feat(SEC-001): protect workspace bootstrap with turnstile

2026-03-25 10:02:10 +01:00
parent f6667b6b63
commit 40f7e74a1b
15 changed files with 323 additions and 34 deletions
--- a/scripts/deploy-forgejo.sh
+++ b/scripts/deploy-forgejo.sh
@@ -45,6 +45,8 @@ WEBSOCKET_INTERVAL_SECONDS=${WEBSOCKET_INTERVAL_SECONDS:-5}
 NICEGUI_MOUNT_PATH=${NICEGUI_MOUNT_PATH:-/}
 NICEGUI_STORAGE_SECRET=${NICEGUI_STORAGE_SECRET:-}
 CORS_ORIGINS=${CORS_ORIGINS:-*}
+TURNSTILE_SITE_KEY=${TURNSTILE_SITE_KEY:-}
+TURNSTILE_SECRET_KEY=${TURNSTILE_SECRET_KEY:-}
 EOF

 # Upload docker-compose file