577b052c05
User Profile (US-004): - Add authenticated profile endpoints (GET/PUT /users/me) - Add avatar upload with file validation (PNG/JPEG, max 2MB) - Create frontend profile page with edit form and avatar upload - Update app shell to link to profile page OAuth/Traefik Integration: - Externalize all Authentik URLs to environment variables - Add domain configuration (API_DOMAIN, WEB_DOMAIN, AUTHENTIK_DOMAIN) - Create docker-compose.traefik.yml for reverse proxy deployment - Update OAuth redirect/callback URLs to use configured domains - Add VITE_APP_URL for frontend public URL configuration Quality gates: pytest (50 passed), ruff, mypy, npm test (12 passed), typecheck, lint, build
32 lines
1.2 KiB
Markdown
32 lines
1.2 KiB
Markdown
## ADDED Requirements
|
|
|
|
### Requirement: Traefik Docker Compose
|
|
|
|
The system SHALL provide a `docker-compose.traefik.yml` for deployment behind an existing Traefik reverse proxy.
|
|
|
|
#### Scenario: Service labels
|
|
- GIVEN the traefik deployment configuration
|
|
- WHEN services are started
|
|
- THEN `docker-compose.traefik.yml` SHALL define Traefik Docker labels for each service
|
|
- AND all routing rules SHALL use configurable domain names
|
|
|
|
#### Scenario: Environment variables
|
|
- GIVEN the traefik deployment configuration
|
|
- WHEN configuring the deployment
|
|
- THEN all domain names SHALL be configurable via environment variables
|
|
- AND the proxy web name SHALL be configurable via environment variable
|
|
|
|
### Requirement: Environment Configuration
|
|
|
|
The system SHALL document all required environment variables for traefik deployment.
|
|
|
|
#### Scenario: Required variables
|
|
- GIVEN a new deployment
|
|
- WHEN setting up environment variables
|
|
- THEN `.env.example` SHALL document:
|
|
- `API_DOMAIN` - domain for API service
|
|
- `WEB_DOMAIN` - domain for web frontend
|
|
- `AUTHENTIK_DOMAIN` - domain for Authentik instance
|
|
- `PROXY_WEB_NAME` - name for web proxy service
|
|
- All Authentik OIDC configuration variables
|