basic skew protection

Dockerfile

@@ -51,6 +51,9 @@ COPY --from=deps /home/container/bun.lock ./
 # App source
 COPY --chown=1001 . .
 
+# Deployment versioning
+RUN bun -e "const id = Bun.randomUUIDv7(); Bun.write('.version', id); Bun.write('.env.deployment', 'NEXT_DEPLOYMENT_ID='+id)"
+
 # Run patcher (background) + Next.js build (foreground), then kill patcher
 RUN bun run build
 
@@ -74,7 +77,4 @@ COPY --from=builder /home/container/util ./util
 COPY --from=builder /home/container/lib ./lib
 COPY --from=builder /home/container/tsconfig.json ./tsconfig.json
 
-# Deployment versioning
-RUN bun -e "Bun.write('.version', Bun.randomUUIDv7())"
-
 CMD ["bun", "start"]

next.config.ts

@@ -22,7 +22,12 @@ const nextConfig: NextConfig = withBundleAnalyzer({
       },
     ],
   },
-  // reactCompiler: true,
+  experimental: {
+    useSkewCookie: true,
+    authInterrupts: true,
+  },
+  deploymentId: process.env.NEXT_DEPLOYMENT_ID,
+  reactCompiler: true,
   allowedDevOrigins: ["astral:3000", "dev3000.dgnr.us"],
   // basePath: "/beta"
 });

nginx/nginx.conf

@@ -41,6 +41,7 @@ http {
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
 
+            # SSE SETUP
             proxy_http_version 1.1;
             proxy_set_header Connection "";
             proxy_buffering off;