2 Commits

Author	SHA1	Message	Date
Jared Swanson	46725a5738	docs: record remetrics secrets extracted to .env ... - remetrics POSTGRES_PASSWORD, SECRET_KEY_BASE, OPENAI_API_KEY moved from inline compose to gitignored ~/services/remetrics/.env (mode 600) via ${VAR} interpolation; byte-identical resolved config, zero container disruption - strapi-remetrics already used env_file: ./strapi/.env — no change needed there - remaining remetrics prereq is the missing build: stanza (PREREQ 2) - GCS service-account JSON (strapi/gcs/) noted as follow-up rotation item for Vaultwarden Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-25 12:51:01 -04:00
Jared Swanson	bcb361127e	docs: document server architecture, add health tooling, harden ops hazards ... - server architecture + progressive-disclosure docs; new health-check.sh / syshealth health monitoring doc; remetrics operations + update-workflow runbooks; cert-management doc (two ACME resolvers); recorded ops-hazard fixes (prune cron de-fanged + rescheduled 04:30, Watchtower switched to opt-in); recorded GHCR image DR backup + Bitbucket deploy-key connection; corrected stale profile.yaml/migration-plan facts. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-25 12:20:08 -04:00