tben
8bf6bedec5
The app never terminates TLS: a reverse proxy or tunnel does, and isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure. Removes the cert generator, TLS resolution and HTTP redirect, the local CA download, and the TLS envs, and trims the installer, Dockerfile health check and docs to match. Also softens the composer's loading row.
19 lines
217 B
Plaintext
19 lines
217 B
Plaintext
# Secrets are passed at runtime with `docker run --env-file`, never baked in
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
secrets
|
|
|
|
node_modules
|
|
.git
|
|
.data
|
|
.bunext
|
|
.bun-sqlite
|
|
db/cobble
|
|
db/.backups
|
|
db/.exports
|
|
coverage
|
|
logs
|
|
*.log
|
|
assets
|