- CSP: SHA-256-Hash für Theme-Detection Inline-Script hinzugefügt
- docker-compose: SESSION_SECURE=false, damit HSTS und
upgrade-insecure-requests bei direktem HTTP-Zugriff deaktiviert sind
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add .dockerignore to prevent host node_modules (GLIBC 2.38) from
overwriting container-built binaries (GLIBC 2.36), fixing
better-sqlite3 ERR_DLOPEN_FAILED crash
- Bind port to 0.0.0.0 for LAN access
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>