Caddyfile

localhost {
    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains"
        X-Frame-Options "DENY"
        X-Content-Type-Options "nosniff"
    }
    handle /uploads/* {
        root * /srv
        file_server
    }
    reverse_proxy app:3000
}
Commit iniziale 2026-05-18 15:25:38 +02:00			`localhost {`
fix(security): add HTTP security headers (CSP, HSTS, X-Frame-Options) 2026-05-19 10:10:05 +02:00			`header {`
			`Strict-Transport-Security "max-age=31536000; includeSubDomains"`
			`X-Frame-Options "DENY"`
			`X-Content-Type-Options "nosniff"`
			`}`
infra: add persistent uploads volume and configure Caddy to serve static images 2026-05-18 17:53:30 +02:00			`handle /uploads/* {`
			`root * /srv`
			`file_server`
			`}`
Commit iniziale 2026-05-18 15:25:38 +02:00			`reverse_proxy app:3000`
			`}`