feat(scheduling): pluggable captcha (Turnstile) on public booking

2026-06-07 09:02:35 +02:00
parent e1a77b085f
commit e33b7f18a3
7 changed files with 197 additions and 2 deletions
@@ -18,6 +18,10 @@ export default defineNuxtConfig({
    public: {
      siteUrl: process.env.NUXT_PUBLIC_SITE_URL
        || (process.env.NODE_ENV === 'production' ? 'https://booking.dezky.eu' : 'http://localhost:3000'),
+      // Cloudflare Turnstile site-key. When set, the booking form renders a
+      // captcha widget and sends its token with the booking POST. Server-side
+      // enforcement is gated independently by TURNSTILE_SECRET on platform-api.
+      turnstileSiteKey: process.env.NUXT_PUBLIC_TURNSTILE_SITE_KEY || '',
    },
  },