27 lines
811 B
Markdown
27 lines
811 B
Markdown
---
|
|
id: TASK-6
|
|
title: Remove plaintext .env files from server
|
|
status: To Do
|
|
assignee: []
|
|
created_date: '2026-02-25 05:02'
|
|
labels:
|
|
- security
|
|
- infisical
|
|
- cleanup
|
|
dependencies: []
|
|
priority: medium
|
|
---
|
|
|
|
## Description
|
|
|
|
<!-- SECTION:DESCRIPTION:BEGIN -->
|
|
Now that all secrets are stored in Infisical, remove the plaintext .env files from /opt/postiz/*/ and other r*App directories on Netcup. Requires updating docker-compose files to pull from Infisical at startup (entrypoint wrapper pattern).
|
|
<!-- SECTION:DESCRIPTION:END -->
|
|
|
|
## Acceptance Criteria
|
|
<!-- AC:BEGIN -->
|
|
- [ ] #1 All Postiz spaces pull secrets from Infisical at container startup
|
|
- [ ] #2 No plaintext .env files with secrets remain on server
|
|
- [ ] #3 Containers use entrypoint wrapper or infisical run for secret injection
|
|
<!-- AC:END -->
|