cats/server/.env.example at 91ab44c6fb034013066f6553d3e62ababaf0b2d4 - cats - HeagBoKaT-Cloud

HeagBoKaT/cats

Files

heagbokat e0247bc288 Fix case-insensitive auth and harden for production

- Fix login/register to treat usernames case-insensitively (HeagBoKaT == heagbokat) using LOWER() in SQL with JS .toLowerCase() for Unicode safety
- Add helmet for HTTP security headers and express-rate-limit on auth endpoints (20 req / 15 min) to prevent brute-force
- Lock CORS to ALLOWED_ORIGIN env var; warn if JWT_SECRET is the default dev key
- Serve built client/dist from Express so a single PM2 process handles everything
- Add deploy.sh, README.md with full first-run and auto-restart instructions, and server/.env.example

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-25 23:29:06 +03:00

4 lines

140 B

Plaintext

Raw Blame History

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

 PORT=3040
 JWT_SECRET=замените_на_случайную_строку_32_символа
 ALLOWED_ORIGIN=http://cats.heagbokat-server.ru