mocode-software/meldestelle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add security headers to Caddyfile and update file server configuration
All checks were successful
Build and Publish Docker Images / build-and-push (., backend/infrastructure/gateway/Dockerfile, api-gateway, api-gateway) (push) Successful in 7m3s
Details
Build and Publish Docker Images / build-and-push (., backend/services/ping/Dockerfile, ping-service, ping-service) (push) Successful in 8m36s
Details
Build and Publish Docker Images / build-and-push (., config/docker/caddy/web-app/Dockerfile, web-app, web-app) (push) Successful in 1m56s
Details
Build and Publish Docker Images / build-and-push (., config/docker/keycloak/Dockerfile, keycloak, keycloak) (push) Successful in 1m53s
Details

Browse Source
This commit is contained in:
Stefan Mogeritsch 2026-03-14 18:26:22 +01:00
parent 05b37256c4
commit 1afb95c40c
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
config/docker/caddy/web-app/Caddyfile
View File

@ -17,13 +17,20 @@
format json
}
# Sicherheits-Header für SharedArrayBuffer (benötigt für SQLite WASM)
header {
# Erlaubt das Laden von Cross-Origin-Ressourcen, aber nur wenn diese es explizit erlauben
Cross-Origin-Embedder-Policy "require-corp"
# Isoliert den Kontext, um Sicherheitsrisiken zu minimieren
Cross-Origin-Opener-Policy "same-origin"
}
# Komprimierung
encode gzip zstd
# Caddy-Template-Engine: ersetzt {{.Env.VAR}} in index.html UND config.json
templates {
mime application/json
}
templates
file_server
# API-Proxy (höchste Priorität – vor dem SPA-Fallback)
handle /api/* {
@ -38,6 +45,5 @@
# SPA-Fallback: existierende Dateien direkt ausliefern, sonst index.html
handle {
try_files {path} /index.html
file_server
}
}