Commit Graph
3 Commits
Author SHA1 Message Date
poprhythm 2f1a988ac3 security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose
- plex: remove stale/dead PLEX_CLAIM token
- uptime-kuma: mount docker.sock read-only (only needs to read container state)
- home-assistant: drop privileged: true (no device passthrough configured)
- glances: drop privileged: true, bind dashboard port to 127.0.0.1
- couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
2026-07-20 01:49:56 +00:00
poprhythm 2544694586 Move hardcoded secrets to .env files for dns-updateip, docker-registry, openclaw
- dns-updateip: APIKEY now uses ${APIKEY} substitution
- docker-registry: SECRET_KEY_BASE now uses ${SECRET_KEY_BASE} substitution
- openclaw: OPENCLAW_GATEWAY_TOKEN now uses ${OPENCLAW_GATEWAY_TOKEN} substitution
- Add .env.example templates for backrest, dns-updateip, docker-registry, openclaw
2026-02-18 19:02:01 +00:00
poprhythm f46d493ca2 Update dashy, gitea, homebox, docker-registry for git-linked deployment 2026-02-08 03:23:38 +00:00