jubnl f47852d689 docs: improve FORCE_HTTPS, COOKIE_SECURE, TRUST_PROXY documentation ... FORCE_HTTPS now documents all four effects (redirect, HSTS, CSP upgrade-insecure-requests, secure cookie flag) and is clearly marked optional. COOKIE_SECURE default updated to "auto" with explanation of auto-derivation logic. TRUST_PROXY clarifies it's off in dev unless set and is required for FORCE_HTTPS. charts/README.md gains FORCE_HTTPS and TRUST_PROXY entries. README prose expanded to explain all three vars and their interaction.		2026-04-11 15:26:19 +02:00
..
public	chore(CRLF): normalize index.html line endings to LF	2026-04-05 04:35:17 +02:00
scripts	feat: add encryption key migration script and document it in README	2026-04-01 09:35:32 +02:00
src	fix(bookings): resolve date handling and file auth bugs	2026-04-06 11:32:06 +02:00
tests	fix(atlas): replace fuzzy region matching with exact name_en check	2026-04-05 23:38:34 +02:00
.env.example	docs: improve FORCE_HTTPS, COOKIE_SECURE, TRUST_PROXY documentation	2026-04-11 15:26:19 +02:00
package-lock.json	chore: bump version to 2.9.12 [skip ci]	2026-04-10 05:51:22 +00:00
package.json	chore: bump version to 2.9.12 [skip ci]	2026-04-10 05:51:22 +00:00
reset-admin.js	Stabilize core: better-sqlite3, versioned migrations, graceful shutdown	2026-03-22 17:52:24 +01:00
tsconfig.json	some fixes	2026-03-30 06:59:24 +02:00
vitest.config.ts	refactor(mcp): replace direct DB access with service layer calls	2026-04-04 18:12:53 +02:00