feat(SEC-001): protect workspace bootstrap with turnstile

2026-03-25 10:02:10 +01:00
parent f6667b6b63
commit 40f7e74a1b
15 changed files with 323 additions and 34 deletions
--- a/docker-compose.deploy.yml
+++ b/docker-compose.deploy.yml
@@ -15,6 +15,8 @@ services:
      NICEGUI_MOUNT_PATH: ${NICEGUI_MOUNT_PATH:-/}
      NICEGUI_STORAGE_SECRET: ${NICEGUI_STORAGE_SECRET}
      CORS_ORIGINS: ${CORS_ORIGINS:-*}
+      TURNSTILE_SITE_KEY: ${TURNSTILE_SITE_KEY:-}
+      TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY:-}
    ports:
      - "${APP_BIND_ADDRESS:-127.0.0.1}:${APP_PORT:-8000}:8000"
    networks: