elpatron
e138752dd3
Add trust proxy, WebAuthn challenge TTL, stricter public collaboration rate limits, generic 500 responses, Docker POSTGRES_PASSWORD from env, nginx security headers/CSP, and deployment documentation. Co-authored-by: Cursor <cursoragent@cursor.com>
60 lines
1.7 KiB
YAML
60 lines
1.7 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
container_name: daagbox-prod-db
|
|
restart: always
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-postgres}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
|
|
POSTGRES_DB: ${POSTGRES_DB:-daagbox}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d daagbox"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
backend:
|
|
build:
|
|
context: ./server
|
|
dockerfile: Dockerfile
|
|
container_name: daagbox-prod-backend
|
|
restart: always
|
|
environment:
|
|
PORT: 5000
|
|
DATABASE_URL: "postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-daagbox}?schema=public"
|
|
RP_ID: ${RP_ID:-localhost}
|
|
ORIGIN: ${ORIGIN:-http://localhost}
|
|
TRUST_PROXY: ${TRUST_PROXY:-1}
|
|
VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
|
|
VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
|
|
VAPID_SUBJECT: ${VAPID_SUBJECT:-mailto:support@kapteins-daagbok.eu}
|
|
OpenWeatherMapAPIKey: ${OpenWeatherMapAPIKey:-}
|
|
SESSION_SECRET: ${SESSION_SECRET:-}
|
|
NTFY_SERVER: ${NTFY_SERVER:-https://ntfy.sh}
|
|
NTFY_TOPIC: ${NTFY_TOPIC:-}
|
|
NTFY_TOKEN: ${NTFY_TOKEN:-}
|
|
command: sh -c "npx prisma db push && node dist/index.js"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
frontend:
|
|
build:
|
|
context: .
|
|
dockerfile: client/Dockerfile
|
|
args:
|
|
APP_VERSION: ${APP_VERSION:-0.1.0.0-dev}
|
|
container_name: daagbox-prod-frontend
|
|
restart: always
|
|
ports:
|
|
- "80:80"
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
pgdata:
|
|
name: daagbox-prod-pgdata
|