From 2e13142908f8f778dea198f38856fa99705beb68 Mon Sep 17 00:00:00 2001 From: Scott McDermid Date: Thu, 29 Oct 2026 10:31:47 -0700 Subject: [PATCH 1/3] ensure we use a yarn-supported image of node --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 4c0dbf130..db8ead07f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM --platform=linux/amd64 node:lts-alpine +FROM --platform=linux/amd64 node:24-alpine RUN apk add --no-cache python3 make g++ bash openssl SHELL ["/bin/bash", "-c"] USER node From c3c4e66f5fb692ed6c4fd7e73e10943b551f99d9 Mon Sep 17 00:00:00 2001 From: Scott McDermid Date: Thu, 29 Oct 2026 11:08:34 -0700 Subject: [PATCH 2/3] fix(docker): use MYSQL_CONNECTION_URI with sslMode=REQUIRED for users-service Co-authored-by: Cursor --- docker-compose-prod.yml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docker-compose-prod.yml b/docker-compose-prod.yml index bbcdff03c..8fe065b8f 100644 --- a/docker-compose-prod.yml +++ b/docker-compose-prod.yml @@ -23,11 +23,7 @@ services: ports: - 3567:3567 environment: - MYSQL_DATABASE_NAME: supertokens - MYSQL_USER: ${SUPERTOKENS_DB_USER} - MYSQL_PASSWORD: ${SUPERTOKENS_DB_PASSWORD} - MYSQL_HOST: ${MAIN_DB_HOST} - MYSQL_PORT: ${MAIN_DB_PORT} + MYSQL_CONNECTION_URI: "mysql://${SUPERTOKENS_DB_USER}:${SUPERTOKENS_DB_PASSWORD}@${MAIN_DB_HOST}:${MAIN_DB_PORT}/supertokens?sslMode=REQUIRED" cache: container_name: paybutton-cache From 742531c62f8a3912944eaf0dcecf5957e82e1020 Mon Sep 17 00:00:00 2001 From: Scott McDermid Date: Thu, 29 Oct 2026 11:12:56 -0700 Subject: [PATCH 3/3] fix(docker): use useSsl for supertokens MySQL connection URI The supertokens-mysql plugin bundles mariadb-java-client, which ignores sslMode and reads useSsl instead. Co-authored-by: Cursor --- docker-compose-prod.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose-prod.yml b/docker-compose-prod.yml index 8fe065b8f..92d575baa 100644 --- a/docker-compose-prod.yml +++ b/docker-compose-prod.yml @@ -23,7 +23,7 @@ services: ports: - 3567:3567 environment: - MYSQL_CONNECTION_URI: "mysql://${SUPERTOKENS_DB_USER}:${SUPERTOKENS_DB_PASSWORD}@${MAIN_DB_HOST}:${MAIN_DB_PORT}/supertokens?sslMode=REQUIRED" + MYSQL_CONNECTION_URI: "mysql://${SUPERTOKENS_DB_USER}:${SUPERTOKENS_DB_PASSWORD}@${MAIN_DB_HOST}:${MAIN_DB_PORT}/supertokens?useSsl=true&trustServerCertificate=true" cache: container_name: paybutton-cache