feat: protect auth with Turnstile

2026-07-30 23:08:36 +02:00
parent 6382e83e28
commit 9cd2e5c2e3
7 changed files with 127 additions and 7 deletions
@@ -19,6 +19,9 @@ services:
      - Auth__JwtKey=${AUTH_JWT_KEY}
      - Auth__AdminEmail=${AUTH_ADMIN_EMAIL}
      - Auth__AdminPassword=${AUTH_ADMIN_PASSWORD}
+      - Auth__AllowRegistration=${AUTH_ALLOW_REGISTRATION:-false}
+      - Turnstile__SiteKey=${TURNSTILE_SITE_KEY}
+      - Turnstile__SecretKey=${TURNSTILE_SECRET_KEY}
      # Optional: allow Google / Microsoft ID-token bearer auth (sign-in, not mail access)
      - Auth__GoogleClientId=${AUTH_GOOGLE_CLIENT_ID}
      - Auth__MicrosoftClientId=${AUTH_MICROSOFT_CLIENT_ID}