Matthew Meszaros a4f503f620 fix: realtime cannot complete either of its TLS connections (#452) ...

* fix: let the realtime service actually establish its TLS connections, adding the wildcard hostname match fun Redix needs for every managed Redis and a CA bundle option for an RDS Postgres that the system trust store cannot verify

* feat: drop the redundant wget package from the realtime image since busybox already provides it, and fix a comment that read as literal interpolation

* fix: treat a blank DATABASE_SSL_CA_FILE as unset in the realtime config, because compose passes every optional variable through as empty and cacertfile with an empty path is no CA source at all rather than a fallback to the system store

2026-09-12 00:29:34 -07:00

..

air.toml

fix: disable Go VCS stamping in air dev build

2026-05-25 11:43:21 +00:00

backend.Dockerfile

feat: ship AWS's RDS truststore in the backend and consumer images and point the docs at it, because Amazon RDS chains to a root that is in no public trust store so the sslmode=verify-full those docs recommended failed every connection with x509 certificate signed by unknown authority, while deliberately not setting PGSSLROOTCERT by default since an RDS-only store would break a Postgres fronted by a public CA

2026-09-11 05:23:23 +02:00

cli.Dockerfile

feat: give every BuildKit cache mount an explicit id so the Dockerfiles build on hosted builders that reject an unnamed one, which is what stopped the backend, consumer, worker, forms, cli, updater and tracking images from building on Railway with 'flag --mount=type=cache is missing an id argument'

2026-09-10 19:05:01 +02:00

consumer.Dockerfile

feat: ship AWS's RDS truststore in the backend and consumer images and point the docs at it, because Amazon RDS chains to a root that is in no public trust store so the sslmode=verify-full those docs recommended failed every connection with x509 certificate signed by unknown authority, while deliberately not setting PGSSLROOTCERT by default since an RDS-only store would break a Postgres fronted by a public CA

2026-09-11 05:23:23 +02:00

elixir-dev-entrypoint.sh

feat: unify dev-mode hot-reload for go, rust, elixir under make dev

2026-05-25 03:21:42 +00:00

elixir-dev.Dockerfile

feat: unify dev-mode hot-reload for go, rust, elixir under make dev

2026-05-25 03:21:42 +00:00

forms.Dockerfile

feat: give every BuildKit cache mount an explicit id so the Dockerfiles build on hosted builders that reject an unnamed one, which is what stopped the backend, consumer, worker, forms, cli, updater and tracking images from building on Railway with 'flag --mount=type=cache is missing an id argument'

2026-09-10 19:05:01 +02:00

go-dev.Dockerfile

feat: add make watch hot-reload mode for go services via air

2026-05-25 03:07:22 +00:00

realtime.Dockerfile

fix: realtime cannot complete either of its TLS connections (#452)

2026-09-12 00:29:34 -07:00

rust-dev.Dockerfile

feat: unify dev-mode hot-reload for go, rust, elixir under make dev

2026-05-25 03:21:42 +00:00

updater.Dockerfile

feat: give every BuildKit cache mount an explicit id so the Dockerfiles build on hosted builders that reject an unnamed one, which is what stopped the backend, consumer, worker, forms, cli, updater and tracking images from building on Railway with 'flag --mount=type=cache is missing an id argument'

2026-09-10 19:05:01 +02:00

worker.Dockerfile

feat: give every BuildKit cache mount an explicit id so the Dockerfiles build on hosted builders that reject an unnamed one, which is what stopped the backend, consumer, worker, forms, cli, updater and tracking images from building on Railway with 'flag --mount=type=cache is missing an id argument'

2026-09-10 19:05:01 +02:00