diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-19 23:26:55 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-19 23:26:55 +0900 |
| commit | 85e06567f3054b6fc7349aa1f65809db47c9034a (patch) | |
| tree | c2f08baac7f46155147402ea18ce543059c76581 /docker-compose.yml | |
| parent | cba06f7e23417a9aef6c15ae26715385feb225ba (diff) | |
Require REGISTER_TOKEN to create a passkey
Prevents anyone who finds /auth/register from registering.
Token is set via REGISTER_TOKEN env var on the server.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'docker-compose.yml')
| -rw-r--r-- | docker-compose.yml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/docker-compose.yml b/docker-compose.yml index bd00608..b617cbc 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -12,6 +12,7 @@ services: - NODE_ENV=production - DB_PATH=/app/data/microblog.db - SESSION_SECRET=${SESSION_SECRET} + - REGISTER_TOKEN=${REGISTER_TOKEN} - WEBAUTHN_RP_ID=blog.yyamashita.com - WEBAUTHN_ORIGIN=https://blog.yyamashita.com restart: unless-stopped |