From 6f2e0ec2f1d701d1d9e0885f6da8d04d3a973d69 Mon Sep 17 00:00:00 2001
From: hamed <15238-genius.ha@users.noreply.drupalcode.org>
Date: Fri, 10 Jul 2026 11:07:44 +0330
Subject: [PATCH] feat: add ALTCHA captcha configuration to docker-compose

---
 docker-compose.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 73eac13e..bdf6b405 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,6 +36,12 @@ x-app-env: &app-env
   OTP_TTL: "1200"
   MAX_FILE_SIZE_BYTES: "5242880"
   UPLOAD_DIR: var/uploads
+  # ALTCHA self-hosted captcha. HMAC key is a secret → inject from Coolify's
+  # Environment Variables tab. Enabled in prod; tunables fixed here.
+  ALTCHA_ENABLED: "1"
+  ALTCHA_HMAC_KEY: ${ALTCHA_HMAC_KEY}
+  ALTCHA_MAX_NUMBER: "100000"
+  ALTCHA_EXPIRE_SECONDS: "300"
 
 # Shared volume mounts for services that read/write JWT keys and uploads.
 x-app-volumes: &app-volumes