dtoro
fc63b1f69d
The CORS allowed-origins list, host port mappings, log level, container
timezone, and worker concurrency are now all driven by environment
variables with sane defaults. Same-origin access through the nginx
proxy keeps working with no config; direct cross-origin backend
access can be locked down via ALLOWED_ORIGINS.
- backend/config: ALLOWED_ORIGINS env (comma-separated, "*" for any)
exposed via settings.cors_origins. LOG_LEVEL too.
- backend/main: build the CORS middleware from settings.cors_origins,
auto-disable allow_credentials when origins is wildcard (CORS spec
forbids credentials + "*").
- docker-compose: parameterize FRONTEND_PORT, BACKEND_PORT, REDIS_PORT,
CELERYD_CONCURRENCY, LOG_LEVEL, and TZ via ${VAR:-default} so each
has a working fallback if the .env entry is missing.
- .env.example: new template documenting every knob with examples.
- .env: pruned to only the values that diverge from .env.example;
removed dead VITE_API_URL.
- README: configuration knobs table + "accessing from another machine"
section explaining the same-origin proxy story.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
21 lines
501 B
Bash
21 lines
501 B
Bash
# Mulita / PhotoVault local environment.
|
|
# See .env.example for the full list of knobs and their docs.
|
|
|
|
# REQUIRED — host path to your photo library.
|
|
PHOTO_DIRS=/Users/dtoro/Pictures/MulitaTest
|
|
|
|
# Ports — change if 3000 / 8001 collide with other services on the host.
|
|
FRONTEND_PORT=3000
|
|
BACKEND_PORT=8001
|
|
REDIS_PORT=6379
|
|
|
|
# CORS — wildcard for local dev. Lock down for real deployments.
|
|
ALLOWED_ORIGINS=*
|
|
|
|
# Logging + timezone.
|
|
LOG_LEVEL=INFO
|
|
TZ=UTC
|
|
|
|
# Celery worker pool.
|
|
CELERYD_CONCURRENCY=4
|