Dokploy deploy: Dockerfile, DB CA cert, blog images, CSP
CI / build-and-test (push) Has been cancelled

- Add Dockerfile (multi-stage Node 20), .dockerignore, docker-compose.yml, and
  DEPLOY-DOKPLOY.md for container deployment on Dokploy.
- Commit the DigitalOcean managed-Postgres Project CA cert (certs/ca-certificate.crt)
  so production TLS verification (fail-closed) works in-container. Public CA, safe to commit.
- Blog cover images served from DO Spaces; allow *.digitaloceanspaces.com in the prod CSP img-src.
- Includes the AI (case summaries) and Cloudflare Turnstile bot-protection features.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Leon Serfaty
2026-07-17 13:04:18 -04:00
co-authored by Claude Fable 5
parent d9b807662a
commit d1d96e4dd2
29 changed files with 1224 additions and 28 deletions
+14
View File
@@ -46,6 +46,20 @@ STORAGE_PATH=./storage
SMTP2GO_API_KEY=
EMAIL_FROM="eLegal Software <noreply@yourdomain.com>"
# ─────────────────────────────────────────────
# AI (Anthropic) — powers case summaries, document summaries, and text polish.
# Leave blank to disable AI features (endpoints return 503 ai_not_configured).
# ─────────────────────────────────────────────
ANTHROPIC_API_KEY=
# ─────────────────────────────────────────────
# Cloudflare Turnstile — bot protection on signup, login, password reset, and the
# contact form. Leave both blank to disable (dev). The site key is public (bundled
# into the web app); the secret key is server-only.
# ─────────────────────────────────────────────
TURNSTILE_SECRET_KEY=
VITE_TURNSTILE_SITE_KEY=
# ─────────────────────────────────────────────
# Stripe
# ─────────────────────────────────────────────