Make the production deployment reproducible from the website repository: run the API under the static non-login xsharp_web account used by PostgreSQL peer authentication, document the passwordless Unix-socket database boundary and closed firewall posture, and record the OpenDKIM tools, private-key ownership, parent-directory traversal, and SELinux requirements discovered during the clean AlmaLinux deployment.

0 files changed, 0 insertions, 0 deletions