fix: harden production release deployment

2026-07-29 17:36:03 +02:00
parent 5e2453c29a
commit a4a71ebc23
15 changed files with 74 additions and 51 deletions
@@ -26,7 +26,10 @@ RUN uv sync --frozen --no-dev --no-install-project
 COPY . .
 RUN uv sync --frozen --no-dev \
    && chmod +x scripts/*.sh \
-    && python manage.py collectstatic --noinput \
+    && DJANGO_DEBUG=0 \
+       DJANGO_SECRET_KEY=build-only-static-manifest-key-not-used-at-runtime-000000000000 \
+       PUBLIC_BASE_URL=https://build.invalid \
+       python manage.py collectstatic --noinput \
    && mkdir -p /app/media /app/logs /app/local \
    && chown -R app:app /app \
    && chmod -R 0775 /app/media /app/logs /app/local /app/staticfiles /app/.venv