fix: allow worker outbound provider access

This commit is contained in:
2026-08-23 01:53:51 +08:00
parent 994eec33dc
commit 6634b6c4af
3 changed files with 33 additions and 3 deletions

View File

@@ -16,7 +16,7 @@ zarinpal-analytics-deployment/ # this repository
└── (deployment assets created through the authorized task list)
```
The production hostname is `zarinpal.amiirkhl.ir`. Caddy routes `/api/*` and `/healthz` to the Go API and every other path to the static frontend. PostgreSQL, Redis, the worker, and all one-off commands remain on the private Compose data network.
The production hostname is `zarinpal.amiirkhl.ir`. Caddy routes `/api/*` and `/healthz` to the Go API and every other path to the static frontend. PostgreSQL, Redis, the worker, and all one-off commands remain on the private Compose data network; the worker additionally joins a dedicated bridge network for outbound AI-provider access without joining the shared Caddy proxy network.
## Required server layout