The actual VPS setup has no native nginx - Forgejo and Caddy run via
docker-compose, with Caddy terminating TLS for git.sascha-bach.de and
talk.sascha-bach.de. Caddy itself sits inside that Docker network, so
127.0.0.1 from its container's point of view is not this host - it
could not reach either the audit endpoint or the webhook listener.
Both services now optionally bind an additional address via
DOCKER_BRIDGE_HOST (the Docker bridge's gateway IP), alongside their
existing 127.0.0.1 listener. Deliberately not 0.0.0.0: on a VPS with a
public IP and no confirmed firewall, that would also accept connections
arriving on the public interface, bypassing the reverse proxy's TLS
termination entirely.
DEPLOYMENT.md now documents both the nginx and the Caddy-in-Docker
path side by side, since this is the configuration actually in use.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
BREAKING CHANGES:
Remove entire backend infrastructure in favor of direct mailto links
Centralize all text content to single configuration file
Features:
Add centralized text configuration system in texts.ts
Add Privacy Policy page with GDPR compliance
Implement type-safe text management with TypeScript interfaces
Add internationalization-ready text structure
Refactoring:
Update all components to use centralized text configuration:
Navigation menu items and labels
Theme toggle icons and labels
Footer text and aria labels
Contact section content and form texts
Projects section button labels
Imprint page legal content
Replace backend contact form with direct mailto functionality
Simplify contact flow to use email client directly
Backend Removal:
Remove complete Node.js/Express backend infrastructure
Remove email service and contact form submission logic
Remove API configuration and validation middleware
Clean up package dependencies (remove express-validator, backend packages)
Style Improvements:
Standardize SCSS variables across all section files
Add consistent card styling and transitions
Improve responsive design patterns
Enhance contact section with new email-focused layout
Infrastructure:
Update routing to include Privacy Policy page
Maintain Vercel deployment configuration
Keep frontend-only architecture for static hosting
Sascha