feat: complete release readiness work

- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates
This commit is contained in:
cesnimda
2026-07-31 16:54:16 +02:00
parent a23c3dfc97
commit ce76046a29
1634 changed files with 6889 additions and 135429 deletions
+5 -2
View File
@@ -39,9 +39,9 @@ This keeps secrets outside the uploaded repo checkout so they are not wiped by C
The production frontend already proxies `/api` to the backend container via Nginx.
Recommended default:
- leave `REACT_APP_API_BASE_URL` unset/empty in production
- leave `NEXT_PUBLIC_API_BASE_URL` unset/empty in production
Only set `REACT_APP_API_BASE_URL` if the UI must call a different external API origin on purpose.
Only set `NEXT_PUBLIC_API_BASE_URL` if the UI must call a different external API origin on purpose.
## Example production `.env`
```env
@@ -51,6 +51,9 @@ AUTH_JWT_KEY=replace_with_long_random_secret
AUTH_ADMIN_EMAIL=you@example.com
AUTH_ADMIN_PASSWORD=replace_with_strong_password
APP_PUBLIC_BASE_URL=https://your-domain.example
STRIPE_SECRET_KEY=sk_live_...
STRIPE_PRICE_PREMIUM=price_...
STRIPE_WEBHOOK_SECRET=whsec_...
AI_SERVICE_BASE_URL=http://ai-service:8001
OLLAMA_BASE_URL=http://ollama:11434
OLLAMA_MODEL=qwen2.5:7b