From ceafcf58955549f3a932e4da8b25f6ea72bd2914 Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 4 Oct 2026 08:43:19 +0200
Subject: [PATCH 01/10] Changed Borg repo edit/delete buttons to be grouped on
 the same line.

---
 community_backup/webui/templates/borg_list.html | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/community_backup/webui/templates/borg_list.html b/community_backup/webui/templates/borg_list.html
index 73e0b7d..0547f8c 100644
--- a/community_backup/webui/templates/borg_list.html
+++ b/community_backup/webui/templates/borg_list.html
@@ -31,8 +31,12 @@
       <td style="word-break: break-all"><code>{{ repo.truncated_key }}</code></td>
       <td style="word-break: break-all"><code>{{ repo.repo_url }}</code></td>
       <td>{% if repo.used_quota < 0 %}not initialized{% else %}{{ repo.used_quota }}/{{ repo.quota }} GB{% endif %}</td>
-      <td><a href="{% url 'borg_update' pk=repo.pk %}" class="button is-warning is-small">Edit</a>
-      <a href="{% url 'borg_delete' pk=repo.pk %}" class="button is-danger is-small">Delete</a></td>
+      <td>
+          <div class="field is-grouped">
+            <a href="{% url 'borg_update' pk=repo.pk %}" class="button is-warning is-small">Edit</a>
+            <a href="{% url 'borg_delete' pk=repo.pk %}" class="button is-danger is-small">Delete</a>
+          </div>
+      </td>
     </tr>
 {% endfor %}
   </tbody>

From d7df06250918c9f509c13012162a766e42e9ac95 Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 18 Oct 2026 10:36:47 +0200
Subject: [PATCH 02/10] made the footer block content the same width as the
 regular main content

---
 community_backup/webui/templates/base.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/community_backup/webui/templates/base.html b/community_backup/webui/templates/base.html
index 4097b67..39a1f6c 100644
--- a/community_backup/webui/templates/base.html
+++ b/community_backup/webui/templates/base.html
@@ -84,7 +84,7 @@
 {% endblock %}
     </main>
     <footer class="footer">
-        <div class="columns">
+        <div class="columns container">
             <div class="column">
                 <a href="{% url 'imprint' %}">Imprint</a>
             </div>

From 5c05ec0a8b32cf3dcd981fba54a227b58e54ebdf Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 18 Oct 2026 10:38:06 +0200
Subject: [PATCH 03/10] Fixed CSS styling by inserting bulma content class
 where needed.

---
 community_backup/static/webui/css/webui.css     |  4 ----
 community_backup/webui/templates/borg_list.html |  8 ++++----
 community_backup/webui/templates/landing.html   | 12 ++++++------
 community_backup/webui/templates/markdown.html  |  2 +-
 4 files changed, 11 insertions(+), 15 deletions(-)

diff --git a/community_backup/static/webui/css/webui.css b/community_backup/static/webui/css/webui.css
index 40cedd4..e465940 100644
--- a/community_backup/static/webui/css/webui.css
+++ b/community_backup/static/webui/css/webui.css
@@ -1,7 +1,3 @@
-h1 {
-  font-size: 2rem
-}
-
 .pixelart {
   image-rendering: crisp-edges;
 }
diff --git a/community_backup/webui/templates/borg_list.html b/community_backup/webui/templates/borg_list.html
index 0547f8c..ae42f38 100644
--- a/community_backup/webui/templates/borg_list.html
+++ b/community_backup/webui/templates/borg_list.html
@@ -1,6 +1,8 @@
 {% extends "base.html" %}
 
 {% block content %}
+
+<section class="section content">
 <nav class="level">
   <div class="level-left">
   <h1 class="level-item">Your Borg Repositories</h1>
@@ -9,13 +11,11 @@
     <a class="level-item button is-primary" href="{% url 'borg_add' %}" role="button">Add Repository</a>
   </div>
 </nav>
-
-<section class="section">
 <p>Create a borg repository by specifying a name and the SSH public key that is allowed to access this repository. The name is only for your convenience. To set up the repository please follow the <a href="https://borgbackup.readthedocs.io/en/stable/">BorgBackup documentation</a>. There is also a <a href="https://borgbackup.readthedocs.io/en/stable/quickstart.html">Quick start guide</a> available.
   <b>Always use encrypted backups!</b></p>
 </section>
 
