Semih Yesilyurt
72c3fe0dc2
Formbricks CE turned out to gate person-based targeting (setUserId/attributes → 403 enterprise) — the exact flexibility surveys need. PostHog already holds the person properties, so surveys move back there in API mode: posthog-js evaluates eligibility (event triggers, targeting flags like subscription_status=active, wait periods, per-distinct_id dedup) via getActiveMatchingSurveys, and we render the popover ourselves — zero PostHog branding, sase.tr dark-theme styling. - lib/surveys.ts: display manager + capture payload builders that mirror posthog-js's own "survey shown/dismissed/sent" shapes exactly ($survey_response_<qid>, $set $survey_dismissed/<id>[/iter], seenSurvey_*, lastSeenSurveyDate) so the PostHog Surveys results UI works unchanged - components/survey-popover.tsx: single_choice (+Diğer), open text, rating/NPS - posthog.ts: capture/pageview/identify now schedule survey checks; register deploy_env (dev.sase.tr ships the key now → staging traffic is filterable) - remove @formbricks/js, its CSP entries and build args Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
228 lines
11 KiB
YAML
228 lines
11 KiB
YAML
services:
|
|
api:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
args:
|
|
- VITE_FARO_ENABLED=${VITE_FARO_ENABLED:-false}
|
|
- VITE_FARO_COLLECTOR_URL=${VITE_FARO_COLLECTOR_URL:-}
|
|
- VITE_POSTHOG_KEY=${VITE_POSTHOG_KEY:-}
|
|
- VITE_META_PIXEL_ID=${VITE_META_PIXEL_ID:-}
|
|
- VITE_CHATWOOT_BASE_URL=${VITE_CHATWOOT_BASE_URL:-}
|
|
- VITE_CHATWOOT_WEBSITE_TOKEN=${VITE_CHATWOOT_WEBSITE_TOKEN:-}
|
|
# Sentry browser SDK — gated on DSN presence (unset = skip init).
|
|
# VITE_* args must be build-time; runtime env won't reach the bundle.
|
|
- VITE_SENTRY_DSN=${VITE_SENTRY_DSN:-}
|
|
- VITE_SENTRY_ENVIRONMENT=${VITE_SENTRY_ENVIRONMENT:-production}
|
|
- VITE_SENTRY_RELEASE=${VITE_SENTRY_RELEASE:-}
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=4000
|
|
- DATABASE_URL=${DATABASE_URL}
|
|
- REDIS_HOST=sase-redis
|
|
- REDIS_PORT=6379
|
|
- REDIS_PASSWORD=${REDIS_PASSWORD}
|
|
- BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
|
|
- BETTER_AUTH_URL=${BETTER_AUTH_URL}
|
|
# Süper Panel ↔ Sase.tr internal admin token (X-Internal-Token header)
|
|
- INTERNAL_API_TOKEN=${INTERNAL_API_TOKEN:-}
|
|
- INTERNAL_IMPERSONATION_SECRET=${INTERNAL_IMPERSONATION_SECRET:-}
|
|
- GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}
|
|
- GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET:-}
|
|
- MINIO_ENDPOINT=http://minio-global:9000
|
|
- MINIO_ACCESS_KEY=${MINIO_ACCESS_KEY}
|
|
- MINIO_SECRET_KEY=${MINIO_SECRET_KEY}
|
|
- MINIO_BUCKET_NAME=${MINIO_BUCKET_NAME:-sase-schemas}
|
|
- MINIO_PUBLIC_URL=${MINIO_PUBLIC_URL}
|
|
- MINIO_USE_SSL=false
|
|
- CORS_ORIGIN=${CORS_ORIGIN}
|
|
- STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY:-}
|
|
- STRIPE_PUBLISHABLE_KEY=${STRIPE_PUBLISHABLE_KEY:-}
|
|
- PL24_BASE_URL=${PL24_BASE_URL:-https://www.partslink24.com}
|
|
- PL24_COMPANY_CODE=${PL24_COMPANY_CODE:-}
|
|
- PL24_USERNAME=${PL24_USERNAME:-}
|
|
- PL24_PASSWORD=${PL24_PASSWORD:-}
|
|
- PL24_COMPANY_CODE_2=${PL24_COMPANY_CODE_2:-}
|
|
- PL24_USERNAME_2=${PL24_USERNAME_2:-}
|
|
- PL24_PASSWORD_2=${PL24_PASSWORD_2:-}
|
|
- PL24_PROXY_DE=${PL24_PROXY_DE:-}
|
|
- EMEX_USERNAME=${EMEX_USERNAME:-}
|
|
- EMEX_PASSWORD=${EMEX_PASSWORD:-}
|
|
- EMEX_USE_PROXY=${EMEX_USE_PROXY:-false}
|
|
- EMEX_PROXY_HOST=${EMEX_PROXY_HOST:-74.81.81.81}
|
|
- EMEX_PROXY_USER=${EMEX_PROXY_USER:-1726bbe361918676d44e}
|
|
- EMEX_PROXY_PASS=${EMEX_PROXY_PASS:-f11c7b6128cc86c6}
|
|
- PCAT_USE_PROXY=${PCAT_USE_PROXY:-true}
|
|
- PCAT_PROXY_HOST=${PCAT_PROXY_HOST:-gw.dataimpulse.com}
|
|
- PCAT_PROXY_USER=${PCAT_PROXY_USER:-}
|
|
- PCAT_PROXY_PASS=${PCAT_PROXY_PASS:-}
|
|
- POSTAL_API_URL=${POSTAL_API_URL:-}
|
|
- POSTAL_API_KEY=${POSTAL_API_KEY:-}
|
|
- POSTAL_FROM_ADDRESS=${POSTAL_FROM_ADDRESS:-noreply@sase.tr}
|
|
- POSTAL_FROM_NAME=${POSTAL_FROM_NAME:-Sase.tr}
|
|
# Novu lifecycle e-mail automation (Tailscale-only; sends via Postal)
|
|
- NOVU_API_URL=${NOVU_API_URL:-https://api.bildirim.semih.ai}
|
|
- NOVU_API_KEY=${NOVU_API_KEY:-}
|
|
- APP_PUBLIC_URL=${APP_PUBLIC_URL:-https://sase.tr}
|
|
- MAILTRACK_SECRET=${MAILTRACK_SECRET:-}
|
|
# PostHog server-side analytics (payments, subscription lifecycle, $revenue).
|
|
# Empty key → PostHogService no-ops (server-side analytics disabled).
|
|
- POSTHOG_API_KEY=${POSTHOG_API_KEY:-}
|
|
# Personal/secure key → LOCAL feature-flag evaluation (source kill switches,
|
|
# guarded decode rollout, remote config). Empty → flags fail open (inert).
|
|
- POSTHOG_PERSONAL_API_KEY=${POSTHOG_PERSONAL_API_KEY:-}
|
|
# "false" on non-prod → evaluate flags but DON'T emit analytics to prod project.
|
|
- POSTHOG_CAPTURE_ENABLED=${POSTHOG_CAPTURE_ENABLED:-}
|
|
- POSTHOG_HOST=${POSTHOG_HOST:-https://eu.i.posthog.com}
|
|
# Meta Conversions API — server-side signup tracking. Empty → CAPI no-ops.
|
|
- META_CAPI_PIXEL_ID=${META_CAPI_PIXEL_ID:-}
|
|
- META_CAPI_ACCESS_TOKEN=${META_CAPI_ACCESS_TOKEN:-}
|
|
- META_CAPI_TEST_EVENT_CODE=${META_CAPI_TEST_EVENT_CODE:-}
|
|
- OTEL_ENABLED=${OTEL_ENABLED:-false}
|
|
- OTEL_EXPORTER_OTLP_ENDPOINT=${OTEL_EXPORTER_OTLP_ENDPOINT:-}
|
|
- OTEL_EXPORTER_OTLP_HEADERS=${OTEL_EXPORTER_OTLP_HEADERS:-}
|
|
- OTEL_SERVICE_NAME=${OTEL_SERVICE_NAME:-sase-api}
|
|
- OTEL_TRACE_SAMPLE_RATE=${OTEL_TRACE_SAMPLE_RATE:-1.0}
|
|
- ML_PREDICTION_ENABLED=${ML_PREDICTION_ENABLED:-false}
|
|
# Chatwoot live-chat widget — HMAC secret for verified user identity
|
|
- CHATWOOT_HMAC_TOKEN=${CHATWOOT_HMAC_TOKEN:-}
|
|
# Local catalog-dump lookup (CategoriesService → PcatSourceDb / EmexSourceDb).
|
|
# Defaults off; when CATALOG_SOURCE_DB_ENABLED=true + URLs set, parts fetches
|
|
# hit the dump first and only fall through to live upstream on miss.
|
|
- CATALOG_SOURCE_DB_ENABLED=${CATALOG_SOURCE_DB_ENABLED:-false}
|
|
- PCAT_SOURCE_DB_URL=${PCAT_SOURCE_DB_URL:-}
|
|
- EMEX_SOURCE_DB_URL=${EMEX_SOURCE_DB_URL:-}
|
|
# Per-source kill switches. pcat default off (dump doesn't cover TR vehicles).
|
|
- EMEX_SOURCE_DB_ENABLED=${EMEX_SOURCE_DB_ENABLED:-true}
|
|
- PCAT_SOURCE_DB_ENABLED=${PCAT_SOURCE_DB_ENABLED:-false}
|
|
# Per-catalog parts-lookup allowlist (comma-separated). Empty → all
|
|
# fetchCategoryParts calls return null. See sase-emex-source-db-safety
|
|
# memory: catalog-wide bridge had 7-114x noise; only add a catalog once
|
|
# its per-vehicle bridge is wired & OEM-verified.
|
|
- EMEX_SOURCE_DB_ALLOWED_CATALOGS=${EMEX_SOURCE_DB_ALLOWED_CATALOGS:-}
|
|
# P snapshot lookup (db `td`) backing the OEM detail page. Off until
|
|
# both vars are set in Coolify; see sase-prod-db-api-access memory.
|
|
- P_DB_ENABLED=${P_DB_ENABLED:-false}
|
|
- P_DB_URL=${P_DB_URL:-}
|
|
# Central Directus CMS (Süper Panel project on Coolify). Prod and staging
|
|
# point at the SAME instance so blog content is shared across envs.
|
|
# Internal docker-network URL — both stacks join the `coolify` network.
|
|
- DIRECTUS_URL=${DIRECTUS_URL:-}
|
|
- DIRECTUS_TOKEN=${DIRECTUS_TOKEN:-}
|
|
- DIRECTUS_PROJECT=${DIRECTUS_PROJECT:-sase}
|
|
# Bearer token for POST /blog/posts/internal (Süper Panel n8n pipeline)
|
|
- BLOG_AUTOMATION_TOKEN=${BLOG_AUTOMATION_TOKEN:-}
|
|
depends_on:
|
|
sase-redis:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://127.0.0.1:4000/api/health"]
|
|
interval: 15s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 30s
|
|
labels:
|
|
- "traefik.docker.network=coolify"
|
|
expose:
|
|
- "4000"
|
|
networks:
|
|
- default
|
|
- coolify
|
|
|
|
worker:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
command: ["node", "--enable-source-maps", "apps/api/dist/worker.js"]
|
|
environment:
