SaelixCode cf2946cfa6 fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP ...

Helmet's defaults are designed for HTTPS-only deployments. Two directives
were actively breaking plain-HTTP self-hosted instances:

- upgrade-insecure-requests: causes browsers to upgrade all JS/CSS/asset
  fetches to HTTPS → ERR_SSL_PROTOCOL_ERROR → completely blank page
- Strict-Transport-Security: permanently instructs browsers to refuse HTTP
  for 1 year, even after the header is removed from the server

Also handle docker socket GID=0 (root:root) edge case in entrypoint and
add [entrypoint] diagnostic log lines for easier debugging.

2026-03-22 15:42:48 -04:00

..

public

feat: add frontend index.html and Vite logo; enhance system stats API with network metrics

2026-02-26 14:43:45 -05:00

src

fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP

2026-03-22 15:42:48 -04:00

cookies.txt

feat: add alert management functionality in NotificationSettingsModal and implement stacks API endpoint

2026-02-27 09:52:54 -05:00

eslint.config.mjs

fix(lint): resolve all backend ESLint errors to pass CI lint step

2026-03-22 01:09:18 -04:00

package-lock.json

fix(ci): update lock files after adding ESLint deps and fixing high CVEs

2026-03-22 01:02:17 -04:00

package.json

ci: restructure pipeline into parallel jobs with E2E, Docker validation, and auditing

2026-03-22 00:48:49 -04:00

tsconfig.json

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00

vitest.config.ts

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00