fix: secure deploy API, remove Docker-in-Docker, add DB backup

- Add web+superadmin middleware to /api/deploy routes
- Return JSON 403 in EnsureUserIsSuperadmin for API requests
- Remove Docker CLI and docker.sock from app container
- Replace docker compose restart with supervisorctl
- Add mysqldump backup step before migrations
This commit is contained in:
F4ilji
2026-07-02 17:26:38 +05:00
parent 6ed11cab2d
commit 48ffd217b8
5 changed files with 39 additions and 26 deletions
@@ -3,5 +3,7 @@
use App\Containers\Dashboard\UI\API\Controllers\DeployController;
use Illuminate\Support\Facades\Route;
Route::post('/deploy', [DeployController::class, 'store']);
Route::get('/deploy/status', [DeployController::class, 'status']);
Route::middleware(['web', 'superadmin'])->group(function () {
Route::post('/deploy', [DeployController::class, 'store']);
Route::get('/deploy/status', [DeployController::class, 'status']);
});