[Final Integration]: Notifications

.gitignore

@@ -197,3 +197,8 @@ fabric.properties
 # video and screenshot of the tests from Cypress
 ./e2e/screenshots
 ./e2e/videos
+
+# Firebase
+.firebase
+*-debug.log
+.runtimeconfig.json

.prettierignore

@@ -1 +1,2 @@
 package.json
+src/firebase-messaging-sw.js

angular.json

@@ -24,6 +24,7 @@
               "src/assets",
               "src/favicon.ico",
               "src/manifest.webmanifest",
+              "src/firebase-messaging-sw.js",
               {
                 "glob": "**/*",
                 "input": "node_modules/leaflet/dist/images/",

build/Dockerfile

@@ -136,9 +136,9 @@
 # overwrite the Content-Security-Policy rules (report-uri is added automatically)
 # default includes all required whitelists for production server
 # to disable any CSP blocking, set to "default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'"
-ENV CSP="default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.tile.openstreetmap.org/ https://matomo.aam-digital.org https://*.aam-digital.com https://*.aam-digital.net https://*.aam-digital.app https://api.github.com/repos/Aam-Digital/ https://sentry.io $CSP_REPORT_URI; style-src 'self' 'unsafe-inline'"
+ENV CSP="default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.tile.openstreetmap.org/ https://matomo.aam-digital.org https://fcmregistrations.googleapis.com/v1/projects/aam-digital-b8a7b https://www.gstatic.com/firebasejs/11.2.0 https://*.aam-digital.com https://*.aam-digital.net https://*.aam-digital.app https://api.github.com/repos/Aam-Digital/ https://sentry.io $CSP_REPORT_URI; style-src 'self' 'unsafe-inline'"
 # 'unsafe-eval' required for pouchdb https://github.com/pouchdb/pouchdb/issues/7853#issuecomment-535020600
 
 # variables are inserted into the nginx config
 CMD envsubst '$$PORT $$COUCHDB_URL $$QUERY_URL $$NOMINATIM_URL $$CSP $$CSP_REPORT_URI' < /etc/nginx/templates/default.conf > /etc/nginx/conf.d/default.conf &&\
     nginx -g 'daemon off;'

build/default.conf

@@ -61,6 +61,16 @@ server {
         proxy_set_header X-Forwarded-Ssl on;
     }
 
+    # The proxy path should be the same as in SqlReportService.QUERY_PROXY
+    location ^~ /api {
+        proxy_pass ${QUERY_URL};
+        proxy_redirect off;
+        proxy_buffering off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Ssl on;
+    }
+
     # The proxy path should be the same as in GeoService.remoteUrl
     location ^~ /nominatim {
         rewrite /nominatim/(.*) /$1 break;