Commit Graph

2 Commits

Author SHA1 Message Date
chiguyong ee8578c3d7 chore: split Dockerfile into runtime+e2e stages, add healthchecks
- Split Dockerfile: runtime stage (no Playwright) + e2e stage (adds Chromium)
- Add healthcheck to backend and frontend in docker-compose.prod.yml
- Fix REDIS_URL default to empty string (no hardcoded password)
- Add RATE_LIMIT_BACKEND=redis to production env example
- Remove deprecated version field from docker-compose.prod.yml
2026-06-04 14:04:11 +08:00
chiguyong 47719b25ce feat: deployment security hardening
- Redis: add password authentication (requirepass), update healthcheck
- PostgreSQL: replace hardcoded password with env variable
- Docker Compose: remove obsolete version field, use env vars for credentials
- Add .env.production.example template with strong password placeholders
- Update all .env files with new credentials and ports
2026-06-01 21:34:13 +08:00