Myron Blair a0b8bf2a09 security: remove stray !install!! deploy folder, block .py files, move secrets out of webroot ...

- Delete !install!!/ (schema.sql, migrations, fix_tjj.py) - unreferenced leftover
  deploy artifacts, fix_tjj.py was publicly downloadable (200) since the folder
  name did not match the existing /install/ block pattern
- .htaccess: add .py to blocked extensions, explicitly block the !install!!/ path
- config/config.php: replace with a require shim pointing to config-secrets.php
  outside the web root (Stripe/CyberMail keys no longer sit in a web-servable file)

2026-07-05 05:18:50 +00:00

..

vhost

Add DB schema (45 tables) and vhost config

2026-05-25 13:51:25 +00:00

config.php

security: remove stray !install!! deploy folder, block .py files, move secrets out of webroot

2026-07-05 05:18:50 +00:00