Merge pull request #15 from meta-panic/security/prod-secrets-bruno

Security/prod secrets bruno

CONTRIBUTION.md

@@ -13,6 +13,7 @@ All branch names must follow a consistent pattern to clearly indicate their purp
 * **`build/*`:** For changes in build components like build tool, ci pipeline, dependencies. Example: `build/update-deploy-scripts`
 * **`ops/*`:** For changes that affect operational components like infrastructure, deployment, backup, recovery. Example: `ops/backup-utils`
 * **`docs/*`:** For branches that affect documentation only. Example: `docs/update-contrubution`
+* **`security/*`:** For branches addressing security improvements or issues. Example: `security/add-dotenv-secrets`
 * **`chore/*`:** For tasks that don't directly affect the codebase (e.g., build process updates, dependency updates). Example: `chore/update-dependencies`
 
 
@@ -41,6 +42,7 @@ Where:
     * `refactor`: A code change that neither fixes a bug nor adds a feature.
     * `test`: Adding missing tests or refactoring existing tests.
     * `build`: Add command in build script.
+    * `security`: Changes aimed at improving or resolving security-related issues.
     * `chore`: Changes to the build process or auxiliary tools and libraries.
 
 
@@ -58,6 +60,7 @@ Where:
 * `style: Fix formatting inconsistencies`
 * `refactor(database): Improve database query performance`
 * `test(api): Add unit tests for API endpoints`
+* `security(env): Mask sensitive information in dotenv file`
 * `chore: Update Node.js version`
 
 

cms/tests/bruno-cms-collection/.env.example

@@ -0,0 +1,3 @@
+PROD_STRAPI_URL=tobemodified
+DEV_ADMIN_EMAIL=tobemodified
+DEV_ADMIN_PASSWORD=tobemodified

cms/tests/bruno-cms-collection/environments/prod-environment.bru

@@ -1,3 +1,3 @@
 vars {
-  baseStrapiAdminUrl: https://strapiadmin.exb-nsk.ru
+  baseStrapiAdminUrl: {{process.env.PROD_STRAPI_URL}}
 }

dev-config/.env.example

@@ -1,8 +1,28 @@
+# server
 HOST=0.0.0.0
 PORT=1337
+NODE_ENV=production // or development
+DEV_CMS_SRC_PATH=/mnt/c/Users/Rita/projects/pets/church/strapi-2/strapi-church-cms/cms/src
+
+# secrets
 APP_KEYS="toBeModified1,toBeModified2"
 API_TOKEN_SALT=tobemodified
 ADMIN_JWT_SECRET=tobemodified
 TRANSFER_TOKEN_SALT=tobemodified
 JWT_SECRET=tobemodified
-NODE_ENV=production // or development
+
+# Database
+DATABASE_CLIENT=postgres
+DATABASE_HOST=127.0.0.1
+DATABASE_PORT=5432
+DATABASE_NAME=tobemodified
+DATABASE_USERNAME=tobemodified
+DATABASE_PASSWORD=tobemodified
+DATABASE_SSL=false
+DATABASE_FILENAME=
+JWT_SECRET=tobemodified
+
+# frontend
+NEXT_PUBLIC_BACKEND_URL=http://localhost:1337
+FRONTEND_HOSTNAME=test
+DEV_FRONTEND_SRC_PATH=/mnt/c/Users/Rita/projects/pets/church/strapi-2/strapi-church-cms/frontend/src

frontend/.gitignore

@@ -32,6 +32,7 @@ yarn-error.log*
 
 # env files (can opt-in for committing if needed)
 .env*
+!.env.example
 
 # vercel
 .vercel

frontend/tests/bruno-frontend-collection/.env.example

@@ -0,0 +1 @@
+PROD_FRONT_URL=tobemodified

frontend/tests/bruno-frontend-collection/environments/prod-environment.bru

@@ -1,3 +1,3 @@
 vars {
-  baseFrontUrl: exb-nsk.ru
+  baseFrontUrl: {{process.env.PROD_FRONT_URL}}
 }