Security

Overview of security features and recommendations for production.

• Encryption — AES-256-GCM field encryption, key management

• Tokens & API keys — hashing, rotation, lifetime

• TLS / reverse proxy — Let's Encrypt, custom cert, reverse proxy in front

• Hardening checklist — what to enable before production