From aae760331c62c80f8f0b227bfc1c1e53cea1ba08 Mon Sep 17 00:00:00 2001
From: Dorian <dorian@Dorians-MacBook-Air.local>
Date: Wed, 6 May 2026 16:56:54 +0100
Subject: [PATCH] fix(api): allow LAN HTTP asset loading

---
 apps/api/src/server.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index e4bd98b..dbcc016 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -29,9 +29,12 @@ export function buildApp() {
           "connect-src": ["'self'"],
           "font-src": ["'self'", "data:"],
           "frame-ancestors": ["'none'"],
+          "upgrade-insecure-requests": null,
         },
       },
       crossOriginEmbedderPolicy: false,
+      crossOriginOpenerPolicy: false,
+      originAgentCluster: false,
     }),
   );