F-002 fix: Remove secrets and externalize config

2026-05-25 08:00:05 +02:00
parent d3a558352d
commit 3d41579ad3
58 changed files with 1192807 additions and 52 deletions
--- a/project/web/index/new/config/README.md
+++ b/project/web/index/new/config/README.md
@@ -0,0 +1,17 @@
+# Local config setup
+
+1. Copy `local.example.php` to `local.php`.
+2. Fill real local DB, OpenAI, and URL values in `local.php`.
+3. Keep `local.php` out of git.
+
+Config keys used by the legacy module:
+- `db.*`
+- `openai.*`
+- `store.*`
+- `routes.*`
+- `security.form_password_hash`
+- `worker.*`
+
+The module loads:
+- real local values from `config/local.php`
+- safe fallback values from `config/local.example.php`