timothykim b7439b23e3 fix nginx security headers not being applied to https responses ...

nginx add_header inheritance meant X-Content-Type-Options and X-Frame-Options
were silently dropped from all https server blocks. moved all security headers
into a shared snippet (security-headers.inc) included per server block. added
pytest-based header verification that auto-discovers sites from conf files.

2026-03-20 15:11:56 -04:00

..

app.sh

fix nginx security headers not being applied to https responses

2026-03-20 15:11:56 -04:00

new-app.sh

refactor new-app into app.sh with subcommands

2026-03-20 14:43:47 -04:00

new-service.sh

add .env generation from bws, handle build services in deploy

2026-03-19 12:11:46 -04:00

remove-app.sh

fix deploy: use compose up instead of down+up, fetch secrets individually

2026-03-19 12:28:49 -04:00