6 Commits

Author	SHA1	Message	Date
Alexander Schmidt	2a609e6315	Add CSP, SRI, and auto-hash deploy pipeline ... - Content Security Policy via <meta> tag (blocks exfiltration to foreign domains) - Subresource Integrity on all static and dynamically loaded scripts - Nginx security headers snippet (HSTS, CSP, frame-ancestors on all responses) - Auto-minify and SRI hash update in deploy.sh (prevents stale hashes) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-27 07:51:01 +01:00
Alexander Schmidt	324bb87236	Fix deploy dry-run flag and generalize env example	2026-03-26 14:52:31 +01:00
Alexander Schmidt	f16df0a143	Harden deployment with data backups and restore script	2026-03-26 14:25:35 +01:00
Alexander Schmidt	7885651890	Add deploy env ignore and example template	2026-03-26 14:15:04 +01:00
Alexander Schmidt	ec99e097c2	Harden deploy script config handling	2026-03-26 14:07:07 +01:00
Alexander Schmidt	7e389d6a1c	Add safe deploy script preserving data directory	2026-03-26 13:55:59 +01:00