OpenMaint: fix mixed content block (#18)

Reviewed-on: linux/WebHosting#18
Co-authored-by: Konrad Bucheli <konrad.bucheli@psi.ch>
Co-committed-by: Konrad Bucheli <konrad.bucheli@psi.ch>

conf.d/panda-maintenance.conf

@@ -23,5 +23,7 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        # https://forum.cmdbuild.org/t/cmdbuild-behind-nginx-reverse-proxy/5070/3
+        add_header Content-Security-Policy upgrade-insecure-requests always;
     }
 }

docker-compose.yaml

@@ -249,8 +249,6 @@ services:
     container_name: panda-maintenance-db
     volumes:
       - /opt/webcontent/panda-maintenance/data:/var/lib/postgresql/data:rw
-    ports:
-      - 5432:5432
     environment:
       - POSTGRES_USER=postgres
       - POSTGRES_PASSWORD=${PANDA_MAINTENANCE_DB_PW}
@@ -273,8 +271,6 @@ services:
     depends_on:
       panda-maintenance-db:
         condition: service_healthy
-    ports:
-      - 8080:8080
     restart: always
     volumes:
       - /opt/webcontent/panda-maintenance/docker-entrypoint.sh:/usr/local/bin/docker-entrypoint.sh:ro