feat: secure frontend and provider ingress

docker-compose.yml

@@ -5,8 +5,8 @@ services:
     image: postgres:16-alpine
     container_name: unidesk-database
     restart: unless-stopped
-    ports:
-      - "${UNIDESK_DATABASE_PORT}:5432"
+    expose:
+      - "5432"
     environment:
       POSTGRES_USER: "${UNIDESK_DATABASE_USER}"
       POSTGRES_PASSWORD: "${UNIDESK_DATABASE_PASSWORD}"
@@ -45,9 +45,12 @@ services:
     depends_on:
       - database
     ports:
-      - "${UNIDESK_CORE_PORT}:8080"
+      - "${UNIDESK_PROVIDER_INGRESS_PORT}:8081"
+    expose:
+      - "8080"
     environment:
       PORT: "8080"
+      PROVIDER_PORT: "8081"
       DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
       PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
       HEARTBEAT_TIMEOUT_MS: "${UNIDESK_HEARTBEAT_TIMEOUT_MS}"
@@ -72,7 +75,13 @@ services:
       - "${UNIDESK_FRONTEND_PORT}:8080"
     environment:
       PORT: "8080"
-      CORE_PUBLIC_URL: "http://${UNIDESK_PUBLIC_HOST}:${UNIDESK_CORE_PORT}"
+      CORE_INTERNAL_URL: "http://backend-core:8080"
+      FRONTEND_PUBLIC_URL: "http://${UNIDESK_PUBLIC_HOST}:${UNIDESK_FRONTEND_PORT}"
+      PROVIDER_INGRESS_PUBLIC_URL: "ws://${UNIDESK_PUBLIC_HOST}:${UNIDESK_PROVIDER_INGRESS_PORT}/ws/provider"
+      AUTH_USERNAME: "${UNIDESK_AUTH_USERNAME}"
+      AUTH_PASSWORD: "${UNIDESK_AUTH_PASSWORD}"
+      SESSION_SECRET: "${UNIDESK_SESSION_SECRET}"
+      SESSION_TTL_SECONDS: "${UNIDESK_SESSION_TTL_SECONDS}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_PREFIX}_frontend.jsonl"
     volumes:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
@@ -91,7 +100,7 @@ services:
     depends_on:
       - backend-core
     environment:
-      PROVIDER_SERVER_URL: "ws://backend-core:8080/ws/provider"
+      PROVIDER_SERVER_URL: "ws://backend-core:8081/ws/provider"
       PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
       PROVIDER_ID: "${UNIDESK_PROVIDER_ID}"
       PROVIDER_NAME: "${UNIDESK_PROVIDER_NAME}"