dvorakmortonxd/dvorakmortonxd.dev
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

desktop: embed GitDXD too (Forgejo needs [cors] X_FRAME_OPTIONS = unset)

Browse source
This commit is contained in:
Martin Dvořák 2026-09-25 11:07:25 +00:00
commit 02c516af74
3 changed files with 25 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -36,10 +36,10 @@ heatmap**, a gym SBD panel and links to friends' sites.
- **Live service status** — each self-hosted service is health-checked through the site's
own API; Minecraft is checked through mcstatus.io.
- **Embedded live services** — opening a frameable self-hosted service (Llama.cpp/Open WebUI,
Jellyfin, Navidrome) from the desktop shows the real site inside the window (an iframe). A
service must not send `X-Frame-Options`: Navidrome sends `DENY` unless it runs with
`ND_HTTPHEADERS_FRAMEOPTIONS=ALLOWALL`. Forgejo/GitDXD (`SAMEORIGIN`) and Discord (`DENY`)
keep a link card / their own app card instead.
Jellyfin, Navidrome, GitDXD) from the desktop shows the real site inside the window (an
iframe). A service must not send a restrictive `X-Frame-Options`: Navidrome needs
`ND_HTTPHEADERS_FRAMEOPTIONS=ALLOWALL` and Forgejo needs `[cors] X_FRAME_OPTIONS = unset`.
Discord sends `DENY` and keeps a link card instead.
- **Minecraft-style SMP window** — the SMP shortcut opens a join menu modelled on
Minecraft's multiplayer screen, with live status, player count, MOTD and version pulled
from mcstatus.io through the site's own ping API.