paul
1cfd6a44d6
- Replace short dev secrets with secure 64-character (256-bit) secrets - Update docker-compose.yml with secure development secret - Update docker-compose.local.yml with unique secure secret - Improve .env.example with clear security instructions - Add comprehensive security best practices documentation - Create helper script to generate secure JWT secrets Security improvements: - All environments now use cryptographically secure 64-character secrets - Clear warnings and instructions prevent use of weak secrets - Documentation guides proper secret management - Helper script makes it easy to generate new secrets 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
50 lines
1.1 KiB
YAML
50 lines
1.1 KiB
YAML
# docker-compose.yml - Development configuration
|
|
|
|
services:
|
|
backend:
|
|
build:
|
|
context: ./backend
|
|
dockerfile: Dockerfile
|
|
ports:
|
|
- "3001:3000"
|
|
environment:
|
|
- NODE_ENV=development
|
|
- PORT=3000
|
|
- JWT_SECRET=b55e4b3e9f212e1d1836c2ee2ec5ac47672350acdf1391c894d3433646579ad0
|
|
- ADMIN_URL=http://localhost:3001
|
|
- FRONTEND_URL=http://localhost:3005
|
|
- SMTP_HOST=mailhog
|
|
- SMTP_PORT=1025
|
|
- SMTP_SECURE=false
|
|
- SMTP_USER=
|
|
- SMTP_PASS=
|
|
- EMAIL_FROM=noreply@localhost
|
|
volumes:
|
|
- ./backend:/app
|
|
- /app/node_modules
|
|
- ./storage:/app/storage
|
|
- ./data:/app/data
|
|
- ./logs:/app/logs
|
|
depends_on:
|
|
- mailhog
|
|
command: node server.js
|
|
|
|
frontend:
|
|
build:
|
|
context: ./frontend
|
|
dockerfile: Dockerfile
|
|
ports:
|
|
- "3005:80"
|
|
environment:
|
|
- REACT_APP_API_URL=http://localhost:3001
|
|
volumes:
|
|
- ./frontend/nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
|
depends_on:
|
|
- backend
|
|
|
|
mailhog:
|
|
image: mailhog/mailhog:latest
|
|
ports:
|
|
- "1025:1025"
|
|
- "8025:8025"
|