Merge branch 'main' of ssh://git.commumedia.org:2222/alex/headquarter

- Add VITE_OIDC_REDIRECT_URI to .env.example and docker-compose files
- Pass OIDC variables as build args in Dockerfile (build-time only)
- Update both docker-compose.prod.yml and docker-compose.traefik.yml
- Fixes undefined OIDC variables causing 404 on login redirect

.env.example

@@ -33,6 +33,7 @@ TOOL_SUBDOMAIN_PATTERN={tool}-{project}-{user}.tools.localhost
 VITE_API_URL=http://localhost:8000
 VITE_OIDC_ISSUER=https://auth.example.com/application/o/headquarter/
 VITE_OIDC_CLIENT_ID=your-client-id
+VITE_OIDC_REDIRECT_URI=https://headquarter.commumedia.org/callback
 
 # Secrets (generate strong random values for production)
 SECRET_ENCRYPTION_KEY=change-me-in-production

apps/web/Dockerfile

@@ -1,5 +1,10 @@
 FROM node:22-alpine AS builder
 
+ARG VITE_API_URL
+ARG VITE_OIDC_ISSUER
+ARG VITE_OIDC_CLIENT_ID
+ARG VITE_OIDC_REDIRECT_URI
+
 WORKDIR /app
 COPY package.json ./
 RUN npm install -g pnpm@11.1.1 \

docker-compose.prod.yml

@@ -41,10 +41,16 @@ services:
     build:
       context: ./apps/web
       dockerfile: Dockerfile
+      args:
+        - VITE_API_URL=${VITE_API_URL:-http://localhost:8000}
+        - VITE_OIDC_ISSUER=${VITE_OIDC_ISSUER}
+        - VITE_OIDC_CLIENT_ID=${VITE_OIDC_CLIENT_ID}
+        - VITE_OIDC_REDIRECT_URI=${VITE_OIDC_REDIRECT_URI:-https://${ROOT_DOMAIN:-localhost}/callback}
     environment:
       - VITE_API_URL=${VITE_API_URL:-http://localhost:8000}
       - VITE_OIDC_ISSUER=${VITE_OIDC_ISSUER}
       - VITE_OIDC_CLIENT_ID=${VITE_OIDC_CLIENT_ID}
+      - VITE_OIDC_REDIRECT_URI=${VITE_OIDC_REDIRECT_URI:-https://${ROOT_DOMAIN:-localhost}/callback}
     depends_on:
       - api
     networks:

docker-compose.traefik.yml

@@ -41,6 +41,11 @@ services:
     build:
       context: ./apps/web
       dockerfile: Dockerfile
+      args:
+        - VITE_API_URL=${VITE_API_URL:-http://localhost:8000}
+        - VITE_OIDC_ISSUER=${VITE_OIDC_ISSUER}
+        - VITE_OIDC_CLIENT_ID=${VITE_OIDC_CLIENT_ID}
+        - VITE_OIDC_REDIRECT_URI=${VITE_OIDC_REDIRECT_URI:-https://${ROOT_DOMAIN:-localhost}/callback}
     environment:
       - VITE_API_URL=${VITE_API_URL:-http://localhost:8000}
       - VITE_OIDC_ISSUER=${VITE_OIDC_ISSUER}