Upgrade HeyForm from v0.1.0 to v3.0.5

v0.1.0 (Feb 2025) has dozens of published security advisories fixed in
v3. Tested against a copy of the database first; forms load unchanged.

v3 listens on 9157, keeps uploads under packages/server, and uses Redis 8
commands, so KeyDB is replaced by redis:8-alpine. The homepage URL is now
https (v3's CORS allowlist is built from it), Caddy is the trusted proxy,
public sign-up is off, and integration credentials get their own key.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This commit is contained in:

Phil

2026-10-31 12:50:57 -06:00

co-authored by

Claude Opus 5.5

parent 394f111162

commit a1a79af7d5

4 changed files with 27 additions and 16 deletions

									
										roles/docker/templates/Caddyfile.j2
									
		+1
		-1
	
												View File
												
				@@ -103,7 +103,7 @@ nerder.land {

				}

				forms.nerder.land {

				    reverse_proxy heyform-heyform-1:8000

				    reverse_proxy heyform-heyform-1:9157

				}

				listmonk.nerder.land {