Skip to content

feat: env-based encryption key, GHCR publishing, Unraid support#1

Merged
github-actions[bot] merged 1 commit into
mainfrom
claude/unruffled-knuth
Apr 1, 2026
Merged

feat: env-based encryption key, GHCR publishing, Unraid support#1
github-actions[bot] merged 1 commit into
mainfrom
claude/unruffled-knuth

Conversation

@Inch-high
Copy link
Copy Markdown
Owner

@Inch-high Inch-high commented Apr 1, 2026

Summary

  • Security: Move Fernet encryption key from filesystem to ENCRYPTION_KEY env var — separates key from data volume
  • Docker: Add OCI labels, healthcheck, and multi-arch (amd64/arm64) CI workflow publishing to GHCR
  • Unraid: Add setup instructions to README, update docker-compose.yml with image field for pull-based deploys
  • Cleanup: Remove dev.db and secret.key from git tracking, update .gitignore

Test plan

  • Build image locally with docker compose build
  • Start without ENCRYPTION_KEY — verify warning logged and app runs
  • Set ENCRYPTION_KEY — verify settings encrypt/decrypt correctly across restarts
  • Verify /health endpoint works and Docker healthcheck passes
  • Push to main — verify GHCR workflow publishes image

Generated with Claude Code

…support

Move Fernet encryption key from filesystem (secret.key) to ENCRYPTION_KEY
environment variable for better security separation. If unset, an ephemeral
key is generated with a warning.

- Add Docker healthcheck, OCI labels, and multi-arch GHCR CI workflow
- Add Unraid setup instructions to README
- Remove dev.db and secret.key from tracking, update .gitignore

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@github-actions github-actions Bot merged commit dcd03bb into main Apr 1, 2026
1 of 2 checks passed
@Inch-high Inch-high deleted the claude/unruffled-knuth branch April 1, 2026 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant