bundle/hedgedoc add new csp defaults

bundles/hedgedoc/items.py

@@ -45,6 +45,9 @@ directories = {
     '/opt/hedgedoc/.yarn': {
         'owner': 'hedgedoc',
         'group': 'hedgedoc',
+        'needs': {
+            'git_deploy:/opt/hedgedoc',
+        },
     },
 }
 

bundles/hedgedoc/metadata.py

@@ -14,10 +14,13 @@ defaults = {
                 'csp': {
                     'enable': True,
                     'directives': {},
-                    'upgradeInsecureRequests': 'auto',
                     'addDefaults': True,
                     'addDisqus': False,
-                    'addGoogleAnalytics': False
+                    'addGoogleAnalytics': False,
+                    'upgradeInsecureRequests': 'auto',
+                    'reportURI': 'undefined',
+                    'allowFraming': False,
+                    'allowPDFEmbed': False,
                 },
                 'cookiePolicy': 'lax',
                 'db': {

bundles/nginx/files/site_template

@@ -108,9 +108,7 @@ server {
         proxy_set_header     Upgrade $http_upgrade;
 %    endif
         proxy_set_header     X-Forwarded-For $proxy_add_x_forwarded_for;
-%    if ssl:
-        proxy_set_header     X-Forwarded-Proto HTTPS;
-%    endif
+        proxy_set_header     X-Forwarded-Proto $scheme;
         proxy_set_header     X-Forwarded-Host ${options.get('x_forwarded_host', domain)};
 %    for option, value in options.get('proxy_set_header', {}).items():
         proxy_set_header     ${option} ${value};

nodes/htz-cloud/miniserver.py

@@ -83,7 +83,7 @@ nodes['htz-cloud.miniserver'] = {
             },
         },
         'hedgedoc': {
-            'version': '1.8.2',
+            'version': '1.9.0',
             'config': {
                 'production': {
                     'domain': 'pad.sophies-kitchen.eu',