chore: add wp-cli maintenance override

2026-07-23 21:22:21 +02:00
parent 472b8616b4
commit f75bce3dea
7 changed files with 83 additions and 0 deletions
@@ -28,6 +28,10 @@
  WordPress/Apache retains the capabilities needed by the official image internally,
  but no WordPress port is published. A containerized security test fails if the
  WordPress service is configured with host-published ports.
+- WP-CLI normally joins only the internal data network. The maintenance override
+  attaches WP-CLI to the web network for operator-triggered commands that require
+  outbound internet access, such as WordPress core downloads; do not use it for routine
+  bootstrap or inspection commands.
 - Persistent state uses host-based bind mounts. Keep those paths outside the public web
  root, restrict host access, never make them world-writable, and run
  `./scripts/prepare-host-volumes.sh` when paths or image user IDs change.