fix: helm deployment

Author: sauagarwa

deploy/helm/spending-monitor/values.yaml

@@ -24,6 +24,7 @@ secrets:
   BYPASS_AUTH: "false"
   CORS_ALLOWED_ORIGINS: '["*"]'
   ALLOWED_ORIGINS: '["*"]'
+  ALLOWED_HOSTS: '["*"]'
   SMTP_HOST: "changeme"
   SMTP_PORT: "587"
   SMTP_FROM_EMAIL: "changeme"

env.example

@@ -23,7 +23,7 @@ DEBUG=false
 # =============================================================================
 CORS_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8080
 ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8080
-ALLOWED_HOSTS=["http://localhost:3000"]
+ALLOWED_HOSTS='["http://localhost:3000"]'
 
 # =============================================================================
 # LLM Configuration (Required for AI features)
@@ -90,4 +90,7 @@ SMTP_USE_SSL=false
 # UI Configuration
 # =============================================================================
 VITE_API_BASE_URL=/api
+VITE_BYPASS_AUTH=true
+VITE_ENVIRONMENT=development
+LLAMASTACK_BASE_URL=http://llamastack:8321
 

packages/ui/src/hooks/useWebSocket.ts

@@ -93,7 +93,9 @@ export function useWebSocket({
       // Use relative URL that works with Vite proxy
       // In development, this will be proxied to the API server
       // In production, this will be served from the same domain
-      const wsUrl = `ws://${window.location.host}/ws/recommendations/${userId}`;
+      // Use wss:// for HTTPS pages, ws:// for HTTP pages
+      const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:';
+      const wsUrl = `${protocol}//${window.location.host}/ws/recommendations/${userId}`;
       ws.current = new WebSocket(wsUrl);
 
       ws.current.onopen = () => {