Self-hosted operators control infrastructure, secrets, backups, and access policies. Fajita ships strict defaults, but production security is a shared responsibility.
- Rotate
CRON_SECRET, Clerk keys, and monitor encryption keys on a schedule - Keep PostgreSQL off the public internet
- Enable private network monitoring only with
FAJITA_ALLOW_PRIVATE_NETWORKSwhen you understand the risk - Report vulnerabilities through SECURITY.md, not public issues