refactor(storage): remove legacy upload filesystem

.dockerignore

@@ -8,7 +8,6 @@
 **/dist
 **/node_modules
 **/uploads/*
-!**/uploads/**/.gitkeep
 .env
 .env.*
 *.log

Dockerfile

@@ -59,8 +59,7 @@ COPY packages/database/prisma packages/database/prisma
 COPY packages/database/prisma.config.ts packages/database/prisma.config.ts
 COPY scripts/start-api.sh scripts/start-api.sh
 
-RUN mkdir -p apps/api/uploads/profile-pictures apps/api/uploads/project-media \
-    && chmod +x scripts/start-api.sh
+RUN chmod +x scripts/start-api.sh
 
 EXPOSE 3001
 

apps/api/.gitignore

@@ -55,8 +55,5 @@ pids
 # Diagnostic reports (https://nodejs.org/api/report.html)
 report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
 
-# Uploaded files (locally-stored profile pictures, etc.)
-/uploads/*
-!/uploads/profile-pictures
-/uploads/profile-pictures/*
-!/uploads/profile-pictures/.gitkeep
+# Legacy local uploads are runtime data and must never be committed.
+/uploads/

apps/api/src/main.ts

@@ -1,12 +1,10 @@
-import { join } from 'path';
 import { NestFactory } from '@nestjs/core';
-import type { NestExpressApplication } from '@nestjs/platform-express';
 import cookieParser from 'cookie-parser';
 import { AppModule } from './app.module';
 import { setupSwagger } from './swagger';
 
 async function bootstrap() {
-  const app = await NestFactory.create<NestExpressApplication>(AppModule);
+  const app = await NestFactory.create(AppModule);
 
   // Enable cookie parsing for session management
   app.use(cookieParser());
@@ -16,11 +14,6 @@ async function bootstrap() {
     credentials: true,
   });
 
-  // Serve locally-uploaded files (e.g. profile pictures)
-  app.useStaticAssets(join(process.cwd(), 'uploads'), {
-    prefix: '/uploads/',
-  });
-
   setupSwagger(app);
 
   const configuredPort = Number.parseInt(process.env.PORT ?? '3001', 10);