fix: use internal network hostnames and update docs for devpod (#388)

* fix: suppress act() warnings and unhandled rejections in tests

Configure testing-library for React 18+ and suppress harmless act()
warnings that occur due to async state updates completing after test cleanup.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat: upgrade postgresql from 16 to 18

Upgrade devcontainer database to PostgreSQL 18.1 (released Sept 2025).

Key benefits:
- 3x performance with new Async I/O subsystem
- UUIDv7 function for timestamp-ordered UUIDs
- Virtual generated columns
- Skip scan on multicolumn B-tree indexes
- OAuth 2.0 authentication support

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: add init to devcontainer to prevent zombie processes

Adds `init: true` to the devcontainer service which uses tini as PID 1.
This properly reaps zombie processes that accumulate from DevPod sessions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* docs: add container naming convention for devpod

Adds instructions for configuring username-based container names
when multiple developers share the same remote server.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: update proxy template with postgres 18 and init

- Upgrade PostgreSQL from 16 to 18
- Add init: true to prevent zombie processes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: use internal network hostnames for health checks

- Change pg_isready from localhost to db hostname
- Change redis-cli from localhost to redis hostname
- Update application-local.properties to use db/redis hostnames
- Update README.md troubleshooting commands
- Update proxy docker-compose comments for DevPod workflow

With the explicit internal network, services must use their
hostnames (db, redis) instead of localhost for communication.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* docs: update documentation for devpod workflow

- remove references to deleted setup-user.sh and generate-hosts.sh
- update README.md multi-user section to use DevPod commands
- update NEW-USER-ONBOARDING.md for DevPod-based workflow
- update install-traefik-service.sh next steps

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: comprehensive devcontainer review fixes

- update idle-shutdown.sh to find DevPod workspace compose files
- update README.md architecture diagram for internal network
- fix service connectivity table to use db/redis hostnames
- remove obsolete hostname troubleshooting section
- remove non-functional port forwarding for db/redis
- update volume check command for user-specific naming

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: additional comprehensive review fixes

- update README.md volumes section with correct naming convention
- add timeout (60s) to PostgreSQL/Redis health check loops
- fix DEV_USER fallback consistency in post-start.sh
- add nip.io route for Traefik dashboard

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Mohsin Hashmi <mhashmi@wiser.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: 3 people

.devcontainer/NEW-USER-ONBOARDING.md

@@ -6,7 +6,7 @@ Welcome to SimpleAccounts UAE development! Choose your setup based on your envir
 
 | Setup | Best For | Command |
 |-------|----------|---------|
-| **Multi-User (Recommended)** | Shared dev server, team collaboration | `./setup-user.sh <username>` |
+| **Multi-User (Recommended)** | Shared dev server, team collaboration | `devpod up ... --provider ssh` |
 | **Single User** | Local development, solo work | `devpod up simpleaccounts-uae` |
 
 ---
@@ -18,19 +18,17 @@ Best for teams sharing a development server. Each developer gets isolated contai
 ### Quick Start
 
 ```bash
-# SSH into the dev server
-ssh <your-username>@<dev-server-ip>
+# From your local machine, launch via DevPod
+devpod up git@github.com:SimpleAccounts/SimpleAccounts-UAE.git \
+  --provider ssh \
+  --provider-option HOST=<dev-server-ip>
 
-# Navigate to the project
-cd /path/to/SimpleAccounts-UAE/.devcontainer/proxy
-
-# Setup your environment (auto-starts proxy if needed)
-./setup-user.sh <your-username>
+# Container auto-connects to Traefik proxy for shareable URLs
 ```
 
