sneak b42066c0b5 Page is sent with Cache-Control: no-cache (closes #141) ...

nginx sent index.html with no Cache-Control, so a browser could keep
it after a deploy and ask for hashed assets the new build no longer
has, and show an empty page. location / now adds Cache-Control:
no-cache, which covers its try_files fallback to /index.html, and
includes security-headers.conf again, since its own add_header drops
the server's. /assets/ and the paths passed to the backend are
unchanged.

script/frontend-viewport-test fails unless / and a path that falls
back to the page carry Cache-Control: no-cache and
Content-Security-Policy, which comes from the same file as the other
security headers.

Model: opus-5-5

2026-10-19 00:53:57 +00:00

..

nginx.conf

Page is sent with Cache-Control: no-cache (closes #141)

2026-10-19 00:53:57 +00:00

security-headers.conf

Move to the layout REPO_POLICIES.md gives (closes #30)

2026-10-14 12:01:32 +02:00