Optimized nginx CSP (prop. leads to problems due to too high restrictions for some roles) and implemented health check for mailer

templates/docker/compose/networks.yml.j2

@@ -1,6 +1,6 @@
 {# This template needs to be included in docker-compose.yml #}
 networks:
-{% if applications | get_database_central_storage(application_id) | bool and database_type is defined %}
+{% if applications | is_feature_enabled('database',application_id) | bool and database_type is defined %}
   central_{{ database_type }}:
     external: true
 {% endif %}

templates/docker/container/networks.yml.j2

@@ -1,6 +1,6 @@
 {# This template needs to be included in docker-compose.yml containers #}
     networks:
-{% if applications | get_database_central_storage(application_id) | bool and database_type is defined %}
+{% if applications | is_feature_enabled('database',application_id) | bool and database_type is defined %}
       central_{{ database_type }}:
 {% endif %}
 {% if applications[application_id].get('features', {}).get('ldap', false) | bool and applications.ldap.network.docker|bool %}

templates/vars/applications.yml.j2

@@ -63,7 +63,7 @@ defaults_applications:
 {% endraw %}{{ features.render_features({
   'matomo':   true,
   'css':      true,
-  'iframe':   true,
+  'iframe':   false,
   'ldap':     false,
   'oidc':     true,
   'database': false,
@@ -253,6 +253,7 @@ defaults_applications:
   'iframe':   true,
   'ldap':     true,
   'database': true,
+  'recaptcha': true,
 }) }}{% raw %}
 
   # LDAP Account Manager