Harden CI and switch release builds to tagged immutable images
This commit is contained in:
parent
bed2e6cfb6
commit
f24e96efa7
60 changed files with 4710 additions and 64 deletions
6
docs/adr/0007-open-first-run-setup.md
Normal file
6
docs/adr/0007-open-first-run-setup.md
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
# ADR-0007: Open first-run setup
|
||||
|
||||
Status: Accepted risk
|
||||
|
||||
An uninitialized server exposes the owner-creation page without a bootstrap secret. Owner creation is an atomic single-winner transaction and setup becomes permanently unavailable afterward. Operations documentation requires completing setup before proxy exposure. The owner accepts the takeover risk if an uninitialized instance is exposed.
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue