- Use dollar-quoting in generated SQL to prevent injection - Set .env.prod and init-postgres-prod.sql to mode 0600 - Use run_compose for OpenBao log capture (consistent env-file) - Prompt user before continuing if OpenBao bootstrap fails - Improve mask_secret to fully mask short secrets - Check sysctl return code before parsing RAM
28 KiB
Executable File
28 KiB
Executable File