From 70d89d1c28e4c27c29577ea0b832ba9b637a59eb Mon Sep 17 00:00:00 2001
From: Tiago Yamamoto <tiago.ribeiro@inventcloud.com.br>
Date: Sat, 27 Dec 2025 00:36:49 -0300
Subject: [PATCH] docs: update BACKOFFICE.md with distroless and jwt details

---
 docs/BACKOFFICE.md | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/docs/BACKOFFICE.md b/docs/BACKOFFICE.md
index 1e3530e..f4b3a29 100644
--- a/docs/BACKOFFICE.md
+++ b/docs/BACKOFFICE.md
@@ -33,12 +33,19 @@ DELETE /api/admin/settings/:key → Remover
 - Usuários ativos
 - Pedidos pendentes
 
+## 🚀 Deployment
+
+The service is containerized using **Google Distroless** images (`gcr.io/distroless/nodejs22-debian12`) for maximum security and minimal footprint.
+Verified locally using `JWT_SECRET` shared with the backend.
+
 ## Variáveis de Ambiente
 
 ```bash
 DATABASE_URL=postgres://...
-JWT_SECRET=your-secret
-ENCRYPTION_KEY=32-byte-key-for-aes-256
+JWT_SECRET=dev-secret         # Must match backend secret for local verification
+PORT=3000
+API_URL=http://localhost:8214
+ENCRYPTION_KEY=...
 ```
 
 ## Executar