Files
Kevin Veen-Birkenbach 6f3522dc28 fix(csp): resolve all CSP-related issues and extend webserver health checks
- Added _normalize_codes to support lists of valid HTTP status codes
- Updated web_health_expectations to handle multiple codes, deduplication, and fallback logic
- Extended unit tests with coverage for list/default combinations, invalid values, and alias behavior
- Fixed Flowise CSP flags and whitelist entries
- Adjusted Flowise, MinIO, and Pretix docker service resource limits
- Updated docker-compose templates with explicit service_name
- Corrected MinIO status_codes to 301 redirects

 All CSP errors fixed

See details: https://chatgpt.com/share/68d557ad-fc10-800f-b68b-0411d20ea6eb
2025-09-25 18:05:41 +02:00

71 lines
1.7 KiB
YAML

features:
matomo: true
css: true
desktop: true
central_database: false
logout: true
javascript: false
local_ai: true
server:
domains:
canonical:
- "flow.ai.{{ PRIMARY_DOMAIN }}"
aliases: []
csp:
flags:
script-src-elem:
unsafe-inline: true
whitelist:
font-src:
- https://fonts.gstatic.com
style-src-elem:
- https://fonts.googleapis.com
script-src-elem:
- https://fonts.googleapis.com
- https://fonts.gstatic.com
- https://r.wdfl.co
connect-src: []
docker:
services:
litellm:
backup:
no_stop_required: true
image: ghcr.io/berriai/litellm
version: main-v1.77.3.dynamic_rates
name: litellm
cpus: "1.0"
mem_reservation: "0.5g"
mem_limit: "1g"
pids_limit: 1024
qdrant:
backup:
no_stop_required: true
image: qdrant/qdrant
version: latest
name: qdrant
cpus: "2.0"
mem_reservation: "2g"
mem_limit: "4g"
pids_limit: 2048
flowise:
backup:
no_stop_required: false # As long as SQLite is used
image: flowiseai/flowise
version: latest
name: flowise
cpus: "1.0"
mem_reservation: "1g"
mem_limit: "2g"
pids_limit: 1024
redis:
enabled: false
database:
enabled: false
ollama:
enabled: true
volumes:
qdrant: qdrant_data
flowise: flowise_data
credentials: {}