More UI / UX changes

Added about page
2026-10-11 10:19:41 +02:00
parent e02730f5db
commit b11fe56993
14 changed files with 210 additions and 24 deletions
--- a/docker/Caddyfile
+++ b/docker/Caddyfile
@@ -62,6 +62,8 @@ http://{$SITE_ADDRESS} {

 	header {
        Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
+		# Apply HSTS to this site address only; deliberately omit includeSubDomains.
+		Strict-Transport-Security "max-age=31536000"
 		X-Content-Type-Options nosniff
 		X-Frame-Options DENY
 		Referrer-Policy strict-origin-when-cross-origin