Frontend Dockerfile becomes multi-stage (deps/builder/production/dev) with a Next.js standalone runtime and a 1GB heap cap to fit this host. Compose targets the production stage, binds the frontend to 127.0.0.1:3001 for the 1Panel openresty proxy, drops dev volume mounts and the publicly exposed postgres/backend ports, and passes AUTH_URL/NEXTAUTH_URL/AUTH_TRUST_HOST so NextAuth works behind the reverse proxy. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
771 B
771 B