A ashkan@beigi.net 035bc59460 Harden deployment: DB ownership and config secrecy ... - Restrict the deployed /etc/esim-provisioning/config.yaml to 600 owned by the esim service user; it holds the OP key and was previously world-readable. - Chown data/ AFTER init_db runs (as root) so the SQLite file is owned by the esim service user; the service runs with ReadWritePaths=.../data and could not write a root-owned database before. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>			2026-07-01 21:59:27 +00:00
..
export_subscribers.py		Add Phase-1 eSIM provisioning implementation	2026-07-01 05:56:31 +00:00
init_db.py		Harden: fix bare-filename db path crash, configurable APN	2026-07-01 06:13:26 +00:00
setup_wifi_ap.sh		Harden deployment: DB ownership and config secrecy	2026-07-01 21:59:27 +00:00
sync_subscribers.py		Add Phase-1 eSIM provisioning implementation	2026-07-01 05:56:31 +00:00