Sanitize envs, optimize Dockerfile, Turnstile
Redact sensitive AWS keys in backend/.env.example and add VITE_TURNSTILE_SITE_KEY and VITE_USE_TURNSTILE to frontend/.env.example. Optimize backend Dockerfile by installing Python requirements immediately after copying requirements.txt (enables Docker cache) and remove the duplicate later install. Update turnstile verification to skip checks when USE_SSL is disabled (dev/non-HTTPS) and keep the existing no-secret bypass; add debug logging for the SSL bypass.
This commit is contained in:
@@ -57,8 +57,8 @@ USE_S3=False
|
||||
AWS_S3_ENDPOINT_URL=https://s3.vontor.cz
|
||||
AWS_S3_CUSTOM_DOMAIN=s3.vontor.cz
|
||||
AWS_STORAGE_BUCKET_NAME=vontor-cz
|
||||
AWS_ACCESS_KEY_ID=pO70oxXGV4R6OSHxNmzv
|
||||
AWS_SECRET_ACCESS_KEY=1gY19XzWBOWiIkDKvCQF8Xkc72mFX4iILkBBV0ML
|
||||
AWS_ACCESS_KEY_ID=xxx
|
||||
AWS_SECRET_ACCESS_KEY=xxx
|
||||
|
||||
# AWS S3 (swap in for production — clear AWS_S3_ENDPOINT_URL)
|
||||
# AWS_STORAGE_BUCKET_NAME=my-bucket
|
||||
|
||||
Reference in New Issue
Block a user