Refine repository structure
- Update .gitignore for dev/ and tmp/ directories - Move certificate setup to dev/ directory with README - Remove production references from AGENTS.md - Clean up directory structure and documentation - Repository now ready for development workflow
This commit is contained in:
parent
1ed443ff2a
commit
e00195c5be
3 changed files with 24 additions and 41 deletions
17
AGENTS.md
17
AGENTS.md
|
|
@ -23,22 +23,9 @@ We have UnitTests which should be kept up to date before committing any new code
|
|||
|
||||
Fix every compiler warning before committing.
|
||||
|
||||
### Certificate Management
|
||||
### Development Notes
|
||||
|
||||
Development
|
||||
- Generate self-signed certificates for local testing
|
||||
- Store in `certs/` directory (gitignored)
|
||||
- Generate self-signed certificates for local testing in `dev/` directory
|
||||
- Use CN=localhost for development
|
||||
|
||||
Production
|
||||
- Use Let's Encrypt or CA-signed certificates
|
||||
- Store certificates outside repository
|
||||
- Set appropriate file permissions (600 for keys, 644 for certs)
|
||||
- Implement certificate renewal monitoring
|
||||
- Never include private keys in documentation or commits
|
||||
|
||||
Deployment Security
|
||||
- Certificate files should be owned by service user
|
||||
- Use systemd service file with proper User/Group directives
|
||||
- Consider using systemd's `LoadCredential` for certificate paths
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue