sneak 33859b1dc1 Page is sent with Cache-Control: no-cache (closes #141) ...

nginx sent index.html with no Cache-Control, so a browser could keep
it after a deploy and ask for hashed assets the new build no longer
has, and show an empty page. location / now adds Cache-Control:
no-cache, which covers its try_files fallback to /index.html, and
includes security-headers.conf again, since its own add_header drops
the server's. /assets/ and the locations passed to the backend are
unchanged.

script/frontend-viewport-test fails unless / and a path that falls
back to the page carry Cache-Control: no-cache and
Content-Security-Policy, which stands for the security headers.

Model: opus-5-5

2026-10-18 23:50:38 +00:00

..

nginx.conf

Page is sent with Cache-Control: no-cache (closes #141)

2026-10-18 23:50:38 +00:00

security-headers.conf

Move to the layout REPO_POLICIES.md gives (closes #30)

2026-10-14 12:01:32 +02:00