A deployment can carry the wallet in its environment, not on a mounted disk

The contract requires the application to serve a wallet file and hand its URL
and password to the data layer. Until now the only source was a filesystem
path, which no container has: `*.ngw` is gitignored, `COPY . .` brings none, and
nothing mounts one -- so a deployed instance served 404 where the contract
expects bytes.

`FESTIPOD_SHARED_WALLET_FILE_BASE64` carries the file itself. It is 810 bytes,
and it is not a secret: by design the application hands it to every user who
opens the app, so provisioning persistent storage would be guarding something
public. One channel for both values, nothing to mount, and a new host needs only
its variables.

Precedence is deliberate and one-directional: the path always wins when set, and
an unreadable path does NOT fall through to the base64 form. A deployment sets
exactly one; both set is a leftover, not a fallback chain. Local development and
the test harness only ever set the path, so they are untouched.

A malformed value answers 500 and names the variable. Answering 404 would have
made "configured wrong" indistinguishable from "not configured at all" -- the
confusion this codebase has spent two days removing.

Proven by serving the same wallet from each source in turn and comparing:
identical size, identical sha256. The first attempt at that proof silently
exercised the path branch, because Bun auto-loads `.env` and the variable was
already there; the checksums matched for the wrong reason. Caught, cleared, and
measured again.

This commit is contained in:

Sylvain Duchesne

2026-08-17 09:34:19 +02:00

parent e780c5246c

commit ac29735d20

4 changed files with 72 additions and 6 deletions

									
										Dockerfile
									
		+1
		-1
	
												View File
												
				@@ -3,7 +3,7 @@ FROM oven/bun:1-alpine AS base

				WORKDIR /app

				# Install dependencies with pnpm.

				# - git: the @ng-eventually/client polyfill is a git+https (public Gitea) dependency → no auth.

				# - git: @ng-eventually/polyfill is a git+https (public Gitea) dependency → no auth.

				# - nodejs + npm: pnpm is a Node CLI; we pin the exact pnpm version via `npm i -g`

				#   (Alpine's nodejs package does not bundle corepack).

				# The `bun` npm peer (pulled by bun-plugin-tailwind) is approved to build in package.json