big

2026-08-23 02:47:01 +02:00
parent 9bbbd94b98
commit 49c13dfd80
19 changed files with 555 additions and 24 deletions
--- a/Internal/en/README.md
+++ b/Internal/en/README.md
@@ -50,6 +50,7 @@ Papa-Kind-Treff is a PHP-based platform for fathers focused on local events, app
 - new base classes: `src/App/SystemSettings.php`, `src/App/ListingCatalog.php`

 ## Privacy and Security
+- Server secrets can be loaded locally through `config/secrets.local.php` outside the webroot; the file is not versioned and is not deleted by deployments.
 - password hashes via Argon2id
 - account emails are encrypted and additionally addressed through a separate HMAC lookup hash
 - personal calendar-feed tokens are stored encrypted and additionally resolved through a separate SHA-256 lookup hash