORT:-3001},https://${SERVER_IP:-localhost}:${FRONTEND_SSL_PORT:-3003},https://localhost:${BACKEND_SSL_PORT:-3002},https://${SERVER_IP:-localhost}:${BACKEND_SSL_PORT:-3002}
       # [C-01] JWT secret key — GENERATE A SECURE VALUE FOR PRODUCTION!
       - JWT_SECRET_KEY=${JWT_SECRET_KEY:-change-me-in-production}
     restart: unless-stopped
@@ -29,7 +31,9 @@ services:
     networks:
       - inventory_net
     ports:
-      - "3000:3000"
+      - "${FRONTEND_PORT:-3000}:3000"
+    env_file:
+      - ./config/network_config.env
     volumes:
       - ./logs:/app/logs
     # Write Next.js logs to both stdout (docker logs) and file (mapped volume)
@@ -41,10 +45,12 @@ services:
     networks:
       - inventory_net
     ports:
-      - "3002:3002"
-      - "3003:3003"
+      - "${BACKEND_SSL_PORT:-3002}:${BACKEND_SSL_PORT:-3002}"
+      - "${FRONTEND_SSL_PORT:-3003}:${FRONTEND_SSL_PORT:-3003}"
+    env_file:
+      - ./config/network_config.env
     volumes:
-      - ./Caddyfile:/etc/caddy/Caddyfile
+      - ./config/Caddyfile:/etc/caddy/Caddyfile
       # Persist the internal Caddy certificates so users don't get new certificate warnings constantly
       - ./data/caddy_data:/data
       - ./data/caddy_config:/config