Allow prod host through vite preview

Frontend: tsc was running before vite, but the routeTree.gen.ts that
the routes import is generated by the Vite plugin at startup — fresh
container had no cache, so tsc failed before vite ever ran. Reverse
the order: vite first (generates routeTree), then tsc --noEmit
validates types.

Backend: run `directus database migrate:latest` before start; the
deployed SQLite is on an old schema (Directus 10.x) and `directus
start` aborts on the missing `searchable` column.

Both services: set CI=true so pnpm doesn't prompt for `node_modules`
purge on a non-TTY container, and use `sh -ec` so a failed step halts
the script instead of falling through to `pnpm run start`.

.gitignore

@@ -11,6 +11,10 @@ node_modules/
 package-lock.json
 yarn.lock
 
+# pnpm: only the workspace-root lockfile is authoritative
+backend/pnpm-lock.yaml
+frontend/pnpm-lock.yaml
+
 # Mac
 .DS_Store
 

backend/package.json

@@ -18,13 +18,5 @@
   "devDependencies": {
     "nodemon": "3.1.14",
     "uuid": "14.0.0"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "argon2",
-      "isolated-vm",
-      "sharp",
-      "sqlite3"
-    ]
   }
 }

docker-compose.yml

@@ -4,51 +4,59 @@ networks:
 
 services:
   backend:
-    image: node:lts-bookworm
+    image: node:22-bookworm
     container_name: pca_pijac_backend
     restart: unless-stopped
     env_file: ./backend/.env.production
+    working_dir: /repo/backend
     networks:
       - main
     volumes:
-      - ./backend:/app
+      - .:/repo
       - ./data:/data
     labels:
       caddy: admin.pca-pijac.dev.civokram.com
       caddy.reverse_proxy: '{{upstreams 8055}}'
+    environment:
+      CI: "true"
     command:
       - sh
-      - -c
+      - -ec
       - |
         npm i -g pnpm
-        cd /app
-        pnpm install --production
+        cd /repo
+        pnpm install --filter ./backend... --frozen-lockfile --prod
+        cd /repo/backend
         rm -f .env
+        pnpm exec directus database migrate:latest
         pnpm run start
 
   frontend:
-    image: node:lts-bookworm
+    image: node:22-bookworm
     container_name: pca_pijac_frontend
     restart: unless-stopped
     env_file: ./frontend/.env.production
+    working_dir: /repo/frontend
     depends_on:
       - backend
     networks:
       - main
     volumes:
-      - ./frontend:/app
+      - .:/repo
     labels:
       caddy: pca-pijac.dev.civokram.com
       caddy.reverse_proxy: '{{upstreams 3000}}'
+    environment:
+      CI: "true"
     command:
       - sh
-      - -c
+      - -ec
       - |
         npm i -g pnpm
-        cd /app
-        pnpm install --frozen-lockfile
+        cd /repo
+        pnpm install --filter ./frontend... --frozen-lockfile
+        cd /repo/frontend
         sleep 10
         rm -f .env
         pnpm run build
-        pnpm prune --prod
         pnpm run start

frontend/package.json

@@ -10,7 +10,7 @@
   "packageManager": "pnpm@10.33.2",
   "scripts": {
     "dev": "vite",
-    "build": "tsc -b && vite build",
+    "build": "vite build && tsc -b --noEmit",
     "preview": "vite preview",
     "start": "vite preview --host 0.0.0.0 --port 3000",
     "typecheck": "tsc -b --noEmit",
@@ -47,10 +47,5 @@
     "tailwindcss": "4.2.4",
     "typescript": "6.0.3",
     "vite": "8.0.10"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
   }
 }

frontend/vite.config.ts

@@ -24,6 +24,10 @@ export default defineConfig({
   server: {
     port: 3000,
   },
+  preview: {
+    port: 3000,
+    allowedHosts: ['pca-pijac.dev.civokram.com'],
+  },
   build: {
     outDir: 'node_modules/.cache/dist',
     emptyOutDir: true,