====== KeeWeb ======
===== What is it =====
KeeWeb is a web-based password manager compatible with KeePass 2.x database files (.kdbx).
It runs entirely in the browser — no server-side storage of passwords.
The .kdbx file is loaded from browser storage (localStorage) by default, or can be opened
from a URL or your local filesystem.

===== Deployment =====
 <code docker>
 service: mere-keepass
 image: ghcr.io/keeweb/keeweb:latest
 container port: 80/tcp (internal only)
 volume: fatal_keepass-data → /config
 nginx upstream: keepass:80
 </code>

**Why ghcr.io and not Docker Hub?**
The Docker Hub image (keeweb/keeweb) was unavailable during deployment — the pull kept failing.
The GitHub Container Registry image (ghcr.io/keeweb/keeweb:latest) works and is the official source.

===== Issues Encountered =====
 * **Docker Hub pull failure**: The keeweb/keeweb image on Docker Hub was unreachable.
   Fixed by switching to ghcr.io/keeweb/keeweb:latest.

===== Current Status =====
 * Running and accessible at https://keepass.mere-mortal.net
 * Uses the latest KeeWeb image from ghcr.io
 * Persistent volume: fatal_keepass-data

===== Planned / To Do =====
 * **Backup the .kdbx file**: Currently saved in browser localStorage only.
   If the browser cache is cleared, the database is lost.
   Recommended: set up a periodic export or use the "Save to URL" feature.
 * **Access restriction**: Consider adding IP allowlisting or basic auth in front of KeeWeb.