/security — Security Audit

Security Checks

HTTPS (Caddy)

TLS active

PM2 Autostart

enabled

Caddy Service

active

PostgreSQL

role "partyatlas" does not exist

Firewall (iptables)

0 DROP rules

Fail2ban

active

SSH Key Auth

password auth may be enabled

Secrets in .env

4 .env files with secrets

Live config at :2019 (local only)

All-site health check via HTTPS

Backend API health endpoints

Hidden court — secrets for the worthy

The sacred sound

Gratitude portal