3 Commits

Author	SHA1	Message	Date
Julien G.	de2f5f1347	fix(security): relax Referrer-Policy and document HSTS_INCLUDE_SUBDOMAINS (#862) (#863) ... - Change Helmet default from no-referrer to strict-origin-when-cross-origin so browsers send the origin on cross-origin requests, allowing Google Maps API key restrictions by HTTP referrer to work correctly - Document HSTS_INCLUDE_SUBDOMAINS in all deployment artifacts: .env.example, docker-compose.yml, README.md, unraid-template.xml, charts/values.yaml, charts/configmap.yaml, wiki/Environment-Variables.md	2026-04-23 18:39:11 +02:00
jubnl	314486325e	fix: resolve dead wiki links across install and config pages	2026-04-22 19:21:53 +02:00
jubnl	c1b9d11173	docs: add full wiki with 74 pages, assets, and CI workflow ... Adds the complete TREK documentation wiki covering installation, trip planning, admin panel, MCP/AI integration, addons, and operations. Also fixes encrypt-at-rest gaps: mapbox_access_token, Synology credentials, per-user webhook/ntfy tokens, and photo passphrases are now rotated by migrate-encryption.ts and stored encrypted via settingsService.	2026-04-20 10:11:53 +02:00