docs: add 1password secret injection guide

2026-05-22 21:51:47 +02:00
parent b9bc0d3e4f
commit 77de03d8b5
8 changed files with 117 additions and 12 deletions
@@ -90,12 +90,14 @@ Exit criteria:

 ## Milestone 6: Production Secret Handling and Deployment Hardening

-Status: Planned
+Status: In progress

 Goal: make production deployments safer and easier to operate.

+Delivered:
+- 1Password-based secret injection flow for local, Docker Compose, and systemd deployments.
+
 Planned:
- Document a 1Password-based secret injection flow for local and containerized deployments.
 - Avoid exposing raw mailbox/OAuth secrets in logs, UI responses, and diagnostics.
 - Add startup checks for production-critical configuration.
 - Add backup/restore guidance for database deployments.