Harden production Docker stack for MySQL, API proxy, and builds.

Keep MySQL internal-only with env-based credentials, proxy /api/backend through nginx with Docker DNS refresh, and support host SOCKS/HTTP proxy during image builds. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 12:50:40 +00:00
parent 370ac15471
commit 4ac0c16665
5 changed files with 148 additions and 30 deletions
@@ -29,6 +29,9 @@ dist-ssr
 .env.development.local
 .env.test.local
 .env.production.local
+.env.mysql
+.mysql-credentials
+backend/.env

 # PWA files
 sw.js