John Cardinal c6c9e6c5d3 case 4727 - docs: Linux server permissions, service security settings, 127.0.0.1 behind NGINX ...

Install: program files read only for the service account, config.json 640,
systemd security settings in the service file, and a final step binding
AyaNova to 127.0.0.1 once NGINX works. Upgrade: the pre-8.3.0 step sets the
same permissions instead of re-adding group write on the program folder,
offers the security settings as a drop-in, and the upgrade commands use
curl -fO so a failed download stops before the program files are deleted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-26 14:14:05 -07:00

..

security

Security review pass 1: scope, threat model, attack-surface map, first candidate findings

2026-10-23 18:00:18 -07:00

CODEBASE-REFERENCE.md

case 4690 - NET10-PORT survey: n/a items, evidence, resolve [unverified] markers

2026-10-22 13:57:56 -07:00

john-scratch-notes.txt

case 4690 - preparing project and organizing, all project ai markdown docs updated and notes for me

2026-10-22 12:01:23 -07:00

NET10-PORT.md

case 4727 - docs: Linux server permissions, service security settings, 127.0.0.1 behind NGINX

2026-10-26 14:14:05 -07:00

PROJECT-OVERVIEW.md

case 4690 - dev docs: build VM deprecated, releases built on the workstation (backup laptop as fallback)

2026-10-23 10:52:17 -07:00

ROADMAP.md

case 4690 - build docs: pin MkDocs below 2 (Material is incompatible with 2.0); Zensical move on the roadmap

2026-10-23 11:31:49 -07:00

SECURITY-REVIEW.md

case 4727 - docs: Linux server permissions, service security settings, 127.0.0.1 behind NGINX

2026-10-26 14:14:05 -07:00

TESTING.md

case 4690 - NET10-PORT survey: n/a items, evidence, resolve [unverified] markers

2026-10-22 13:57:56 -07:00