callback container integrated fully

2026-08-09 13:17:44 +02:00
parent 639c2b68c8
commit 5594431749
12 changed files with 196 additions and 65 deletions
@@ -19,3 +19,9 @@ A report should include:
 - relevant log excerpts with all secrets removed

 Only test systems for which you have explicit authorization.
+
+## Deployment secrets and runtime data
+
+Keep `.env` and persistent runtime directories such as `data/config`, `data/postgres`, `data/uploads`, `data/logs`, and `data/backups` outside source control. They are deployment data rather than application source and can contain credentials or operational information.
+
+For Internet-facing callbacks, publish only the dedicated callback listener through the firewall or reverse proxy. The normal AssetManager web port should remain on the intended administrative network.