From 50b47bdd65b9fb9829b29408b73d24cd14ebe8f6 Mon Sep 17 00:00:00 2001
From: tigattack <10629864+tigattack@users.noreply.github.com>
Date: Thu, 2 Oct 2025 00:09:18 +0100
Subject: [PATCH] feat(docker): add JWT configs to backend image & compose

---
 docker/backend.Dockerfile     | 5 ++++-
 docker/docker-compose.dev.yml | 4 ++++
 docker/docker-compose.yml     | 4 ++++
 3 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/docker/backend.Dockerfile b/docker/backend.Dockerfile
index fc28021..3c095b8 100644
--- a/docker/backend.Dockerfile
+++ b/docker/backend.Dockerfile
@@ -59,7 +59,10 @@ ENV NODE_ENV=production \
     ENABLE_LOGGING=true \
     LOG_LEVEL=info \
     PM_LOG_TO_CONSOLE=true \
-    PORT=3001
+    PORT=3001 \
+    JWT_EXPIRES_IN=1h \
+    JWT_REFRESH_EXPIRES_IN=7d \
+    SESSION_INACTIVITY_TIMEOUT_MINUTES=30
 
 RUN apk add --no-cache openssl tini curl
 
diff --git a/docker/docker-compose.dev.yml b/docker/docker-compose.dev.yml
index bf401ef..28f41b8 100644
--- a/docker/docker-compose.dev.yml
+++ b/docker/docker-compose.dev.yml
@@ -28,6 +28,10 @@ services:
       DATABASE_URL: postgresql://patchmon_user:INSECURE_REPLACE_ME_PLEASE_INSECURE@database:5432/patchmon_db
       PM_DB_CONN_MAX_ATTEMPTS: 30
       PM_DB_CONN_WAIT_INTERVAL: 2
+      JWT_SECRET: INS3CURE_DEV_7WT_5ECR3T
+      JWT_EXPIRES_IN: 1h
+      JWT_REFRESH_EXPIRES_IN: 7d
+      SESSION_INACTIVITY_TIMEOUT_MINUTES: 30
       SERVER_PROTOCOL: http
       SERVER_HOST: localhost
       SERVER_PORT: 3000
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 01e01d1..ded1de5 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -22,6 +22,10 @@ services:
       DATABASE_URL: postgresql://patchmon_user:INSECURE_REPLACE_ME_PLEASE_INSECURE@database:5432/patchmon_db
       PM_DB_CONN_MAX_ATTEMPTS: 30
       PM_DB_CONN_WAIT_INTERVAL: 2
+      JWT_SECRET: # CREATE A STRONG SECRET AND PUT IT HERE - Generate with 'openssl rand -hex 64'
+      JWT_EXPIRES_IN: 1h
+      JWT_REFRESH_EXPIRES_IN: 7d
+      SESSION_INACTIVITY_TIMEOUT_MINUTES: 30
       SERVER_PROTOCOL: http
       SERVER_HOST: localhost
       SERVER_PORT: 3000