fix: harden container config defaults

Author: gildesmarais

.devcontainer/devcontainer.json

@@ -8,15 +8,11 @@
     "vscode": {
       "extensions": [
         "rebornix.ruby",
-        "astro-build.astro-vscode",
         "esbenp.prettier-vscode"
       ],
       "settings": {
         "editor.formatOnSave": true,
         "editor.defaultFormatter": "esbenp.prettier-vscode",
-        "files.associations": {
-          "*.astro": "astro"
-        },
         "prettier.configPath": "./frontend/prettier.config.js",
         "ruby.format": "rubocop",
         "ruby.lint": { "rubocop": true },
@@ -34,7 +30,7 @@
       "onAutoForward": "notify"
     },
     "4001": {
-      "label": "Astro Dev Server",
+      "label": "Vite Dev Server",
       "onAutoForward": "silent"
     }
   },

README.md

@@ -41,7 +41,7 @@ curl -X POST "https://your-domain.com/api/v1/feeds" \
 ## Deploy (Docker Compose)
 
 1. Generate a key: `openssl rand -hex 32`.
-2. Set `HTML2RSS_SECRET_KEY` in `docker-compose.yml`.
+2. Export `HTML2RSS_SECRET_KEY`, `HEALTH_CHECK_TOKEN`, and `BROWSERLESS_IO_API_TOKEN` in your shell or `.env`.
 3. Start: `docker-compose up`.
 
 UI + API run on `http://localhost:4000`. The app exits if the secret key is missing.

docker-compose.yml

@@ -15,17 +15,17 @@ services:
     environment:
       RACK_ENV: production
       PORT: 4000
-      HTML2RSS_SECRET_KEY: your-generated-secret-key-here
-      HEALTH_CHECK_TOKEN: CHANGE_ME_HEALTH_CHECK_TOKEN
+      HTML2RSS_SECRET_KEY: ${HTML2RSS_SECRET_KEY:?set HTML2RSS_SECRET_KEY}
+      HEALTH_CHECK_TOKEN: ${HEALTH_CHECK_TOKEN:?set HEALTH_CHECK_TOKEN}
       BROWSERLESS_IO_WEBSOCKET_URL: ws://browserless:4002
-      BROWSERLESS_IO_API_TOKEN: 6R0W53R135510
+      BROWSERLESS_IO_API_TOKEN: ${BROWSERLESS_IO_API_TOKEN:?set BROWSERLESS_IO_API_TOKEN}
 
   watchtower:
     image: containrrr/watchtower
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - "~/.docker/config.json:/config.json"
+      - "${HOME}/.docker/config.json:/config.json"
     command: --cleanup --interval 7200
 
   browserless:
@@ -36,4 +36,4 @@ services:
     environment:
       PORT: 4002
       CONCURRENT: 10
-      TOKEN: 6R0W53R135510
+      TOKEN: ${BROWSERLESS_IO_API_TOKEN:?set BROWSERLESS_IO_API_TOKEN}