From b76a7d55861e728433bba0fea4ef17fadf463ecb Mon Sep 17 00:00:00 2001
From: Dymas <vysin.jiri@gmail.com>
Date: Mon, 22 Jun 2026 10:42:45 +0200
Subject: [PATCH] Disable HTTPS upgrade for LAN access

---
 src/backend/src/main.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/backend/src/main.ts b/src/backend/src/main.ts
index 9626532..91e5dc9 100644
--- a/src/backend/src/main.ts
+++ b/src/backend/src/main.ts
@@ -66,6 +66,11 @@ async function bootstrap() {
   app.use(
     helmet({
       crossOriginResourcePolicy: false,
+      contentSecurityPolicy: {
+        directives: {
+          upgradeInsecureRequests: null,
+        },
+      },
     }),
   );