Deploy Bot 1c4a40f0c1 feat: add deployment hardening from production experience ...

- Add IP forwarding setup (sysctl) to install.sh — container can't
  write /proc/sys, must be done on host
- Add host-level WireGuard detection and auto-stop in install.sh
- Update key exchange instructions: 2-step process (server first,
  then client, then restart server with client key)
- Add deployment nuances section to README (ip_forward, wg0 cleanup,
  compose version warning, key exchange, network_mode, iptables order)
- Add production deployment notes to .env.example
- Remove obsolete compose version warnings noted during deployment

2026-07-30 01:05:13 +01:00

3.2 KiB

Raw Permalink Blame History

View Raw