security: rotate secrets, add rate limiter, validate input, harden cookies

2026-06-12 17:01:48 +05:00
parent 9f4fb23652
commit 5de587689c
8 changed files with 308 additions and 234 deletions
@@ -1,21 +1,21 @@
-PGHOST=db
-PGPORT=5432
-PGUSER=postgres
-PGPASSWORD=postgres
-PGDATABASE=postgres
-SSLmode=disable
-PGURL='postgres://postgres:postgres@db:5432/postgres?sslmode=disable'
-
-# SERVER
-SERVER_PORT=8000
-SECRET_KEY=my_very_secret_key
-
-# MIGRATOR
-MIGRATOR_PORT=3000
-GOOSE_DRIVER=postgres
-GOOSE_DBSTRING='user=postgres dbname=postgres sslmode=disable'
-GOOSE_MIGRATION_DIR=migrations
-
-# FRONTEND SPA
-HTTP=80         # ДЛЯ Certbot
+PGHOST=db
+PGPORT=5432
+PGUSER=postgres
+PGPASSWORD=HnFxccAF3sdUwnI1EkwmXQ==
+PGDATABASE=postgres
+SSLmode=disable
+PGURL='postgres://postgres:HnFxccAF3sdUwnI1EkwmXQ==@db:5432/postgres?sslmode=disable'
+
+# SERVER
+SERVER_PORT=8000
+SECRET_KEY=lUx8h9lpIPNPdcW9q27sJtgcZD/XlZnJWKQSLQ8t7rc=
+
+# MIGRATOR
+MIGRATOR_PORT=3000
+GOOSE_DRIVER=postgres
+GOOSE_DBSTRING='user=postgres password=HnFxccAF3sdUwnI1EkwmXQ== dbname=postgres sslmode=disable'
+GOOSE_MIGRATION_DIR=migrations
+
+# FRONTEND SPA
+HTTP=80         # ДЛЯ Certbot
 HTTPS=443