OmarElaraby26
ae275df161
fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount
...
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.
Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.
Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
2026-04-05 22:24:53 +02:00
adithya
bb06d6bb09
fix: Added missing title metadata
...
New files didn't have YAML metadata, it is added now.
2026-03-15 18:47:35 +05:30
adithya
477376edc4
refactor: Moved md files back to docs
...
Refactor can be considered later if needed.
2026-03-15 18:47:35 +05:30
adithya
cab78405cc
refactor: Moving md files to src for clarity
2026-03-15 18:47:35 +05:30
RocketQuack
99d9a1dc38
feat: add nginx-proxy with acme companion as an alternative to traefik ( #1800 )
...
* refactor: move core nginx files into more recognizable folder structure
* chore: include HTTPS_PUBLISH_PORT in example .env
* feat: add nginx-proxy and acme-companion compose overrides
* docs: add NGINX_PROXY_HOSTS to example.env
* docs: add nginx-proxy overrides
* docs: split docs, variables for usage of traefik or nginx-proxy
* docs: update override notes for traefik proxy on separate stack
* docs: split TLS/SSL overview and add own caddy guide
* docs: add nginx-proxy + acme companion guide
* docs: add nginx-proxy and acme single-server setup guide
2026-02-06 09:56:28 +05:30
