[docs](trx-rs): add safe deployment guide

Document deployment with a dedicated service account, restricted device access, authenticated network listeners, systemd user services, reverse proxying, verification, upgrades, and rollback. Assisted-By: OpenAI Codex (GPT-5) Signed-off-by: Stan Grams <sjg@haxx.space>
2026-08-18 22:53:00 +02:00
parent b73c97dd5b
commit be9d5c301b
2 changed files with 292 additions and 0 deletions
@@ -149,6 +149,11 @@ Serial (`/dev/ttyUSB*`) and audio access require your user to be in the
 `dialout` and `audio` groups. Remove everything with `script/uninstall.sh`
 (add `--purge` to also delete the config).

+For an unattended or remotely accessible installation, follow the
+[safe deployment guide](docs/Deployment.md). It covers a dedicated service
+account, device permissions, authentication, firewall and reverse-proxy
+boundaries, verification, upgrades, and rollback.
+
 ## How It Works

 ```mermaid