Docker hardening + first-run fixes

docker/docker-compose.yml

@@ -57,7 +57,10 @@ services:
       AUTH_SECRET: ${AUTH_SECRET}
 
       # Domain configuration
-      NEXT_PUBLIC_NODE_DOMAIN: ${DOMAIN:-localhost}
+      DOMAIN: ${DOMAIN:-localhost}
+      NEXT_PUBLIC_NODE_DOMAIN: ${NEXT_PUBLIC_NODE_DOMAIN:-}
+      NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_APP_URL:-}
+      ALLOW_LOCALHOST: ${ALLOW_LOCALHOST:-}
 
       # Admin emails
       ADMIN_EMAILS: ${ADMIN_EMAILS}
@@ -89,7 +92,7 @@ services:
       postgres:
         condition: service_healthy
     healthcheck:
-      test: ["CMD", "wget", "-q", "--spider", "http://localhost:3000/api/health"]
+      test: ["CMD-SHELL", "PORT=$(cat /var/run/synapsis/port 2>/dev/null || echo 3000); case \"$PORT\" in ''|*[!0-9]*) PORT=3000;; esac; wget -q --spider http://127.0.0.1:${PORT}/api/health || exit 1"]
       interval: 30s
       timeout: 10s
       retries: 3