rsocials-online/backlog/tasks/task-6 - Remove-plaintext-.env-files-from-server.md

id	title	status	assignee	created_date	labels	dependencies	priority
TASK-6	Remove plaintext .env files from server	To Do		2026-02-25 05:02	security infisical cleanup		medium

Description

Now that all secrets are stored in Infisical, remove the plaintext .env files from /opt/postiz// and other rApp directories on Netcup. Requires updating docker-compose files to pull from Infisical at startup (entrypoint wrapper pattern).

Acceptance Criteria

• #1 All Postiz spaces pull secrets from Infisical at container startup
• #2 No plaintext .env files with secrets remain on server
• #3 Containers use entrypoint wrapper or infisical run for secret injection