7 Commits

Include renames

Author	SHA1	Message	Date
bot-implementer	5bbcfa9b6d	feat: make amd64 and arm64 image build targets (E00-S02-T07)	2026-08-29 01:13:30 +00:00
implementer	7ce3ba53cf	feat: make the app root filesystem read-only (E00-S02-T06)	2026-08-29 00:53:40 +00:00
implementer	a4cf365098	feat: run the app image as a non-root user (E00-S02-T05) ... The runtime stage of apps/server/Dockerfile now drops root privileges with 'USER node' — the non-root user (uid/gid 1000) the official Node image ships with — so the app container does not run with root privileges. The server binds port 3000 (>= 1024) and only reads the root-owned files copied above, so no extra user creation or ownership changes are required. compose.yaml header updated: T05 is in scope; T06 (read-only rootfs) and T07 (multi-arch) remain out of scope.	2026-08-29 00:41:10 +00:00
implementer	3dd80f91fe	feat: persist the database volume across restart/recreate (E00-S02-T04) ... Mount the named `db-data` volume at PostgreSQL's data directory (/var/lib/postgresql/data) on the db service and declare it in the top-level volumes map, so the database survives `docker compose restart` and `docker compose down` + `up -d` (recreate). Reset with `docker compose down -v` per the issue rollback note. Header comments in compose.yaml and the server Dockerfile updated: T04 is no longer out of scope; T05/T06 remain.	2026-08-29 00:32:15 +00:00
implementer	9c049ce6b5	feat: app health endpoint succeeds (E00-S02-T03)	2026-08-29 00:21:34 +00:00
implementer	3bbea68e6c	fix: align app/db image bases with documented stack (E00-S02-T01) ... Switch the app image from node:24-alpine to node:24.19.0-bookworm-slim in both build and runtime stages (Technology-Stack 5.4: glibc Debian base required because argon2 is a native dependency; musl/Alpine causes native-module build surprises), and the db image from postgres:16-alpine to postgres:18-bookworm (Technology-Stack 5.2/5.4/6.2 + golden tuple 7 pin PostgreSQL 18.6; 18-bookworm is the 18.x line on Debian bookworm). Update tests/compose-config.test.mjs so the committed assertions lock in the corrected image bases (db image, Dockerfile build/runtime stages, parser probe).	2026-08-28 23:45:18 +00:00
implementer	3be575818d	feat: docker compose up -d starts DB + app (E00-S02-T01)	2026-08-28 23:35:05 +00:00