M39: harden application and acceptance gates

2026-08-17 03:17:44 +02:00
parent a9f48d6880
commit ae39a8947f
62 changed files with 5277 additions and 202 deletions
@@ -76,9 +76,12 @@ services:
    networks: [mobilityops]

  web:
-    build: ./frontend
-    environment:
-      VITE_API_BASE_URL: ${MOBILITYOPS_API_URL:-http://localhost:8128}
+    build:
+      context: ./frontend
+      args:
+        # Empty by default: the SPA calls its own origin and nginx proxies /api to the API,
+        # which is what the CSP (connect-src 'self') expects. Only set this for split hosting.
+        VITE_API_BASE_URL: ${VITE_API_BASE_URL:-}
    ports:
      - "1228:80"
    depends_on: