fix(security): lock down Redis — auth + ACL + network split (#589)#643

Merged

vybe merged 10 commits into

Abilityai:devfrom

AndriiPasternak31:AndriiPasternak31/redis-auth

May 4, 2026

Commits on May 3, 2026

fix(security): split Docker compose into platform and agent networks (#589)
AndriiPasternak31
committed

Commits on May 4, 2026

fix(security): mandatory Redis auth, ACL users, auth-aware healthcheck (#589)
AndriiPasternak31
committed
fix(scheduler-test-rig): mirror Redis auth posture (#589)
AndriiPasternak31
committed
fix(security): fail-fast on REDIS_URL missing credentials (#589)
AndriiPasternak31
committed
fix(webhooks): use REDIS_URL for rate-limit client (#589)
AndriiPasternak31
committed
feat(deploy): auto-generate Redis passwords on fresh installs (#589)
AndriiPasternak31
committed
docs(security): add Redis auth migration guide + architecture notes (#589)
AndriiPasternak31
committed
test(security): network isolation, ACL, fail-fast, webhook rate-limit (#589)
AndriiPasternak31
committed
docs(security): detach agents before network rm (#589)

AndriiPasternak31
and
claude
committed
fix(security): CSO OBS-1/2/3 follow-ups — webhook rate-limit + healthcheck hardening (#589)

AndriiPasternak31
and
claude
committed