Commit Graph

4 Commits

Author SHA1 Message Date
ulsklyc 8f3f5cce01 fix: CSP inline-script hash + SESSION_SECURE=false für HTTP-Betrieb
- CSP: SHA-256-Hash für Theme-Detection Inline-Script hinzugefügt
- docker-compose: SESSION_SECURE=false, damit HSTS und
  upgrade-insecure-requests bei direktem HTTP-Zugriff deaktiviert sind

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-26 13:25:32 +01:00
ulsklyc 862ba8d9d7 fix: .dockerignore + LAN port binding
- Add .dockerignore to prevent host node_modules (GLIBC 2.38) from
  overwriting container-built binaries (GLIBC 2.36), fixing
  better-sqlite3 ERR_DLOPEN_FAILED crash
- Bind port to 0.0.0.0 for LAN access

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-26 13:16:31 +01:00
ulsklyc bd0d90fb59 chore: veraltetes version-Attribut aus docker-compose.yml entfernen
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-25 09:00:19 +01:00
ulsklyc d49cbe33b3 feat: Phase 1 — Projektstruktur, DB-Schema, Auth-System
- Vollständige Verzeichnisstruktur gemäß CLAUDE.md
- Express-Server mit Helmet, Sessions, Rate Limiting, SPA-Fallback
- SQLite-Schema (Migration v1): 10 Tabellen, updated_at-Triggers, Indizes
- Versioniertes Migrations-System (schema_migrations)
- Auth-Routen: Login, Logout, /me, Admin-User-CRUD
- Frontend App-Shell: SPA-Router, API-Client, Design-System (CSS Tokens)
- PWA: Service Worker, Web App Manifest
- Setup-Script für ersten Admin-User (node setup.js)
- DB-Tests mit node:sqlite built-in: 29/29 bestanden
- Docker Compose + Dockerfile + Nginx-Beispielkonfiguration

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-24 14:32:36 +01:00