4 Commits

Include renames

Author	SHA1	Message	Date
lobo	720764bf68	feat(docker): fail at start when AUTH_HOST or API_HOST is unset ... An empty host gives a CSP connect-src that blocks every API call. The new entrypoint check stops the container early with a clear error.	2026-10-14 15:22:20 +02:00
lobo	cfceca5e5e	feat(settings): show the build version of each service	2026-09-27 10:27:01 +02:00
lobo	6edb53162e	feat(security): add a report-only CSP and security headers ... nginx.conf is now an nginx template, so connect-src takes AUTH_HOST and API_HOST from the container env. The image sets both to empty by default, so nginx still starts without them. Report-only until production shows no violation. Also nosniff, Referrer-Policy and Permissions-Policy.	2026-09-25 15:47:23 +02:00
lobo	490fa2fa93	Add Dockerfile, nginx config and publish CI ... Add a multi-stage Dockerfile to build the React app (node:24-alpine, npm ci, npm run build) and serve the compiled /app/dist via nginx:alpine. Include nginx.conf that routes unknown paths to /index.html so React Router works in a SPA. Add a CI workflow (.forgejo/workflows/docker-publish.yml) to build and push the Docker image to Codeberg Container Registry on pushes to main (requires CODEBERG_TOKEN repository secret and tags the image as codeberg.org/${{ github.repository }}:latest).	2026-03-28 10:10:09 +01:00