@envsync-cloud/deploy-cli 0.6.18 → 0.6.19

package/dist/index.js

@@ -269,6 +269,16 @@ function domainMap(rootDomain) {
     s3Console: `console.s3.${rootDomain}`
   };
 }
+function publicHttpsOrigin(config, host) {
+  return `https://${host}${config.services.public_https_port === 443 ? "" : `:${config.services.public_https_port}`}`;
+}
+function publicHttpsOriginVariants(config, host) {
+  const canonical = `https://${host}`;
+  if (config.services.public_https_port === 443) {
+    return [canonical];
+  }
+  return [canonical, publicHttpsOrigin(config, host)];
+}
 function getDeployCliVersion() {
   try {
     const packageJsonPath = new URL("../package.json", import.meta.url);
@@ -650,6 +660,10 @@ function renderKeycloakRealm(config, runtimeEnv) {
 }
 function renderTraefikDynamicConfig(config) {
   const hosts = domainMap(config.domain.root_domain);
+  const otelAllowedOrigins = [
+    ...publicHttpsOriginVariants(config, hosts.landing),
+    ...publicHttpsOriginVariants(config, hosts.app)
+  ];
   return [
     "http:",
     "  middlewares:",
@@ -664,8 +678,7 @@ function renderTraefikDynamicConfig(config) {
     "    otel-cors:",
     "      headers:",
     "        accessControlAllowOriginList:",
-    `          - https://${hosts.landing}`,
-    `          - https://${hosts.app}`,
+    ...otelAllowedOrigins.map((origin) => `          - ${origin}`),
     "        accessControlAllowMethods:",
     "          - POST",
     "          - OPTIONS",
@@ -674,7 +687,7 @@ function renderTraefikDynamicConfig(config) {
     "          - content-type",
     "          - Authorization",
     "          - authorization",
-    "        accessControlAllowCredentials: false",
+    "        accessControlAllowCredentials: true",
     "        accessControlMaxAge: 600",
     "        addVaryHeader: true",
     "  services:",
@@ -705,10 +718,6 @@ function renderTraefikDynamicConfig(config) {
     "      loadBalancer:",
     "        servers:",
     "          - url: http://clickstack:8080",
-    "    clickstack-api:",
-    "      loadBalancer:",
-    "        servers:",
-    "          - url: http://clickstack:8000",
     "    clickstack-otlp:",
     "      loadBalancer:",
     "        servers:",
@@ -736,7 +745,7 @@ function renderTraefikDynamicConfig(config) {
     "        certResolver: letsencrypt",
     "    obs-api-router:",
     `      rule: Host(\`${hosts.obs}\`) && PathPrefix(\`/api\`)`,
-    "      service: clickstack-api",
+    "      service: clickstack-ui",
     "      priority: 90",
     "      entryPoints: [websecure]",
     "      tls:",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envsync-cloud/deploy-cli",
-  "version": "0.6.18",
+  "version": "0.6.19",
   "description": "CLI for self-hosted EnvSync deployment on Docker Swarm",
   "type": "module",
   "bin": {