From 420926aef1ea93ddd395f2bddc002da1345e070b Mon Sep 17 00:00:00 2001
From: Till JS <tills95@gmail.com>
Date: Sun, 22 Mar 2026 19:10:49 +0100
Subject: [PATCH] fix(infra): add no-cache headers for PWA files in Caddyfile

Ensure sw.js, manifest.webmanifest, and registerSW.js are never cached
by the browser or CDN so service worker updates are picked up immediately
after deploys. Uses a reusable Caddy snippet imported by all web app blocks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 docker/caddy/Caddyfile.production | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/docker/caddy/Caddyfile.production b/docker/caddy/Caddyfile.production
index 808042a0d..3457d76b8 100644
--- a/docker/caddy/Caddyfile.production
+++ b/docker/caddy/Caddyfile.production
@@ -5,6 +5,13 @@
 # Deploy to: ~/Caddyfile on production server
 # Reload with: docker exec caddy caddy reload --config /etc/caddy/Caddyfile
 
+# PWA files must never be cached by the browser/CDN so that
+# service worker updates are picked up immediately after deploys.
+(pwa-no-cache) {
+    @pwa-files path /sw.js /manifest.webmanifest /registerSW.js
+    header @pwa-files Cache-Control "no-cache, no-store, must-revalidate"
+}
+
 # ============================================
 # Auth Service
 # ============================================
@@ -16,6 +23,7 @@ auth.mana.how {
 # ManaCore Dashboard (Main)
 # ============================================
 mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5000
 }
 
@@ -27,6 +35,7 @@ www.mana.how {
 # Chat App
 # ============================================
 chat.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5010
 }
 
@@ -38,6 +47,7 @@ chat-api.mana.how {
 # Todo App
 # ============================================
 todo.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5011
 }
 
@@ -49,6 +59,7 @@ todo-api.mana.how {
 # Calendar App
 # ============================================
 calendar.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5012
 }
 
@@ -60,6 +71,7 @@ calendar-api.mana.how {
 # Clock App
 # ============================================
 clock.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5013
 }
 
@@ -75,6 +87,7 @@ clock-bot.mana.how {
 # Contacts App
 # ============================================
 contacts.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5014
 }
 
@@ -86,6 +99,7 @@ contacts-api.mana.how {
 # Storage App
 # ============================================
 storage.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5015
 }
 
@@ -97,6 +111,7 @@ storage-api.mana.how {
 # Skilltree App
 # ============================================
 skilltree.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5020
 }
 
@@ -108,6 +123,7 @@ skilltree-api.mana.how {
 # LightWrite App
 # ============================================
 lightwrite.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5180
 }
 
@@ -119,6 +135,7 @@ lightwrite-api.mana.how {
 # Picture App
 # ============================================
 picture.mana.how {
+    import pwa-no-cache
     reverse_proxy localhost:5021
 }