2 Commits

Author	SHA1	Message	Date
Brendan Chen	b5ea21d44c	Use inline env vars in docker-compose, verify Docker build works ... - docker-compose.yml: replace env_file with explicit environment block so all variables are passable directly (JWT_SECRET required, rest have defaults) - Confirmed Docker image builds successfully Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 16:04:56 -08:00
Brendan Chen	6d8fb9105d	Code review fixes, Docker, and deployment config ... - Fix tsconfig: switch to ESNext/Bundler module resolution (tsx compatible) - Sanitize file extensions against path traversal (^.[a-zA-Z0-9]+$ only) - Sanitize Content-Disposition filename to prevent header injection - Extract tokenCookieOptions helper to eliminate duplication across auth handlers - Remove unused baseUrl param from fileListPage - Add Dockerfile (multi-stage build with alpine + native tools for bcrypt) - Add docker-compose.yml with named volume for data persistence - Add .env.example with all environment variables documented Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 15:58:39 -08:00