Add production deployment guide and restrict CORS to development.

Document clearnet, TLS, and Tor setup; enable Nest CORS only in development and skip CORS_ORIGINS validation in production.
2026-10-28 22:07:32 +01:00
parent 915d62f09a
commit 4a534a8007
5 changed files with 155 additions and 5 deletions
@@ -2,6 +2,8 @@

 Self-hosted, privacy-focused image hosting. Images are metadata-stripped and encrypted in the browser before upload. Supports **zero-knowledge** viewer links and **hotlink** mode for embeds.

+For production deployment, see the [deployment guide](deploy/DEPLOYMENT_GUIDE.md).
+
 ## Development

 ### Start dev environment