elpatron
9d05005bb7
fix: allow blob and data urls in Content-Security-Policy media-src directive
2026-06-03 19:07:03 +02:00
elpatron
9ae24aa6fb
fix: allow microphone access for voice memos in PWA
...
Permissions-Policy blocked getUserMedia; allow microphone on same origin like camera.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-03 17:18:49 +02:00
elpatron
2b029a26f0
Fix passkey login 429 by forwarding client IPs correctly.
...
Forward X-Forwarded-For through frontend nginx, use TRUST_PROXY=1 for the Docker hop, and limit auth rate limiting to login flows only.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-02 22:48:15 +02:00
elpatron
3d8a505bd9
fix(nginx): security headers on index.html and PWA asset routes
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-01 15:04:27 +02:00
elpatron
e138752dd3
feat(security): Sprint 1 hardening for production behind NPM
...
Add trust proxy, WebAuthn challenge TTL, stricter public collaboration
rate limits, generic 500 responses, Docker POSTGRES_PASSWORD from env,
nginx security headers/CSP, and deployment documentation.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-01 15:02:15 +02:00
elpatron
bbd4281dcb
fix(pwa): Updates zuverlässiger erkennen und veraltete Instanzen automatisch reparieren
...
Unabhängige version.json-Prüfung, häufigere Update-Checks und Hard Recovery
beheben hängende Android-PWAs ohne manuelles Cache-Löschen.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-31 14:20:54 +02:00
elpatron
1f089fdaa7
feat: PWA-Updates erkennen und Nutzer zum Reload auffordern.
...
Wechselt auf prompt-Modus mit Update-Banner, periodischer SW-Prüfung und no-cache-Headern für Service Worker und index.html.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 17:40:23 +02:00
elpatron
cc183edc6d
fix(sync): resolve request body size limit issues and refine responsive photo grid layout
2026-05-28 16:15:32 +02:00
elpatron
572d38e490
Dockerize client, server, and postgres database for production with container healthchecks
2026-05-28 12:23:50 +02:00
elpatron