-<section class="section">
+<section class="section content">
 <table class="table is-striped is-fullwidth is-hoverable">
   <thead>
     <th>Name</th>
@@ -44,7 +44,7 @@
 </section>
 
 {% if BORG_SERVER_PUBKEYS %}
-<section class="section">
+<section class="section content">
 <div class="card">
   <header class="card-header">
     <p class="card-header-title">Borg Server Public Keys</p>
diff --git a/community_backup/webui/templates/landing.html b/community_backup/webui/templates/landing.html
index 7b4045d..27a0cdf 100644
--- a/community_backup/webui/templates/landing.html
+++ b/community_backup/webui/templates/landing.html
@@ -1,12 +1,12 @@
 {% extends "base.html" %}
 
 {% block content %}
-
-  <h1 class="has-text-centered">Welcome to Community Backup!</h1>
-
+<div class="content">
   <section class="section">
-  <p>This is a service offering space for backups free of charge. This is a hobby project. It comes with no guarantees for anything, especially availability of the service. This service is in a testing phase at the moment. It might be unavailable at times and features might change quickly.</p>
-  <p>Currently this service offers backups only via <a href="https://www.borgbackup.org/">Borg Backup</a>.</p>
-  <p>To access this service you need an account. To register for an account you need a voucher. Vouchers are required to control the amount of users, so that there is enough space available for everyone.</p>
+    <h1 class="has-text-centered">Welcome to Community Backup!</h1>
+    <p>This is a service offering space for backups free of charge. This is a hobby project. It comes with no guarantees for anything, especially availability of the service. This service is in a testing phase at the moment. It might be unavailable at times and features might change quickly.</p>
+    <p>Currently this service offers backups only via <a href="https://www.borgbackup.org/">Borg Backup</a>.</p>
+    <p>To access this service you need an account. To register for an account you need a voucher. Vouchers are required to control the amount of users, so that there is enough space available for everyone.</p>
   </section>
+</div>
 {% endblock %}
diff --git a/community_backup/webui/templates/markdown.html b/community_backup/webui/templates/markdown.html
index d3537e0..0970b1c 100644
--- a/community_backup/webui/templates/markdown.html
+++ b/community_backup/webui/templates/markdown.html
@@ -1,7 +1,7 @@
 {% extends "base.html" %}
 
 {% block content %}
-<section class="section">
+<section class="section content">
   {{ markdown_content|safe }}
 </section >
 {% endblock %}

From f3d152b454231d36036b089b20cf257c5f36346e Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 18 Oct 2026 10:38:29 +0200
Subject: [PATCH 04/10] Added privacy policy section

---
 README.md                                  | 1 +
 community_backup/webui/templates/base.html | 9 ++++++++-
 community_backup/webui/urls.py             | 1 +
 community_backup/webui/views.py            | 5 +++++
 4 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4656695..4330a0f 100644
--- a/README.md
+++ b/README.md
@@ -95,6 +95,7 @@ Those files are markdown files that are rendered as HTML. You have to supply the
 The following files are expected:
 
 * `imprint.md` with your imprint information.
+* `privacy_policy.md` with your privacy policy.
 
 ## Settings
 
diff --git a/community_backup/webui/templates/base.html b/community_backup/webui/templates/base.html
index 39a1f6c..c2415fa 100644
--- a/community_backup/webui/templates/base.html
+++ b/community_backup/webui/templates/base.html
@@ -86,7 +86,14 @@
     <footer class="footer">
         <div class="columns container">
             <div class="column">
-                <a href="{% url 'imprint' %}">Imprint</a>
+                <ul>
+                    <li>
+                        <a href="{% url 'imprint' %}">Imprint</a>
+                    </li>
+                    <li>
+                        <a href="{% url 'privacy_policy' %}">Privacy Policy</a>
+                    </li>
+                </ul>
             </div>
             <div class="column">
                 <a href="https://git.srvspace.net/jo/community-backup">Source Code</a>
diff --git a/community_backup/webui/urls.py b/community_backup/webui/urls.py
index 7ba5f31..b0d22a3 100644
--- a/community_backup/webui/urls.py
+++ b/community_backup/webui/urls.py
@@ -19,4 +19,5 @@ urlpatterns = [
     path("register/", views.RegisterUserView.as_view(), name="register"),
     path("delete/", views.DeleteUserView.as_view(), name="delete"),
     path("imprint/", views.ImprintView.as_view(), name="imprint"),
+    path("privacy-policy/", views.PrivacyPolicyView.as_view(), name="privacy_policy"),
 ]
diff --git a/community_backup/webui/views.py b/community_backup/webui/views.py
index 663cd31..ddf5d04 100644
--- a/community_backup/webui/views.py
+++ b/community_backup/webui/views.py
@@ -51,6 +51,11 @@ class ImprintView(MarkdownView):
     md = "imprint.md"
 
