Updates `de.json` to match the current `en.json` structure.
- Added missing sections: Privacy Policy, Cache Management, Worker Errors, and Archive handling.
- Improved wording to be more natural and user-friendly (UX writing).
- Fixed inconsistencies in capitalization and terminology.
- Ensured consistent use of informal "Du" addressing.
- Improve .env.example documentation
- Convert inline comments to multi-line format for better readability
- Add more descriptive explanations for each configuration option
- Maintain professional tone while preserving important guidance
- Better explain use cases (e.g., air-gapped environments)
this also unintentionalyl fixes translations being broken for the page, but there seems to be an issue on first load - sanitization code/ssr might be the issue?
- Add X-Frame-Options to prevent clickjacking attacks
- Add X-Content-Type-Options to prevent MIME-type sniffing
- Add Referrer-Policy for privacy protection
- Add Permissions-Policy to restrict unnecessary browser features
- Add HSTS header to SSL config for enforcing HTTPS connections
These headers are critical security measures that protect against
common web vulnerabilities and follow OWASP security best practices.
The manifest.json was incorrectly specifying 'image/png' as the type
for lettermark.jpg icon files. This commit fixes the MIME type to
'image/jpeg' to match the actual file format, ensuring proper PWA
standards compliance and preventing potential browser compatibility issues.
Also adds .idea/ to .gitignore to exclude JetBrains IDE configuration.
if downloading all files as a .zip, if the result is a .zip (e.g. converting to docx) it would have the "target" file extension rather than the result. final file seems "broken", but has the wrong extension (.docx instead of .zip)