Joshua Ryder
d7ee2251a0
Dockerfile Changes: - Remove hardcoded AUTH_SECRET and admin credentials from build args - Add security comments explaining auto-generation behavior - Simplify environment variables to only required configurations - Document how to retrieve auto-generated credentials from logs README.md Updates: - Comprehensive security features documentation - Updated environment variables table with auto-generation info - Detailed instructions for retrieving auto-generated credentials - Added security compliance section (OWASP, NIST, best practices) - Updated project structure to reflect all new security components - Enhanced database schema documentation - Added production security recommendations checklist - Documented all implemented security features: * Auto-generated secrets * Password security (bcrypt, requirements, reset codes) * CSRF protection * Session management * Account lockout (dual-layer) * User management features All documentation now accurately reflects the enterprise-grade security implementation and simplified deployment process. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
50 lines
1.1 KiB
Docker
50 lines
1.1 KiB
Docker
FROM node:20-alpine
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package*.json ./
|
|
|
|
# Install dependencies
|
|
RUN npm install
|
|
|
|
# Copy application files
|
|
COPY . .
|
|
|
|
# Create data directory for SQLite database
|
|
RUN mkdir -p /app/data
|
|
|
|
# Accept build arguments
|
|
ARG SITE_URL=https://nlcc.rydertech.us
|
|
ARG EMAIL_HOST=smtp.example.com
|
|
ARG EMAIL_PORT=587
|
|
ARG EMAIL_USER=noreply@example.com
|
|
ARG EMAIL_PASSWORD=your-email-password
|
|
ARG EMAIL_FROM=New Life Christian Church <noreply@example.com>
|
|
|
|
# Set environment variables for build
|
|
ENV SITE_URL=$SITE_URL
|
|
ENV EMAIL_HOST=$EMAIL_HOST
|
|
ENV EMAIL_PORT=$EMAIL_PORT
|
|
ENV EMAIL_USER=$EMAIL_USER
|
|
ENV EMAIL_PASSWORD=$EMAIL_PASSWORD
|
|
ENV EMAIL_FROM=$EMAIL_FROM
|
|
|
|
# Security: AUTH_SECRET and admin credentials are auto-generated on first launch
|
|
# They are stored in the database and logged once to container logs
|
|
# Use: docker logs <container-name> | grep "ADMIN CREDENTIALS" to retrieve them
|
|
|
|
# Build the application
|
|
RUN npm run build
|
|
|
|
# Expose port
|
|
EXPOSE 3000
|
|
|
|
# Set runtime environment variables
|
|
ENV NODE_ENV=production
|
|
ENV NUXT_HOST=0.0.0.0
|
|
ENV NUXT_PORT=3000
|
|
|
|
# Start the application
|
|
CMD ["node", ".output/server/index.mjs"]
|