chore: align deployment environment config

.env.example

@@ -1,8 +1,12 @@
+# App runtime
+NODE_ENV="development"
+
 # Frontend env vars for the Vite app
 VITE_API_BASE_URL="http://localhost:4000/api"
 VITE_GOOGLE_MAPS_PLATFORM_KEY="YOUR_BROWSER_MAPS_KEY"
 
 # Local backend env vars
+# If your password contains special characters, URL-encode it in DATABASE_URL.
 DATABASE_URL="postgres://postgres:postgres@localhost:5432/leads4less"
 COOKIE_SECRET="CHANGE_ME_IN_LOCAL_ENV"
 APP_HOST="0.0.0.0"
@@ -11,3 +15,8 @@ APP_ORIGIN="http://localhost:3000"
 PG_BOSS_SCHEMA="pgboss"
 SESSION_TTL_DAYS="30"
 GOOGLE_MAPS_SERVER_KEY="YOUR_SERVER_MAPS_KEY"
+
+# Docker Compose database env vars
+POSTGRES_DB="leads4less"
+POSTGRES_USER="postgres"
+POSTGRES_PASSWORD="CHANGE_ME_IN_LOCAL_ENV"

CHANGELOG.md

@@ -9,6 +9,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ### Added
 - Added a multi-stage `Dockerfile` and `docker-compose.yml` for running the web app, API, worker, and PostGIS database as a local container stack.
 
+### Changed
+- Updated the Docker Compose deployment config to read app secrets and Vite build settings from environment variables, and added a `.dockerignore` to keep container builds leaner.
+- Aligned the Docker Compose and example environment settings so local and deployment configs use the same variable names and document URL-encoded database passwords when needed.
+
 ## [2026-04-19]
 
 ### Added

docker-compose.yml

@@ -2,8 +2,8 @@ services:
   db:
     image: postgis/postgis:16-3.4
     environment:
-      POSTGRES_DB: leads4less
-      POSTGRES_USER: postgres
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
     volumes:
       - leads4less-db:/var/lib/postgresql/data
@@ -16,16 +16,16 @@ services:
       - db
     environment:
       NODE_ENV: ${NODE_ENV}
-      APP_HOST: 0.0.0.0
-      APP_PORT: 4000
-      APP_ORIGIN: https://l4l.duramente.com
+      APP_HOST: ${APP_HOST}
+      APP_PORT: ${APP_PORT}
+      APP_ORIGIN: ${APP_ORIGIN}
       DATABASE_URL: ${DATABASE_URL}
       COOKIE_SECRET: ${COOKIE_SECRET}
       GOOGLE_MAPS_SERVER_KEY: ${GOOGLE_MAPS_SERVER_KEY}
       PG_BOSS_SCHEMA: ${PG_BOSS_SCHEMA}
-      SESSION_TTL_DAYS: 30
+      SESSION_TTL_DAYS: ${SESSION_TTL_DAYS}
     expose:
-      - "4000"
+      - ${APP_PORT}
 
   worker:
     build:
@@ -39,7 +39,7 @@ services:
       COOKIE_SECRET: ${COOKIE_SECRET}
       GOOGLE_MAPS_SERVER_KEY: ${GOOGLE_MAPS_SERVER_KEY}
       PG_BOSS_SCHEMA: ${PG_BOSS_SCHEMA}
-      SESSION_TTL_DAYS: 30
+      SESSION_TTL_DAYS: ${SESSION_TTL_DAYS}
 
   web:
     build: