security: hardening по результатам аудита безопасности

README.md

@@ -162,7 +162,7 @@ services:
       - APP_BACKUP_DIR=/backups
       - APP_BACKUP_CRON=0 0 3 * * *
     healthcheck:
-      test: ["CMD", "wget", "-qO-", "http://localhost:8080/healthz"]
+      test: ["CMD", "synapse-backupper", "healthcheck"]
       interval: 30s
       timeout: 3s
       start_period: 10s
@@ -170,6 +170,8 @@ services:
 ```
 
 > **Important:** Only public keys (`*.pub.pem`) should be present in `./keys`. Move private keys (`*.priv.pem`) to an offline or restore-only host before starting the container.
+>
+> Replace `APP_PG_PASSWORD=secret` with a strong credential before deploying to production; the value is only an example.
 
 Start the scheduler with: