mirror of
http://172.20.10.11:3000/gitadmin/INSIGHT-MVP.git
synced 2026-06-25 00:16:41 +02:00
5412ae137a
Switch from hostname+HTTPS (insight-dev.xinion.lan) to IP+HTTP (172.20.10.59) for alpha/dev deployment without DNS. Key changes: - Cookie secure/sameSite flags environment-conditional (fixes HTTP auth) - docker-compose.yml: remove HTTPS, update host rules, reduce PG memory - Traefik: disable TLS, update CORS/CSP for HTTP - Add Prisma init migration (7 tables) and admin seed script - Generate package-lock.json for npm ci in Docker builds - Update all documentation for IP-based access Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
49 lines
1.3 KiB
YAML
49 lines
1.3 KiB
YAML
# ============================================================
|
|
# Traefik - Globale Middlewares
|
|
# ============================================================
|
|
|
|
http:
|
|
middlewares:
|
|
# Security-Headers fuer alle Responses
|
|
security-headers:
|
|
headers:
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
frameDeny: true
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
referrerPolicy: "strict-origin-when-cross-origin"
|
|
contentSecurityPolicy: >-
|
|
default-src 'self';
|
|
script-src 'self' 'unsafe-inline';
|
|
style-src 'self' 'unsafe-inline';
|
|
img-src 'self' data: blob:;
|
|
font-src 'self';
|
|
connect-src 'self' ws://172.20.10.59;
|
|
frame-ancestors 'self';
|
|
|
|
# CORS fuer API
|
|
cors-api:
|
|
headers:
|
|
accessControlAllowMethods:
|
|
- GET
|
|
- POST
|
|
- PUT
|
|
- PATCH
|
|
- DELETE
|
|
- OPTIONS
|
|
accessControlAllowHeaders:
|
|
- Content-Type
|
|
- Authorization
|
|
- X-Tenant-ID
|
|
- X-Request-ID
|
|
accessControlAllowOriginList:
|
|
- "http://172.20.10.59"
|
|
accessControlMaxAge: 86400
|
|
accessControlAllowCredentials: true
|
|
addVaryHeader: true
|
|
|
|
# Kompression
|
|
gzip-compress:
|
|
compress:
|
|
excludedContentTypes:
|
|
- text/event-stream
|