Fixed CSRF-related issues and profilepictures by starting caddy for development server too. Also improved boostrap script. #15 #16

data/Caddyfile

@@ -7,7 +7,7 @@
 	https_port {$HTTPS_PORT}
 }
 
-0.0.0.0 {
+{$CADDY_HOST} {
 	# the tls certificates
 	tls {$DATADIR}/tls/server.pem {$DATADIR}/tls/server-key.pem
 	route {

data/config.example.yml

@@ -27,7 +27,8 @@ db:
   host: "127.0.0.1"
   port: 5432
 caddy:
-  # Ports that the web server listens on
+  # Webserver settings
+  host: "localhost"
   http_port: 80
   https_port: 443
 logs:

data/profilepictures/default.svg

@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   width="16"
+   height="16"
+   viewBox="0 0 16 16"
+   version="1.1"
+   id="svg5"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <defs
+     id="defs2" />
+  <g
+     id="layer1">
+    <circle
+       style="fill:#808080;fill-opacity:1;stroke:#fffcfe;stroke-opacity:1"
+       id="path848"
+       cx="8"
+       cy="4.5"
+       r="2.5" />
+    <path
+       style="fill:#7f7f7f;fill-opacity:1;stroke:#fffcff;stroke-opacity:1"
+       id="path3433"
+       d="m -3,-13.499699 a 5,5 0 0 1 -2.5,4.3301274 5,5 0 0 1 -5,0 5,5 0 0 1 -2.5,-4.3301274 h 5 z"
+       transform="scale(-1)" />
+  </g>
+</svg>