Files
headquarter/openspec/changes/oauth-traefik-integration/specs/traefik-deployment/spec.md
T
Fusion 577b052c05 feat: implement user profile management and oauth/traefik integration
User Profile (US-004):
- Add authenticated profile endpoints (GET/PUT /users/me)
- Add avatar upload with file validation (PNG/JPEG, max 2MB)
- Create frontend profile page with edit form and avatar upload
- Update app shell to link to profile page

OAuth/Traefik Integration:
- Externalize all Authentik URLs to environment variables
- Add domain configuration (API_DOMAIN, WEB_DOMAIN, AUTHENTIK_DOMAIN)
- Create docker-compose.traefik.yml for reverse proxy deployment
- Update OAuth redirect/callback URLs to use configured domains
- Add VITE_APP_URL for frontend public URL configuration

Quality gates: pytest (50 passed), ruff, mypy, npm test (12 passed), typecheck, lint, build
2026-05-17 23:17:10 +02:00

32 lines
1.2 KiB
Markdown

## ADDED Requirements
### Requirement: Traefik Docker Compose
The system SHALL provide a `docker-compose.traefik.yml` for deployment behind an existing Traefik reverse proxy.
#### Scenario: Service labels
- GIVEN the traefik deployment configuration
- WHEN services are started
- THEN `docker-compose.traefik.yml` SHALL define Traefik Docker labels for each service
- AND all routing rules SHALL use configurable domain names
#### Scenario: Environment variables
- GIVEN the traefik deployment configuration
- WHEN configuring the deployment
- THEN all domain names SHALL be configurable via environment variables
- AND the proxy web name SHALL be configurable via environment variable
### Requirement: Environment Configuration
The system SHALL document all required environment variables for traefik deployment.
#### Scenario: Required variables
- GIVEN a new deployment
- WHEN setting up environment variables
- THEN `.env.example` SHALL document:
- `API_DOMAIN` - domain for API service
- `WEB_DOMAIN` - domain for web frontend
- `AUTHENTIK_DOMAIN` - domain for Authentik instance
- `PROXY_WEB_NAME` - name for web proxy service
- All Authentik OIDC configuration variables