Remove hardcoded domain from CORS, add configurable ALLOWED_ORIGIN env var

This commit is contained in:
aiulian25 2025-12-24 23:57:41 +00:00
parent ec05cbb788
commit 55ffea049a
2 changed files with 11 additions and 5 deletions

View file

@ -2,7 +2,8 @@
services:
streamflow:
image: aiulian25/streamflow:latest
build: .
image: tv-streamflow
container_name: streamflow
restart: unless-stopped
ports:
@ -13,10 +14,11 @@ services:
- PORT=12345
- DB_PATH=/app/data/streamflow.db
- JWT_SECRET=${JWT_SECRET:-change_this_in_production}
- SESSION_SECRET=${SESSION_SECRET:-change_this_in_production}
- SESSION_SECRET=${SESSION_SESSION:-change_this_in_production}
- DISABLE_SIGNUPS=true
- MAX_RECORDING_SIZE=100GB
- ENABLE_GPU=${ENABLE_GPU:-false}
- ALLOWED_ORIGIN=${ALLOWED_ORIGIN:-https://your-domain.com,http://your-domain.com}
volumes:
- streamflow-data:/app/data
- streamflow-logs:/app/logs