chore(cert): disable FastAPI docs in prod by default

Author: soohyunme

cert/backend/src/main.py

@@ -22,13 +22,17 @@ def configure_logging() -> None:
 configure_logging()
 logger = logging.getLogger(__name__)
 
+environment = os.getenv("ENVIRONMENT", "dev").lower()
+hide_docs = environment.startswith("prod")
+
 # FastAPI 앱 생성
 app = FastAPI(
     title="PseudoLab 수료증 발급 시스템",
     description="PseudoLab 수료증 발급을 위한 API 서버",
     version="1.0.0",
-    docs_url="/docs",
-    redoc_url="/redoc",
+    docs_url=None if hide_docs else "/docs",
+    redoc_url=None if hide_docs else "/redoc",
+    openapi_url=None if hide_docs else "/openapi.json",
 )
 
 # CORS 미들웨어 설정

cert/docker-compose.yaml

@@ -58,7 +58,8 @@ services:
       - traefik.docker.network=traefik
 
       # --- Traefik Router (backend) ---
-      - traefik.http.routers.cert-${ENVIRONMENT}-api.rule=Host(`${APP_HOST}`) && (PathPrefix(`/api`) || PathPrefix(`/docs`) || PathPrefix(`/redoc`) || PathPrefix(`/health`) || Path(`/openapi.json`))
+      # Docs/Redoc/OpenAPI 경로는 라우팅하되, 백엔드에서 prod 환경에서는 비활성화된다.
+      - traefik.http.routers.cert-${ENVIRONMENT}-api.rule=Host(`${APP_HOST}`) && (PathPrefix(`/api`) || PathPrefix(`/health`) || PathPrefix(`/docs`) || PathPrefix(`/redoc`) || Path(`/openapi.json`))
       - traefik.http.routers.cert-${ENVIRONMENT}-api.entrypoints=websecure
       - traefik.http.routers.cert-${ENVIRONMENT}-api.tls=true
       - traefik.http.routers.cert-${ENVIRONMENT}-api.tls.certresolver=le