rock-n-code/ccn
1
0
Fork 0
Code Issues Pull Requests Actions Projects Releases Activity

Project updates from Template

Browse Source 
This commit contains the latest updates from the generic Website template, which rework the compression and localization:

- Reworked the compression and localization in the Infrastructure package. (3c568e4)
- Adopted the reworked compression and localization in the Website service. (08cf3e3)

The template commit that only touched the root README (53676ed) was left out, as this project no longer carries that file.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
javier
2026-09-20 12:45:58 +02:00
co-authored by Claude Fable 5.1
parent 65b62681eb
commit 916df7e2f0
24 changed files with 426 additions and 218 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Services/Website/.env.local
+10 -1
View File
@@ -55,7 +55,7 @@ ANALYTICS_RECORDER=false
# `Content-Security-Policy`. Must allow `String.Analytics.origin` in `script-src` and
# `connect-src`, or the tracker is blocked; drop those two once analytics is off.
SECURITY_CONTENT_SECURITY_POLICY=default-src 'self'; script-src 'self' https://analytics.rock-n-code.com; connect-src 'self' https://analytics.rock-n-code.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'
SECURITY_CONTENT_SECURITY_POLICY=default-src 'self'; script-src 'self' https://analytics.rock-n-code.com; connect-src 'self' https://analytics.rock-n-code.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'
# `X-Content-Type-Options`: disables MIME sniffing.
SECURITY_CONTENT_TYPE_OPTIONS=nosniff
@@ -73,6 +73,15 @@ SECURITY_PERMISSIONS_POLICY=accelerometer=(), camera=(), geolocation=(), gyrosco
# remember it stickily once seen, so it stays off in local development.
# SECURITY_STRICT_TRANSPORT_SECURITY=max-age=31536000; includeSubDomains
# --- Reverse proxy -----------------------------------------------------------
# Both assert a TLS-terminating reverse proxy that sets the forwarded headers, so
# set them together; off for a directly reachable server, where clients can forge
# the headers. The former drives the HTTPS redirect, the latter keys the rate-limit
# buckets by the first `X-Forwarded-For` entry.
HTTPS_TRUST_FORWARDED_PROTO=false
RATE_LIMIT_TRUST_FORWARDED_FOR=false
# --- Persistence -------------------------------------------------------------
# Persistence driver: inMemory (default, no infrastructure) or postgres.