mmintel/mintel.me
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: complete MDX migration for blog, fix diagram fidelity and refactor styling architecture

Browse Source
This commit is contained in:
Marc Mintel
2026-02-17 21:36:59 +01:00
parent bff58e7cfa
commit cce6aa0935
75 changed files with 12282 additions and 12227 deletions
Download Patch File Download Diff File Expand all files Collapse all files

99
docker-compose.yml
View File

@@ -1,7 +1,6 @@
services:
app:
mintel-me-app:
image: registry.infra.mintel.me/mintel/mintel.me:${IMAGE_TAG:-latest}
build: .
restart: always
networks:
- default
@@ -11,59 +10,59 @@ services:
labels:
- "traefik.enable=true"
# HTTP ⇒ HTTPS redirect
- 'traefik.http.routers.${PROJECT_NAME:-mintel-me}-web.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-web.entrypoints=web"
# - "traefik.http.routers.${PROJECT_NAME:-mintel-me}-web.middlewares=redirect-https"
- 'traefik.http.routers.mintel-me-web.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
- "traefik.http.routers.mintel-me-web.entrypoints=web"
# - "traefik.http.routers.mintel-me-web.middlewares=redirect-https"
# HTTPS router (Standard)
- 'traefik.http.routers.${PROJECT_NAME:-mintel-me}.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}.service=${PROJECT_NAME:-mintel-me}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}.middlewares=${AUTH_MIDDLEWARE:-${PROJECT_NAME:-mintel-me}-ratelimit,${PROJECT_NAME:-mintel-me}-forward}"
- "traefik.http.services.${PROJECT_NAME:-mintel-me}.loadbalancer.server.port=3000"
- 'traefik.http.routers.mintel-me.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
- "traefik.http.routers.mintel-me.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.mintel-me.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.mintel-me.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.mintel-me.service=mintel-me-app-svc"
- "traefik.http.routers.mintel-me.middlewares=${AUTH_MIDDLEWARE:-mintel-me-ratelimit,mintel-me-forward}"
- "traefik.http.services.mintel-me-app-svc.loadbalancer.server.port=3000"
- "traefik.docker.network=infra"
- "caddy=${TRAEFIK_HOST:-mintel.localhost}"
- "caddy.reverse_proxy={{upstreams 3000}}"
# Public Router (Whitelist for OG Images, Sitemaps, Health)
- 'traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.rule=(${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}) && (PathPrefix("/health") || PathPrefix("/sitemap.xml") || PathPrefix("/robots.txt") || PathPrefix("/manifest.webmanifest") || PathPrefix("/api/og") || PathRegexp(".*opengraph-image.*") || PathRegexp(".*sitemap.*"))'
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.service=${PROJECT_NAME:-mintel-me}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.middlewares=${AUTH_MIDDLEWARE_UNPROTECTED:-${PROJECT_NAME:-mintel-me}-ratelimit,${PROJECT_NAME:-mintel-me}-forward}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-public.priority=2000"
- 'traefik.http.routers.mintel-me-public.rule=(${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}) && (PathPrefix("/health") || PathPrefix("/sitemap.xml") || PathPrefix("/robots.txt") || PathPrefix("/manifest.webmanifest") || PathPrefix("/api/og") || PathRegexp(".*opengraph-image.*") || PathRegexp(".*sitemap.*"))'
- "traefik.http.routers.mintel-me-public.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.mintel-me-public.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.mintel-me-public.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.mintel-me-public.service=mintel-me-app-svc"
- "traefik.http.routers.mintel-me-public.middlewares=${AUTH_MIDDLEWARE_UNPROTECTED:-mintel-me-ratelimit,mintel-me-forward}"
- "traefik.http.routers.mintel-me-public.priority=2000"
# Middlewares
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-ratelimit.ratelimit.average=100"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-ratelimit.ratelimit.burst=50"
- "traefik.http.middlewares.mintel-me-ratelimit.ratelimit.average=100"
- "traefik.http.middlewares.mintel-me-ratelimit.ratelimit.burst=50"
# Gatekeeper Router (Path-based)
- 'traefik.http.routers.${PROJECT_NAME:-mintel-me}-gatekeeper.rule=(Host("${TRAEFIK_HOST:-mintel.localhost}") && PathPrefix("/gatekeeper"))'
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-gatekeeper.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-gatekeeper.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-gatekeeper.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-gatekeeper.service=${PROJECT_NAME:-mintel-me}-gatekeeper"