 ### What You Get
 
-After running the setup script, you'll see:
+After the container starts, you'll see URLs printed:
 
 ```
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
@@ -43,10 +41,15 @@ Option 1: nip.io URLs (No DNS config needed!)
 
 ### Connect VS Code
 
-1. Open VS Code
-2. Install "Dev Containers" extension
-3. `Cmd+Shift+P` > "Dev Containers: Attach to Running Container"
-4. Select `dev-<your-username>`
+DevPod automatically opens VS Code when the workspace is ready. Alternatively:
+
+```bash
+# Open in VS Code
+devpod up simpleaccounts-uae --ide vscode
+
+# Or use the Web IDE
+# http://<username>-ide.<server-ip>.nip.io
+```
 
 ### Share Your Environment
 
@@ -135,11 +138,11 @@ This will:
 
 | Task                  | Command                                             |
 | --------------------- | --------------------------------------------------- |
-| Setup environment     | `./setup-user.sh <username>`                        |
-| List active users     | `docker ps --filter "name=dev-"`                    |
-| Stop your environment | `docker compose -f docker-compose.<user>.yml down`  |
-| View your logs        | `docker logs dev-<username>`                        |
-| Attach VS Code        | Dev Containers: Attach to Running Container         |
+| Setup environment     | `devpod up ... --provider ssh --provider-option HOST=<server>` |
+| List active users     | `docker ps --filter "name=simpleaccounts"`          |
+| Stop your environment | `devpod stop simpleaccounts-uae`                    |
+| View your logs        | `devpod logs simpleaccounts-uae`                    |
+| Open VS Code          | `devpod up simpleaccounts-uae --ide vscode`         |
 
 ### Single-User (DevPod) Commands
 
@@ -180,7 +183,7 @@ claude
 docker ps | grep dev-proxy
 
 # Check your container is running
-docker ps | grep dev-<username>
+docker ps | grep simpleaccounts
 
 # View proxy logs
 docker logs dev-proxy
@@ -189,11 +192,11 @@ docker logs dev-proxy
 #### Container won't start
 
 ```bash
-# Check logs
-docker logs dev-<username>
+# Check DevPod logs
+devpod logs simpleaccounts-uae
 
-# Check compose file
-cat .devcontainer/proxy/docker-compose.<username>.yml
+# Check container logs directly
+docker logs $(docker ps -q --filter "name=simpleaccounts")
 ```
 
 ### Single-User (DevPod) Setup
@@ -279,8 +282,9 @@ sudo chown -R 1000:1000 /home/<username>/.devpod-mount/
 
 | Script                        | Location             | Purpose                          |
 | ----------------------------- | -------------------- | -------------------------------- |
-| `setup-user.sh`               | `.devcontainer/proxy/` | Multi-user environment setup     |
-| `generate-hosts.sh`           | `.devcontainer/proxy/` | Generate /etc/hosts entries      |
+| `install-traefik-service.sh`  | `.devcontainer/proxy/` | Install Traefik proxy (admin)    |
+| `post-create.sh`              | `.devcontainer/`     | Initial container setup          |
+| `post-start.sh`               | `.devcontainer/`     | Container startup (Traefik connect) |
 | `admin-add-user.sh`           | `scripts/`           | Admin adds new DevPod user       |
 | `user-quick-setup.sh`         | `scripts/`           | User one-click DevPod setup      |
 | `devpod-setup.sh`             | `scripts/`           | Full self-service DevPod setup   |

.devcontainer/README.md

@@ -15,12 +15,12 @@ code .
 ### Multi-User (Shared Dev Server)
 
 ```bash
-cd .devcontainer/proxy
-./setup-user.sh <your-username>
+# Launch via DevPod (from your local machine)
+devpod up git@github.com:SimpleAccounts/SimpleAccounts-UAE.git \
+  --provider ssh \
+  --provider-option HOST=<dev-server>
 
-# Then attach VS Code:
-# Cmd+Shift+P > "Dev Containers: Attach to Running Container"
-# Select: dev-<your-username>
+# Container auto-connects to Traefik proxy for shareable URLs
 ```
 
 ---
@@ -42,15 +42,14 @@ Uses `.devcontainer/docker-compose.yml` and `devcontainer.json`.
 
