feat: add branches feature, security audit, and multi-branch support

docker-compose.yml

@@ -20,11 +20,11 @@ services:
   app:
     build: .
     expose:
-      - "3000"
+      - "3003"
       - "3443"
     ports:
-      - "127.0.0.1:3000:3000"
-      - "127.0.0.1:3443:3443"
+      - "3003:3003"
+      - "3443:3443"
     environment:
       DATABASE_URL: postgres://app:${DB_PASSWORD}@db:5432/whereldo
       ADMIN_PASSWORD: ${ADMIN_PASSWORD}
@@ -43,7 +43,6 @@ services:
     hostname: whatido
     restart: unless-stopped
     network_mode: host
-    entrypoint: ["/bin/sh", "-c"]
     cap_add:
       - NET_ADMIN
       - SYS_MODULE
@@ -54,12 +53,8 @@ services:
       - /dev/net/tun:/dev/net/tun
       - /lib/modules:/lib/modules:ro
       - ./certs:/etc/tailscale/app-certs:ro
-    command: >
-      "tailscaled &
-       sleep 6 &&
-       tailscale up --hostname=whatido --accept-dns=false &&
-       tailscale funnel --bg --yes https://127.0.0.1:3443 &&
-       sleep infinity"
+      - ./start-tailscale.sh:/start-tailscale.sh:ro
+    command: ["/bin/sh", "/start-tailscale.sh"]
     depends_on:
       - app