From eead0b12520fca59f8d2bbe95c81d48ae35e048a Mon Sep 17 00:00:00 2001
From: RBER Admin <admin@rber.bj>
Date: Mon, 8 Dec 2025 23:08:48 +0000
Subject: [PATCH] Disable HSTS for PoC

---
 app-config.production.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app-config.production.yaml b/app-config.production.yaml
index 2944d96..e984a56 100644
--- a/app-config.production.yaml
+++ b/app-config.production.yaml
@@ -9,6 +9,9 @@ backend:
   baseUrl: http://backstage.rber.bj
   listen:
     port: 7007
+  csp:
+    connect-src: ["'self'", "http:", "https:"]
+    upgrade-insecure-requests: false
   cors:
     origin: http://backstage.rber.bj