From af1f23466c46bf4cebc42ab1687552b1a4baafd5 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Fri, 19 Jun 2026 23:31:30 +0900
Subject: Separate API_TOKEN from REGISTER_TOKEN

REGISTER_TOKEN: passkey registration only
API_TOKEN: POST /api/posts authentication

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 docker-compose.yml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'docker-compose.yml')

diff --git a/docker-compose.yml b/docker-compose.yml
index b617cbc..8fbf296 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,6 +13,7 @@ services:
       - DB_PATH=/app/data/microblog.db
       - SESSION_SECRET=${SESSION_SECRET}
       - REGISTER_TOKEN=${REGISTER_TOKEN}
+      - API_TOKEN=${API_TOKEN}
       - WEBAUTHN_RP_ID=blog.yyamashita.com
       - WEBAUTHN_ORIGIN=https://blog.yyamashita.com
     restart: unless-stopped
-- 
cgit v1.2.3