paul
1cfd6a44d6
- Replace short dev secrets with secure 64-character (256-bit) secrets - Update docker-compose.yml with secure development secret - Update docker-compose.local.yml with unique secure secret - Improve .env.example with clear security instructions - Add comprehensive security best practices documentation - Create helper script to generate secure JWT secrets Security improvements: - All environments now use cryptographically secure 64-character secrets - Clear warnings and instructions prevent use of weak secrets - Documentation guides proper secret management - Helper script makes it easy to generate new secrets 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
27 lines
775 B
Bash
27 lines
775 B
Bash
# JWT Secret for authentication
|
|
# IMPORTANT: Generate a secure random secret with: openssl rand -hex 32
|
|
# NEVER use the default value or commit the actual secret to version control
|
|
JWT_SECRET=CHANGE_ME_TO_A_64_CHARACTER_SECURE_RANDOM_STRING_GENERATED_BY_OPENSSL
|
|
|
|
# URLs
|
|
ADMIN_URL=https://admin.photos.yourdomain.com
|
|
FRONTEND_URL=https://photos.yourdomain.com
|
|
|
|
# Database (for PostgreSQL in production)
|
|
DB_USER=photoapp
|
|
DB_PASSWORD=secure-password-here
|
|
DB_NAME=photo_sharing
|
|
|
|
# Email Configuration
|
|
SMTP_HOST=smtp.gmail.com
|
|
SMTP_PORT=587
|
|
SMTP_SECURE=false
|
|
SMTP_USER=your-email@gmail.com
|
|
SMTP_PASS=your-app-password
|
|
EMAIL_FROM=noreply@yourdomain.com
|
|
|
|
# Umami Analytics
|
|
UMAMI_URL=https://analytics.yourdomain.com
|
|
UMAMI_WEBSITE_ID=your-website-id
|
|
UMAMI_HASH_SALT=random-salt-here
|