 
+class PrivacyPolicyView(MarkdownView):
+    template_name = "markdown.html"
+    md = "privacy_policy.md"
+
+
 class BorgView(LoginRequiredMixin, ListView):
     template_name = "borg_list.html"
     content_object_name = "borg_repositories"

From baea657d1aa30326f6e50490e22ae689e8524d7e Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 18 Oct 2026 15:04:00 +0200
Subject: [PATCH 05/10] Added option to bulk create vouchers via the WebUI.

Closes #9
---
 community_backup/webui/admin.py               | 45 ++++++++++++++++++-
 .../webui/management/commands/add_vouchers.py |  9 +---
 community_backup/webui/models.py              | 22 ++++++++-
 .../webui/templates/admin/bulk_generate.html  |  8 ++++
 .../templates/admin/voucher_change_list.html  |  6 +++
 5 files changed, 79 insertions(+), 11 deletions(-)
 create mode 100644 community_backup/webui/templates/admin/bulk_generate.html
 create mode 100644 community_backup/webui/templates/admin/voucher_change_list.html

diff --git a/community_backup/webui/admin.py b/community_backup/webui/admin.py
index 7d0a18b..8f5f29c 100644
--- a/community_backup/webui/admin.py
+++ b/community_backup/webui/admin.py
@@ -1,7 +1,50 @@
 from django.contrib import admin
+from django.urls import path, reverse_lazy
+from django.views.generic import FormView
+from django import forms
 
 from .models import BorgRepository, Voucher
 
+
+class VoucherBulkCreateForm(forms.Form):
+    prefix = forms.CharField(label="Voucher prefix")
+    amount = forms.IntegerField(label="Amount")
+
+
+class VoucherBulkCreateView(FormView):
+    form_class = VoucherBulkCreateForm
+    template_name = "admin/bulk_generate.html"
+    admin_site_context = None
+    success_url = reverse_lazy("admin:webui_voucher_changelist")
+
+    def get_context_data(self, **kwargs):
+        context = super().get_context_data(**kwargs)
+        # inject the admin site context so that the navbar and other things work as intended
+        context.update(self.admin_site_context.each_context(self.request))
+        return context
+
+    def form_valid(self, form):
+        Voucher.bulk_generate(form.cleaned_data["prefix"], form.cleaned_data["amount"])
+        return super().form_valid(form)
+
+
+@admin.register(Voucher)
+class VoucherAdmin(admin.ModelAdmin):
+    change_list_template = "admin/voucher_change_list.html"
+
+    def get_urls(self):
+        urls = super().get_urls()
+        my_urls = [
+            path(
+                "bulk_generate/",
+                self.admin_site.admin_view(
+                    VoucherBulkCreateView.as_view(admin_site_context=self.admin_site)
+                ),
+                name="voucher_bulk_generate",
+            )
+        ]
+        return my_urls + urls
+
+
 # Register your models here.
 admin.site.register(BorgRepository)
-admin.site.register(Voucher)
diff --git a/community_backup/webui/management/commands/add_vouchers.py b/community_backup/webui/management/commands/add_vouchers.py
index f983d92..f8d0e6b 100644
--- a/community_backup/webui/management/commands/add_vouchers.py
+++ b/community_backup/webui/management/commands/add_vouchers.py
@@ -11,14 +11,7 @@ class Command(BaseCommand):
         parser.add_argument("amount", type=int)
 
