Harden deploy workflow and record next-session handoff
This commit is contained in:
@@ -75,6 +75,7 @@ Last updated: 2026-03-23
|
||||
- [x] Audit production API base URL / proxy setup
|
||||
- [x] Document recommendation to leave `REACT_APP_API_BASE_URL` empty when using bundled proxy
|
||||
- [x] Replace committed dev secret-like values with placeholders in dev config
|
||||
- [x] Harden deploy script/workflow against transient Docker layer extraction failures
|
||||
- [ ] Rotate any real secrets that may previously have been committed/exposed
|
||||
- [ ] Verify production environment variables match documented setup
|
||||
|
||||
|
||||
Reference in New Issue
Block a user