Optionally enable HSTS using env vars. Useful for testing

Dockerfile

@@ -32,6 +32,9 @@ LABEL org.opencontainers.image.title="Budgeteer" \
 # Ensure the SQLite data directory exists and is writable
 RUN mkdir -p /app/data
 
+# HSTS domain — used as the certificate CN and read by the app via Hsts:Domain config
+ENV Hsts__Domain=nas.oneputleygreen.com
+
 # Generate a self-signed TLS certificate for HTTPS
 RUN mkdir -p /app/certs && \
     openssl req -x509 -newkey rsa:4096 \
@@ -39,7 +42,7 @@ RUN mkdir -p /app/certs && \
         -out /app/certs/cert.pem \
         -days 3650 \
         -nodes \
-        -subj "/C=GB/ST=England/O=Budgeteer/CN=localhost" && \
+        -subj "/C=GB/ST=England/O=Budgeteer/CN=${Hsts__Domain}" && \
     openssl pkcs12 -export \
         -out /app/certs/cert.pfx \
         -inkey /app/certs/key.pem \