fix clean deployment nginx configuration

2026-07-28 18:01:29 -05:00
parent 941ef0691f
commit 48f7dad599
6 changed files with 102 additions and 3 deletions
@@ -119,6 +119,13 @@ The broker is deliberately not started during the first bootstrap. Blank
 OAuth/package values are valid for Gitea-only setup, while `start` refuses to
 launch the broker until all required credentials are present.

+For troubleshooting, use `./manage.sh diagnostics`. Do not share unredacted
+`docker compose config` output: Compose resolves the broker's `.env` file and
+can print cookie, OAuth, and package secrets. If configuration output is
+accidentally disclosed, rotate the cookie secret with
+`./manage.sh rotate-cookie-secret` and replace any configured Gitea tokens or
+OAuth secret that appeared.
+
 ## 4. Enable TLS when forwarding is ready

 After public DNS resolves and the datacenter edge forwards public TCP 80 and