Skip to main content

Operate the internal demo

Run containers only on approved internal home-lab infrastructure. Inject server-only configuration at runtime, restrict egress to required PayPal Sandbox endpoints, expose the app through internal ingress, and use health/readiness checks. Logs must omit credentials and sensitive payment payloads. Back up only governed source/configuration; the static catalog remains reproducible from committed evidence. Document rollback to the previous image/configuration. Production SLOs, public exposure, live PayPal, and customer-data operations are out of scope.

Runbooks​

Last updated on