From 1ec64e4ad5946b6a51d9dbc89c4dc5de93443bc3 Mon Sep 17 00:00:00 2001
From: Catherine Renelle <32781029+catrenelle@users.noreply.github.com>
Date: Thu, 26 Feb 2026 01:27:20 -0500
Subject: [PATCH] Update docker-compose.yml for git-based Portainer deployment

Switch from hardcoded credentials to env var substitution (DB_PASSWORD,
SESSION_SECRET, ORIGIN). Use production ports (3200:3000, 3201:5432) and
host.docker.internal for DB connectivity.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 docker-compose.yml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 4788c4a..79751c6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,10 +4,10 @@ services:
     restart: unless-stopped
     environment:
       POSTGRES_USER: kanban
-      POSTGRES_PASSWORD: kanban
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
       POSTGRES_DB: kanban
     ports:
-      - '5432:5432'
+      - '3201:5432'
     volumes:
       - pgdata:/var/lib/postgresql/data
     healthcheck:
@@ -20,11 +20,13 @@ services:
     build: .
     restart: unless-stopped
     ports:
-      - '3000:3000'
+      - '3200:3000'
+    extra_hosts:
+      - 'host.docker.internal:host-gateway'
     environment:
-      DATABASE_URL: postgresql://kanban:kanban@db:5432/kanban?schema=public
-      SESSION_SECRET: ${SESSION_SECRET:-change-me-in-production}
-      ORIGIN: ${ORIGIN:-http://localhost:3000}
+      DATABASE_URL: postgresql://kanban:${DB_PASSWORD}@host.docker.internal:3201/kanban?schema=public
+      SESSION_SECRET: ${SESSION_SECRET}
+      ORIGIN: ${ORIGIN:-https://kanban.catrenelle.com}
       PORT: 3000
       HOST: 0.0.0.0
     depends_on: