fix(infra): replace legacy klz fallback references with etib across docker compose and test scripts

components/blocks/TeamGrid.tsx

@@ -149,7 +149,7 @@ export function TeamGrid({ members }: TeamGridProps) {
                 className="group flex flex-col bg-white rounded-[2rem] border border-neutral-100 shadow-[0_8px_30px_rgb(0,0,0,0.04)] hover:shadow-[0_20px_40px_rgba(238,114,3,0.1)] transition-all duration-500 hover:-translate-y-2 overflow-hidden"
               >
                 {/* Card Banner with Signature E-TIB LogoArcs Design Element */}
-                <div className="h-36 bg-neutral-50 relative border-b border-neutral-100 overflow-hidden select-none">
+                <div className="h-44 sm:h-52 md:h-36 bg-neutral-50 relative border-b border-neutral-100 overflow-hidden select-none">
                   <div className="absolute inset-0 bg-gradient-to-br from-neutral-100/90 via-neutral-50 to-orange-50/20" />
                   
                   {/* Signature E-TIB Logo Arcs Design Element */}
@@ -171,17 +171,19 @@ export function TeamGrid({ members }: TeamGridProps) {
                   <div className="absolute inset-0 opacity-[0.025] pointer-events-none" style={{ backgroundImage: "url('data:image/svg+xml,%3Csvg width=\\'20\\' height=\\'20\\' viewBox=\\'0 0 20 20\\' xmlns=\\'http://www.w3.org/2000/svg\\'%3E%3Crect width=\\'1\\' height=\\'1\\' fill=\\'%23000000\\'/%3E%3C/svg%3E')" }} />
                 </div>
 
-                <div className="px-8 pb-8 relative flex-grow flex flex-col">
-                  {/* Overlapping Profile Picture with Shared Layout Animation */}
+                <div className="px-6 sm:px-8 pb-8 relative flex-grow flex flex-col items-center md:items-start text-center md:text-left">
+                  {/* Overlapping Profile Picture (Extra Large Centered on Mobile, Lightbox modal active only on Desktop) */}
                   <m.div 
                     layoutId={`team-avatar-${member.id}`}
                     onClick={() => {
-                      setPage([0, 0]);
-                      setSelectedMember(member);
+                      if (typeof window !== 'undefined' && window.innerWidth >= 768) {
+                        setPage([0, 0]);
+                        setSelectedMember(member);
+                      }
                     }}
                     onMouseEnter={() => handlePreload(imageUrl)}
                     onTouchStart={() => handlePreload(imageUrl)}
-                    className="w-32 h-32 md:w-36 md:h-36 rounded-2xl overflow-hidden border-4 border-white shadow-xl bg-white relative -mt-16 md:-mt-20 mb-6 group-hover:-translate-y-2 transition-transform duration-500 cursor-pointer group/avatar"
+                    className="w-52 h-64 sm:w-60 sm:h-72 md:w-36 md:h-44 mx-auto md:mx-0 rounded-2xl overflow-hidden border-4 border-white shadow-xl bg-white relative -mt-28 md:-mt-24 mb-6 transition-transform duration-500 cursor-default md:cursor-pointer group/avatar"
                   >
                     {imageUrl ? (
                       <>
@@ -189,11 +191,11 @@ export function TeamGrid({ members }: TeamGridProps) {
                           src={imageUrl}
                           alt={member.name}
                           fill
-                          sizes="(max-width: 768px) 128px, 144px"
-                          className="object-cover transition-transform duration-500 group-hover/avatar:scale-105"
+                          sizes="(max-width: 768px) 300px, 144px"
+                          className="object-cover object-[center_15%] transition-transform duration-500 group-hover/avatar:scale-105"
                         />
-                        {/* Zoom Icon Overlay on Hover */}
-                        <div className="absolute inset-0 bg-black/40 opacity-0 group-hover/avatar:opacity-100 transition-opacity duration-300 flex items-center justify-center text-white cursor-pointer">
+                        {/* Zoom Icon Overlay on Hover (Desktop only) */}
+                        <div className="hidden md:flex absolute inset-0 bg-black/40 opacity-0 group-hover/avatar:opacity-100 transition-opacity duration-300 items-center justify-center text-white cursor-pointer">
                           <svg className="w-8 h-8 drop-shadow-md" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2">
                             <circle cx="11" cy="11" r="8"></circle>
                             <line x1="21" y1="21" x2="16.65" y2="16.65"></line>
@@ -204,8 +206,8 @@ export function TeamGrid({ members }: TeamGridProps) {
                       </>
                     ) : (
                       <div className="absolute inset-0 flex items-center justify-center text-neutral-300 bg-neutral-50 group-hover/avatar:bg-neutral-100 transition-colors">
-                        <svg className="w-14 h-14" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1"><path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"></path><circle cx="12" cy="7" r="4"></circle></svg>
-                        <div className="absolute inset-0 bg-black/30 opacity-0 group-hover/avatar:opacity-100 transition-opacity duration-300 flex items-center justify-center text-white cursor-pointer">
+                        <svg className="w-16 h-16" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1"><path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"></path><circle cx="12" cy="7" r="4"></circle></svg>
+                        <div className="hidden md:flex absolute inset-0 bg-black/30 opacity-0 group-hover/avatar:opacity-100 transition-opacity duration-300 items-center justify-center text-white cursor-pointer">
                           <svg className="w-8 h-8 drop-shadow-md" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2">
                             <circle cx="11" cy="11" r="8"></circle>
                             <line x1="21" y1="21" x2="16.65" y2="16.65"></line>
@@ -230,7 +232,7 @@ export function TeamGrid({ members }: TeamGridProps) {
                   )}
 
                   {/* Contacts (Sticky at bottom) */}
-                  <div className="mt-auto pt-6 border-t border-neutral-100 flex flex-col gap-4">
+                  <div className="mt-auto pt-6 border-t border-neutral-100 flex flex-col gap-4 w-full text-left">
                     {member.email && (
                       <a href={`mailto:${member.email}`} className="group/link flex items-center gap-4 text-text-secondary hover:text-primary transition-colors font-medium cursor-pointer">
                         <div className="w-10 h-10 rounded-xl bg-neutral-50 flex items-center justify-center text-neutral-400 group-hover/link:bg-primary/10 group-hover/link:text-primary transition-colors border border-neutral-100">
@@ -365,15 +367,15 @@ export function TeamGrid({ members }: TeamGridProps) {
                       scale: { duration: 0.25 },
                     }}
                     onClick={(e) => e.stopPropagation()}
-                    className="bg-white rounded-3xl overflow-hidden max-w-lg w-full shadow-2xl border border-white/20 relative flex flex-col z-20 my-auto touch-none cursor-grab active:cursor-grabbing"
+                    className="bg-white rounded-[2rem] sm:rounded-3xl overflow-hidden max-w-[380px] sm:max-w-md md:max-w-lg w-full shadow-2xl border border-white/20 relative flex flex-col z-20 my-auto touch-none cursor-grab active:cursor-grabbing shrink-0"
                   >
                     {/* Mobile Drag Indicator Bar */}
                     <div className="absolute top-3 left-1/2 -translate-x-1/2 z-30 w-12 h-1.5 rounded-full bg-white/50 backdrop-blur-sm pointer-events-none" />
 
-                    {/* Portrait Container - Height tuned for Mobile without vertical squishing */}
+                    {/* Portrait Container - Immersive Extra Large Portrait Aspect Framing for Mobile */}
                     <m.div 
                       layoutId={`team-avatar-${selectedMember.id}`}
-                      className="relative w-full h-[320px] sm:h-[400px] md:h-[450px] bg-neutral-900 overflow-hidden shrink-0"
+                      className="relative w-full h-[60vh] min-h-[440px] max-h-[620px] md:h-[460px] bg-neutral-900 overflow-hidden shrink-0"
                     >
                       {selectedMember.image ? (
                         <Image
@@ -381,7 +383,7 @@ export function TeamGrid({ members }: TeamGridProps) {
                           alt={selectedMember.name}
                           fill
                           sizes="(max-width: 768px) 100vw, 600px"
-                          className="object-cover object-top pointer-events-none select-none"
+                          className="object-cover object-[center_15%] pointer-events-none select-none"
                           priority
                         />
                       ) : (

