lekss361 f4d43d1cfc fix(security): forwarder PermissionError — убрать USER nobody + deploy automation (#432) ... Hotfix для GlitchTip Issue #71 (PermissionError при чтении /var/log/caddy/gendsgn.ru.log). Changes: - ops/glitchtip-auth-forwarder/Dockerfile — убран USER nobody, форвардер под root - ops/glitchtip-auth-forwarder/forwarder.py — throttle capture_exception (300s) - .forgejo/workflows/deploy.yml — paths-filter + build + force-recreate sidecar - docs/runbooks/basic_auth_management.md — Deploy section Security: caddy_logs mount read-only, нет network listener, нет shell, auth_forwarder_state dedicated volume. Attack surface минимален. После merge deploy.yml автоматически rebuild+recreate sidecar на VPS.		2026-05-23 09:04:00 +00:00
..
deploy-tradein.yml	fix(tradein): HOSTNAME=0.0.0.0 + NEXT_PUBLIC_API_BASE_URL build-arg	2026-05-21 10:21:32 +03:00
deploy.yml	fix(security): forwarder PermissionError — убрать USER nobody + deploy automation (#432)	2026-05-23 09:04:00 +00:00