Files
jobtrackingapp/docker-compose.dev.yml
cesnimda 0954876295 fix(security): enforce audited account, network and resource boundaries
Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
2026-09-09 18:21:47 +02:00

23 lines
579 B
YAML

services:
backend:
environment:
# Development publishes the API directly, so forwarded headers are not trusted.
- ASPNETCORE_ENVIRONMENT=Development
- App__PublicBaseUrl=http://localhost:3000
- Proxy__TrustForwardedHeaders=false
ports:
- "5202:8080"
frontend:
environment:
- APP_PUBLIC_BASE_URL=http://localhost:3000
# Direct development traffic never supplies trusted forwarding metadata.
- INGRESS_MODE=direct
- INGRESS_PROXY_CIDRS=
ports:
- "3000:80"
ollama:
ports:
- "11434:11434"