alex
8b4784f5ed
- Archive config-secrets (FN-009) - 31 tasks complete - Archive runfusion-poc (FN-008) - 25 tasks complete - Archive deployment-config (FN-006) - 27 tasks complete - All changes moved to openspec/changes/archive/
1.1 KiB
1.1 KiB
ADDED Requirements
Requirement: Production stack includes all required services
The system SHALL provide a production Docker Compose stack with API, web, Traefik, and PostgreSQL.
Scenario: Stack services
- WHEN the production stack is deployed
- THEN the following services run: api, web, traefik, db
- AND Traefik routes requests to the appropriate service
- AND services communicate via isolated Docker networks
Scenario: Environment configuration
- WHEN the stack starts
- THEN it reads environment variables from .env
- AND sensitive values are not hardcoded
Requirement: Production stack is secure by default
The system SHALL configure security headers and access controls in production.
Scenario: HTTPS only
- WHEN the stack runs in production
- THEN all traffic uses HTTPS
- AND HTTP redirects to HTTPS
Scenario: Network isolation
- WHEN the stack is deployed
- THEN platform services and tool containers are on separate networks
- AND tool containers cannot access the database directly