content/de/kompetenzen.mdx

@@ -104,7 +104,7 @@ layout: "fullBleed"
       icon: "hdd",
       lists: [
         [
-          "Horizontalspülbohrverfahren (bis 250m)",
+          "Horizontalspülbohrverfahren (bis 400m)",
           "Horizontalspülbohrverfahren (bis 400er Rohr)",
           "Erdrakete (bis 15m DÖ-Länge)",
           "Erdrakete (bis 160er Rohr)"

content/en/kompetenzen.mdx

@@ -104,7 +104,7 @@ layout: "fullBleed"
       icon: "hdd",
       lists: [
         [
-          "Horizontal directional drilling (up to 250m)",
+          "Horizontal directional drilling (up to 400m)",
           "Horizontal directional drilling (up to 400mm pipe)",
           "Earth rocket (up to 15m crossing length)",
           "Earth rocket (up to 160mm pipe)"

docker-compose.dev.yml

@@ -57,9 +57,10 @@ services:
       sh -c "pnpm install --no-frozen-lockfile && pnpm next dev --webpack --hostname 0.0.0.0 --port 3001"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.services.${PROJECT_NAME:-klz}-app-svc.loadbalancer.server.port=3001"
+      - "traefik.http.services.${PROJECT_NAME:-etib}-app-svc.loadbalancer.server.port=3001"
       - "traefik.docker.network=infra"
 
+
 networks:
   default:
     name: ${COMPOSE_PROJECT_NAME:-etib}-dev-internal

docker-compose.yml

@@ -15,46 +15,47 @@ services:
     labels:
       - "traefik.enable=true"
       # HTTP ⇒ HTTPS redirect
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-web.rule=${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-web.entrypoints=web"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-web.middlewares=redirect-https"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-web.rule=${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-web.entrypoints=web"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-web.middlewares=redirect-https"
       # HTTPS router (Standard)
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.rule=${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.tls=${TRAEFIK_TLS:-false}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.service=${PROJECT_NAME:-klz}-app-svc"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}.middlewares=${AUTH_MIDDLEWARE:-etib-ratelimit,etib-forward,etib-compress}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.rule=${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.tls=${TRAEFIK_TLS:-false}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.service=${PROJECT_NAME:-etib}-app-svc"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}.middlewares=${AUTH_MIDDLEWARE:-etib-ratelimit,etib-forward,etib-compress}"
 
       # Public Router – paths that bypass Gatekeeper auth (health, SEO, static assets, OG images)
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?(health|login|gatekeeper|uploads|media|assets|robots\\.txt|manifest\\.webmanifest|sitemap(-[0-9]+)?\\.xml|(.*/)?api/og(/.*)?|(.*/)?opengraph-image.*)`)"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.tls=${TRAEFIK_TLS:-false}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.service=${PROJECT_NAME:-klz}-app-svc"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-public.priority=2000"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?(health|login|gatekeeper|uploads|media|assets|_next|robots\\.txt|manifest\\.webmanifest|sitemap(-[0-9]+)?\\.xml|(.*/)?api/og(/.*)?|(.*/)?opengraph-image.*)`)"
 
-      - "traefik.http.services.${PROJECT_NAME:-klz}-app-svc.loadbalancer.server.port=3000"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.tls=${TRAEFIK_TLS:-false}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.service=${PROJECT_NAME:-etib}-app-svc"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-public.priority=2000"
+
+      - "traefik.http.services.${PROJECT_NAME:-etib}-app-svc.loadbalancer.server.port=3000"
       - "traefik.docker.network=infra"
 
       # Middlewares
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-compress.compress=true"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-ratelimit.ratelimit.average=100"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-ratelimit.ratelimit.burst=50"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-compress.compress=true"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-ratelimit.ratelimit.average=100"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-ratelimit.ratelimit.burst=50"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
 
       # Login redirect – the app's middleware sends users to /login but login lives at /gatekeeper/login
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-loginredirect.redirectregex.regex=^https?://([^/]+)/([a-z]{2}/)?login(.*)"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-loginredirect.redirectregex.replacement=https://$${1}/gatekeeper/login$${3}"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-loginredirect.redirectregex.permanent=false"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?login`)"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.tls=${TRAEFIK_TLS:-false}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.middlewares=${PROJECT_NAME:-klz}-loginredirect"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.service=${PROJECT_NAME:-klz}-app-svc"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-loginredir.priority=2002"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-loginredirect.redirectregex.regex=^https?://([^/]+)/([a-z]{2}/)?login(.*)"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-loginredirect.redirectregex.replacement=https://$${1}/gatekeeper/login$${3}"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-loginredirect.redirectregex.permanent=false"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathRegexp(`^/([a-z]{2}/)?login`)"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.tls=${TRAEFIK_TLS:-false}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.middlewares=${PROJECT_NAME:-etib}-loginredirect"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.service=${PROJECT_NAME:-etib}-app-svc"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-loginredir.priority=2002"
 
