Harden immutable release deployment

2026-07-18 02:31:28 +02:00
parent 611ad0cd57
commit 5699006a5e
20 changed files with 477 additions and 151 deletions
@@ -69,6 +69,11 @@
 - Kept map rectangle and full-area selection available for coverage inspection
  when a selected national theme has not yet been materialized, without
  querying an unrelated active dataset.
+- Hardened the all-in-one release path with commit-SHA image tags, OCI build
+  labels, previous-image preservation, automatic/manual rollback, an isolated
+  fresh-install smoke and dependency-cache-safe build metadata.
+- Made production startup reject known-default PostGIS passwords and apply the
+  configured upload limit consistently to nginx and FastAPI.

 ## Sprint 240 Operational forest, agriculture, nature and soil themes (2026-07-17)