@ossy/deployment-tools 3.7.0 → 3.12.0

package/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.12.0](https://github.com/ossy-se/ossy/compare/v3.11.1...v3.12.0) (2026-09-06)
+
+### Bug Fixes
+
+* default the API to same-origin and drop api.ossy.se ([#794](https://github.com/ossy-se/ossy/issues/794)) ([397a06f](https://github.com/ossy-se/ossy/commit/397a06f88b01e297fb76f35c429f3e687bdd6af9))
+
+### Features
+
+* **analytics:** Host visitor locations from connection geo ([#772](https://github.com/ossy-se/ossy/issues/772)) ([a565c1b](https://github.com/ossy-se/ossy/commit/a565c1b5078219ef412148d77dc33697f2079612)), closes [#769](https://github.com/ossy-se/ossy/issues/769) [#797](https://github.com/ossy-se/ossy/issues/797) [#797](https://github.com/ossy-se/ossy/issues/797) [#797](https://github.com/ossy-se/ossy/issues/797) [#797](https://github.com/ossy-se/ossy/issues/797) [#769](https://github.com/ossy-se/ossy/issues/769) [#797](https://github.com/ossy-se/ossy/issues/797) [#769](https://github.com/ossy-se/ossy/issues/769)
+
+
 # [3.7.0](https://github.com/ossy-se/ossy/compare/v3.6.2...v3.7.0) (2026-08-22)
 
 ### Features

package/README.md

@@ -9,7 +9,7 @@ Infrastructure and CDK tooling for the Ossy platform.
 ```
 Internet → CloudFront (ACM TLS, us-east-1) → WAF → ALB (:80)
              ├── host rules from platforms.json `services[].hosts|domain`
-             │     e.g. ossy.se, api.ossy.se → website-ossy Fargate service
+             │     e.g. ossy.se → website-ossy Fargate service
              ├── other known hosts / *.ossy.se → platform-runtime Fargate service
              └── default action → platform-runtime
 ```
@@ -64,7 +64,7 @@ HTTP services (default) become Fargate services with ALB host rules. The contain
     "name": "ossy-website-ossy",
     "domain": "ossy.se",
     "image": "ghcr.io/ossy-se/website-ossy:latest",
-    "hosts": ["ossy.se", "api.ossy.se"]
+    "hosts": ["ossy.se"]
   }
 ]
 ```
@@ -73,7 +73,7 @@ HTTP services (default) become Fargate services with ALB host rules. The contain
 |---|---|
 | `name` | Unique service name — Secrets Manager / ECS key strips a leading `ossy-` (`website-ossy`). |
 | `domain` | Primary hostname (default ALB host when `hosts` is omitted). |
-| `hosts` | Optional ALB host-header list. Example: `["ossy.se","api.ossy.se"]` so the website image serves apex and API host. Defaults to `[domain]`. |
+| `hosts` | Optional ALB host-header list. Example: `["ossy.se"]` so the website image serves the apex. Defaults to `[domain]`. |
 | `image` | Docker image to pull and run (GHCR). |
 
 **Built-in (always present):**
@@ -264,6 +264,8 @@ Other common env vars:
 | `AWS_SECRET_ACCESS_KEY` | API | AWS credentials for S3 |
 | `OSSY_API_KEY` | Platform, websites | API JWT for CMS reads |
 | `OSSY_COOKIE_SECRET` | Websites | Cookie signing secret |
+| `GEOLITE2_COUNTRY_MMDB` | App (`@ossy/analytics` location projection) | Absolute path to MaxMind GeoLite2-Country `.mmdb` (#769). Used by `PageViewLocationProjection` / `ProjectionRebuild` — not at ingest. Optional; without it `countryCode` is omitted (IP still stored on the event). |
+| `OSSY_TRUST_PROXY_HOPS` | Platform / websites | Express `trust proxy` hop count behind CloudFront→ALB (default: `2`). |
 | `OPENAI_API_KEY` | Worker | OpenAI API key |
 | `OPENAI_ORGANIZATION` | Worker | OpenAI organisation ID |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ossy/deployment-tools",
-  "version": "3.7.0",
+  "version": "3.12.0",
   "description": "Collection of scripts and tools to aid deployment of containers and static files to Amazon Web Services through GitHub Actions",
   "source": "./src/index.js",
   "main": "./src/index.js",
@@ -24,5 +24,5 @@
   "devDependencies": {
     "jest": "^30.4.2"
   },
-  "gitHead": "622d97535abad08415963405ace2f5aaaecd7ca4"
+  "gitHead": "c2650803219ad1831559b512848358d9550ffad2"
 }

package/src/ecs/platform-ecs-services.spec.js

@@ -106,8 +106,8 @@ describe('hostsFromServiceEntry', () => {
   it('uses hosts when provided', () => {
     expect(hostsFromServiceEntry({
       domain: 'ossy.se',
-      hosts: ['ossy.se', 'api.ossy.se'],
-    })).toEqual(['ossy.se', 'api.ossy.se'])
+      hosts: ['ossy.se', 'www.ossy.se'],
+    })).toEqual(['ossy.se', 'www.ossy.se'])
   })
 
   it('falls back to domain', () => {
@@ -120,7 +120,6 @@ describe('listPlatformEcsServices', () => {
     const services = listPlatformEcsServices({
       platformName: 'ossybot',
       domains: [
-        'api.ossy.se',
         'ossy.se',
         '*.ossy.se',
         'www.plexus-sanitas.com',
@@ -130,7 +129,7 @@ describe('listPlatformEcsServices', () => {
         {
           name: 'ossy-website-ossy',
           domain: 'ossy.se',
-          hosts: ['ossy.se', 'api.ossy.se'],
+          hosts: ['ossy.se'],
           image: 'ghcr.io/ossy-se/website-ossy:latest',
           cpu: 1024,
           memoryLimitMiB: 4096,
@@ -165,7 +164,7 @@ describe('listPlatformEcsServices', () => {
 
     const website = services.find(s => s.key === 'website-ossy')
     expect(website.isDefault).toBe(false)
-    expect(website.hosts).toEqual(['ossy.se', 'api.ossy.se'])
+    expect(website.hosts).toEqual(['ossy.se'])
     expect(website.image).toBe('ghcr.io/ossy-se/website-ossy:latest')
     expect(website.secretName).toBe('ossybot/website-ossy')
     expect(website.cpu).toBe(1024)

package/src/infrastructure/platform-ecs-stack.js

@@ -281,7 +281,7 @@ class PlatformEcsStack extends Stack {
     })
 
     // Lower priority number = evaluated first. Specific hosts before wildcards
-    // so `api.ossy.se` is not swallowed by `*.ossy.se`.
+    // so `ossy.se` is not swallowed by `*.ossy.se`.
     // Priorities are hash-stable per host — sequential 10,11,12… renumbers
     // every insert and CloudFormation cannot swap ALB priorities in one update.
     const usedPriorities = new Set()