Address migration review feedback

infrastructure_files/getting-started-enterprise.sh

@@ -428,7 +428,8 @@ render_compose_common() {
       - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
       - "--entrypoints.websecure.allowACMEByPass=true"
-      # Disable timeouts for long-lived gRPC streams and relay WebSockets
+      # readTimeout bounds the whole request, and gRPC streams / relay WebSockets
+      # never end one. Entrypoint-wide is the only scope Traefik offers here.
       - "--entrypoints.websecure.transport.respondingTimeouts.readTimeout=0"
       - "--entrypoints.websecure.transport.respondingTimeouts.writeTimeout=0"
       - "--entrypoints.websecure.transport.respondingTimeouts.idleTimeout=0"

infrastructure_files/migrate-to-enterprise.sh

@@ -555,9 +555,9 @@ rollback() {
 
   # Restore .env to exactly what it was, or remove it if this run created it.
   if [[ "$ENV_EXISTED" == "yes" ]] && [[ -f "$ENV_BACKUP" ]]; then
-    mv -f "$ENV_BACKUP" .env
+    mv -f "$ENV_BACKUP" .env || echo "  ⚠ Could not restore .env from $ENV_BACKUP." > /dev/stderr
   elif [[ "$ENV_EXISTED" == "no" ]]; then
-    rm -f .env
+    rm -f .env || true
   fi
 
   # Only ever the volume this run created — never the NetBird data volume.