     def handle(self, *args, **options):
-        unabmigous_characters = "abcdefghijkmnopqrstuvwxyzACDEFHJKLMNPQRTUVWXY1234679"
-
-        vouchers = set()
-        while len(vouchers) < options["amount"]:
-            random_part = "".join(choices(unabmigous_characters, k=5))
-            vouchers.add(f"{options['prefix']}-{random_part}")
-
-        Voucher.objects.bulk_create(Voucher(code=v) for v in vouchers)
+        vouchers = Voucher.bulk_generate(options["prefix"], options["amount"])
 
         header = r"""\begin{document}
 \begin{center}
diff --git a/community_backup/webui/models.py b/community_backup/webui/models.py
index 36e338f..f5686d8 100644
--- a/community_backup/webui/models.py
+++ b/community_backup/webui/models.py
@@ -1,11 +1,12 @@
+from random import choices
+from pathlib import Path
+
 from django.db import models
 from django.contrib.auth.models import User
 from django.core.validators import RegexValidator
 from django.conf import settings
-from pathlib import Path
 import msgpack
 
-
 from .tasks import update_user
 
 
@@ -121,3 +122,20 @@ class Voucher(models.Model):
 
     def __str__(self):
         return f"Voucher '{self.code}'"
+
+    @classmethod
+    def bulk_generate(cls, prefix: str, amount: int) -> set[str]:
+        """
+        Create `amount` vouchers starting with `prefix`.
+
+        Returns a set of the voucher codes as strings.
+        """
+        unabmigous_characters = "abcdefghijkmnopqrstuvwxyzACDEFHJKLMNPQRTUVWXY1234679"
+
+        vouchers = set()
+        while len(vouchers) < amount:
+            random_part = "".join(choices(unabmigous_characters, k=5))
+            vouchers.add(f"{prefix}-{random_part}")
+
+        Voucher.objects.bulk_create(Voucher(code=v) for v in vouchers)
+        return vouchers
diff --git a/community_backup/webui/templates/admin/bulk_generate.html b/community_backup/webui/templates/admin/bulk_generate.html
new file mode 100644
index 0000000..b44f745
--- /dev/null
+++ b/community_backup/webui/templates/admin/bulk_generate.html
@@ -0,0 +1,8 @@
+{% extends "admin/base_site.html" %}
+{% block content %}
+  <form method="post">
+    {% csrf_token %}
+  {{ form }}
+    <input type="submit" value="submit">
+  </form>
+{% endblock %}
diff --git a/community_backup/webui/templates/admin/voucher_change_list.html b/community_backup/webui/templates/admin/voucher_change_list.html
new file mode 100644
index 0000000..6283e9c
--- /dev/null
+++ b/community_backup/webui/templates/admin/voucher_change_list.html
@@ -0,0 +1,6 @@
+{% extends "admin/change_list.html" %}
+
+{% block object-tools-items %}
+  {{ block.super }}
+<li><a href="{% url 'admin:voucher_bulk_generate' %}" class="addlink">Bulk Generate Vouchers</a></li>
+{% endblock %}

From 5471b20f7b05121152a4db19b1c7e82b74dc7d29 Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Sun, 18 Oct 2026 17:39:08 +0200
Subject: [PATCH 06/10] bumped version to 0.14

---
 community_backup/community_backup/settings.py | 2 +-
 pyproject.toml                                | 2 +-
 uv.lock                                       | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/community_backup/community_backup/settings.py b/community_backup/community_backup/settings.py
index fc103fc..79447ce 100644
--- a/community_backup/community_backup/settings.py
+++ b/community_backup/community_backup/settings.py
@@ -120,7 +120,7 @@ STATICFILES_DIRS = [
     BASE_DIR / "static",
 ]
 
-RELEASE_VERSION = "0.13"
+RELEASE_VERSION = "0.14"
 
 # Import settings from configuration.py
 try:
diff --git a/pyproject.toml b/pyproject.toml
index 1b5245b..43891a8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "community_backup"
-version = "0.13"
+version = "0.14"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.13"
diff --git a/uv.lock b/uv.lock
index 7ead54d..702a1fb 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = ">=3.13"
 
 [[package]]
@@ -13,7 +13,7 @@ wheels = [
 
 [[package]]
 name = "community-backup"
-version = "0.13"
+version = "0.14"
 source = { virtual = "." }
 dependencies = [
     { name = "crispy-bulma" },

From 5813d200dc98c3bf01803c01684928673467339f Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Wed, 21 Oct 2026 21:53:23 +0200
Subject: [PATCH 07/10] Moved inline styling to the stylesheet.

