feat(dev): merge compose.dev-sso overlay into compose.dev.yml (PMS-511) #371

Merged

Claude-Run merged 1 commit from feat/PMS-511-merge-dev-compose-files into main

2026-06-26 10:07:30 +02:00

Claude-Run commented

2026-06-26 10:00:23 +02:00

Member

Fold the per-developer Traefik/SSO overlay into the single dev compose file so the Traefik-routed *.a8n.run stack is the only dev stack.

compose.dev.yml: the server service now carries the Traefik routing/TLS labels (list syntax, required so ${USER} interpolates inside the router-name label keys), joins the external traefik-public network, pins ${USER}-bunyip-api.a8n.run via extra_hosts, and sets the SSO env vars (MOKOSH_AUTH_ISSUER, OIDC_ISSUER, OIDC_AUDIENCE, MOKOSH_AUTH_COOKIE_DOMAIN, the MOKOSH_AUTH_JWT_* paths, MOKOSH_ACCEPT_BASE_URL, MOKOSH_AUTH_LOGIN_URL, MOKOSH_PUBLIC_SIGNUP_ENABLED). The server no longer publishes a LAN-IP host port (Traefik is the sole ingress); postgres keeps its published host port for sqlx-cli. private is owned/created by the file again and traefik-public stays external.

compose.dev-sso.yml: deleted.

justfile: just dev brings up the merged Traefik stack and gains the ensure-oidc-keys prerequisite; dev-sso, dev-sso-down, restart, dev-down, and ensure-private-network are removed; down is the single stop path; every --file compose.dev-sso.yml argument is dropped from the register-* and cleanup recipes.

CLAUDE.md / dev-docs/quickstart.md: the two-layout description and the layout table now describe the single Traefik-routed file; stale just dev-sso references removed.

#PMS-511

Fold the per-developer Traefik/SSO overlay into the single dev compose file so the Traefik-routed `*.a8n.run` stack is the only dev stack. compose.dev.yml: the `server` service now carries the Traefik routing/TLS labels (list syntax, required so `${USER}` interpolates inside the router-name label keys), joins the external `traefik-public` network, pins `${USER}-bunyip-api.a8n.run` via `extra_hosts`, and sets the SSO env vars (`MOKOSH_AUTH_ISSUER`, `OIDC_ISSUER`, `OIDC_AUDIENCE`, `MOKOSH_AUTH_COOKIE_DOMAIN`, the `MOKOSH_AUTH_JWT_*` paths, `MOKOSH_ACCEPT_BASE_URL`, `MOKOSH_AUTH_LOGIN_URL`, `MOKOSH_PUBLIC_SIGNUP_ENABLED`). The server no longer publishes a LAN-IP host port (Traefik is the sole ingress); `postgres` keeps its published host port for sqlx-cli. `private` is owned/created by the file again and `traefik-public` stays external. compose.dev-sso.yml: deleted. justfile: `just dev` brings up the merged Traefik stack and gains the `ensure-oidc-keys` prerequisite; `dev-sso`, `dev-sso-down`, `restart`, `dev-down`, and `ensure-private-network` are removed; `down` is the single stop path; every `--file compose.dev-sso.yml` argument is dropped from the `register-*` and cleanup recipes. CLAUDE.md / dev-docs/quickstart.md: the two-layout description and the layout table now describe the single Traefik-routed file; stale `just dev-sso` references removed. #PMS-511

Claude-Run added 1 commit

2026-06-26 10:00:23 +02:00

feat(dev): merge compose.dev-sso overlay into compose.dev.yml (PMS-511)

E2E / Playwright against staging (pull_request) Successful in 25s

Details

Check / fmt + clippy + build + tests (pull_request) Successful in 1m20s

Details

Integration / integration tests (pull_request) Successful in 6m44s

Details

Create release / Create release from merged PR (pull_request) Successful in 1s

Details

4dd9fdbab0

Fold the per-developer Traefik/SSO overlay into the single dev compose file so the Traefik-routed `*.a8n.run` stack is the only dev stack.

compose.dev.yml: the `server` service now carries the Traefik routing/TLS labels (list syntax, required so `${USER}` interpolates inside the router-name label keys), joins the external `traefik-public` network, pins `${USER}-bunyip-api.a8n.run` via `extra_hosts`, and sets the SSO env vars (`MOKOSH_AUTH_ISSUER`, `OIDC_ISSUER`, `OIDC_AUDIENCE`, `MOKOSH_AUTH_COOKIE_DOMAIN`, the `MOKOSH_AUTH_JWT_*` paths, `MOKOSH_ACCEPT_BASE_URL`, `MOKOSH_AUTH_LOGIN_URL`, `MOKOSH_PUBLIC_SIGNUP_ENABLED`). The server no longer publishes a LAN-IP host port (Traefik is the sole ingress); `postgres` keeps its published host port for sqlx-cli. `private` is owned/created by the file again and `traefik-public` stays external.

compose.dev-sso.yml: deleted.

justfile: `just dev` brings up the merged Traefik stack and gains the `ensure-oidc-keys` prerequisite; `dev-sso`, `dev-sso-down`, `restart`, `dev-down`, and `ensure-private-network` are removed; `down` is the single stop path; every `--file compose.dev-sso.yml` argument is dropped from the `register-*` and cleanup recipes.

CLAUDE.md / dev-docs/quickstart.md: the two-layout description and the layout table now describe the single Traefik-routed file; stale `just dev-sso` references removed.

#PMS-511