Files

bert.hausmans b5fcb7c14a fix: add Google Fonts domains to CSP policy

Vuexy loads fonts via webfontloader from fonts.googleapis.com and
fonts.gstatic.com. The previous CSP blocked these, causing a white screen.

- style-src: added https://fonts.googleapis.com
- font-src: added https://fonts.gstatic.com
- Removed frame-ancestors from meta tags (ignored in meta, console warnings)

Updated in all three index.html dev meta tags and both Nginx SPA/portal configs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 16:20:51 +02:00

public

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

src

security: migrate auth tokens to httpOnly cookies (hybrid bearer token approach)

2026-04-14 16:06:44 +02:00

auto-imports.d.ts

feat(portal): strip Vuexy demo content and create clean portal shell

2026-04-10 17:38:55 +02:00

components.d.ts

feat(portal): restructure into three-screen architecture with event tabs

2026-04-13 13:30:20 +02:00

dev.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.dev.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.prod.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

env.d.ts

feat(portal): restructure into three-screen architecture with event tabs

2026-04-13 13:30:20 +02:00

index.html

fix: add Google Fonts domains to CSP policy

2026-04-14 16:20:51 +02:00

nginx.conf

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

package.json

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

pnpm-lock.yaml

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

prod.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README 2.md

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README.md

chore: align migrations, docs, and frontends with crewli.app setup

2026-04-07 10:45:34 +02:00

shims.d.ts

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

themeConfig.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

tsconfig.json

feat(portal): strip Vuexy demo content and create clean portal shell

2026-04-10 17:38:55 +02:00

typed-router.d.ts

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

vite.config.ts

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

README.md

Crewli — Portal SPA

External-facing app for volunteers (login) and artists/suppliers (token links). Stripped Vuexy layout; same stack as other apps.

Setup

Install dependencies:

pnpm install

Create .env.local:

VITE_API_URL=http://localhost:8000/api/v1
VITE_APP_NAME="Crewli Portal"

Dev server uses port 5175 (see vite.config.ts or run from repo root: make portal).

pnpm dev --port 5175

Port

Runs on http://localhost:5175

Production: e.g. VITE_API_URL=https://api.crewli.app/api/v1 and host the SPA at https://portal.crewli.app (portal links in emails use this host; see api/.env.example).