Noch ein paar Hardening-Sachen

.env.example

@@ -7,10 +7,18 @@ ACME_EMAIL=admin@example.com
 # --- Database ---
 MYSQL_PASSWORD=change_this_password
 MYSQL_ROOT_PASSWORD=change_this_root_password
+MYSQL_DATABASE=rezepte
+MYSQL_USER=rezepte_user
+MYSQL_PORT=3307
 
 # --- Auth / Security ---
 JWT_SECRET=please_change_to_secure_32_char_min
 CORS_ORIGIN=https://rezepte.${DOMAIN}
+ALLOW_INSECURE_CORS=0
+BACKEND_PORT=3001
+FRONTEND_PORT=3000
+MAX_FILE_SIZE=5242880
+UPLOAD_PATH=/app/uploads
 
 # --- Images from Registry (override if pushing to GHCR or custom registry) ---
 BACKEND_IMAGE=docker.citysensor.de/rezepte-backend:latest
@@ -18,6 +26,8 @@ FRONTEND_IMAGE=docker.citysensor.de/rezepte-frontend:latest
 
 # --- Frontend API URL (if building locally outside compose) ---
 PRODUCTION_API_URL=https://rezepte.${DOMAIN}/api
+DATABASE_URL=mysql://${MYSQL_USER}:${MYSQL_PASSWORD}@mysql:3306/${MYSQL_DATABASE}
+VITE_API_URL=https://rezepte.${DOMAIN}/api
 
 # --- Optional HOST_IP for local network override builds ---
 HOST_IP=192.168.1.100