|
|
- NODE_ENV=production
|
|
- DATABASE_URL=${DATABASE_URL}
|
|
- REDIS_HOST=sase-redis
|
|
- REDIS_PORT=6379
|
|
- REDIS_PASSWORD=${REDIS_PASSWORD}
|
|
- MINIO_ENDPOINT=http://minio-global:9000
|
|
- MINIO_ACCESS_KEY=${MINIO_ACCESS_KEY}
|
|
- MINIO_SECRET_KEY=${MINIO_SECRET_KEY}
|
|
- MINIO_BUCKET_NAME=${MINIO_BUCKET_NAME:-sase-schemas}
|
|
- MINIO_PUBLIC_URL=${MINIO_PUBLIC_URL}
|
|
- MINIO_USE_SSL=false
|
|
- PL24_BASE_URL=${PL24_BASE_URL:-https://www.partslink24.com}
|
|
- PL24_COMPANY_CODE=${PL24_COMPANY_CODE:-}
|
|
- PL24_USERNAME=${PL24_USERNAME:-}
|
|
- PL24_PASSWORD=${PL24_PASSWORD:-}
|
|
- PL24_COMPANY_CODE_2=${PL24_COMPANY_CODE_2:-}
|
|
- PL24_USERNAME_2=${PL24_USERNAME_2:-}
|
|
- PL24_PASSWORD_2=${PL24_PASSWORD_2:-}
|
|
- PL24_PROXY_DE=${PL24_PROXY_DE:-}
|
|
- EMEX_USERNAME=${EMEX_USERNAME:-}
|
|
- EMEX_PASSWORD=${EMEX_PASSWORD:-}
|
|
- EMEX_USE_PROXY=${EMEX_USE_PROXY:-false}
|
|
- EMEX_PROXY_HOST=${EMEX_PROXY_HOST:-74.81.81.81}
|
|
- EMEX_PROXY_USER=${EMEX_PROXY_USER:-1726bbe361918676d44e}
|
|
- EMEX_PROXY_PASS=${EMEX_PROXY_PASS:-f11c7b6128cc86c6}
|
|
- PCAT_USE_PROXY=${PCAT_USE_PROXY:-true}
|
|
- PCAT_PROXY_HOST=${PCAT_PROXY_HOST:-gw.dataimpulse.com}
|
|
- PCAT_PROXY_USER=${PCAT_PROXY_USER:-}
|
|
- PCAT_PROXY_PASS=${PCAT_PROXY_PASS:-}
|
|
# Novu lifecycle e-mail automation — the worker fires trial-ending + win-back
|
|
- NOVU_API_URL=${NOVU_API_URL:-https://api.bildirim.semih.ai}
|
|
- NOVU_API_KEY=${NOVU_API_KEY:-}
|
|
- APP_PUBLIC_URL=${APP_PUBLIC_URL:-https://sase.tr}
|
|
- MAILTRACK_SECRET=${MAILTRACK_SECRET:-}
|
|
# PostHog server-side analytics (payments, subscription lifecycle, $revenue).
|
|
# Empty key → PostHogService no-ops (server-side analytics disabled).
|
|
- POSTHOG_API_KEY=${POSTHOG_API_KEY:-}
|
|
# Personal/secure key → LOCAL feature-flag evaluation (source kill switches,
|
|
# guarded decode rollout, remote config). Empty → flags fail open (inert).
|
|
- POSTHOG_PERSONAL_API_KEY=${POSTHOG_PERSONAL_API_KEY:-}
|
|
# "false" on non-prod → evaluate flags but DON'T emit analytics to prod project.
|
|
- POSTHOG_CAPTURE_ENABLED=${POSTHOG_CAPTURE_ENABLED:-}
|
|
- POSTHOG_HOST=${POSTHOG_HOST:-https://eu.i.posthog.com}
|
|
# Meta Conversions API — server-side signup tracking. Empty → CAPI no-ops.
|
|
- META_CAPI_PIXEL_ID=${META_CAPI_PIXEL_ID:-}
|
|
- META_CAPI_ACCESS_TOKEN=${META_CAPI_ACCESS_TOKEN:-}
|
|
- META_CAPI_TEST_EVENT_CODE=${META_CAPI_TEST_EVENT_CODE:-}
|
|
- OTEL_ENABLED=${OTEL_ENABLED:-false}
|
|
- OTEL_EXPORTER_OTLP_ENDPOINT=${OTEL_EXPORTER_OTLP_ENDPOINT:-}
|
|
- OTEL_EXPORTER_OTLP_HEADERS=${OTEL_EXPORTER_OTLP_HEADERS:-}
|
|
- OTEL_SERVICE_NAME=${OTEL_SERVICE_NAME:-sase-worker}
|
|
- OTEL_TRACE_SAMPLE_RATE=${OTEL_TRACE_SAMPLE_RATE:-1.0}
|
|
# Local catalog-dump lookup (worker drives prefetch which uses CategoriesService).
|
|
- CATALOG_SOURCE_DB_ENABLED=${CATALOG_SOURCE_DB_ENABLED:-false}
|
|
- PCAT_SOURCE_DB_URL=${PCAT_SOURCE_DB_URL:-}
|
|
- EMEX_SOURCE_DB_URL=${EMEX_SOURCE_DB_URL:-}
|
|
# Per-source kill switches. pcat default off (dump doesn't cover TR vehicles).
|
|
- EMEX_SOURCE_DB_ENABLED=${EMEX_SOURCE_DB_ENABLED:-true}
|
|
- PCAT_SOURCE_DB_ENABLED=${PCAT_SOURCE_DB_ENABLED:-false}
|
|
# Per-catalog parts-lookup allowlist (comma-separated). Empty → all
|
|
# fetchCategoryParts calls return null. See sase-emex-source-db-safety
|
|
# memory: catalog-wide bridge had 7-114x noise; only add a catalog once
|
|
# its per-vehicle bridge is wired & OEM-verified.
|
|
- EMEX_SOURCE_DB_ALLOWED_CATALOGS=${EMEX_SOURCE_DB_ALLOWED_CATALOGS:-}
|
|
depends_on:
|
|
sase-redis:
|
|
condition: service_healthy
|
|
networks:
|
|
- default
|
|
- coolify
|
|
|
|
sase-redis:
|
|
image: redis:7.4-alpine
|
|
command: redis-server --requirepass ${REDIS_PASSWORD}
|
|
volumes:
|
|
- redis_data:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
networks:
|
|
- default
|
|
|
|
volumes:
|
|
redis_data:
|
|
|
|
networks:
|
|
coolify:
|
|
external: true
|