Serve plain HTTP only and drop the local certificate tooling

The app never terminates TLS: a reverse proxy or tunnel does, and
isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure.
Removes the cert generator, TLS resolution and HTTP redirect, the
local CA download, and the TLS envs, and trims the installer, Dockerfile
health check and docs to match. Also softens the composer's loading row.
This commit is contained in:
2026-10-21 15:35:27 +01:00
parent f13fa863c5
commit 8bf6bedec5
29 changed files with 114 additions and 1751 deletions
@@ -1,6 +1,7 @@
import { EditorContent, type Editor } from "@tiptap/react";
import ComposerFormatBubble from "./composer-format-bubble";
import LoadingBlock from "@moduletrace/twui/elements/LoadingBlock";
import Row from "@moduletrace/twui/layout/Row";
type Props = {
editor: Editor | null;
@@ -25,7 +26,9 @@ export default function ComposerEditor({ editor, invalid, title }: Props) {
{editor ? (
<ComposerFormatBubble editor={editor} />
) : (
<LoadingBlock className="w-full h-[30px] -ml-6" />
<Row className="w-full opacity-50">
<LoadingBlock className="w-full h-[30px] -ml-4 lg:-ml-6" />
</Row>
)}
</>
);