first commit

deploy/README.md

@@ -0,0 +1,16 @@
+# Production deployment files
+
+The DTF application is one Portainer-owned Docker Swarm stack. Gitea builds,
+tests, scans, and publishes the two application images, then calls the stack's
+Portainer webhook. Start with the short operator guide in `../PORTAINER.md`.
+
+- `stack.yaml` — the single Portainer stack.
+- `Dockerfile.api` and `Dockerfile.web` — prebuilt registry images.
+- `portainer.env.example` — non-secret Portainer variables.
+- `production_preflight.py` — fail-closed application/configuration validator.
+- `PRODUCTION_CHECKLIST.md` — production evidence checklist.
+
+The current application remains deliberately blocked from production because
+real adapters and Docker-secret file loading are absent and current validation
+base images have unresolved HIGH/CRITICAL findings. No real provider or
+production service has been configured or contacted.