feat: harden production security boundaries

This commit is contained in:
ik
2026-09-07 07:51:25 +07:00
parent 2fa6b68279
commit 687b4c9cb5
13 changed files with 105 additions and 11 deletions
+5 -3
View File
@@ -13,10 +13,12 @@ ADMIN_TOKEN=replace-with-at-least-32-random-characters
RATE_LIMIT_SECRET=replace-with-at-least-32-random-characters
ADMIN_BASIC_USER=rf4admin
# Generate with: docker run --rm caddy:2.10.2-alpine caddy hash-password --plaintext 'YOUR PASSWORD'
ADMIN_BASIC_PASSWORD_HASH=replace-with-caddy-password-hash
ADMIN_BASIC_PASSWORD_HASH='replace-with-caddy-password-hash'
S3_ACCESS_KEY=replace-with-random-access-key
S3_SECRET_KEY=replace-with-at-least-32-random-characters
MINIO_ROOT_USER=replace-with-private-root-access-key
MINIO_ROOT_PASSWORD=replace-with-private-root-password-32-chars
S3_ACCESS_KEY=replace-with-separate-app-access-key
S3_SECRET_KEY=replace-with-separate-app-secret-at-least-32-chars
S3_BUCKET=catch-screenshots
OFFICIAL_RECORDS_URL=https://rf4game.de/records/region/RU/