19071ec6c6
Backups are per-site and not part of the base stack, so they ship as a separate compose overlay with an isolated restic REST server the app can only reach through the backup utility (no shell or db creds). The sidecar image trusts the corporate proxy root CA at build time so its Oracle yum, github, and PyPI fetches succeed behind TLS interception; shell scripts are pinned to LF via .gitattributes so the container entrypoints do not die on a CRLF shebang.
5 lines
240 B
Plaintext
5 lines
240 B
Plaintext
# Keep shell scripts LF-only so they run inside Linux containers regardless of
|
|
# the host checkout. A CRLF shebang makes the kernel look for "bash\r" and the
|
|
# container dies with: env: 'bash\r': No such file or directory.
|
|
*.sh text eol=lf
|