Fix broken services: prisma port, pg_hba path, vault URL, auth startup

Co-authored-by: anonymousc <61332280+anonymousc@users.noreply.github.com>

Author: Copilot

backend/devops/backend-services/auth/Dockerfile

@@ -1,7 +1,30 @@
+FROM node:alpine AS build
+
+WORKDIR /app
+
+COPY package.json package-lock.json ./
+
+RUN npm ci
+
+COPY . .
+
+RUN npm run build
+
 FROM node:alpine
 
-RUN apk add jq curl && adduser -D auth 
+RUN apk add jq curl
+
+WORKDIR /app
+
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/node_modules ./node_modules
+
+COPY --chmod=700 ./devops/backend-services/auth/auth.sh /usr/local/bin/auth.sh
+
+RUN adduser -D auth && \
+    chown -R auth:auth /app && \
+    chown auth:auth /usr/local/bin/auth.sh
 
-COPY --chown=auth:auth --chmod=700 ./auth.sh /usr/local/bin/auth.sh
+USER auth
 
 ENTRYPOINT ["auth.sh"]

backend/devops/backend-services/auth/auth.sh

@@ -12,4 +12,4 @@ export DATABASE_URL=$(jq -r .data.data.database_url /tmp/data)
 
 rm -f /tmp/data
 
-exec node
+exec node /app/dist/main.js

backend/devops/backend-services/prisma/tools/prisma.sh

@@ -2,7 +2,7 @@
 
 set -eu
 
-curl -X GET http://vault:6666/v1/secret/data/postgres --header "X-Vault-Token: $(jq -r .auth.client_token < /token/token)" --silent --output /token/data
+curl -X GET http://vault:$PORT_VAULT/v1/secret/data/postgres --header "X-Vault-Token: $(jq -r .auth.client_token < /token/token)" --silent --output /token/data
 
 jq -r .data.data.password < /token/data > /token/passfile
 
@@ -22,7 +22,7 @@ rm -rf /token/passfile
 
 pg_ctl  -o "-p $PGPORT -c listen_addresses='*'" start 
 
-echo "host all all 0.0.0.0/0 scram-sha-256" >> /var/lib/postgresql/18/docker/pg_hba.conf
+echo "host all all 0.0.0.0/0 scram-sha-256" >> $PGDATA/pg_hba.conf
 
 export PGPASSWORD=$(jq -r .data.data.password < /token/data)
 createdb -U $(jq -r .data.data.username < /token/data) prisma 

backend/devops/backend-services/security/hashicorp-vault/tools/entrypoint.sh

@@ -17,7 +17,7 @@ vault policy write postgres /tools/policy.hcl > /dev/null
 
 DB_PASS=$(openssl rand -hex 12)
 DB_USER=$(openssl rand -hex 12)
-DATABASE_URL="postgresql://${DB_USER}:${DB_PASS}@localhost:${PORT_POSTGRES}/prisma?schema=public"
+DATABASE_URL="postgresql://${DB_USER}:${DB_PASS}@database:${PORT_POSTGRES}/prisma?schema=public"
 
 vault kv put -mount=secret postgres username="$DB_USER" password="$DB_PASS" database_url="$DATABASE_URL" > /dev/null
 

backend/devops/docker-compose.yml

@@ -20,8 +20,12 @@ services:
       retries: 3
     restart : on-failure
   auth:
-    build: ./backend-services/auth/
+    build:
+      context: ../../
+      dockerfile: devops/backend-services/auth/Dockerfile
     container_name: auth
+    env_file:
+      - .env
     networks:
       - saas
     volumes: