dfc2a38861
Critical: restrict CORS, move Apify token to Auth header, add path traversal validation, prompt injection delimiters, require production credentials. High: security headers, cookie hardening, rate limiting, XSS fixes, error sanitization. Medium: SSRF prevention, body size limit, Docker non-root, DB creds from env. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
11 lines
327 B
YAML
11 lines
327 B
YAML
# Production overrides — use with: docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d
|
|
services:
|
|
db:
|
|
restart: unless-stopped
|
|
|
|
social-listening:
|
|
restart: unless-stopped
|
|
environment:
|
|
- NODE_ENV=production
|
|
- SESSION_SECRET=${SESSION_SECRET}
|
|
- ALLOWED_ORIGIN=${ALLOWED_ORIGIN}
|