Deployment changes

apps/backend/src/data-source.ts

@@ -16,10 +16,9 @@ const AppDataSource = new DataSource({
   password: process.env.NX_DB_PASSWORD,
   database: process.env.NX_DB_DATABASE,
   entities: [User, Donation, Goal, EmailTemplate, EmailSubscriber],
-  migrations: [],
-  // Setting synchronize: true shouldn't be used in production - otherwise you can lose production data
-  synchronize: true,
-  // Removed PluralNamingStrategy - use explicit @Entity('table_name') instead
+  migrations: ['apps/backend/src/migrations/*.ts'],
+  synchronize: false,
+  ssl: process.env.NX_DB_SSL === 'true' ? { rejectUnauthorized: false } : false,
 });
 
 export default AppDataSource;

apps/backend/src/main.ts

@@ -13,8 +13,12 @@ async function bootstrap() {
   const app = await NestFactory.create(AppModule, {
     rawBody: true,
   });
+  const origins = (process.env.CORS_ORIGINS ?? 'http://localhost:4200')
+    .split(',')
+    .map((s) => s.trim())
+    .filter(Boolean);
   app.enableCors({
-    origin: 'http://localhost:4200',
+    origin: origins,
     credentials: true,
   });
 

docker-compose.dev.yml

@@ -51,6 +51,8 @@ services:
       NX_AWS_ACCESS_KEY: ${NX_AWS_ACCESS_KEY}
       NX_AWS_SECRET_ACCESS_KEY: ${NX_AWS_SECRET_ACCESS_KEY}
 
+      STRIPE_SECRET_KEY: ${STRIPE_SECRET_KEY}
+
       VITE_API_BASE_URL: http://localhost:3000
 
     ports:

example.env

@@ -8,6 +8,10 @@
 # ------------------------------------------------------------------------------
 VITE_API_BASE_URL=
 
+# Comma-separated list of allowed CORS origins (defaults to http://localhost:4200 when unset).
+# In prod set to e.g. https://your-wp-site.com,https://your-amplify-domain.amplifyapp.com
+CORS_ORIGINS=
+
 # DATABASE
 NX_DB_HOST=localhost
 NX_DB_USERNAME=postgres

package.json

@@ -67,6 +67,7 @@
     "class-validator": "^0.14.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "dotenv": "^16.4.5",
     "global": "^4.4.0",
     "jwks-rsa": "^3.1.0",
     "lucide-react": "^0.563.0",