chore: remove PostHog analytics

.env

@@ -23,4 +23,3 @@ MINIO_ACCESS_KEY=api-blob-download
 MINIO_SECRET_KEY=oswatcher-local-api
 
 TRAEFIK_VERSION=3.6.2
-POSTHOG_PROJECT_API_KEY=""

CLAUDE.md

@@ -97,7 +97,6 @@ Key environment variables:
 - `DOMAIN` - Base domain for production Traefik routing (`api.<DOMAIN>`, `storage.<DOMAIN>`)
 - `NEO4J_AUTH` - Set to `none` in dev/test, use credentials in prod
 - `MINIO_ROOT_USER/PASSWORD` - MinIO admin credentials (local defaults are committed; change for a server)
-- `POSTHOG_PROJECT_API_KEY` - Analytics key (optional)
 - `RESTRICTED_BRANCH_NAME` - Branch restriction in API (e.g., "windows", "master")
 - `NEO4J_GRAPHQL_DEBUG_LVL` - GraphQL debug level (dev only)
 
@@ -149,7 +148,6 @@ Key environment variables:
 
 ### Production Requirements
 - `MINIO_ROOT_PASSWORD` must be set (default password is rejected)
-- `POSTHOG_PROJECT_API_KEY` is optional; empty disables analytics
 - `DOMAIN` must be set (used for `<DOMAIN>`, `api.<DOMAIN>`, `storage.<DOMAIN>` Traefik routing)
 - Uses pre-built images from `ghcr.io/oswatcher/graphql-api:latest` and `ghcr.io/oswatcher/oswatcher-procedures:latest`
 - Frontend uses `ghcr.io/oswatcher/frontend:latest`; its entrypoint sets `VITE_OSWATCHER_API_URI` to `<HTTP_SCHEME>://api.<DOMAIN>` at container start (HTTPS if unset)

README.md

@@ -51,7 +51,7 @@ docker compose up -d
 
 The committed `.env` selects `compose.yml` and `compose.prod.yml`. It defaults to HTTP on
 localhost, loopback-only published ports and modest
-Neo4j memory settings. No domain registration, TLS certificate or analytics key is needed.
+Neo4j memory settings. No domain registration or TLS certificate is needed.
 
 Open **<http://localhost>**. Other endpoints:
 
@@ -97,7 +97,7 @@ docker compose -f compose.yml -f compose.dev.yml up -d --build
 build context until an overlay supplies one. The template selects the production overlay by
 default. The explicit `-f` flags above override that selection for development.
 
-Development mode needs no registry credentials, no domain and no PostHog key, which makes
+Development mode needs no registry credentials and no domain, which makes
 it suitable for developing the services. Use the quickstart above to evaluate the published images.
 
 - Frontend: <http://localhost:5173>
@@ -129,7 +129,7 @@ Configure Neo4j authentication and size its heap/page cache for your corpus. `BI
 applies to all published service ports, including the database and storage; restrict those
 ports through your firewall when exposing the proxy publicly.
 
-The MinIO root password must be non-default. PostHog analytics is optional.
+The MinIO root password must be non-default.
 For existing deployments without `HTTP_SCHEME` or memory overrides, HTTPS routing and the
 previous server memory defaults are retained.
 

compose.prod.yml

@@ -52,7 +52,6 @@ services:
     pull_policy: always
     environment:
       - NODE_ENV=production
-      - POSTHOG_PROJECT_API_KEY=${POSTHOG_PROJECT_API_KEY:-}
     restart: unless-stopped
     labels:
       - "traefik.enable=true"

compose.yml

@@ -81,7 +81,6 @@ services:
       NEO4J_URI: "bolt://neo4j:7687"
       OBJECT_STORAGE_URI: "http://minio:9000"
       RESTRICTED_BRANCH_NAME: ${RESTRICTED_BRANCH_NAME:-}
-      POSTHOG_PROJECT_API_KEY: ${POSTHOG_PROJECT_API_KEY}
       MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:?MINIO_ACCESS_KEY must be set}
       MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:?MINIO_SECRET_KEY must be set}
     labels: