Dev-only environment config so this dev box's stack is reachable and usable through the Pangolin/newt tunnel. No production code, image, or compose is touched.
Changes
docker-compose.dev.yml — set DEV_AUTH_BYPASS: 'true' on the api service. The dev stack ran NODE_ENV=development but without the bypass, so it enforced OIDC even though no Authelia is reachable on the dev box. Guarded by NODE_ENV !== 'production', and the production image bakes NODE_ENV=production, so it can never activate in a shipped image.
apps/pwa/vite.config.ts — add allowedHosts: true and host: true. Vite's default host check returned 403 ("Blocked request") for the tunnel's Host header, which newt read as unhealthy on / and /health. Now the dev server accepts the tunnel hostname and listens on all interfaces.
Verification
pnpm format:check, pnpm lint, pnpm typecheck all green locally.
Foreign-Host request to Vite now returns 200 on /, /health (proxied to the API), and /api/me.
Dev-only environment config so this dev box's stack is reachable and usable through the Pangolin/newt tunnel. No production code, image, or compose is touched.
## Changes
- **docker-compose.dev.yml** — set `DEV_AUTH_BYPASS: 'true'` on the `api` service. The dev stack ran `NODE_ENV=development` but without the bypass, so it enforced OIDC even though no Authelia is reachable on the dev box. Guarded by `NODE_ENV !== 'production'`, and the production image bakes `NODE_ENV=production`, so it can never activate in a shipped image.
- **apps/pwa/vite.config.ts** — add `allowedHosts: true` and `host: true`. Vite's default host check returned 403 ("Blocked request") for the tunnel's Host header, which newt read as unhealthy on `/` and `/health`. Now the dev server accepts the tunnel hostname and listens on all interfaces.
## Verification
- `pnpm format:check`, `pnpm lint`, `pnpm typecheck` all green locally.
- Foreign-Host request to Vite now returns 200 on `/`, `/health` (proxied to the API), and `/api/me`.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
The api service in docker-compose.dev.yml ran with NODE_ENV=development but
without DEV_AUTH_BYPASS, so the dockerized dev stack enforced OIDC even though
no Authelia is reachable on the dev box. Set DEV_AUTH_BYPASS=true on the dev
override only; guarded by NODE_ENV!='production' and the production image bakes
NODE_ENV=production, so it can never reach a shipped image.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Reaching the dev PWA through the Pangolin/newt tunnel failed: Vite's default
host check 403s any non-localhost Host header ('Blocked request'), which the
tunnel health checks on / and /health read as unhealthy. Add allowedHosts:true
and host:true so the dev server accepts the tunnel hostname and listens on all
interfaces. Dev-only config; the production image serves the built PWA itself.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Dev-only environment config so this dev box's stack is reachable and usable through the Pangolin/newt tunnel. No production code, image, or compose is touched.
Changes
DEV_AUTH_BYPASS: 'true'on theapiservice. The dev stack ranNODE_ENV=developmentbut without the bypass, so it enforced OIDC even though no Authelia is reachable on the dev box. Guarded byNODE_ENV !== 'production', and the production image bakesNODE_ENV=production, so it can never activate in a shipped image.allowedHosts: trueandhost: true. Vite's default host check returned 403 ("Blocked request") for the tunnel's Host header, which newt read as unhealthy on/and/health. Now the dev server accepts the tunnel hostname and listens on all interfaces.Verification
pnpm format:check,pnpm lint,pnpm typecheckall green locally./,/health(proxied to the API), and/api/me.🤖 Generated with Claude Code
Reaching the dev PWA through the Pangolin/newt tunnel failed: Vite's default host check 403s any non-localhost Host header ('Blocked request'), which the tunnel health checks on / and /health read as unhealthy. Add allowedHosts:true and host:true so the dev server accepts the tunnel hostname and listens on all interfaces. Dev-only config; the production image serves the built PWA itself. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>