Security

• Keep .env private (chmod 600 .env); it contains the database password and is never part of the repository.
• The updater service can control Docker on the host (that is how it rebuilds the shop). It has no published port, is only reachable by the backend over a private network and requires a token generated on first start. Remove the updater service from docker-compose.yml if you prefer updating manually.
• Files the updater changes in the checkout are owned by root; use sudo for manual git commands in /opt/rustwebshop afterwards.
• Do not open ports 8080, 4000 or 8081 in the firewall (see Installation, step 7).
• Restrict the admin domain further (VPN, IP allow-list or HTTP basic auth) if only a few people need it.
• Backups contain customer data, password hashes and your payment/email keys: keep the backup repository private and turn on two-factor authentication for your GitHub account (see Backups).