From b018578b30cd35f6df092462f46e9f29d26a079d Mon Sep 17 00:00:00 2001 From: Konrad Bucheli Date: Tue, 28 Oct 2025 11:03:53 +0100 Subject: [PATCH] OpenMaint: fix mixed content block (#18) Reviewed-on: https://gitea.psi.ch/linux/WebHosting/pulls/18 Co-authored-by: Konrad Bucheli Co-committed-by: Konrad Bucheli --- conf.d/panda-maintenance.conf | 2 ++ docker-compose.yaml | 4 ---- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/conf.d/panda-maintenance.conf b/conf.d/panda-maintenance.conf index e6f658b..f34d885 100644 --- a/conf.d/panda-maintenance.conf +++ b/conf.d/panda-maintenance.conf @@ -23,5 +23,7 @@ server { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; + # https://forum.cmdbuild.org/t/cmdbuild-behind-nginx-reverse-proxy/5070/3 + add_header Content-Security-Policy upgrade-insecure-requests always; } } diff --git a/docker-compose.yaml b/docker-compose.yaml index 6d6b39b..940b375 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -249,8 +249,6 @@ services: container_name: panda-maintenance-db volumes: - /opt/webcontent/panda-maintenance/data:/var/lib/postgresql/data:rw - ports: - - 5432:5432 environment: - POSTGRES_USER=postgres - POSTGRES_PASSWORD=${PANDA_MAINTENANCE_DB_PW} @@ -273,8 +271,6 @@ services: depends_on: panda-maintenance-db: condition: service_healthy - ports: - - 8080:8080 restart: always volumes: - /opt/webcontent/panda-maintenance/docker-entrypoint.sh:/usr/local/bin/docker-entrypoint.sh:ro