Random

Author: turegjorup

.env

@@ -19,7 +19,7 @@ ITKDEV_TEMPLATE=symfony-6
 
 ###> symfony/framework-bundle ###
 APP_ENV=dev
-APP_SECRET=22d8a60c047b96413b3337e3ddae3da9
+APP_SECRET=CHANGE_ME
 TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
 ###< symfony/framework-bundle ###
 
@@ -42,7 +42,7 @@ CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
 ###> lexik/jwt-authentication-bundle ###
 JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
 JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
-JWT_PASSPHRASE=APP_JWT_PASSPHRASE
+JWT_PASSPHRASE=CHANGE_ME
 # Default: 1 hour
 JWT_TOKEN_TTL=3600
 # Default: 15 days

infrastructure/display-api-service/Dockerfile

@@ -64,6 +64,7 @@ LABEL maintainer="ITK Dev <itkdev@mkb.aarhus.dk>"
 
 ENV APP_CLIENT_PATH=/app \
     APP_API_PATH=/var/www/html \
+    APP_ENV=prod \
     COMPOSER_VERSION=2 \
 
     # OpCache

infrastructure/nginx/Dockerfile

@@ -70,7 +70,9 @@ ARG GID=101
 
 ENV APP_CLIENT_PATH=/app \
     APP_API_PATH=/var/www/html \
-    NGINX_PORT=8080
+    NGINX_PORT=8080 \
+    NGINX_SET_REAL_IP_FROM=172.17.0.0/16 \
+    NGINX_MAX_BODY_SIZE=10m
 
 WORKDIR ${APP_API_PATH}
 

infrastructure/nginx/etc/templates/default.conf.template

@@ -27,7 +27,6 @@ server {
     add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 
     # Real IP from reverse proxy
-    set_real_ip_from 172.16.0.0/16;
     set_real_ip_from ${NGINX_SET_REAL_IP_FROM};
     real_ip_recursive on;
     real_ip_header X-Forwarded-For;