admin/changemaker.lite
1
0
Fork 0
Code Issues Packages Projects Releases 35 Wiki Activity

Tonne of updates to things like social systems, calendars, and the documentation system (making it mobile friendly and fixing up navigation)

Browse Source
This commit is contained in:
bunker-admin
2026-03-07 13:10:08 -07:00
parent 08d8066157
commit 1cca51e518
188 changed files with 39689 additions and 2615 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
nginx/conf.d/default.conf.template
View File

@@ -5,6 +5,15 @@ server {
server_name localhost _;
add_header X-Frame-Options "SAMEORIGIN" always;
# Auth check iframe — allows cross-origin login state detection (MkDocs header)
location = /auth-check.html {
add_header Content-Security-Policy "frame-ancestors *" always;
set $upstream_admin_authcheck http://changemaker-v2-admin:3000;
proxy_pass $upstream_admin_authcheck;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
}
# Social media bot detection for OG meta tags
set $is_bot 0;
if ($http_user_agent ~* "(Twitterbot|facebookexternalhit|LinkedInBot|Slackbot|TelegramBot|WhatsApp|Discordbot|Googlebot|bingbot|Pinterest|Embedly|Quora Link Preview|Showyoubot|outbrain|vkShare|W3C_Validator)") {

11
nginx/conf.d/services.conf.template
View File

@@ -369,6 +369,17 @@ server {
server_name app.${DOMAIN};
add_header X-Frame-Options "SAMEORIGIN" always;
# Auth check iframe — allows root domain to embed this tiny page
# for cross-origin login state detection (MkDocs header)
location = /auth-check.html {
add_header X-Frame-Options "ALLOW-FROM https://${DOMAIN}" always;
add_header Content-Security-Policy "frame-ancestors 'self' https://${DOMAIN} http://${DOMAIN}" always;
set $upstream_admin_authcheck http://changemaker-v2-admin:3000;
proxy_pass $upstream_admin_authcheck;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
}
# Social media bot detection for OG meta tags
set $is_bot 0;
if ($http_user_agent ~* "(Twitterbot|facebookexternalhit|LinkedInBot|Slackbot|TelegramBot|WhatsApp|Discordbot|Googlebot|bingbot|Pinterest|Embedly|Quora Link Preview|Showyoubot|outbrain|vkShare|W3C_Validator)") {