- Add tailscale-redis sidecar sharing Redis network namespace
- Remove public 6380:6379 port mapping — nothing exposed to internet
- Redis now reachable on tailnet as tower-redis:6379 with password auth
- Tailscale uses only outbound connections, so no OCI Security List or
host firewall changes needed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add requirepass to Redis with REDIS_PASSWORD env var
- Expose port 6379:6379 for external connections
- Update REDIS_URL in api and worker to include password
- Update healthcheck to pass auth flag
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
maaz519