3 Commits

Author	SHA1	Message	Date
Concept Agent	88ed4e6bda	Align with AM stack SOPs: required files, nginx hardening, mobile CSS ... - Add robots.txt, sitemap.xml (16 pages), 404.html, 500.html per SOP - nginx: allow robots.txt/sitemap.xml explicitly, fix error_page to 404.html, deny _template.html, remove txt from deny list, fix API proxy comment - Convert residential.png to residential.webp per image SOP - components.css: mobile nav breakpoint 768→1023px, 360px ultra-narrow query, overflow-x:clip, inline grid collapse overrides - blog/index.html: placeholder blog listing page with 3 article cards Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-27 18:53:35 +02:00
Concept Agent	e0b9e27b90	Add Python form API + harden nginx web root ... - New api/ Python service (stdlib only — no pip install, no packages): validates fields server-side, verifies reCAPTCHA, sends via Resend with idempotency key, rate-limited (5 req/IP/15min) - Matches existing project tooling (build_locations.py, build_services.py) - Front-end form.js stays vanilla JS, no JS frameworks anywhere - docker-compose runs nginx + python:3.13-alpine api with healthcheck - nginx proxies /api/ to Python service, strips prefix - Dockerfile now copies only public folders into web root (was copying everything, exposing /Dockerfile, /build_*.py, /api/.env) - nginx.conf denies dotfiles, .env, .conf, .yml, .py, .md, .txt and Dockerfile as defense in depth - .dockerignore keeps sensitive files out of build context - .gitignore protects api/.env and __pycache__ from being committed	2026-05-08 18:26:12 +02:00
Concept Agent	9907a2ab7d	update	2026-05-07 11:45:16 +02:00