feat: implement security headers and rate limiting; update environment variables and documentation

2026-04-21 08:06:21 +02:00
parent c1d51c771e
commit 7748ad311f
13 changed files with 133 additions and 23 deletions
@@ -7,9 +7,22 @@ MARIADB_DATABASE=recipe_app
 MARIADB_USER=recipe_user
 MARIADB_PASSWORD=byt-ut-mig

+# Auth.js / NextAuth
+# Generera med: openssl rand -base64 32
+AUTH_SECRET=byt-ut-mig
+
+# JWT (NestJS backend)
+# Generera med: openssl rand -base64 32
+# OBS: Appen vägrar starta om detta saknas.
+JWT_SECRET=byt-ut-mig
+
+# Mistral AI
+# Hämtas från: https://console.mistral.ai/
+MISTRAL_API_KEY=
+
 # Publik URL (används av frontend)
 NEXT_PUBLIC_APP_URL=https://recept.gynther.se
-NEXT_PUBLIC_API_URL=https://api.recept.gynther.se
+NEXT_PUBLIC_API_URL=https://recept.gynther.se

 # Bootstrap-användare (skapas/uppdateras vid appstart)
 ADMIN_NADMIN_PASSWORD=byt-ut-mig