Harden scans and add LOC comparison endpoint (#1)

Co-authored-by: luna <clawy@reversed.dev>
Co-committed-by: luna <clawy@reversed.dev>

docker-compose.yml

@@ -14,11 +14,15 @@ services:
     environment:
       PORT: 3000
       API_KEY: ${API_KEY:-}
+      ALLOWED_GIT_HOSTS: ${ALLOWED_GIT_HOSTS:-}
       CACHE_TTL_MINUTES: ${CACHE_TTL_MINUTES:-5}
       CACHE_SWEEP_INTERVAL_MINUTES: ${CACHE_SWEEP_INTERVAL_MINUTES:-5}
       RATE_LIMIT_WINDOW_MINUTES: ${RATE_LIMIT_WINDOW_MINUTES:-5}
       RATE_LIMIT_MAX: ${RATE_LIMIT_MAX:-30}
       MAX_CONCURRENT_SCANS: ${MAX_CONCURRENT_SCANS:-4}
+      MAX_FILES_PER_SCAN: ${MAX_FILES_PER_SCAN:-20000}
+      MAX_FILE_SIZE_MB: ${MAX_FILE_SIZE_MB:-5}
+      MAX_SCAN_SIZE_MB: ${MAX_SCAN_SIZE_MB:-100}
       CLONE_TIMEOUT_SECONDS: ${CLONE_TIMEOUT_SECONDS:-45}
       DEFAULT_SSH_KEY_NAME: ${DEFAULT_SSH_KEY_NAME:-loc_via_git_ed25519}
       GENERATE_SSH_KEY_IF_MISSING: ${GENERATE_SSH_KEY_IF_MISSING:-false}
@@ -28,7 +32,7 @@ services:
     volumes:
       - ssh_keys:/app/keys
     tmpfs:
-      - /tmp/loc-via-git
+      - /tmp/loc-via-git:size=${TMPFS_SIZE:-512m},mode=1777
     restart: unless-stopped
 
 volumes: