Added optionnal online storage and cross-client sync

docker/Caddyfile

@@ -31,6 +31,12 @@ http://{$SITE_ADDRESS} {
 }
 
 {$SITE_ADDRESS} {
+     handle /api/sync/* {
+        reverse_proxy sync:3001 {
+            header_up X-Pardis-Client-IP {client_ip}
+        }
+    }
+
 	root * /srv
 	encode zstd gzip
 
@@ -55,6 +61,7 @@ http://{$SITE_ADDRESS} {
 	header @manifest Content-Type "application/manifest+json"
 
 	header {
+        Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
 		X-Content-Type-Options nosniff
 		X-Frame-Options DENY
 		Referrer-Policy strict-origin-when-cross-origin
@@ -62,6 +69,8 @@ http://{$SITE_ADDRESS} {
 	}
 
 	# The app routes on the hash, so this only catches someone typing a stray path.
-	try_files {path} /index.html
-	file_server
+	handle {
+		try_files {path} /index.html
+		file_server
+	}
 }