Re-Quest/backend
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): resolve client audit findings #1

Merged
sathish merged 2 commits from fix/security-audit into main 2026-08-04 13:18:42 +00:00
Conversation 0 Commits 2 Files Changed 20 +5
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 567487a87c - Show all commits

5
.env.example
View File

@@ -58,7 +58,12 @@ AWS_S3_BUCKET=your-s3-bucket-name
S3_FOLDER_PREFIX=development # Root folder for all uploads (e.g., 'development', 'staging', 'production') S3_FOLDER_PREFIX=development # Root folder for all uploads (e.g., 'development', 'staging', 'production')
# Custom endpoint for S3-compatible storage (DigitalOcean Spaces, MinIO, # Custom endpoint for S3-compatible storage (DigitalOcean Spaces, MinIO,
# Contabo). Leave blank for real AWS S3. # Contabo). Leave blank for real AWS S3.
# If it ends in /s3 (MinIO behind an nginx path prefix), the SDK signs against
# the host root and browser-facing URLs keep the /s3 prefix.
S3_ENDPOINT= S3_ENDPOINT=
# Public base for browser-facing URLs when it differs from the signing
# endpoint. Defaults to S3_ENDPOINT.
S3_PUBLIC_ENDPOINT=
# Email (REQUIRED — boot fails without it) # Email (REQUIRED — boot fails without it)
# The app POSTs JSON to this endpoint to send all transactional email. # The app POSTs JSON to this endpoint to send all transactional email.