Linus OlofssonandClaude Opus 5.5 dc2bda8c07 Portfolio sync: Gitea token stays out of .git/config and out of the Node container ...

Security review: GIT_URL (user:token@) was stored as the clone's remote URL, and the repo, .git included, was mounted
into the container that runs npm install. Now: umask 077 + 700 directories, the remote is the clean URL, git gets the
token from a credential helper at fetch/push time, and the container sees an empty tmpfs over .git.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-06 04:45:09 +01:00

..

cleura

Portfolio sync: Gitea token stays out of .git/config and out of the Node container

2026-11-06 04:45:09 +01:00

caddy-site.snippet

Portfolio sync runs on the Cleura server (systemd timer every 20 min) instead of n8n -> Nurem

2026-11-06 04:43:33 +01:00