By name: vue-ssr-deployment description: Deployment and CI/CD reference for the Vue SSR Starter Kit: Docker multi-stage build, docker-compose split into a base (app, remote DB) plus a docker-compose.local.yml override (local mongo) switched via the COMPOSE_FILE variable in .env, GitHub Actions workflows (CodeQL, npm-publish on tags, npm-test on PR, docker-build to GHCR), production configuration (Helmet CSP, COOKIE_SECRET, graceful shutdown SIGTERM/SIGINT), Dependabot weekly npm updates. Trigger on any deployment, Docker, docker-compose local-vs-remote DB switch, CI/CD, production config, or infrastructure question. Don't use for: app architecture (→ vue-ssr-architecture), auth flow (→ vue-ssr-auth), post-task validation (→ vue-ssr-hooks). Use when this capability is needed. metadata: author: e-xode
Vue SSR Deployment
Owns Docker, CI/CD pipelines, production configuration, and infrastructure.
Docker
- Dockerfile: Multi-stage build (build → production)
- docker-compose.yml (base): dev env, runs the
nodeapp only and reads.env→ connects to a remote MongoDB (e.g. Atlas) viaMONGO_HOST/MONGO_TYPE - docker-compose.local.yml (override): adds a local
mongocontainer and redirects the app to it (MONGO_HOST=mongo,MONGO_TYPE=mongodb, overriding.env) - Switch local ↔ remote: via the
COMPOSE_FILEvariable in.env(set in.env.example). Uncommented = local (node + mongo); commented = remote. Seereferences/docker-ci.md
GitHub Actions (4 workflows)
| Workflow | Trigger | Steps |
|---|---|---|
codeql.yml |
Push master/dev, PR, weekly | CodeQL security analysis |
npm-publish.yml |
Tags v* |
ci → lint → test → build → npm publish |
npm-test.yml |
Push master/dev, PR | ci → lint → test |
docker-build.yml |
Push master | Build + push to GHCR (SHA + latest tags) |
Production requirements
COOKIE_SECRET: Must be set (server refuses to start if missing)- Helmet CSP: Production-conditional (disabled in dev for HMR)
- Error stack traces: Hidden in production responses
Graceful shutdown
Server listens to SIGTERM and SIGINT:
- Stops accepting new connections
- Closes MongoDB connection (
closeDB) - Exits process cleanly
Ensures zero data loss during Docker stop / rolling updates.
Dependabot
Weekly npm updates (dependabot.yml): increasing version strategy.
Dynamic sitemap
GET /sitemap.xml:
- Cached in memory with 1h TTL
- Includes all public locale-prefixed routes
- Excludes auth/admin routes
Source: e-xode/vue-ssr — distributed by TomeVault.