Enhance security: Rotate VAPID keys, encrypt LLM API keys, and use env vars

This commit is contained in:
Gemini Agent
2026-01-25 05:13:18 +00:00
parent 3ca83f304f
commit ca0569ab0d
5 changed files with 101 additions and 7 deletions

View File

@@ -9,10 +9,11 @@ services:
- ./data:/app/data
environment:
- DATABASE_PATH=/app/data/quietthanks.db
- NEXT_PUBLIC_VAPID_PUBLIC_KEY=BIKukAq5-KPwJAMpksxD7UNL8XfF-oJOI0CLGGZQAY93igZgf1PYa9MVvS8GaBv-vv9ckcXPCEKdzWDCtOyQpKg
- VAPID_PRIVATE_KEY=IBkQ14BLKFCg2PmGOWheC7xfYHS5J49vXS8duHCeDBw
- VAPID_EMAIL=mailto:admin@example.com
- TZ=Australia/Perth
- NEXT_PUBLIC_VAPID_PUBLIC_KEY=${NEXT_PUBLIC_VAPID_PUBLIC_KEY}
- VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
- VAPID_EMAIL=${VAPID_EMAIL}
- ENCRYPTION_KEY=${ENCRYPTION_KEY}
- TZ=${TZ}
scheduler:
image: alpine
@@ -21,7 +22,7 @@ services:
quietthanks:
condition: service_started
environment:
- TZ=Australia/Perth
- TZ=${TZ}
entrypoint: /bin/sh
command: >
-c "apk add --no-cache curl &&