From 844121ecb12cff205fd95fc97e94aeb9a8f6b5cc Mon Sep 17 00:00:00 2001 From: Tero Date: Sun, 30 Aug 2026 10:19:44 +0300 Subject: [PATCH] TLS support via proxy marked as done --- README.md | 2 +- TODO.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 14c59f0..099a71f 100644 --- a/README.md +++ b/README.md @@ -98,4 +98,4 @@ Run `python ./scripts/verify-backup.py ` after the first scheduled ## Production notes -Put this service behind a TLS reverse proxy for `eternityproject.fi` (for example Caddy or Nginx). Set a strong unique `SECRET_KEY`; the Compose file intentionally refuses to start without it. Back up the `eternity_data` Docker volume, which contains accounts and posts. +The current deployment runs behind an Nginx reverse proxy with TLS enabled for `eternityproject.fi`. Keep `SECRET_KEY` strong and unique; the Compose file intentionally refuses to start without it. Back up the `eternity_data` Docker volume, which contains accounts and posts. diff --git a/TODO.md b/TODO.md index c4235b1..4679efc 100644 --- a/TODO.md +++ b/TODO.md @@ -8,4 +8,4 @@ - [x] Rotate the initial `admin` password and enroll its authenticator. - [x] Add CSRF protection to all state-changing forms. - [x] Add automated database backups and test restoration. -- [ ] Configure TLS reverse proxy and production domain for `eternityproject.fi`. \ No newline at end of file +- [x] Configure TLS reverse proxy and production domain for `eternityproject.fi`. \ No newline at end of file