Remove PostGIS password from image metadata
This commit is contained in:
@@ -7,6 +7,14 @@
|
||||
|
||||
# Changelog
|
||||
|
||||
## Sprint 35 Docker runtime secret hygiene (2026-06-17)
|
||||
|
||||
- Removed embedded PostGIS database name/user/password defaults from `deploy/unraid/Dockerfile.all-in-one` image metadata.
|
||||
- Kept database credentials as runtime configuration through `.env`, the Unraid template, Compose or `docker run -e`.
|
||||
- Added regression coverage so `GEOINTEL_POSTGRES_PASSWORD` is not baked into the all-in-one Dockerfile again.
|
||||
- Updated Unraid runtime documentation to clarify that credentials are runtime config, not image metadata.
|
||||
- No API contracts, migrations, product features, provider fetching or AI behavior were introduced.
|
||||
|
||||
## Sprint 34 browser-facing golden QA demo hardening (2026-06-17)
|
||||
|
||||
- Hardened `scripts/verify_demo_export_workflow.sh` so the browser-facing demo/export smoke compares persisted QA/QC metrics against `fixtures/golden/expected_qa_metrics.json`.
|
||||
|
||||
Reference in New Issue
Block a user