[{"data":1,"prerenderedAt":289},["ShallowReactive",2],{"docs-nav":3,"docs:\u002Fdocs\u002Freference\u002Fknown-issues":139},[4,7,10,13,16,19,22,25,28,31,34,37,40,43,46,49,52,55,58,61,64,67,70,73,76,79,82,85,88,91,94,97,100,103,106,109,112,115,118,121,124,127,130,133,136],{"path":5,"title":6},"\u002Fdocs\u002Faccess-gating","Protect a local route",{"path":8,"title":9},"\u002Fdocs\u002Farchitecture\u002Fsecurity-and-trust","Security and trust",{"path":11,"title":12},"\u002Fdocs\u002Fconcepts\u002Fbuilds-and-deployments","Build and deploy",{"path":14,"title":15},"\u002Fdocs\u002Fconcepts\u002Fconfiguration-ownership","Where configuration belongs",{"path":17,"title":18},"\u002Fdocs\u002Fconcepts\u002Fenvironments-and-secrets","Environment values and secrets",{"path":20,"title":21},"\u002Fdocs\u002Fconcepts\u002Fmental-model","How projects fit together",{"path":23,"title":24},"\u002Fdocs\u002Fconcepts\u002Fplans-and-apply","Plans and apply",{"path":26,"title":27},"\u002Fdocs\u002Fconcepts\u002Ftargets-and-runtimes","Choose a target and runtime",{"path":29,"title":30},"\u002Fdocs\u002Fcontribute\u002Freleases","Publish a release",{"path":32,"title":33},"\u002Fdocs\u002Fdevelopment-mounts","Development mounts",{"path":35,"title":36},"\u002Fdocs\u002Fgetting-started","Getting started",{"path":38,"title":39},"\u002Fdocs\u002Fhelp\u002Ffaq","FAQ",{"path":41,"title":42},"\u002Fdocs\u002Fhelp\u002Ftroubleshooting","Troubleshooting",{"path":44,"title":45},"\u002Fdocs\u002Fhow-to\u002Fdeploy-production","Prepare a deployment environment",{"path":47,"title":48},"\u002Fdocs\u002Fhow-to\u002Fswarm-cluster","Run on a multi-node Swarm",{"path":50,"title":51},"\u002Fdocs","mm documentation",{"path":53,"title":54},"\u002Fdocs\u002Fjobs-and-schedules","Jobs and schedules",{"path":56,"title":57},"\u002Fdocs\u002Flocal-dashboard","Local dashboard",{"path":59,"title":60},"\u002Fdocs\u002Flocal-https","Local HTTPS",{"path":62,"title":63},"\u002Fdocs\u002Flocal-services","Local services",{"path":65,"title":66},"\u002Fdocs\u002Fmcp","Let an AI agent work on your project",{"path":68,"title":69},"\u002Fdocs\u002Fmulti-project-hosts","Run multiple projects on one host",{"path":71,"title":72},"\u002Fdocs\u002Fonboarding","Set up a project",{"path":74,"title":75},"\u002Fdocs\u002Fopenbao","Use OpenBao",{"path":77,"title":78},"\u002Fdocs\u002Fproject\u002Fcontributing","Contributing",{"path":80,"title":81},"\u002Fdocs\u002Fproject\u002Flicense","License",{"path":83,"title":84},"\u002Fdocs\u002Fproject\u002Fsecurity","Security",{"path":86,"title":87},"\u002Fdocs\u002Freference\u002Fcapability-matrix","Supported features and platforms",{"path":89,"title":90},"\u002Fdocs\u002Freference\u002Fcli","CLI command reference",{"path":92,"title":93},"\u002Fdocs\u002Freference\u002Fconfiguration","Configuration",{"path":95,"title":96},"\u002Fdocs\u002Freference\u002Fenvironment-variables","Environment variables",{"path":98,"title":99},"\u002Fdocs\u002Freference\u002Ferrors-and-exit-codes","Errors and exit codes",{"path":101,"title":102},"\u002Fdocs\u002Freference\u002Fknown-issues","Known limitations",{"path":104,"title":105},"\u002Fdocs\u002Fremote-access","Manage remote access",{"path":107,"title":108},"\u002Fdocs\u002Fremote-daemon","Set up a remote host",{"path":110,"title":111},"\u002Fdocs\u002Fruntime-observability","Status, logs, and commands",{"path":113,"title":114},"\u002Fdocs\u002Fsecret-delivery","Pass secrets to your app",{"path":116,"title":117},"\u002Fdocs\u002Fsecret-providers","Choose a secret store",{"path":119,"title":120},"\u002Fdocs\u002Fstart\u002Finstall","Install mm",{"path":122,"title":123},"\u002Fdocs\u002Fterminal-ui","Terminal UI",{"path":125,"title":126},"\u002Fdocs\u002Ftutorials\u002Fdotnet-web-api",".NET web API example",{"path":128,"title":129},"\u002Fdocs\u002Ftutorials\u002Ffirst-local-app","First local app",{"path":131,"title":132},"\u002Fdocs\u002Ftutorials\u002Flaravel-rust","Laravel and Rust example",{"path":134,"title":135},"\u002Fdocs\u002Ftutorials\u002Fnode-fullstack","Node full stack example",{"path":137,"title":138},"\u002Fdocs\u002Fvault","Use HashiCorp Vault",{"id":140,"title":102,"body":141,"description":282,"extension":283,"meta":284,"navigation":285,"path":101,"seo":286,"stem":287,"__hash__":288},"docs\u002Fdocs\u002Freference\u002Fknown-issues.md",{"type":142,"value":143,"toc":278},"minimark",[144,154,275],[145,146,147,148,153],"p",{},"Check these limits before choosing a setup. See\n",[149,150,152],"a",{"href":151},".