About to embark on this myself - the Kamal docs say you can, if you bootstrap the server yourself. But it sounds like you might have done that which also caused issues?
Yeah, I've also stumbled over creating and using the non-root-user and passing secrets safely to the Dockerfile. Hope to find time next weekend to continue.
Comments
Will test out some more when I get a chance.
Along with making sure I add extra security and backups.
And if I had the option, I'd probably use the hosting-provided firewall instead.
Going to play with cleaning it up and improving security today.
Thanks for pointing that out and confirming my suspicions.