nexxo 4681b135db feat(deploy): run under a dedicated account instead of root ... The installer still needs root for apt and the firewall, but it now creates a clupilot service account that owns the checkout and runs Docker, maps the container user to it (HOST_UID/GID), and update.sh refuses to run as root — root-owned files in the checkout are files the application cannot write. The account has no password login: docker group membership is root-equivalent on the host, so it is reachable only via sudo -u or an SSH key. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 23:25:59 +02:00
..
handoffs	docs: provisioning engine v1.0 build handoff (standalone fleet + cluster-per-DC target)	2026-07-25 09:31:51 +02:00
specs	docs: Phase D spec — service framing, redesign & CRUD completeness	2026-07-25 14:13:23 +02:00
superpowers	docs: customer pipeline (Subsystem B) implementation plan	2026-07-25 11:35:28 +02:00
deployment.md	feat(deploy): run under a dedicated account instead of root	2026-07-25 23:25:59 +02:00
monitoring-uptime-kuma.md	fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe	2026-07-25 20:19:32 +02:00
wireguard-hub.md	docs(wireguard): document the ownership model and config storage	2026-07-25 22:55:14 +02:00