Honestly way too much went into this single commit. I am so sorry future me

rules-service/Dockerfile

@@ -4,7 +4,7 @@ EXPOSE 6901
 
 WORKDIR /rules
 
-ADD ./user-service .
+ADD ./rules-service/ .
 COPY ./deno.jsonc .
 COPY ./secrets.json .
 COPY ./key.txt .
@@ -12,4 +12,4 @@ ADD ./common ./common
 ADD ./lib ./lib
 ADD ./middleware ./middleware
 
-CMD ["run", "--allow-net", main.ts, "6901"]
+CMD ["run", "--allow-write", "--allow-read", "--allow-net", "--allow-env", "main.ts", "6901"]

rules-service/key.txt

@@ -0,0 +1 @@
+{"kty":"oct","k":"ydUZuTH_gj0WAPHiVAF3ATiHuMoVr85jobnNN_iRHpf-OPQd984g_4hY7zikrmjTXRJARwHv6Rr24E7UoHogvvfGeKF8NkO7yhJ2thF5auv2fyScIMbFMW3tv0AA0YioB0-QUZLBjd1SF9HYK6s5Rqt0-fJaNSKnthzEsKD8wak","alg":"HS512","key_ops":["sign","verify"],"ext":true}

rules-service/main.ts

@@ -4,7 +4,9 @@ import { Router } from 'oak';
 
 const app = new CGGService({ prefix: '/rules' });
 
-app.route(new Router());
+app.route(new Router()
+  .get('/', ctx => ctx.response.body = 'rules service')
+);
 
 app.start();
-console.log('User service running on ' + Deno.args.at(0));
+console.log('rules service running on ' + Deno.args.at(0));

rules-service/perms

@@ -1 +1,4 @@
---allow-net
+--allow-write
+--allow-read
+--allow-net
+--allow-env