Files
spotlightcam/.env.example
Radosław Gierwiało f3b8156557 feat(security): implement Cloudflare Turnstile CAPTCHA on contact form
- Add Turnstile script to frontend/index.html
- Implement programmatic widget rendering in ContactPage
- Add backend verification via Cloudflare API
- Include client IP in verification request
- Update CSP headers to allow Cloudflare resources
- Add environment variable configuration for site and secret keys
- Pass VITE_TURNSTILE_SITE_KEY to frontend container
- Add validation and error handling for CAPTCHA tokens
2025-12-05 18:08:05 +01:00

12 lines
402 B
Plaintext

# Frontend - Vite Allowed Hosts
# Comma-separated list of allowed hostnames
# Use 'all' to allow all hosts (NOT recommended for production)
VITE_ALLOWED_HOSTS=localhost,spotlight.cam,.spotlight.cam
# Alternative: Allow all hosts (development only)
# VITE_ALLOWED_HOSTS=all
# Cloudflare Turnstile (CAPTCHA)
# Get your keys from: https://dash.cloudflare.com/
VITE_TURNSTILE_SITE_KEY=your-site-key-here