Security
An overview of the technical safeguards around access and infrastructure.
Access
Passwords are hashed with bcrypt, never stored in plain text. Sessions run on signed JWT tokens.
Infrastructure
The server is reachable only via SSH key - password login is disabled server-side. A firewall (ufw) restricts network access to what is required.