usite-sas-bic/moraworld
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): rate limiting, forbidNonWhitelisted, Prisma migrations en startup y CI para GHCR

Browse Source 
- ThrottlerGuard global: 20 req/min por IP en todos los endpoints
- forbidNonWhitelisted: true en ValidationPipe
- Dockerfile API: prisma migrate deploy antes de arrancar el proceso
- coolify-compose: depends_on api (service_healthy) en web
- GitHub Actions: build y push de imágenes api/web a GHCR en cada push a main

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Lizandro Guarnizo
2026-06-18 17:06:35 -05:00
co-authored by Claude Sonnet 4.6
parent 1b49e3fc0e
commit db19f3e1ca
5 changed files with 69 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/Dockerfile
+2 -1
View File
@@ -19,4 +19,5 @@ COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/packages/database ./packages/database
USER app
EXPOSE 3001
CMD ["node", "dist/main.js"]
# ponytail: migrate antes de arrancar; si quieres zero-downtime migrations, sepáralas como job previo en Coolify
CMD ["sh", "-c", "node node_modules/.bin/prisma migrate deploy --schema packages/database/prisma/schema.prisma && node dist/main.js"]