Update Dockerfile to replace drizzle.config.js with drizzle.config.ts for TypeScript compatibility

Author: claudfuen

apps/infra/index.ts

@@ -587,29 +587,96 @@ const betterStackLambda = new aws.lambda.Function(
   }
 );
 
-// CloudWatch subscription filter to forward logs to Better Stack
-const betterStackSubscriptionFilter = new aws.cloudwatch.LogSubscriptionFilter(
-  "pathfinder-better-stack-subscription-filter",
+// CloudWatch subscription filters to forward ALL logs to Better Stack
+// 1. ECS Application logs
+const betterStackECSSubscriptionFilter =
+  new aws.cloudwatch.LogSubscriptionFilter(
+    "pathfinder-better-stack-ecs-subscription-filter",
+    {
+      logGroup: logGroup.name,
+      filterPattern: "", // Forward all logs
+      destinationArn: betterStackLambda.arn,
+      name: "logtail-aws-lambda-ecs-filter",
+    }
+  );
+
+// 2. RDS PostgreSQL logs
+const betterStackRDSSubscriptionFilter =
+  new aws.cloudwatch.LogSubscriptionFilter(
+    "pathfinder-better-stack-rds-subscription-filter",
+    {
+      logGroup: pulumi.interpolate`/aws/rds/instance/${db.id}/postgresql`,
+      filterPattern: "", // Forward all logs
+      destinationArn: betterStackLambda.arn,
+      name: "logtail-aws-lambda-rds-filter",
+    }
+  );
+
+// 3. Better Stack Lambda function logs (for debugging the forwarder itself)
+const betterStackLambdaLogGroup = new aws.cloudwatch.LogGroup(
+  "pathfinder-better-stack-lambda-logs",
   {
-    logGroup: logGroup.name,
-    filterPattern: "", // Forward all logs
-    destinationArn: betterStackLambda.arn,
-    name: "logtail-aws-lambda-filter",
+    name: pulumi.interpolate`/aws/lambda/${betterStackLambda.name}`,
+    retentionInDays: 7,
+    tags: {
+      ...commonTags,
+      Name: "pathfinder-better-stack-lambda-logs",
+      Type: "lambda-logs",
+    },
   }
 );
 
-// Grant CloudWatch Logs permission to invoke the Lambda function
-const betterStackLambdaPermission = new aws.lambda.Permission(
-  "pathfinder-better-stack-lambda-permission",
+const betterStackLambdaSubscriptionFilter =
+  new aws.cloudwatch.LogSubscriptionFilter(
+    "pathfinder-better-stack-lambda-subscription-filter",
+    {
+      logGroup: betterStackLambdaLogGroup.name,
+      filterPattern: "", // Forward all logs
+      destinationArn: betterStackLambda.arn,
+      name: "logtail-aws-lambda-self-filter",
+    }
+  );
+
+// Grant CloudWatch Logs permission to invoke the Lambda function from multiple sources
+const betterStackLambdaPermissionECS = new aws.lambda.Permission(
+  "pathfinder-better-stack-lambda-permission-ecs",
   {
-    statementId: "AllowExecutionFromCloudWatchLogs",
+    statementId: "AllowExecutionFromCloudWatchLogsECS",
     action: "lambda:InvokeFunction",
     function: betterStackLambda.name,
     principal: "logs.amazonaws.com",
     sourceArn: pulumi.interpolate`${logGroup.arn}:*`,
   }
 );
 
+const callerIdentity = pulumi.output(aws.getCallerIdentity({}));
+const betterStackLambdaPermissionRDS = new aws.lambda.Permission(
+  "pathfinder-better-stack-lambda-permission-rds",
+  {
+    statementId: "AllowExecutionFromCloudWatchLogsRDS",
+    action: "lambda:InvokeFunction",
+    function: betterStackLambda.name,
+    principal: "logs.amazonaws.com",
+    sourceArn: pulumi
+      .all([aws.config.region, callerIdentity.accountId, db.id])
+      .apply(
+        ([region, accountId, dbId]) =>
+          `arn:aws:logs:${region}:${accountId}:log-group:/aws/rds/instance/${dbId}/postgresql:*`
+      ),
+  }
+);
+
+const betterStackLambdaPermissionSelf = new aws.lambda.Permission(
+  "pathfinder-better-stack-lambda-permission-self",
+  {
+    statementId: "AllowExecutionFromCloudWatchLogsLambda",
+    action: "lambda:InvokeFunction",
+    function: betterStackLambda.name,
+    principal: "logs.amazonaws.com",
+    sourceArn: pulumi.interpolate`${betterStackLambdaLogGroup.arn}:*`,
+  }
+);
+
 // ==========================================
 // STACK OUTPUTS
 // Values accessible after deployment

apps/web/Dockerfile

@@ -39,7 +39,7 @@ COPY --from=builder /app/.next/static ./.next/static
 COPY --from=builder /app/src/db ./src/db
 COPY --from=builder /app/scripts ./scripts
 COPY --from=builder /app/package.json ./package.json
-COPY --from=builder /app/drizzle.config.js ./drizzle.config.js
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
 COPY --from=builder /app/node_modules ./node_modules
 
 EXPOSE 3000