Merge pull request #666 from OpenHistoricalMap/staging

Production release - Overpass turbo update and Set minute replication limit

Author: Rub21

.github/workflows/frontend-overpass.yaml

@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: OpenHistoricalMap/overpass-turbo
-          ref: be9b87d55699a00570c1d5fcc8d4323c2d0dd0e3
+          ref: efdce1a1979e6c33de9fa459c1b1cf6934acab6a
           path: overpass-turbo
 
       - name: Enable Corepack

hetzner/traefik/traefik.yml

@@ -37,6 +37,20 @@ http:
         # # Trust only known proxy headers (adjust based on your infrastructure)
         # hostsProxyHeaders: ["X-Forwarded-Host"]
 
+    secure-headers-allow-iframe:
+      headers:
+        # Allows iframe embedding (for comparison tools)
+        frameDeny: false
+        # Enables XSS protection in older browsers
+        browserXssFilter: true
+        # Prevents browsers from MIME-sniffing (forces declared Content-Type)
+        contentTypeNosniff: true
+        # Enforces HTTPS via HSTS
+        forceSTSHeader: true
+        stsSeconds: 31536000  # 1 year
+        stsIncludeSubdomains: true
+        stsPreload: true
+
     redirect-nominatim:
       redirectRegex:
         regex: "^https://(nominatim(?:\\.staging)?\\.openhistoricalmap\\.org)/?$"
@@ -53,7 +67,7 @@ http:
       tls:
         certResolver: letsencrypt
       middlewares:
-        - secure-headers
+        - secure-headers-allow-iframe
 
     tiler_cache-production-router:
       rule: Host(`tiler-cache.openhistoricalmap.org`)
@@ -145,7 +159,7 @@ http:
       tls:
         certResolver: letsencrypt
       middlewares:
-        - secure-headers
+        - secure-headers-allow-iframe
 
     overpass-api-staging-router:
       rule: Host(`overpass-api.staging.openhistoricalmap.org`)

images/web/Dockerfile

@@ -24,7 +24,7 @@ RUN apt-get update && \
     && apt-get clean && rm -rf /var/lib/apt/lists/*
 
 # Download OHM Website using gitsha, faster than cloning
-ENV OPENHISTORICALMAP_WEBSITE_GITSHA=b29601a3bdccb4e8667653a16251ec8e94d78544
+ENV OPENHISTORICALMAP_WEBSITE_GITSHA=c37a340e8fc31c0ae6670d0b8a5b9bab24c4236a
 ENV OHM_WEBSITE_URL=https://github.com/OpenHistoricalMap/ohm-website/archive/${OPENHISTORICALMAP_WEBSITE_GITSHA}.zip
 RUN rm -rf $workdir/* && curl -fsSL $OHM_WEBSITE_URL -o /tmp/ohm-website.zip && \
     unzip /tmp/ohm-website.zip -d /tmp && \

ohm/requirements.yaml

@@ -1,4 +1,4 @@
 dependencies:
   - name: osm-seed
-    version: '0.1.0-0.dev.git.973.hb03b96b'
+    version: '0.1.0-0.dev.git.976.h81b6cdf'
     repository: https://devseed.com/osm-seed-chart/

values.staging.template.yaml

@@ -336,7 +336,7 @@ osm-seed:
         enabled: true
         name: ohm-s3-bucket-access-staging 
       env:
-        ENABLE_SEND_SLACK_MESSAGE: "true"
+        ENABLE_SEND_SLACK_MESSAGE: "false"
         SLACK_WEBHOOK_URL: {{OHM_SLACK_WEBHOOK_URL}}
       resources:
         enabled: false