feat: Marketing site

2026-07-22 16:50:13 +01:00
parent 7a3b8cb700
commit 693d59a3e2
51 changed files with 10656 additions and 12 deletions
@@ -0,0 +1,48 @@
+# Public marketing site and its backend. Deliberately kept out of
+# docker-compose.yml so a self-hosted install never runs either of them:
+#
+#   self-hosted:  docker compose up -d
+#   vantage.sh:   docker compose -f docker-compose.yml -f docker-compose.site.yml up -d
+#
+# sitesvc owns both public forms end to end. It shares MongoDB with the control
+# plane — that is how a new tenant becomes visible to the app — but shares no
+# code and no process with it. The control plane has no public signup endpoint.
+services:
+    site:
+        image: gitea.hostxtra.co.uk/mrhid6/vantage/site:latest
+        restart: unless-stopped
+        ports:
+            - 3001:3000
+        depends_on:
+            - sitesvc
+
+    sitesvc:
+        image: gitea.hostxtra.co.uk/mrhid6/vantage/sitesvc:latest
+        restart: unless-stopped
+        ports:
+            - 8082:8082
+        environment:
+            PORT: "8082"
+            # Must point at the same database the control plane uses, or the app
+            # will not see organisations created here. The database name comes
+            # from the URI path:
+            #   mongodb://user:pass@host:27017/vantage?authSource=vantage
+            # A URI with no database is refused at boot rather than defaulted.
+            MONGO_URI: ${MONGO_URI:-}
+            # Public base URL of this service. Verification links are built from
+            # it, so an unset or wrong value produces links that go nowhere.
+            PUBLIC_URL: ${SITE_PUBLIC_URL:-}
+            # Where a verified owner is sent to sign in.
+            APP_LOGIN_URL: ${SITE_APP_LOGIN_URL:-}
+            # Origins allowed to POST the forms. Unset means every cross-origin
+            # browser request is refused.
+            SITE_ORIGIN: ${SITE_ORIGIN:-}
+            # Only enable behind a proxy that overwrites X-Forwarded-For;
+            # otherwise clients can spoof their way past the rate limiter.
+            TRUST_PROXY: ${SITE_TRUST_PROXY:-false}
+            SMTP_HOST: ${SITE_SMTP_HOST:-}
+            SMTP_PORT: ${SITE_SMTP_PORT:-587}
+            SMTP_USERNAME: ${SITE_SMTP_USERNAME:-}
+            SMTP_PASSWORD: ${SITE_SMTP_PASSWORD:-}
+            SMTP_FROM: ${SITE_SMTP_FROM:-}
+            SMTP_TO: ${SITE_SMTP_TO:-support@hostxtra.co.uk}