3 Commits

Include renames

Author	SHA1	Message	Date
MMD	43e317eeba	chore(security): remove committed secrets/dumps, .env-based config, hardened deploy webhook ... - Delete backups/*.dump and all real credentials from README/docs (prod MinIO creds, Casdoor passwords, server IP, admin password) - All stack secrets now come from git-ignored .env (.env.example added); docker-compose.prod.yml refuses to boot without them (${VAR:?}) - seed_casdoor.py: bcrypt password hashing, generated console/client secrets - Harden infra/deploy-webhook: HMAC-verified Gitea webhook receiver + systemd unit + README (replaces unauthenticated deploy endpoint) - docs/SECRET-MANAGEMENT.md: secret inventory + rotation checklist	2026-09-18 21:55:24 +03:30
whqreza	7528cc3bbe	chore: ignore the machine-local compose override ... docker-compose.override.yml publishes the frontend on an extra host port for LAN/phone access; it is machine-specific, so compose keeps auto-loading it locally while other machines' stacks stay unchanged.	2026-09-08 16:04:05 +03:30
ali_mohaghegh	5b27647a0a	chore: add repo scaffolding (compose, scripts, gitignore, env example)	2026-08-25 19:08:02 +03:30