13 Commits

Author	SHA1	Message	Date
Kunthawat Greethong	4abb0138e6	fix: bake Chromium browser into combined image ... The Dockerfile's builder stage runs 'playwright install chromium' which downloads Chromium, but the runtime stage never copies the browser cache. When the scanner service (python -m src.worker) tries to launch Playwright, it crashes with 'Executable doesn't exist at /root/.cache/ms-playwright/...' Copy the Playwright browser cache from the builder stage, set PLAYWRIGHT_BROWSERS_PATH so Playwright finds it, and add the shared libraries Chromium needs (libnss3, libgbm, etc.).	2026-06-15 23:23:57 +07:00
Kunthawat Greethong	ee1157472c	revert: remove Chromium/Playwright deps from Dockerfile; add supervisorctl support ... - Revert Dockerfile to before the Playwright system deps / Chromium copy (commit 6e9726f). The ConnectError is a service-not-running issue, not a missing-browser issue. - Add [unix_http_server], [supervisorctl], and [rpcinterface:supervisor] sections so 'supervisorctl status' works inside the container. - Redirect scanner stdout/stderr to /var/log/scanner.log so startup errors are inspectable.	2026-06-15 23:08:10 +07:00
Kunthawat Greethong	7e6f78e2fa	fix: include Playwright system deps and Chromium binaries in combined image ... The root Dockerfile's builder stage runs playwright install chromium --with-deps, but these deps and the browser cache were not persisted to the runtime stage. The scanner process could never start because Playwright/Chromium libraries were missing. Add the same shared-library dependencies that the standalone scanner Dockerfile lists, copy the Chromium browser cache from the builder, and set PLAYWRIGHT_BROWSERS_PATH so Playwright finds the browsers. Fixes the ConnectError: the scanner can now launch Chromium and respond to scan requests on http://127.0.0.1:8001.	2026-06-15 22:46:02 +07:00
Kunthawat Greethong	6e9726f28e	fix: bake SCANNER_SERVICE_URL into the combined image ... Bake SCANNER_SERVICE_URL=http://127.0.0.1:8001 and PYTHONUNBUFFERED=1 into /etc/profile.d/consentos.sh inside the image and source that file from /entrypoint.sh so every supervisord child (api, worker, beat, scanner) inherits the same defaults — both for EasyPanel deploys and local docker compose. Drop the inline env injection in supervisord.conf since the entrypoint now sets it. Single source of truth: the Dockerfile.	2026-06-15 22:32:43 +07:00
Ami	6a513a97ce	fix: copy alembic.ini into image	2026-04-21 17:39:24 +07:00
Ami	6211290923	fix: add alembic dir to image + run migrations in entrypoint	2026-04-21 17:36:47 +07:00
Ami	355b5156a5	fix: add postgresql-client for pg_isready in entrypoint	2026-04-21 15:57:41 +07:00
Ami	51b8e15726	fix: add entrypoint script to wait for postgres before starting	2026-04-21 15:38:56 +07:00
Ami	f8cdbf8d74	feat: combine Admin UI into single container with nginx proxy	2026-04-21 11:30:56 +07:00
Ami	cb59bea178	fix: supervisor package name (debian), not supervisord	2026-04-21 10:59:06 +07:00
Ami	7680b0eb91	fix: install supervisord in runtime stage (closes deploy)	2026-04-21 10:49:59 +07:00
Ami Bot	08e0ae7e83	fix: Dockerfile - use PYTHONPATH for playwright install chromium	2026-04-20 20:32:30 +07:00
Ami Bot	3265228ce6	rename: Dockerfile.app -> Dockerfile for Easypanel compatibility	2026-04-20 20:14:45 +07:00