chore(deploy): bind vite to localhost behind nginx and enable env proxy for node fetch

Vite is now only an upstream for the nginx :5443 HTTPS entrypoint, and the
API server opts into NODE_USE_ENV_PROXY so Nasdaq/Yahoo requests go through
the host proxy. Ignore the .qoder/ IDE session directory.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-09-25 00:16:34 +08:00
parent 5716267309
commit f0739185d4
3 changed files with 8 additions and 2 deletions

1
web/.gitignore vendored
View File

@@ -4,3 +4,4 @@ data/
.env
.DS_Store
*.log
.qoder/

View File

@@ -4,8 +4,11 @@ set -euo pipefail
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "${ROOT_DIR}"
export PATH="/home/gahow/.nvm/versions/node/v24.13.1/bin:$PATH"
export PATH="/home/gahow/.local/bin:/home/gahow/.nvm/versions/node/v24.13.1/bin:$PATH"
export HOST="127.0.0.1"
export PORT="${PORT:-8787}"
# Node's built-in fetch does not read HTTPS_PROXY unless this opt-in is enabled.
# The configured Nasdaq/Yahoo data sources require the host's local proxy.
export NODE_USE_ENV_PROXY="${NODE_USE_ENV_PROXY:-1}"
exec npx tsx src/server/index.ts

View File

@@ -6,4 +6,6 @@ cd "${ROOT_DIR}"
export PATH="/home/gahow/.nvm/versions/node/v24.13.1/bin:$PATH"
exec npx vite --host 0.0.0.0 --port 5174
# The public HTTPS entrypoint is nginx on :5443. Keep Vite as a localhost-only
# upstream so the development server is not exposed as a second LAN entrypoint.
exec npx vite --host 127.0.0.1 --port 5174