Kyle Pope
ad102c24ed
Code changes (S-01, S-02, S-05): - DRY nginx proxy blocks via shared proxy-params.conf include - Add ENVIRONMENT and CORS_ORIGINS to .env.example - Remove unused X-Requested-With from CORS allow_headers Documentation updates: - README.md: reflect auth upgrade, security hardening, production deployment guide with secret generation commands, updated architecture diagram, current project structure and feature list - CLAUDE.md: codify established dev workflow (branch → implement → test → QA → merge), update auth/infra/stack sections, add authority links for progress.md and ntfy.md - progress.md: add Phase 11 (auth upgrade) and Phase 12 (pentest remediation), update file inventory, fix outstanding items - ui_refresh.md: update current status line Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
21 lines
601 B
Plaintext
21 lines
601 B
Plaintext
# Database
|
|
POSTGRES_USER=umbra
|
|
POSTGRES_PASSWORD=changeme_in_production
|
|
POSTGRES_DB=umbra
|
|
|
|
# Backend
|
|
DATABASE_URL=postgresql+asyncpg://umbra:changeme_in_production@db:5432/umbra
|
|
SECRET_KEY=change-this-to-a-random-secret-key-in-production
|
|
|
|
# Environment (development|production — controls Swagger/ReDoc visibility)
|
|
# ENVIRONMENT=development
|
|
|
|
# CORS allowed origins (comma-separated, default: http://localhost:5173)
|
|
# CORS_ORIGINS=http://localhost:5173
|
|
|
|
# Timezone (applied to backend + db containers via env_file)
|
|
TZ=Australia/Perth
|
|
|
|
# Integrations
|
|
OPENWEATHERMAP_API_KEY=your-openweathermap-api-key
|