Deployment and Host Safety

Operational Code

Files under `roles/*/etc`, `roles/*/deploy`, `roles/vpn`, and `configure-sd-card` are operational code. Treat with care.

Prohibited Changes (unless explicitly requested)

• Do NOT rotate credentials, hostnames, usernames, IP addresses, WireGuard keys, MQTT ACLs, or systemd unit names.
• Keep service names stable unless all dependent deployment scripts and docs are updated together.

Dashboard Notes

• The dashboard is a Mojolicious app under `roles/dashboard`.
• API responses are not stable. Frontend JS must be updated following backend API modifications.
• Database path can be overridden with `FAPG_DAQ_DB` env var.

Documentation

• Use Org Mode (`.org` files) for project documentation.
• Update architecture docs when MQTT topics, payload schema, host roles, or data flow change.