elpatron
dea33e3f00
Ersetzt die spoofbare X-User-Id-Auth durch signierte HttpOnly-Sessions nach WebAuthn, erzwingt WRITE-only Sync, speichert den Master-Key nur im RAM und ergänzt CORS, Rate-Limits, Helmet sowie Passkey-Reauth für sensible Aktionen. Co-authored-by: Cursor <cursoragent@cursor.com>
59 lines
1.5 KiB
YAML
59 lines
1.5 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
container_name: daagbox-prod-db
|
|
restart: always
|
|
environment:
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: postgres
|
|
POSTGRES_DB: daagbox
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d daagbox"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
backend:
|
|
build:
|
|
context: ./server
|
|
dockerfile: Dockerfile
|
|
container_name: daagbox-prod-backend
|
|
restart: always
|
|
environment:
|
|
PORT: 5000
|
|
DATABASE_URL: "postgresql://postgres:postgres@db:5432/daagbox?schema=public"
|
|
RP_ID: ${RP_ID:-localhost}
|
|
ORIGIN: ${ORIGIN:-http://localhost}
|
|
VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
|
|
VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
|
|
VAPID_SUBJECT: ${VAPID_SUBJECT:-mailto:support@kapteins-daagbok.eu}
|
|
OpenWeatherMapAPIKey: ${OpenWeatherMapAPIKey:-}
|
|
SESSION_SECRET: ${SESSION_SECRET:-}
|
|
NTFY_SERVER: ${NTFY_SERVER:-https://ntfy.sh}
|
|
NTFY_TOPIC: ${NTFY_TOPIC:-}
|
|
NTFY_TOKEN: ${NTFY_TOKEN:-}
|
|
command: sh -c "npx prisma db push && node dist/index.js"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
frontend:
|
|
build:
|
|
context: .
|
|
dockerfile: client/Dockerfile
|
|
args:
|
|
APP_VERSION: ${APP_VERSION:-0.1.0.0-dev}
|
|
container_name: daagbox-prod-frontend
|
|
restart: always
|
|
ports:
|
|
- "80:80"
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
pgdata:
|
|
name: daagbox-prod-pgdata
|