- 'traefik.http.routers.mintel-me-gatekeeper.rule=(Host("${TRAEFIK_HOST:-mintel.localhost}") && PathPrefix("/gatekeeper"))'
- "traefik.http.routers.mintel-me-gatekeeper.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.mintel-me-gatekeeper.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.mintel-me-gatekeeper.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.mintel-me-gatekeeper.service=mintel-me-gatekeeper-svc"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-auth.forwardauth.address=http://${PROJECT_NAME:-mintel-me}-gatekeeper:3000/gatekeeper/api/verify"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-auth.forwardauth.trustForwardHeader=true"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-auth.forwardauth.authRequestHeaders=X-Forwarded-Host,X-Forwarded-Proto,X-Forwarded-For,Cookie"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-auth.forwardauth.authResponseHeaders=X-Auth-User"
- "traefik.http.middlewares.mintel-me-auth.forwardauth.address=http://mintel-me-gatekeeper:3000/gatekeeper/api/verify"
- "traefik.http.middlewares.mintel-me-auth.forwardauth.trustForwardHeader=true"
- "traefik.http.middlewares.mintel-me-auth.forwardauth.authRequestHeaders=X-Forwarded-Host,X-Forwarded-Proto,X-Forwarded-For,Cookie"
- "traefik.http.middlewares.mintel-me-auth.forwardauth.authResponseHeaders=X-Auth-User"
# Forwarded Headers
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
- "traefik.http.middlewares.${PROJECT_NAME:-mintel-me}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
- "traefik.http.middlewares.mintel-me-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
- "traefik.http.middlewares.mintel-me-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
gatekeeper:
profiles: ["gatekeeper"]
mintel-me-gatekeeper:
profiles: [ "gatekeeper" ]
image: registry.infra.mintel.me/mintel/gatekeeper:v1.7.12
container_name: ${PROJECT_NAME:-mintel-me}-gatekeeper
restart: always
networks:
infra:
aliases:
- ${PROJECT_NAME:-mintel-me}-gatekeeper
- mintel-me-gatekeeper
env_file:
- ${ENV_FILE:-.env}
environment:
@@ -75,12 +74,12 @@ services:
GATEKEEPER_PASSWORD: ${GATEKEEPER_PASSWORD:-mintel}
NEXT_PUBLIC_BASE_URL: ${GATEKEEPER_ORIGIN}
labels:
- "traefik.http.services.${PROJECT_NAME:-mintel-me}-gatekeeper.loadbalancer.server.port=3000"
- "traefik.http.services.mintel-me-gatekeeper-svc.loadbalancer.server.port=3000"
- "traefik.docker.network=infra"
- "caddy=gatekeeper.${TRAEFIK_HOST:-mintel.localhost}"
- "caddy.reverse_proxy={{upstreams 3000}}"
directus:
mintel-me-cms:
image: registry.infra.mintel.me/mintel/directus:latest
restart: always
networks:
@@ -92,7 +91,7 @@ services:
KEY: ${DIRECTUS_KEY}
SECRET: ${DIRECTUS_SECRET}
DB_CLIENT: "pg"
DB_HOST: "directus-db"
DB_HOST: "mintel-me-db"
DB_PORT: "5432"
DB_DATABASE: ${DIRECTUS_DB_NAME:-directus}
DB_USER: ${DIRECTUS_DB_USER:-directus}
@@ -106,20 +105,26 @@ services:
- ./directus/extensions:/directus/extensions
- ./directus/schema:/directus/schema
- ./directus/migrations:/directus/migrations
healthcheck:
test: [ "CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:8055/server/ping" ]
interval: 30s
timeout: 5s
retries: 3
start_period: 30s
labels:
- "traefik.enable=true"
- 'traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.rule=${TRAEFIK_DIRECTUS_RULE:-Host("${DIRECTUS_HOST:-cms.mintel.localhost}")}'
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.service=${PROJECT_NAME:-mintel-me}-directus"
- "traefik.http.routers.${PROJECT_NAME:-mintel-me}-directus.middlewares=${PROJECT_NAME:-mintel-me}-forward"
- "traefik.http.services.${PROJECT_NAME:-mintel-me}-directus.loadbalancer.server.port=8055"
- 'traefik.http.routers.mintel-me-cms.rule=${TRAEFIK_DIRECTUS_RULE:-Host("${DIRECTUS_HOST:-cms.mintel.localhost}")}'
- "traefik.http.routers.mintel-me-cms.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
- "traefik.http.routers.mintel-me-cms.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
- "traefik.http.routers.mintel-me-cms.tls=${TRAEFIK_TLS:-false}"
- "traefik.http.routers.mintel-me-cms.service=mintel-me-cms-svc"
- "traefik.http.routers.mintel-me-cms.middlewares=mintel-me-forward"
- "traefik.http.services.mintel-me-cms-svc.loadbalancer.server.port=8055"
- "traefik.docker.network=infra"
- "caddy=${DIRECTUS_HOST:-cms.mintel.localhost}"
- "caddy.reverse_proxy={{upstreams 8055}}"
directus-db:
mintel-me-db:
image: postgres:15-alpine
restart: always
networks:
@@ -142,3 +147,5 @@ networks:
volumes:
directus-db-data:
external: true
name: mintel-me_directus-db-data