scripts/make-tls.sh creates a CA whose critical nameConstraints permit only the listed IPv4 addresses (and the .invalid DNS subtree), plus an end-entity server certificate; run-backend.sh passes CONFLUENCE_WEB_TLS_CERT/KEY to uvicorn.
23 lines
247 B
Plaintext
23 lines
247 B
Plaintext
# secrets
|
|
.env
|
|
|
|
# python
|
|
.venv/
|
|
__pycache__/
|
|
*.pyc
|
|
.pytest_cache/
|
|
|
|
# crawler output
|
|
output/
|
|
|
|
# crawler logs
|
|
*.log
|
|
|
|
# generated report
|
|
report/
|
|
|
|
# deployment secrets / local configuration
|
|
deploy/*.env
|
|
# private TLS keys and certificates
|
|
deploy/tls/
|