excalidraw-box/DECISIONS.md

a list of architectural decisions

( to remind me when I over-engineer and be fickle minded )

Image is NOT meant to be exposed directly to the internet

• the defaults MUST take care of this
• and hence AUTH won't be a part of the image, whatever the user is using for reverse proxy should handle auth.