nexxo 0219e3c987 fix(deploy): recreate the container, keep the root password secret, forget failures ... - update.sh recreated the app container only at the very end, so an update that changes the PHP runtime would have installed dependencies and migrated inside the old one. - install.sh randomised DB_PASSWORD but left DB_ROOT_PASSWORD at the value committed in .env.example — the same root credential on every installation, reachable from any container on the compose network. - Settings cached the fallback after a database failure, so one blip could leave a hidden site publicly visible until someone cleared the cache. Only a successful read is cached now, proven by a test that drops the table and brings it back. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 23:25:06 +02:00
..
Bytes.php	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00
Settings.php	fix(deploy): recreate the container, keep the root password secret, forget failures	2026-07-25 23:25:06 +02:00