[D-2] Decide the v1 deployment posture

[liangricky7]

Blocked by: — · Blocks: nothing, but decide before anything ships

(Was sprint 1 ticket 11.) "Not a public wiki — no access without logging in, to anything, in any form" is a hard rule, and single-user v1 has no login. It must not be put on a public URL as it stands.

• Choose one:
  • local only: the current working assumption, and it keeps all cloud infrastructure out of v1
  • one shared password (or HTTP basic auth) in front of the whole app
• Record it in DESIGN.md §4
• If a shared password is chosen, decide how uploaded files are protected too. They're served through signed links (T4-5, [T4-5] Upload and serve images and PDFs #24), which skip an app-level password. Decide this together with T4-4 ([T4-4] Where uploaded files live in v1 #23)

---

Source: docs/frontend-tickets.md