Organize local infrastructure and Vault secrets by service ownership

README.md

@@ -40,7 +40,7 @@ make build && make up
 
 This builds the product images and starts an isolated Vault, authenticated MongoDB
 replica set and NATS JetStream. First startup intentionally stops after bootstrap
-until you set the Resend API key and verified sender in Vault's `kv/email` secret.
+until you set the Resend API key and verified sender in Vault's `kv/services/notifications/email/resend` secret.
 Then rerun `make up` to start notifications, BFF and the frontend at
 [https://localhost:5126](https://localhost:5126).
 
@@ -72,7 +72,7 @@ repository root:
 
 ```sh
 docker run --rm --pull always -p 127.0.0.1:5123:80 \
-  -v "$PWD/frontend/app/build/web:/usr/share/nginx/html:ro" nginx:stable-alpine
+  -v "$PWD/frontend/app/build/web:/srv:ro" caddy:alpine caddy file-server --root /srv --listen :80
 ```
 
 Open [the local app](http://127.0.0.1:5123/). The language selector supports EN/RU