6 Commits

Author	SHA1	Message	Date
elpatron	3d8a505bd9	fix(nginx): security headers on index.html and PWA asset routes ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-01 15:04:27 +02:00
elpatron	e138752dd3	feat(security): Sprint 1 hardening for production behind NPM ... Add trust proxy, WebAuthn challenge TTL, stricter public collaboration rate limits, generic 500 responses, Docker POSTGRES_PASSWORD from env, nginx security headers/CSP, and deployment documentation. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-01 15:02:15 +02:00
elpatron	bbd4281dcb	fix(pwa): Updates zuverlässiger erkennen und veraltete Instanzen automatisch reparieren ... Unabhängige version.json-Prüfung, häufigere Update-Checks und Hard Recovery beheben hängende Android-PWAs ohne manuelles Cache-Löschen. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-31 14:20:54 +02:00
elpatron	1f089fdaa7	feat: PWA-Updates erkennen und Nutzer zum Reload auffordern. ... Wechselt auf prompt-Modus mit Update-Banner, periodischer SW-Prüfung und no-cache-Headern für Service Worker und index.html. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-29 17:40:23 +02:00
elpatron	cc183edc6d	fix(sync): resolve request body size limit issues and refine responsive photo grid layout	2026-05-28 16:15:32 +02:00
elpatron	572d38e490	Dockerize client, server, and postgres database for production with container healthchecks	2026-05-28 12:23:50 +02:00