fix: secure deploy API, remove Docker-in-Docker, add DB backup
- Add web+superadmin middleware to /api/deploy routes - Return JSON 403 in EnsureUserIsSuperadmin for API requests - Remove Docker CLI and docker.sock from app container - Replace docker compose restart with supervisorctl - Add mysqldump backup step before migrations
This commit is contained in:
@@ -3,5 +3,7 @@
|
||||
use App\Containers\Dashboard\UI\API\Controllers\DeployController;
|
||||
use Illuminate\Support\Facades\Route;
|
||||
|
||||
Route::post('/deploy', [DeployController::class, 'store']);
|
||||
Route::get('/deploy/status', [DeployController::class, 'status']);
|
||||
Route::middleware(['web', 'superadmin'])->group(function () {
|
||||
Route::post('/deploy', [DeployController::class, 'store']);
|
||||
Route::get('/deploy/status', [DeployController::class, 'status']);
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user