 ```
 ┌─────────────────────────────────────────────────────────────┐
-│                    Shared Network Namespace                  │
-│                   (hostname: simpleaccounts-dev)             │
+│                    Internal Docker Network                   │
+│                   (user-specific isolation)                  │
 │                                                              │
 │  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐       │
 │  │ devcontainer │  │      db      │  │    redis     │       │
 │  │              │  │  (postgres)  │  │              │       │
-│  │ localhost:   │  │ localhost:   │  │ localhost:   │       │
-│  │   5432 ─────────► 5432        │  │   6379 ◄─────────────│
-│  │   6379 ◄────────────────────────────► 6379      │       │
+│  │   db:5432 ──────► :5432       │  │              │       │
+│  │   redis:6379 ───────────────────────► :6379     │       │
 │  └──────────────┘  └──────────────┘  └──────────────┘       │
 └─────────────────────────────────────────────────────────────┘
 ```
@@ -59,17 +58,17 @@ Uses `.devcontainer/docker-compose.yml` and `devcontainer.json`.
 
 | Service    | Access From DevContainer |
 | ---------- | ------------------------ |
-| PostgreSQL | `localhost:5432`         |
-| Redis      | `localhost:6379`         |
+| PostgreSQL | `db:5432`                |
+| Redis      | `redis:6379`             |
 | Frontend   | `localhost:3000`         |
 | Backend    | `localhost:8080`         |
 
-### Why Shared Network Namespace?
+### Why Internal Network?
 
-1. **Simplicity**: No DNS resolution or service discovery needed
-2. **Localhost Access**: Applications connect to `localhost` just like local development
-3. **Consistency**: Same connection strings work locally and in the container
-4. **Performance**: No network overlay overhead
+1. **Multi-user Isolation**: Each user gets their own network namespace
+2. **Traefik Compatible**: Devcontainer can join Traefik network for external routing
+3. **Simple Hostnames**: Services use predictable hostnames (`db`, `redis`)
+4. **Consistent**: Same connection strings work for single and multi-user setups
 
 ---
 
@@ -115,32 +114,30 @@ Uses `.devcontainer/proxy/` with Traefik reverse proxy.
 ### Usage
 
 ```bash
-# Setup your environment (auto-starts proxy if needed)
-cd .devcontainer/proxy
-./setup-user.sh alice
-
-# Access URLs printed after setup:
-#   Frontend: http://alice.192-168-1-100.nip.io
-#   Backend:  http://alice-api.192-168-1-100.nip.io
+# Launch via DevPod (from your local machine)
+devpod up git@github.com:SimpleAccounts/SimpleAccounts-UAE.git \
+  --provider ssh \
+  --provider-option HOST=dev-server
+
+# Container auto-registers with Traefik. Access URLs shown at startup:
+#   Frontend: http://<username>.192-168-1-100.nip.io
+#   Backend:  http://<username>-api.192-168-1-100.nip.io
 ```
 
 ### User Management
 
 ```bash
-# Add new user
-./setup-user.sh bob
-
-# List active users
-docker ps --filter "name=dev-" --format "table {{.Names}}\t{{.Status}}"
+# List active user containers
+docker ps --filter "name=simpleaccounts" --format "table {{.Names}}\t{{.Status}}"
 
-# Stop user environment
-docker compose -f docker-compose.alice.yml down
+# Stop user environment (via DevPod)
+devpod stop simpleaccounts-uae
 
-# Remove user environment (with data)
-docker compose -f docker-compose.alice.yml down -v
+# Delete user environment (via DevPod)
+devpod delete simpleaccounts-uae
 ```
 
-See [proxy/README.md](proxy/README.md) for full documentation.
+See [proxy/README.md](proxy/README.md) for Traefik proxy documentation.
 
 ---
 
@@ -157,30 +154,32 @@ See [proxy/README.md](proxy/README.md) for full documentation.
 
 ## Volumes
 
-### Persistent Data
+### Persistent Data (Named Volumes)
 
-- `postgres-data` - PostgreSQL database files
-- `redis-data` - Redis persistence
+Named Docker volumes (user-specific to avoid conflicts):
 
-### Developer Tool Caches (Survives Rebuilds)
+- `${USER}-postgres-data` - PostgreSQL database files
+- `${USER}-redis-data` - Redis persistence
+- `${USER}-vscode-extensions` - VS Code extensions
+- `${USER}-maven-cache` - Maven dependencies (~/.m2)
+- `${USER}-npm-cache` - npm cache (~/.npm)
 
-- `devcontainer-vscode-extensions` - VS Code extensions
-- `devcontainer-maven-cache` - Maven dependencies (~/.m2)
-- `devcontainer-npm-cache` - npm cache (~/.npm)
+### Credentials & Configuration (Host Bind Mounts)
 
-### Credentials & Configuration (Survives Rebuilds)
+Persisted to host directory `~/.devpod-mount/` for portability:
 
-- `devcontainer-claude-config` - Claude CLI credentials (~/.claude)
-- `devcontainer-gemini-config` - Gemini CLI config (~/.gemini)
-- `devcontainer-codex-config` - Codex CLI config (~/.codex)
-- `devcontainer-gh-config` - GitHub CLI auth (~/.config/gh)
-- `devcontainer-ssh` - SSH keys (~/.ssh)
-- `devcontainer-docker` - Docker config (~/.docker)
-- `devcontainer-kube` - Kubernetes config (~/.kube)
-- `devcontainer-aws` - AWS credentials (~/.aws)
-- `devcontainer-azure` - Azure credentials (~/.azure)
-- `devcontainer-gitconfig` - Git configuration (~/.gitconfig)
-- `devcontainer-bash-history` - Bash history
+- `~/.devpod-mount/claude` → ~/.claude (Claude CLI)
+- `~/.devpod-mount/gemini` → ~/.gemini (Gemini CLI)
+- `~/.devpod-mount/codex` → ~/.codex (Codex CLI)
+- `~/.devpod-mount/gh` → ~/.config/gh (GitHub CLI)
+- `~/.devpod-mount/ssh` → ~/.ssh (SSH keys)
+- `~/.devpod-mount/docker` → ~/.docker (Docker config)
+- `~/.devpod-mount/kube` → ~/.kube (Kubernetes config)
+- `~/.devpod-mount/aws` → ~/.aws (AWS credentials)
+- `~/.devpod-mount/azure` → ~/.azure (Azure credentials)
+- `~/.devpod-mount/gitconfig` → ~/.gitconfig_dir (Git config)
+- `~/.devpod-mount/bash-history` → ~/.bash_history_dir (Bash history)
+- `~/.devpod-mount/code-server` → ~/.config/code-server (Web IDE config)
 
 ## Local Overrides
 
@@ -210,13 +209,6 @@ docker compose down
 docker compose up -d
 ```
 
-### Check Hostname
-
-```bash
-hostname
-# Output: simpleaccounts-dev
-```
-
 ### Verify Network Connectivity
 
 ```bash
@@ -245,21 +237,12 @@ docker compose ps
 docker compose logs db
 ```
 
-### Hostname shows random ID instead of simpleaccounts-dev
-
-The container needs to be rebuilt to pick up the hostname change:
-
-```bash
-docker compose down
-docker compose up -d
-```
-
 ### Credentials lost after rebuild
 
 Credentials are stored in named volumes and should persist. Check volume exists:
 
 ```bash
-docker volume ls | grep devcontainer-claude-config
+docker volume ls | grep "$(whoami)-"
 ```
 
