2 Commits

Author	SHA1	Message	Date
CarterPerez-dev	8b70bfbba9	chore(canary): merge backend compose into project root ... Single project-root compose.yml + dev.compose.yml manage all services. Production stack (compose.yml): - nginx public ingress on \${NGINX_HOST_PORT:-22784}:80 - canary Go backend, NO host port (reachable only via nginx) distroless/static:nonroot Dockerfile healthcheck → /healthz, depends on postgres + redis - postgres postgres:18-alpine, no host port, named volume pgdata - redis redis:7-alpine, no host port, named volume redisdata - (geolite vol) read-only mount /data for GeoLite2-City.mmdb Dev stack (dev.compose.yml): - nginx dev ingress on \${NGINX_HOST_PORT:-58495}:80 - frontend Vite HMR on \${FRONTEND_HOST_PORT:-15723}:5173 - canary Air hot-reload (canary.dev Dockerfile, bind-mounts ./backend) OTel exports to jaeger:4317 - postgres host port \${POSTGRES_DEV_PORT:-5447}:5432 for psql access - redis host port \${REDIS_DEV_PORT:-6022}:6379 for redis-cli access - jaeger UI 16686, OTLP gRPC 4317, OTLP HTTP 4318 - volumes gocache + gomodcache speed up rebuilds All randomized host ports preserved exactly: 22784 (prod nginx), 58495 (dev nginx), 15723 (vite), 5447 (pg dev), 6022 (redis dev), 16686/4317/4318 (jaeger). Backend has no host port in production: nginx is the single entrypoint. Cloudflare Tunnel sidecar terminates at nginx:80 via cloudflared.compose.yml. backend/compose.yml + backend/dev.compose.yml deleted (merged here). Validation: - docker compose -f compose.yml config — OK - docker compose -f dev.compose.yml config — OK - docker compose -f compose.yml -f cloudflared.compose.yml config — OK	2026-05-10 05:23:55 -04:00
CarterPerez-dev	7fa2861e7a	feat(canary): backend bootstrap — strip JWT/users, rename module, rewrite main ... Removes the template's JWT auth + user domain (Phase 0 §0.4): - Deleted backend/internal/auth/ (entire JWT auth domain) - Deleted backend/internal/user/ (user CRUD domain) - Deleted backend/keys/ (JWT signing keys directory) - Deleted backend/internal/middleware/auth.go (Authenticator + RequireAdmin) - Deleted Justfile generate-keys recipe (no JWT keys to generate) - Removed lestrrat-go/jwx/v3 + transitive deps via go mod tidy - Stripped JWTConfig type, defaults, env mappings, validators from config.go - Removed jwt: section from config.yaml - Removed JWT_* lines from backend/.env and .env.example Renames Go module to project-local path (Phase 0 §0.5): github.com/carterperez-dev/templates/go-backend → github.com/CarterPerez-dev/cybersecurity-projects/canary-token-generator/backend - Rewrote imports in 6 remaining .go files using Edit tool (NEVER sed per repo rule) - Updated .golangci.yml local-prefixes + gci section ordering Renames cmd/api → cmd/canary and rewrites main.go (Phase 0 §0.6): - mv cmd/api cmd/canary - Rewrote cmd/canary/main.go as canary bootstrap (config, telemetry, db, redis, middleware chain, health, /api stub) — no auth wiring - Updated .air.toml cmd path - Updated backend/Justfile run/build targets to cmd/canary + bin/canary - Renamed docker-build image tag to canary-token-generator:latest Rebrands defaults: - config.go: app.name "Go Backend" → "Canary Token Generator" - config.go: otel.service_name "go-backend" → "canary-token-generator" - config.yaml: app.name "Go Backend Template" → "Canary Token Generator" - backend/.env(.example): OTEL_SERVICE_NAME → canary-token-generator Drops user-aware rate-limit helpers from middleware/ratelimit.go: - Removed KeyByUser, KeyByUserAndEndpoint, normalizeEndpoint, isUUID, isNumeric - Removed TierConfig, DefaultTiers, TieredRateLimiter (referenced GetUserID) - KeyByIP, NewRateLimiter, PerMinute/PerSecond/PerHour preserved Verification: - go build ./... — clean - go vet ./... — clean - go mod tidy — silent (deps consolidated) - grep -r "carterperez-dev/templates|JWTConfig|JWT_PRIVATE|lestrrat" → empty backend/compose.yml + backend/dev.compose.yml are still present here; they get merged into project-root compose files in Task 0.7 (next commit).	2026-05-10 05:22:08 -04:00