Commit Graph

3 Commits

Author SHA1 Message Date
lebaudantoine 69a6dd1463 🩹(frontend) fix missing default-src in CSP configuration
The CSP was missing a default-src directive (flagged by CodeRabbit).
Without it, styles, images, fonts, and media are completely
unrestricted, which undercuts the otherwise strict policy.

Set default-src to 'self' and add an explicit style-src directive
since we rely on inline styles (e.g. #close-msg and the view
toggling use inline style attributes), so style-src needs to allow
'self' and 'unsafe-inline'.
2026-06-11 15:16:52 +02:00
lebaudantoine da1767c261 ♻️(frontend) refine Nginx config for DINUM frontend
Lint and clean up the Nginx configuration.
Fix an issue affecting static asset serving.
2026-04-30 18:56:15 +02:00
lebaudantoine 3d125e940f 🩹(frontend) rename Nginx config to override default configuration
Rename the configuration file to `default.conf` so it replaces
the default config bundled in the Nginx image.

Handles properly 404 path.
2026-04-30 00:21:31 +02:00