- Remove secrets from Dockerfile build args, pass as runtime env vars only - Add non-root user to Docker container - Add SKU format validation to prevent S3 key injection - Sanitize error responses in sanity-lookup route - Fix zod import to use @medusajs/framework/zod - Clean up .env.template defaults and .dockerignore
12 lines
305 B
Text
12 lines
305 B
Text
STORE_CORS=http://localhost:3000
|
|
ADMIN_CORS=http://localhost:5173,http://localhost:9000
|
|
AUTH_CORS=http://localhost:5173,http://localhost:9000,http://localhost:3000
|
|
REDIS_URL=redis://localhost:6379
|
|
JWT_SECRET=
|
|
COOKIE_SECRET=
|
|
DATABASE_URL=
|
|
DB_NAME=medusa-v2
|
|
|
|
# Sanity CMS
|
|
SANITY_PROJECT_ID=
|
|
SANITY_DATASET=
|