6 Commits

Include renames

Author	SHA1	Message	Date
lobo	7d9cf907fc	feat(security): enforce the Content Security Policy ... The report-only run showed no violation in production.	2026-09-26 07:15:14 +02:00
lobo	6edb53162e	feat(security): add a report-only CSP and security headers ... nginx.conf is now an nginx template, so connect-src takes AUTH_HOST and API_HOST from the container env. The image sets both to empty by default, so nginx still starts without them. Report-only until production shows no violation. Also nosniff, Referrer-Policy and Permissions-Policy.	2026-09-25 15:47:23 +02:00
lobo	f8e6c2c970	feat(pwa): make the app installable ... Manifest, gamepad icon (also the new favicon, instead of the Vite logo), iOS meta tags and the tab title ToBePlayed. No service worker, so a deploy never meets an old cached bundle. The title bar color follows light and dark mode. The README also lists adding a game by name.	2026-09-25 15:32:55 +02:00
lobo	4b821b89df	fix(nginx): revalidate index.html and translations on every load ... i18n/*.json and index.html keep their names across deploys, so browsers kept old files and showed raw keys like NAV.DASHBOARD. Hashed /assets/ now get a one-year immutable cache.	2026-09-24 09:32:06 +02:00
lobo	1bb549c4df	Update nginx.conf	2026-03-28 12:33:34 +01:00
lobo	490fa2fa93	Add Dockerfile, nginx config and publish CI ... Add a multi-stage Dockerfile to build the React app (node:24-alpine, npm ci, npm run build) and serve the compiled /app/dist via nginx:alpine. Include nginx.conf that routes unknown paths to /index.html so React Router works in a SPA. Add a CI workflow (.forgejo/workflows/docker-publish.yml) to build and push the Docker image to Codeberg Container Registry on pushes to main (requires CODEBERG_TOKEN repository secret and tags the image as codeberg.org/${{ github.repository }}:latest).	2026-03-28 10:10:09 +01:00