trptk-medusa/.env.template
Brendon Heinst 6b2187de2a Security hardening for production deployment
- Remove secrets from Dockerfile build args, pass as runtime env vars only
- Add non-root user to Docker container
- Add SKU format validation to prevent S3 key injection
- Sanitize error responses in sanity-lookup route
- Fix zod import to use @medusajs/framework/zod
- Clean up .env.template defaults and .dockerignore
2026-02-24 17:19:13 +01:00

12 lines
305 B
Text

STORE_CORS=http://localhost:3000
ADMIN_CORS=http://localhost:5173,http://localhost:9000
AUTH_CORS=http://localhost:5173,http://localhost:9000,http://localhost:3000
REDIS_URL=redis://localhost:6379
JWT_SECRET=
COOKIE_SECRET=
DATABASE_URL=
DB_NAME=medusa-v2
# Sanity CMS
SANITY_PROJECT_ID=
SANITY_DATASET=