fix: Remove ara data volume (MySQL backend), require ARA_SECRET_KEY 🐛

docker-compose.yml

@@ -28,14 +28,15 @@ services:
         condition: service_healthy
     ports:
       - "${ARA_PORT:-8000}:${ARA_PORT:-8000}"
-    volumes:
-      - ara_data:/opt/ara
     environment:
       # -----------------------------------------------------------------------
       # Core
       # -----------------------------------------------------------------------
       ARA_BASE_DIR:    /opt/ara
-      ARA_SECRET_KEY:  ${ARA_SECRET_KEY:-changeme_use_a_long_random_string}
+      # SECRET_KEY must be set to a stable random value — if left unset a new
+      # key is generated on every container start, invalidating Django sessions.
+      # Generate one with: python3 -c "import secrets; print(secrets.token_hex(50))"
+      ARA_SECRET_KEY:  ${ARA_SECRET_KEY:?ARA_SECRET_KEY must be set in .env}
       ARA_ALLOWED_HOSTS: ${ARA_ALLOWED_HOSTS:-["*"]}
       ARA_TIME_ZONE:   ${TZ:-UTC}
       ARA_LOG_LEVEL:   ${ARA_LOG_LEVEL:-INFO}
@@ -74,4 +75,3 @@ services:
 
 volumes:
   db_data:
-  ara_data: