wangcong/story
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: expand companion platform, device controls, and memoir workflows
ci / verify (push) Canceled after 0s
Details

Browse Source 
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
This commit is contained in:
Codex Local
2026-10-08 10:06:44 +08:00
parent 98fb2965d0
commit bf1233d5df
861 changed files with 94614 additions and 3209 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/web.nginx.conf
+17 -5
View File
@@ -7,14 +7,25 @@ server {
location /api/ {
proxy_pass http://api:8080;
proxy_set_header Host $host;
proxy_set_header X-Request-Id $request_id;
proxy_set_header X-Request-Id $http_x_request_id;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /health/ {
proxy_pass http://api:8080;
proxy_set_header Host $host;
proxy_set_header X-Request-Id $request_id;
proxy_set_header X-Request-Id $http_x_request_id;
}
location /f/ {
proxy_pass http://api:8080;
proxy_set_header Host $host;
proxy_set_header X-Request-Id $http_x_request_id;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_buffering off;
proxy_read_timeout 15m;
send_timeout 15m;
access_log off;
}
location /assets/ {
@@ -33,9 +44,10 @@ server {
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;
# Ant Design v6 generates component styles at runtime and also relies on
# safe element-level layout styles. Scripts remain restricted to self;
# only CSS is allowed inline.
add_header Content-Security-Policy "default-src 'self'; connect-src 'self' https: http://localhost:*; img-src 'self' data: blob: https:; media-src 'self' blob: https: http://localhost:*; style-src 'self' 'unsafe-inline'; script-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https: http://localhost:*" always;
# safe element-level layout styles. Tencent CAPTCHA 2.0 additionally
# loads CSS/JS from its CDN and runs a blob worker. Keep script sources
# explicit; neither inline scripts nor unsafe-eval are enabled.
add_header Content-Security-Policy "default-src 'self'; connect-src 'self' https: http://localhost:*; img-src 'self' data: blob: https:; media-src 'self' blob: https: http://localhost:*; style-src 'self' 'unsafe-inline' https://turing.captcha.gtimg.com https://turing.captcha.qcloud.com; script-src 'self' https://turing.captcha.gtimg.com https://turing.captcha.qcloud.com https://ssl.captcha.qq.com; frame-src https://turing.captcha.qcloud.com https://*.captcha.qcloud.com https://ssl.captcha.qq.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https: http://localhost:*; worker-src 'self' blob:" always;
}
location = /runtime-config.js {