devops

2 posts.

5 min

Docker, CI and v1.0

A non-root container image, keys mounted at runtime, CI against real PostgreSQL, and a clean v1.0.0 release.

  • docker
  • ci
4 min

Hardening for production

Externalised issuer and CORS, health probes, and a persistent security audit trail.

  • security
  • spring-boot