update security

2026-07-26 16:41:25 -05:00
parent 90b7b2c597
commit 81f65b5173
14 changed files with 869 additions and 5 deletions
@@ -12,6 +12,7 @@ The production layout is a self-contained, single-VM Docker deployment:
 - Nginx reverse proxy for both public domains
 - Certbot and Let's Encrypt HTTP-01 certificate management
 - explicit runtime storage under `config/` beside the Compose files
+- privacy-minimized ProxMenu installation and run-status registry

 No external database or load balancer is required. The datacenter edge only
 needs to forward public TCP 80 and 443 to the configured Docker VM ports.