\u002Fcapability-matrix","supported features"," for the full runtime comparison.",[155,156,157,170],"table",{},[158,159,160],"thead",{},[161,162,163,167],"tr",{},[164,165,166],"th",{},"Area",[164,168,169],{},"Limitation",[171,172,173,187,195,203,211,228,236,244,251,259,267],"tbody",{},[161,174,175,179],{},[176,177,178],"td",{},"Docker Swarm",[176,180,181,182,186],{},"Shared volumes and ingress state use one NFS storage node. Routes using the local CA are not available on Swarm. See ",[149,183,185],{"href":184},"..\u002Fhow-to\u002Fswarm-cluster#limitations","multi-node Swarm",".",[161,188,189,192],{},[176,190,191],{},"Bind mounts",[176,193,194],{},"Local development bind mounts are supported by Podman Compose and Docker Compose only, not Swarm or remote targets.",[161,196,197,200],{},[176,198,199],{},"Volume files",[176,201,202],{},"Atomic mutation of files in owned volumes is unavailable on Swarm.",[161,204,205,208],{},[176,206,207],{},"Remote commands",[176,209,210],{},"Status, logs, and reviewed deployments use the SSH daemon. Remote exec has no stdin, TTY, or interactive shell support.",[161,212,213,216],{},[176,214,215],{},"AI agents",[176,217,218,219,223,224,186],{},"A remote host enforces an agent's limits. On your own machine they are a guardrail: an agent with an unrestricted shell can run the container engine itself. ",[220,221,222],"code",{},"mm_exec"," output is not redacted. See ",[149,225,227],{"href":226},"..\u002Fmcp#what-this-does-and-does-not-protect","agents",[161,229,230,233],{},[176,231,232],{},"Compose secrets",[176,234,235],{},"Docker Compose has no native persistent secret store. Delivery uses a private operation file; non-default UID\u002FGID\u002Fmode and unreconstructable rollback are rejected.",[161,237,238,241],{},[176,239,240],{},"Job secrets",[176,242,243],{},"Compose jobs reuse their service's environment and secret mounts. Swarm jobs are unsupported. Build secrets use a separate BuildKit path.",[161,245,246,248],{},[176,247,63],{},[176,249,250],{},"Ingress, dashboard, Mailpit, and access-gate components require HAProxy with Linux systemd, or macOS with Docker Desktop and Docker Compose. Other macOS engines such as Colima, Windows, and remote\u002Fclustered service orchestration are not supported. On macOS, launchd agents start at login, so local HTTPS is unavailable while you are logged out.",[161,252,253,256],{},[176,254,255],{},"Managed secret backends",[176,257,258],{},"OpenBao and Vault can run locally with Docker Compose or rootless Podman Compose. Managed Swarm and remote lifecycle operations are unsupported. These are development setups, not production high-availability services.",[161,260,261,264],{},[176,262,263],{},"Local TLS",[176,265,266],{},"Fedora\u002FRHEL trust support has no dedicated live runner. Unknown trust-store layouts fail closed.",[161,268,269,272],{},[176,270,271],{},"Non-Unix private files",[176,273,274],{},"Unix-equivalent owner-only permission enforcement is unavailable, so features requiring that guarantee fail closed.",[145,276,277],{},"mm reports unsupported combinations before applying a change.",{"title":279,"searchDepth":280,"depth":280,"links":281},"",2,[],"Current user-visible limitations and unsupported combinations.","md",{},true,{"title":102,"description":282},"docs\u002Freference\u002Fknown-issues","jpn1zZ3AZ9WiaJDi2hfwvgMR-YWF1SWEt5BQfTgCgXQ",1794512545912]