---
id: TASK-6
title: Remove plaintext .env files from server
status: To Do
assignee: []
created_date: '2026-02-25 05:02'
labels:
  - security
  - infisical
  - cleanup
dependencies: []
priority: medium
---

## Description

<!-- SECTION:DESCRIPTION:BEGIN -->
Now that all secrets are stored in Infisical, remove the plaintext .env files from /opt/postiz/*/  and other r*App directories on Netcup. Requires updating docker-compose files to pull from Infisical at startup (entrypoint wrapper pattern).
<!-- SECTION:DESCRIPTION:END -->

## Acceptance Criteria
<!-- AC:BEGIN -->
- [ ] #1 All Postiz spaces pull secrets from Infisical at container startup
- [ ] #2 No plaintext .env files with secrets remain on server
- [ ] #3 Containers use entrypoint wrapper or infisical run for secret injection
<!-- AC:END -->