davideandClaude Sonnet 5.5
c1b192f6d1
- app runs as uid 1000; a one-shot data-permissions service chowns ./data to it and closes it to others (works on an older root-owned install with no host sudo); files are created 0600 (umask 077) - python:3.12-slim and caddy:2-alpine pinned by digest; dependencies installed from requirements.lock with --require-hashes - the Fernet key is XPRV_ENCRYPTION_KEY_FILE (./secrets/xprv_encryption.key, a compose secret), out of every environment variable and of a ./data backup - setup.md no longer presents a second way to run the server (B-72) Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
12 lines
100 B
Plaintext
12 lines
100 B
Plaintext
.venv/
|
|
__pycache__/
|
|
*.pyc
|
|
.env
|
|
*.db
|
|
master.xprv.enc
|
|
.pytest_cache/
|
|
*.egg-info/
|
|
logs/
|
|
data/
|
|
secrets/
|