---
 community_backup/static/webui/css/webui.css     | 10 ++++++++++
 community_backup/webui/templates/base.html      |  2 +-
 community_backup/webui/templates/borg_list.html |  8 ++++----
 3 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/community_backup/static/webui/css/webui.css b/community_backup/static/webui/css/webui.css
index e465940..514ae45 100644
--- a/community_backup/static/webui/css/webui.css
+++ b/community_backup/static/webui/css/webui.css
@@ -1,3 +1,9 @@
+body {
+  display: flex;
+  flex-direction: column;
+  height: 100vh;
+}
+
 .pixelart {
   image-rendering: crisp-edges;
 }
@@ -6,3 +12,7 @@
   min-width: 32px;
   min-height: 32px;
 }
+
+.word-break-break-all {
+  word-break: break-all;
+}
diff --git a/community_backup/webui/templates/base.html b/community_backup/webui/templates/base.html
index c2415fa..cefcd55 100644
--- a/community_backup/webui/templates/base.html
+++ b/community_backup/webui/templates/base.html
@@ -32,7 +32,7 @@
         });
         </script>
   </head>
-  <body style="display: flex; flex-direction: column; height: 100vh">
+  <body>
     <nav class="navbar" role="navigation" aria-label="main navigation" >
         <div class="navbar-brand">
                 <a class="navbar-item" href="/"><img id="logo" class="pixelart" src="{% static 'webui/logo.png' %}" alt="The logo if Community Backup, a pixelated hard disk platter and head."/> Community Backup</a>
diff --git a/community_backup/webui/templates/borg_list.html b/community_backup/webui/templates/borg_list.html
index ae42f38..896881e 100644
--- a/community_backup/webui/templates/borg_list.html
+++ b/community_backup/webui/templates/borg_list.html
@@ -28,8 +28,8 @@
 {% for repo in object_list %}
     <tr>
       <td>{{ repo.name }}</td>
-      <td style="word-break: break-all"><code>{{ repo.truncated_key }}</code></td>
-      <td style="word-break: break-all"><code>{{ repo.repo_url }}</code></td>
+      <td class="word-break-break-all"><code>{{ repo.truncated_key }}</code></td>
+      <td class="word-break-break-all"><code>{{ repo.repo_url }}</code></td>
       <td>{% if repo.used_quota < 0 %}not initialized{% else %}{{ repo.used_quota }}/{{ repo.quota }} GB{% endif %}</td>
       <td>
           <div class="field is-grouped">
@@ -51,8 +51,8 @@
   </header>
   <div class="card-content">
   {% for key, fingerprint in BORG_SERVER_PUBKEYS %}
-      <span style="word-break: break-all"><code>{{ key }}</code></span><br>
-      <span style="word-break: break-all"><code>{{ fingerprint }}</code></span>
+      <span class="word-break-break-all"><code>{{ key }}</code></span><br>
+      <span class="word-break-break-all"><code>{{ fingerprint }}</code></span>
       {% if not forloop.last %}
       <hr>
       {% endif %}

From 26f3d5d03334c4ebf041b5fa3c3c19440e48240a Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Wed, 21 Oct 2026 21:54:29 +0200
Subject: [PATCH 08/10] moved inline javascript to it's own file

---
 community_backup/static/webui/js/webui.js  | 24 ++++++++++++++++++++
 community_backup/webui/templates/base.html | 26 ++--------------------
 2 files changed, 26 insertions(+), 24 deletions(-)
 create mode 100644 community_backup/static/webui/js/webui.js

diff --git a/community_backup/static/webui/js/webui.js b/community_backup/static/webui/js/webui.js
new file mode 100644
index 0000000..03da0f8
--- /dev/null
+++ b/community_backup/static/webui/js/webui.js
@@ -0,0 +1,24 @@
+//
+// Activation script for the bulma burger menu.
+// Copied from https://bulma.io/documentation/components/navbar/
+//
+document.addEventListener('DOMContentLoaded', () => {
+
+  // Get all "navbar-burger" elements
+  const $navbarBurgers = Array.prototype.slice.call(document.querySelectorAll('.navbar-burger'), 0);
+
+  // Add a click event on each of them
+  $navbarBurgers.forEach( el => {
+    el.addEventListener('click', () => {
+
+    // Get the target from the "data-target" attribute
+    const target = el.dataset.target;
+    const $target = document.getElementById(target);
+
+    // Toggle the "is-active" class on both the "navbar-burger" and the "navbar-menu"
+    el.classList.toggle('is-active');
+    $target.classList.toggle('is-active');
+
+    });
+  });
+});
diff --git a/community_backup/webui/templates/base.html b/community_backup/webui/templates/base.html
index cefcd55..3042cca 100644
--- a/community_backup/webui/templates/base.html
+++ b/community_backup/webui/templates/base.html
@@ -2,35 +2,13 @@
 <!doctype html>
 <html lang="en">
   <head>
-        <link rel="stylesheet" href="{% static 'vendored/css/bulma.min.css' %}">
+    <link rel="stylesheet" href="{% static 'vendored/css/bulma.min.css' %}">
     <link rel="stylesheet" href="{% static 'webui/css/webui.css' %}">
     <link rel="icon" href="{% static 'webui/logo.png'%}" type="image/png"/>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <title>Community Backup</title>
-    <script type="text/javascript">
-        document.addEventListener('DOMContentLoaded', () => {
-
-        // Get all "navbar-burger" elements
-        const $navbarBurgers = Array.prototype.slice.call(document.querySelectorAll('.navbar-burger'), 0);
-
-        // Add a click event on each of them
-        $navbarBurgers.forEach( el => {
-            el.addEventListener('click', () => {
-
-            // Get the target from the "data-target" attribute
-            const target = el.dataset.target;
-            const $target = document.getElementById(target);
-
-            // Toggle the "is-active" class on both the "navbar-burger" and the "navbar-menu"
-            el.classList.toggle('is-active');
-            $target.classList.toggle('is-active');
-
-            });
-        });
-
-        });
-        </script>
+    <script type="text/javascript" src={% static 'webui/js/webui.js' %}></script>
   </head>
   <body>
     <nav class="navbar" role="navigation" aria-label="main navigation" >

From 6013d0bcab2c3bda5d9e2508205b7b0be9e301e2 Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Wed, 21 Oct 2026 22:11:16 +0200
Subject: [PATCH 09/10] added comment regarding CSP

Closes #11
---
 README.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/README.md b/README.md
index 4330a0f..b340c76 100644
--- a/README.md
+++ b/README.md
@@ -177,3 +177,13 @@ BORG_SERVER_PUBKEYS = [
     ),
 ]
 ```
+
+## Webserver Config / Content-Security-Policy
+
+This page by itself does not load external sources and does not use inline javascript/styling.
+It only loads javascript, CSS and images.
+Therefore the following Content-Security-Policy should work fine in the standard cases:
+
+```
+Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self';"
+```

From 49108672c8eecd8aea3f75ec92006ceb02c73c34 Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Wed, 21 Oct 2026 22:12:51 +0200
Subject: [PATCH 10/10] Bumped version to 0.15

---
 community_backup/community_backup/settings.py | 2 +-
 pyproject.toml                                | 2 +-
 uv.lock                                       | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/community_backup/community_backup/settings.py b/community_backup/community_backup/settings.py
index 79447ce..b733ca7 100644
--- a/community_backup/community_backup/settings.py
+++ b/community_backup/community_backup/settings.py
@@ -120,7 +120,7 @@ STATICFILES_DIRS = [
     BASE_DIR / "static",
 ]
 
-RELEASE_VERSION = "0.14"
+RELEASE_VERSION = "0.15"
 
 # Import settings from configuration.py
 try:
diff --git a/pyproject.toml b/pyproject.toml
index 43891a8..d076038 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "community_backup"
-version = "0.14"
+version = "0.15"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.13"
diff --git a/uv.lock b/uv.lock
index 702a1fb..e0af229 100644
--- a/uv.lock
+++ b/uv.lock
@@ -13,7 +13,7 @@ wheels = [
 
 [[package]]
 name = "community-backup"
-version = "0.14"
+version = "0.15"
 source = { virtual = "." }
 dependencies = [
     { name = "crispy-bulma" },