hsiegeln f81cd740b7 fix: security hardening — remove dead routes, add JWT audience validation ...

- Remove broken observe/dashboard Traefik routes (server accessed via /server only)
- Remove unused acme volume
- Add JWT audience claim validation (https://api.cameleer.local) in SecurityConfig
- Secure bootstrap output file with chmod 600
- Add dev-only comments on TLS_SKIP_VERIFY and credential logging

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 19:15:03 +02:00

..

runtime-base

feat: update Docker Compose, CI, and add runtime-base Dockerfile

2026-04-04 18:04:42 +02:00

clickhouse-init.sql

fix: Docker Compose database initialization

2026-04-04 23:37:19 +02:00

clickhouse-users.xml

fix: allow ClickHouse connections from Docker network

2026-04-04 23:41:14 +02:00

init-databases.sh

fix: Docker Compose database initialization

2026-04-04 23:37:19 +02:00

logto-bootstrap.sh

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

server-ui-entrypoint.sh

fix: patch server-ui entrypoint to fix sed ordering bug

2026-04-05 23:53:03 +02:00

traefik-dynamic.yml

fix: root → /platform/ redirect via Traefik file config

2026-04-05 23:30:38 +02:00