lxe/workflow-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Stack: Env-Variablen vervollstaendigt (COOKIE_SECURE, HSTS_ENABLED, LDAP_MAX_DELETE_PCT, UPLOAD_MAX_MB)

Browse Source
This commit is contained in:
Kühn
2026-09-10 17:03:35 +02:00
parent 4cccf3b1e8
commit ad6983a49d
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docker-compose.stack.yml
View File

@@ -28,7 +28,14 @@ services:
- ADMIN_INIT_PASSWORD=${ADMIN_INIT_PASSWORD:-} - ADMIN_INIT_PASSWORD=${ADMIN_INIT_PASSWORD:-}
# M3: Session-Secret für CSRF-Token-Ableitung (Pflicht in Produktion) # M3: Session-Secret für CSRF-Token-Ableitung (Pflicht in Produktion)
- SESSION_SECRET=${SESSION_SECRET:-} - SESSION_SECRET=${SESSION_SECRET:-}
- CORS_ORIGIN=${CORS_ORIGIN:-} # M1: Cookie/HSTS-Sicherheit (false für plain HTTP, true hinter TLS-Proxy)
- COOKIE_SECURE=${COOKIE_SECURE:-false}
- HSTS_ENABLED=${HSTS_ENABLED:-false}
# H3: Massenlösch-Schutz beim LDAP-Sync (max % löschbarer AD-User pro Sync)
- LDAP_MAX_DELETE_PCT=${LDAP_MAX_DELETE_PCT:-25}
# Upload-Größenlimit in MB
- UPLOAD_MAX_MB=${UPLOAD_MAX_MB:-10}
- CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:3900}
- NODE_ENV=${NODE_ENV:-production} - NODE_ENV=${NODE_ENV:-production}
- DATABASE_URL=postgresql://${POSTGRES_USER:-workflow}:${POSTGRES_PASSWORD:-workflow}@db:5432/${POSTGRES_DB:-workflow} - DATABASE_URL=postgresql://${POSTGRES_USER:-workflow}:${POSTGRES_PASSWORD:-workflow}@db:5432/${POSTGRES_DB:-workflow}
- SESSION_MAX_PER_USER=${SESSION_MAX_PER_USER:-5} - SESSION_MAX_PER_USER=${SESSION_MAX_PER_USER:-5}