 ### Multi-user: URL not accessible

.devcontainer/devcontainer.json

@@ -61,14 +61,14 @@
     }
   },
 
-  // Port forwarding
-  "forwardPorts": [3000, 8080, 8443, 5432, 6379],
+  // Port forwarding (for services running inside devcontainer)
+  // Note: PostgreSQL (db:5432) and Redis (redis:6379) are on separate containers
+  // Access them from devcontainer via hostnames, not localhost
+  "forwardPorts": [3000, 8080, 8443],
   "portsAttributes": {
     "3000": { "label": "Frontend (Vite)", "onAutoForward": "notify" },
     "8080": { "label": "Backend (Spring Boot)", "onAutoForward": "notify" },
-    "8443": { "label": "Code Server (Web IDE)", "onAutoForward": "notify" },
-    "5432": { "label": "PostgreSQL", "onAutoForward": "silent" },
-    "6379": { "label": "Redis", "onAutoForward": "silent" }
+    "8443": { "label": "Code Server (Web IDE)", "onAutoForward": "notify" }
   },
 
   // Lifecycle scripts

.devcontainer/post-start.sh

@@ -3,19 +3,36 @@
 
 echo "🔄 Starting SimpleAccounts-UAE development environment..."
 
-# Wait for PostgreSQL to be ready
+# Wait for PostgreSQL to be ready (with timeout)
 echo "⏳ Waiting for PostgreSQL..."
+TIMEOUT=60
+ELAPSED=0
 until pg_isready -h db -p 5432 -U simpleaccounts -q; do
     sleep 1
+    ELAPSED=$((ELAPSED + 1))
+    if [ $ELAPSED -ge $TIMEOUT ]; then
+        echo "⚠️  PostgreSQL not ready after ${TIMEOUT}s, continuing anyway..."
+        break
+    fi
 done
-echo "✅ PostgreSQL is ready"
+if [ $ELAPSED -lt $TIMEOUT ]; then
+    echo "✅ PostgreSQL is ready"
+fi
 
-# Wait for Redis to be ready
+# Wait for Redis to be ready (with timeout)
 echo "⏳ Waiting for Redis..."
+ELAPSED=0
 until redis-cli -h redis ping > /dev/null 2>&1; do
     sleep 1
+    ELAPSED=$((ELAPSED + 1))
+    if [ $ELAPSED -ge $TIMEOUT ]; then
+        echo "⚠️  Redis not ready after ${TIMEOUT}s, continuing anyway..."
+        break
+    fi
 done
-echo "✅ Redis is ready"
+if [ $ELAPSED -lt $TIMEOUT ]; then
+    echo "✅ Redis is ready"
+fi
 
 # Symlink Claude settings from persistent mount
 if [ -f /home/vscode/.claude/claude.json ] && [ ! -L /home/vscode/.claude.json ]; then
@@ -80,8 +97,8 @@ connect_to_traefik() {
         return 1
     fi
 
-    # Get the devcontainer name
-    DEV_USER="${DEV_USER:-$(whoami)}"
+    # Get the devcontainer name (DEV_USER is set from docker-compose environment)
+    DEV_USER="${DEV_USER:-devuser}"
     DEV_CONTAINER_NAME="dev-${DEV_USER}"
 
     # Check if devcontainer exists

.devcontainer/proxy/docker-compose.proxy.yml

@@ -53,8 +53,14 @@ services:
       - dev-proxy-network
     labels:
       - 'traefik.enable=true'
-      - 'traefik.http.routers.dashboard.rule=Host(`proxy.dev.simpleaccounts.local`)'
+      # Dashboard routing via nip.io (no DNS config needed)
+      - 'traefik.http.routers.dashboard.rule=HostRegexp(`proxy.{ip:[0-9-]+}.nip.io`)'
+      - 'traefik.http.routers.dashboard.entrypoints=web'
       - 'traefik.http.routers.dashboard.service=api@internal'
+      # Dashboard routing via local domain (requires /etc/hosts or local DNS)
+      - 'traefik.http.routers.dashboard-local.rule=Host(`proxy.dev.simpleaccounts.local`)'
+      - 'traefik.http.routers.dashboard-local.entrypoints=web'
+      - 'traefik.http.routers.dashboard-local.service=api@internal'
 
 networks:
   dev-proxy-network: