Chris
cc30d2288e
- Fix Issue 1: Normalize BLOCK_PRIVATE_IPS to safe boolean (true/false) using shell case statement to prevent PHP injection from non-boolean values like 'yes' - Fix Issue 2: Strip single quotes from API_KEY to prevent PHP string injection if the value contains quotes - Update docker-compose-dev.yml to document these configuration options Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
20 lines
500 B
YAML
Executable File
20 lines
500 B
YAML
Executable File
services:
|
|
http2pic:
|
|
build:
|
|
context: .
|
|
dockerfile: docker/Dockerfile
|
|
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./cache:/srv/cache
|
|
- ./src:/srv/src
|
|
- ./web:/srv/web
|
|
- ./logs:/srv/logs
|
|
|
|
environment:
|
|
- URL=http://localhost:8080
|
|
# - API_KEY=your-secret-key # if set, all /api requests must provide it
|
|
# - BLOCK_PRIVATE_IPS=true # block LAN/loopback/metadata IPs (recommended for public hosting)
|
|
ports:
|
|
- 8080:80
|