quartermaster/docker/entrypoint.sh

#!/usr/bin/env sh
set -eu

cd /app

alembic upgrade head

exec uvicorn quartermaster.main:app \
    --host 0.0.0.0 \
    --port 8000 \
    --proxy-headers \
    --forwarded-allow-ips='*' \
    --log-config src/quartermaster/logconfig.json
feat(docker): add Dockerfile and entrypoint for home-ctr-onyx image (#28) Produces a python:3.12-slim-bookworm image that runs migrations (with the pre-upgrade backup hook) then uvicorn under uid/gid 1000:1000, as required by the /mnt/quartermaster/ bind mount on the deploy host. HEALTHCHECK hits /healthz; uvicorn is pointed at logconfig.json so access logs land on stdout as JSON. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 17:22:26 -06:00			`#!/usr/bin/env sh`
			`set -eu`

			`cd /app`

			`alembic upgrade head`

			`exec uvicorn quartermaster.main:app \`
			`--host 0.0.0.0 \`
			`--port 8000 \`
fix(docker): enable uvicorn proxy-headers so url_for works behind Traefik Without --proxy-headers + --forwarded-allow-ips, uvicorn ignores the X-Forwarded-Proto header Traefik sets, so Starlette's url_for() picks up the internal scheme (http) and host (the container's bind address). That makes every <link>/<img> href in templates point at an internal URL with the wrong scheme — the browser refuses CSS/images as mixed content and the public page renders unstyled. With both flags the template output becomes https://quartermaster.unbiasedgeek.com/static/… as expected. The wildcard in --forwarded-allow-ips='*' is safe here because the compose file publishes no host ports — only containers on proxy-net (i.e. Traefik) can reach port 8000. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 18:15:30 -06:00			`--proxy-headers \`
			`--forwarded-allow-ips='*' \`
feat(docker): add Dockerfile and entrypoint for home-ctr-onyx image (#28) Produces a python:3.12-slim-bookworm image that runs migrations (with the pre-upgrade backup hook) then uvicorn under uid/gid 1000:1000, as required by the /mnt/quartermaster/ bind mount on the deploy host. HEALTHCHECK hits /healthz; uvicorn is pointed at logconfig.json so access logs land on stdout as JSON. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 17:22:26 -06:00			`--log-config src/quartermaster/logconfig.json`