chore: add .gitignore, remove sensitive files from tracking, sanitize docker-compose.yml

docker-compose.yml

@@ -5,16 +5,16 @@ services:
     image: postgres:16-alpine
     container_name: maqt-postgres
     environment:
-      POSTGRES_USER: maqt
-      POSTGRES_PASSWORD: maqt123456
-      POSTGRES_DB: maqt
+      POSTGRES_USER: ${POSTGRES_USER:-maqt}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
+      POSTGRES_DB: ${POSTGRES_DB:-maqt}
     volumes:
       - pgdata:/var/lib/postgresql/data
     ports:
       - "127.0.0.1:5432:5432"
     restart: unless-stopped
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U maqt"]
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-maqt}"]
       interval: 5s
       timeout: 5s
       retries: 5
@@ -24,11 +24,8 @@ services:
     container_name: maqt-backend
     ports:
       - "127.0.0.1:3002:3001"
-    environment:
-      - DATABASE_URL=postgresql://maqt:maqt123456@postgres:5432/maqt
-      - JWT_SECRET=maqt-jwt-secret-key-2026-change-in-production
-      - ENCRYPTION_KEY=maqt-encryption-key-32bytes!
-      - PORT=3001
+    env_file:
+      - .env
     restart: unless-stopped
     depends_on:
       postgres: