# Deployment and Host Safety

## Operational Code

Files under `roles/*/etc`, `roles/*/deploy`, `roles/vpn`, and `configure-sd-card` are operational code. Treat with care.

## Prohibited Changes (unless explicitly requested)

- Do NOT rotate credentials, hostnames, usernames, IP addresses, WireGuard keys, MQTT ACLs, or systemd unit names.
- Keep service names stable unless all dependent deployment scripts and docs are updated together.

## Dashboard Notes

- The dashboard is a Mojolicious app under `roles/dashboard`.
- API responses are not stable. Frontend JS must be updated following backend API modifications.
- Database path can be overridden with `FAPG_DAQ_DB` env var.

## Documentation

- Use Org Mode (`.org` files) for project documentation.
- Update architecture docs when MQTT topics, payload schema, host roles, or data flow change.