Group Mongo bootstrap secrets under infrastructure ownership

This commit is contained in:
Stephan D committed 2026-09-12 23:36:47 +02:00
1 parent 9dbf0bd80c
commit 9d57a65010
7 files changed
+22 -13

No files matched your search

+1 -1
View File
@@ -176,7 +176,7 @@ Keep infrastructure Dockerfiles under `infra/images/` and local Compose, service
configuration and shell tooling under `infra/local/`. Keep product source under
`backend/` and `frontend/`. Organize Vault KV paths by owning service under
`services/<service>/<purpose>`, infrastructure under `infrastructure/<component>/<purpose>`,
and bootstrap administration under `bootstrap/<component>`. Caller credentials
and bootstrap administration under `infrastructure/<component>/bootstrap`. Caller credentials
belong to the receiving service at `services/<service>/callers/<caller>`.
Use Caddy for local browser HTTPS and certificate management. Treat the private
local Docker network as trusted; do not add internal gRPC TLS or Vault-managed