chore: update docker compose and env config for drizzle

- Replace Triplit env vars with PostgreSQL, auth, and S3 config
- Add app service to docker-compose with healthcheck dependency
- Bind ports to localhost only for security
- Add required POSTGRES_PASSWORD validation

.env.example

@@ -1,6 +1,22 @@
-TRIPLIT_SERVICE_TOKEN="your-triplit-service-token" # given to you on startup, or by running `tsx generate-tokens.ts`
-NUXT_TRIPLIT_ANON_TOKEN="your-anonymous-triplit-token" # also given to you on startup, or by running `tsx generate-tokens.ts`
-BETTER_AUTH_SECRET="super-secret" # openssl rand -base64 32
-TRIPLIT_JWT_SECRET="super-secret"
-EXTERNAL_JWT_SECRET=${BETTER_AUTH_SECRET} # no need to change this
-NUXT_PUBLIC_TRIPLIT_URL="http://localhost:6543" # your triplit server url
+# Database
+POSTGRES_DB=veridian
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=changeme
+DATABASE_URL=postgresql://postgres:changeme@db:5432/veridian
+
+# Auth
+BETTER_AUTH_SECRET=changeme
+
+# App URL (your domain, used for CORS and auth redirects)
+NUXT_PUBLIC_URL=https://veridian.example.com
+
+# S3-compatible storage (optional, for file uploads)
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+S3_BUCKET_NAME=
+S3_REGION=
+S3_ENDPOINT=
+
+# Auth controls (optional)
+DISABLE_SIGNUP=false
+DISABLE_LOCAL_AUTH=false