No description
Find a file
Mitchell R 88526095e2
refactor: build-time sec-config from template + Coolify build args
sec-config.yaml is now generated at Docker build time from
sec-config.template.yaml via envsubst. Secrets come from Coolify
build args (set in UI, never in git). Template uses ${VAR:-default}
placeholders — safe to commit to public repo.

- sec-config.yaml removed from git, added to .gitignore
- sec-config.template.yaml added (public, no secrets)
- Dockerfile.server: ARGs for all config, envsubst generates config
  at build time, result is chmod 444 (read-only)
- Coolify compose: removed sec-config volume mount (baked in now)
- For native installs: copy template to sec-config.yaml, fill values

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-24 01:51:54 +02:00
.github/workflows fix(ci): retry firmware auto-import on TLS/transient failure 2026-05-23 00:05:21 +02:00
deploy refactor: build-time sec-config from template + Coolify build args 2026-05-24 01:51:54 +02:00
docs feat(ota): add RAUC OS update foundation 2026-05-20 05:15:29 +02:00
kiosk feat(smart-url): automated login/navigation sequences for web cells 2026-05-23 02:21:27 +02:00
nodered feat(nodered): motion + ANPR + generic ONVIF event trigger nodes 2026-05-23 02:17:05 +02:00
scripts fix(rauc): switch signing keys from Ed25519 to ECDSA P-256 2026-05-21 15:45:26 +02:00
server fix: resolve merge conflict + align BSB workdir /home/bsb 2026-05-23 23:58:36 +02:00
.gitattributes fix(deploy): mark setup-pi-kiosk.sh executable in git index + add .gitattributes 2026-05-13 03:33:41 +02:00
.gitignore refactor: build-time sec-config from template + Coolify build args 2026-05-24 01:51:54 +02:00
CLAUDE.md fix(proxy): split Node-RED route surfaces 2026-05-11 10:44:45 +02:00
docker-compose.coolify.yml refactor: build-time sec-config from template + Coolify build args 2026-05-24 01:51:54 +02:00
docker-compose.yml fix: resolve merge conflict + align BSB workdir /home/bsb 2026-05-23 23:58:36 +02:00
LICENSE-AGPL.txt docs: dual-license declaration + vendored AGPL-3.0 text 2026-05-15 04:47:46 +02:00
LICENSE-COMMERCIAL.md docs: dual-license declaration + vendored AGPL-3.0 text 2026-05-15 04:47:46 +02:00
LICENSE.md docs: dual-license declaration + vendored AGPL-3.0 text 2026-05-15 04:47:46 +02:00
package-lock.json fix(cloud-accounts): use Layout component + postgres 18 + npm bumps 2026-05-23 02:46:33 +02:00
package.json adding initial project 2026-05-10 01:09:13 +02:00
sec-config.template.yaml refactor: build-time sec-config from template + Coolify build args 2026-05-24 01:51:54 +02:00
tsconfig.base.json adding initial project 2026-05-10 01:09:13 +02:00