Implement IP allowlisting for QR generation and enhance .env file handling

2026-04-02 15:46:58 +08:00
parent 5e8d5fb42e
commit 4d6fd1e348
4 changed files with 81 additions and 2 deletions
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -9,6 +9,8 @@ services:
    environment:
      - NODE_ENV=production
      - PORT=3000
+      - TRUST_PROXY=${TRUST_PROXY:-true}
+      - ALLOWED_QR_IPS=${ALLOWED_QR_IPS:-}
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/health"]
      interval: 30s