[Auto] Update docker-compose file

docs/static/docker-compose.yml

@@ -21,8 +21,8 @@ services:
       # If you generate a new one all existing data must be considered LOST.
       # Change it to a string of exactly 32 chars or use command `php artisan key:generate` to generate it
       - APP_KEY=SomeRandomStringOf32CharsExactly
-      # This variable must match your installation's external address but keep in mind that
-      # it's only used on the command line as a fallback value.
+      # This variable must match your installation's external address.
+      # Webauthn won't work otherwise.
       - APP_URL=http://localhost
       # Turn this to true if you want your app to react like a demo.
       # The Demo mode reset the app content every hours and set a generic demo user.
@@ -48,13 +48,27 @@ services:
       - MAIL_DRIVER=log
       - MAIL_HOST=smtp.mailtrap.io
       - MAIL_PORT=2525
-      - [email protected]
       - MAIL_USERNAME=null
       - MAIL_PASSWORD=null
       - MAIL_ENCRYPTION=null
       - MAIL_FROM_NAME=null
       - MAIL_FROM_ADDRESS=null
+      # SSL peer verification.
+      # Set this to false to disable the SSL certificate validation.
+      # WARNING
+      # Disabling peer verification can result in a major security flaw.
+      # Change it only if you know what you're doing.
+      - MAIL_VERIFY_SSL_PEER=true
+      # API settings
+      # The maximum number of API calls in a minute from the same IP.
+      # Once reached, all requests from this IP will be rejected until the minute has elapsed.
+      # Set to null to disable the API throttling.
+      - THROTTLE_API=60
       # Authentication settings
+      # The number of times per minute a user can fail to log in before being locked out.
+      # Once reached, all login attempts will be rejected until the minute has elapsed.
+      # This setting applies to both email/password and webauthn login attemps.
+      - LOGIN_THROTTLE=5
       # The default authentication guard
       # Supported:
       #   'web-guard' : The Laravel built-in auth system (default if nulled)
@@ -64,6 +78,12 @@ services:
       # authentication checks. That means your proxy is fully responsible of the authentication process, 2FAuth will
       # trust him as long as headers are presents.
       - AUTHENTICATION_GUARD=web-guard
+      # OpenId settings
+      # - OPENID_AUTHORIZE_URL=
+      # - OPENID_TOKEN_URL=
+      # - OPENID_USERINFO_URL=
+      # - OPENID_CLIENT_ID=
+      # - OPENID_CLIENT_SECRET=
       # Name of the HTTP headers sent by the reverse proxy that identifies the authenticated user at proxy level.
       # Check your proxy documentation to find out how these headers are named (i.e 'REMOTE_USER', 'REMOTE_EMAIL', etc...)
       # (only relevant when AUTHENTICATION_GUARD is set to 'reverse-proxy-guard')
@@ -75,10 +95,10 @@ services:
       # Relying Party name, aka the name of the application. If null, defaults to APP_NAME
       - WEBAUTHN_NAME=2FAuth
       # Relying Party ID. If null, the device will fill it internally.
-      # See https://webauthn-doc.spomky-labs.com/pre-requisites/the-relying-party#how-to-determine-the-relying-party-id
+      # See https://webauthn-doc.spomky-labs.com/prerequisites/the-relying-party#how-to-determine-the-relying-party-id
       - WEBAUTHN_ID=null
       # Optional image data in BASE64 (128 bytes maximum) or an image url
-      # See https://webauthn-doc.spomky-labs.com/pre-requisites/the-relying-party#relying-party-icon
+      # See https://webauthn-doc.spomky-labs.com/prerequisites/the-relying-party#relying-party-icon
       - WEBAUTHN_ICON=null
       # Use this setting to control how user verification behave during the
       # WebAuthn authentication flow.
@@ -110,6 +130,6 @@ services:
       - PUSHER_APP_KEY=
       - PUSHER_APP_SECRET=
       - PUSHER_APP_CLUSTER=mt1
-      - MIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
-      - MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
+      - VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
+      - VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
       - MIX_ENV=local