Files
Scriberr/docker-compose.build.cuda.yml
rishikanthc 11434b9f1b feat: Add production security configuration for CORS and cookie handling
- Fix refresh token cookie Secure flag bug (was hardcoded to false)
- Wire up AllowedOrigins config in CORS middleware (router, handlers, chat, SSE)
- Add APP_ENV=production to Dockerfile and Dockerfile.cuda
- Update all docker-compose files with APP_ENV and ALLOWED_ORIGINS examples
- CORS now validates origins in production, allows all in development
- Increase gocyclo threshold from 20 to 25 for complex handlers
2025-12-16 18:21:36 -08:00

42 lines
1.1 KiB
YAML

services:
scriberr:
# Build from local Dockerfile; replace with `image: ghcr.io/rishikanthc/scriberr:latest`
# if you prefer pulling a prebuilt image.
build:
context: .
dockerfile: Dockerfile.cuda
image: scriberr:local-cuda
container_name: scriberr
ports:
- "8080:8080"
deploy:
resources:
reservations:
devices:
- driver: nvidia
count: all
capabilities:
- gpu
environment:
- NVIDIA_VISIBLE_DEVICES=all
- NVIDIA_DRIVER_CAPABILITIES=compute,utility
# environment:
# - HOST=0.0.0.0
# - PORT=8080
# - DATABASE_PATH=/app/data/scriberr.db
# - UPLOAD_DIR=/app/data/uploads
- PUID=${PUID:-10001}
- PGID=${PGID:-10001}
# Security: already set in container, but can be overridden
- APP_ENV=production
# CORS: comma-separated list of allowed origins for production
# - ALLOWED_ORIGINS=https://your-domain.com
volumes:
- ./scriberr_data:/app/data
- ./env-data:/app/whisperx-env
restart: unless-stopped
volumes:
scriberr_data:
env-data: