Files
web_server/vue
Adam French 75cede3b1b
All checks were successful
Deploy with Docker Compose / deploy (push) Successful in 4m44s
Fix security vulnerabilities across backend, frontend, and infra
- Fix auth bypass in UpdatePost/DeletePost (missing return after auth check)
- Remove Spotify access token from callback response
- Replace internal error messages with generic responses in all handlers
- Harden GraphQL: complexity limit, disable playground/introspection in prod
- Add security headers (X-Frame-Options, HSTS, etc.) to nginx
- Disable Hasura console/dev mode in production
- Add DOMPurify sanitization to Markdown component
- Fix cookie removal to use correct domain/path from auth config
- Fix nil dereference in rowing handler when Claude API errors
- Fix wildcard CORS on stamp endpoint
- Pin nginx and certbot Docker image versions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-29 23:59:10 +01:00
..
2026-03-27 14:30:48 +00:00

My Web - Frontend

Vue 3 SPA for adam-french.co.uk. Built with Vite, Tailwind CSS v4, Pinia, and Vue Router.

Setup

npm install

Development

npm run dev

The Vite dev server proxies API requests:

  • /api -> http://localhost:8080 (Go backend)
  • /gitea -> http://localhost:3000 (Gitea)
  • /radio -> http://localhost:8000 (Icecast2)

Production Build

npm run build

In production, the built dist/ is served by Nginx inside a Docker container (see ../Dockerfile).

VS Code + Vue (Official) (and disable Vetur).