fix: redirect bare paths to /app/ and disable image optimization

Post-login 404: Postiz navigates to /launches (no basePath prefix) after
auth; health-server now redirects any unrecognized path to /app<path>
instead of 404-ing.

_next/image 400s: disable Next.js image optimization (unoptimized:true in
next.config.js) so <Image> renders plain <img src="/app/auth/avatars/...">
tags that route through nginx correctly, bypassing the optimizer's internal
fetch which failed because static files live at the basePath-prefixed path.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Dockerfile

@@ -63,6 +63,16 @@ RUN sed -i "s|const nextConfig = {|const nextConfig = {\n  basePath: '/app',\n
     && grep -q "swcMinify: false" apps/frontend/next.config.js \
     && grep -q "cpus: 1" apps/frontend/next.config.js \
     || (echo "PATCH FAILED — next.config.js shape changed upstream"; exit 1)
+# Patch: disable Next.js image optimisation.
+# With basePath="/app", the _next/image optimizer fetches static files from
+# Next.js's internal URL without the basePath prefix, causing 400 errors.
+# unoptimized:true makes <Image> render as plain <img> tags; the browser
+# fetches /app/auth/avatars/… which routes correctly through nginx.
+# If Postiz already has an images:{} block, inject unoptimized inside it;
+# otherwise add a new images block at the top of nextConfig.
+RUN grep -q 'images:' apps/frontend/next.config.js \
+    && sed -i 's|images: {|images: {\n    unoptimized: true,|' apps/frontend/next.config.js \
+    || sed -i "s|const nextConfig = {|const nextConfig = {\n  images: { unoptimized: true },|" apps/frontend/next.config.js
 
 ENV SENTRY_DSN="" \
     SENTRY_AUTH_TOKEN="" \

health-server.js

@@ -858,9 +858,12 @@ const server = http.createServer((req, res) => {
     return;
   }
 
-  // ── Anything else → 404 ──────────────────────────────────────────────────
-  res.writeHead(404, { "Content-Type": "text/plain" });
-  res.end("Not found. Try / for the dashboard or /app for Postiz.");
+  // ── Anything else → redirect to /app<path> ──────────────────────────────
+  // After login, Postiz's client-side router may navigate to a path without
+  // the /app basePath prefix (e.g. /launches, /analytics, /api/...).
+  // Redirect those here rather than 404-ing so the browser lands correctly.
+  res.writeHead(302, { Location: "/app" + pathname + (parsedUrl.search || "") });
+  res.end();
 });
 
 server.on("upgrade", (req, socket, head) => {