The DTF application is one Portainer-owned Docker Swarm stack. Gitea builds, tests, scans, and publishes the two application images, then calls the stack's Portainer webhook. Start with the short operator guide in ../PORTAINER.md.

stack.yaml — the single Portainer stack.
Dockerfile.api and Dockerfile.web — prebuilt registry images.
portainer.env.example — non-secret Portainer variables.
production_preflight.py — fail-closed application/configuration validator.
PRODUCTION_CHECKLIST.md — production evidence checklist.

The current application remains deliberately blocked from production because real adapters and Docker-secret file loading are absent and current validation base images have unresolved HIGH/CRITICAL findings. No real provider or production service has been configured or contacted.