- Implemented QuickcheckPage component with a form for user input.
- Added validation for email and consent checkboxes.
- Integrated form submission to a specified endpoint.
- Created SCSS styles for the QuickcheckPage layout and components.
The cors() origin callback rejected disallowed origins by calling
callback(new Error(...)), which Express routes to the generic error
handler - previously hardcoded to always respond 500 and log
"Unhandled error". A rejected origin is expected, routine traffic
(bots, scanners, or a deliberate CORS test), not a server fault, and
was being reported and logged as one.
The request was already being correctly rejected either way (no data
processed, no email sent) - this only fixes the status code and log
noise, not a security gap.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
The actual VPS setup has no native nginx - Forgejo and Caddy run via
docker-compose, with Caddy terminating TLS for git.sascha-bach.de and
talk.sascha-bach.de. Caddy itself sits inside that Docker network, so
127.0.0.1 from its container's point of view is not this host - it
could not reach either the audit endpoint or the webhook listener.
Both services now optionally bind an additional address via
DOCKER_BRIDGE_HOST (the Docker bridge's gateway IP), alongside their
existing 127.0.0.1 listener. Deliberately not 0.0.0.0: on a VPS with a
public IP and no confirmed firewall, that would also accept connections
arriving on the public interface, bypassing the reverse proxy's TLS
termination entirely.
DEPLOYMENT.md now documents both the nginx and the Caddy-in-Docker
path side by side, since this is the configuration actually in use.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Adds /de/audit and /en/audit with a lead-magnet page (WCAG audit for
free, PDF report + 15min walkthrough) and a request form (name,
company, email, URL, agency/client, motivation), including the
mandatory § 14 BGB business-only notice and confirmation checkbox.
Also, since the site turned out to run exclusively on the Bitpalast
static host rather than Vercel:
- remove vercel.json, port its security headers, agent-discovery
Link header and .well-known CORS/cache headers into public/.htaccess
- fix the .htaccess rewrite so prerendered routes are served instead of
falling back to the empty SPA shell
- self-host Comfortaa/Quicksand via Fontsource instead of Google Fonts
- add a separate backend/ Express service for the audit endpoint,
meant to run on the IONOS VPS independently of the static site
- update the privacy policy to reflect the form and font hosting
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- Updated light and dark themes across contact, hero, projects, services, skills SCSS files to enhance color contrast for better readability.
- Replaced gradients with solid colors where necessary to ensure AAA compliance.
- Adjusted button and text colors for improved visibility and user experience.
- Introduced a new logo SVG asset for branding consistency.
- Modified global color variables to align with the new design scheme.
- Created German localization files for landing sections: about me, experience, hero, processes, reasons, references, winnings.
- Created English localization files for landing sections: about me, experience, hero, processes, reasons, references, winnings.
- Added German localization for technical sections: about, certifications, hero, services, skills.
- Added English localization for technical sections: about, certifications, hero, services, skills.
- Introduced SCSS file for landing hero section styling.
- Added new text configurations for appointment hints and links in TextConfig.ts and contact.ts.
- Updated imprint.ts with detailed privacy policy sections regarding online appointment booking, including data handling and legal basis.
- Introduced new appointment-related fields in personal.ts for scheduling.
- Implemented SEO enhancements across HomePage, ImprintPage, LandingPage, and PrivacyPolicy pages using usePageSeo hook.
- Created a prerendering script to generate static HTML for SEO optimization.
- Added .htaccess and robots.txt for server configuration and search engine indexing control.
- Developed a sitemap.xml for better search engine visibility.
- Improved styling for contact section and imprint page to accommodate new appointment features.
- Implemented ReferencesSection and WinningsSection components for the landing page.
- Added localization files for German and English, covering various sections including About Me, Experience, Processes, Reasons, References, and Winnings.
- Created useScrollReveal hook for scroll-based animations.
- Developed styles for new sections: experience, processes, reasons, references, and winnings.
- Updated LandingPage component to include new sections.
Sascha
saschab
Sascha Bach