Security and data boundaries

ContaoDock is designed to keep project data and remote access scoped to the local desktop app. The current prototype boundaries are:

• Project source remains in its chosen host folder; the local runtime mounts it for development.
• Generated Compose files use variable references rather than writing the local database password. The password is stored in the operating system secure store.
• Remote profiles use the SSH agent or a selected private-key path. The app does not copy private-key contents into the project registry.
• Code transfer previews exclude environment files, credentials, local runtime state, caches, and user uploads by default.
• Database and files/ replacements are separate explicit actions and save a target snapshot before replacement.
• Docker services are local development services. They are not configured as production hosting.

Use trusted SSH host keys and protect access to your desktop account and app-data folder. Review every transfer preview and sync direction before running an operation. The current code deployment preview does not upload code yet.