From 5ee1d39f6231ca93539c5307c808af4c84fa409f Mon Sep 17 00:00:00 2001
From: Kibi Kelburton <git@f0ck.it>
Date: Mon, 23 Feb 2026 05:57:49 +0100
Subject: [PATCH] chore: Externalize sensitive credentials in
 `docker-compose.yml` to environment variables and add `.env` to `.gitignore`.

---
 .gitignore         | 1 +
 docker-compose.yml | 8 ++++----
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index 65c258f..9867ed3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 node_modules/
 client/config.json
+.env
diff --git a/docker-compose.yml b/docker-compose.yml
index c8325a7..2f9793f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -7,9 +7,9 @@ services:
       - "3000:3000"
     restart: always
     environment:
-      - BROADCASTER_PASSWORD=MySuperSecurePassword123
-      - TURN_USER=myuser
-      - TURN_PASSWORD=mypassword
+      - BROADCASTER_PASSWORD=${BROADCASTER_PASSWORD}
+      - TURN_USER=${TURN_USER}
+      - TURN_PASSWORD=${TURN_PASSWORD}
 
   coturn:
     image: coturn/coturn:latest
@@ -21,5 +21,5 @@ services:
       --min-port=49152
       --max-port=49252
       --realm=yourdomain.com
-      --user=myuser:mypassword
+      --user=${TURN_USER}:${TURN_PASSWORD}
       --stale-nonce