2 Commits

Author	SHA1	Message	Date
neon	0007a9d84f	fix(docker): support mounted files for every app secret ... PODCAST_ENCRYPTION_KEY is required in production but was absent from the entrypoint file_env list, leaving it as the only secret with no _FILE path. Test every supported name rather than spot-checking a single one. Move secrets-file and OIDC hardening detail to bookorbit.app/installation.	2026-09-20 18:35:15 +00:00
neon	2ced82794f	feat(docker): support file-backed secrets ... Load mounted secrets before database migrations while preserving direct environment values for existing deployments. Closes #373	2026-09-14 17:02:03 +00:00