   etib-gatekeeper:
     profiles: [ "gatekeeper" ]
@@ -64,7 +65,7 @@ services:
       default:
       infra:
         aliases:
-          - ${PROJECT_NAME:-klz}-gatekeeper
+          - ${PROJECT_NAME:-etib}-gatekeeper
     env_file:
       - ${ENV_FILE:-.env}
     environment:
@@ -73,19 +74,20 @@ services:
       NODE_ENV: production
     labels:
       - "traefik.enable=true"
-      - "traefik.http.services.${PROJECT_NAME:-klz}-gatekeeper-svc.loadbalancer.server.port=3000"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-auth.forwardauth.address=http://${PROJECT_NAME:-klz}-gatekeeper:3000/gatekeeper/api/verify"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-auth.forwardauth.trustForwardHeader=true"
-      - "traefik.http.middlewares.${PROJECT_NAME:-klz}-auth.forwardauth.authResponseHeaders=X-Auth-User"
+      - "traefik.http.services.${PROJECT_NAME:-etib}-gatekeeper-svc.loadbalancer.server.port=3000"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-auth.forwardauth.address=http://${PROJECT_NAME:-etib}-gatekeeper:3000/gatekeeper/api/verify"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-auth.forwardauth.trustForwardHeader=true"
+      - "traefik.http.middlewares.${PROJECT_NAME:-etib}-auth.forwardauth.authResponseHeaders=X-Auth-User"
       - "traefik.docker.network=infra"
 
       # Gatekeeper Public Router (Login/Auth UI) — basePath mode on main domain
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathPrefix(`/gatekeeper`)"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.tls=${TRAEFIK_TLS:-false}"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.service=${PROJECT_NAME:-klz}-gatekeeper-svc"
-      - "traefik.http.routers.${PROJECT_NAME:-klz}-gatekeeper.priority=2001"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.rule=(${TRAEFIK_HOST_RULE:-Host(`${TRAEFIK_HOST:-e-tib.com}`) || Host(`staging.${TRAEFIK_HOST:-e-tib.com}`) || Host(`testing.${TRAEFIK_HOST:-e-tib.com}`)}) && PathPrefix(`/gatekeeper`)"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.tls=${TRAEFIK_TLS:-false}"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.service=${PROJECT_NAME:-etib}-gatekeeper-svc"
+      - "traefik.http.routers.${PROJECT_NAME:-etib}-gatekeeper.priority=2001"
+
 
   etib-db:
     image: postgres:15-alpine

package.json

@@ -1,6 +1,7 @@
 {
   "name": "e-tib-nextjs",
-  "version": "2.4.49",
+  "version": "2.4.58",
+
   "type": "module",
   "private": true,
   "packageManager": "pnpm@10.18.3",

proxy.ts

@@ -7,11 +7,12 @@ export default createMiddleware({
 });
 
 export const config = {
-  // Match all pathnames except for
+  // Match all pathnames except for:
   // - /api (API routes)
   // - /stats (Analytics proxy)
-  // - /_next (Next.js internals)
-  // - /_static (inside /public)
-  // - all root files inside /public (e.g. /favicon.ico)
-  matcher: ['/((?!api|stats|_next|assets|_static|_vercel|[\\w-]+\\.\\w+).*)']
+  // - /_next (Next.js internals & image optimizer)
+  // - /assets, /_static (static files in /public)
+  // - all files with an extension (e.g. /favicon.ico, .JPG, .png, .webp, .svg)
+  matcher: ['/((?!api|stats|_next|assets|_static|_vercel|.*\\..*).*)']
 };
+

scripts/assets-sync.sh

@@ -31,22 +31,23 @@ fi
 get_media_path() {
   case "$1" in
     local) echo "$LOCAL_MEDIA_DIR" ;;
-    testing) echo "/var/lib/docker/volumes/klz-testing_klz_media_data/_data" ;;
-    staging) echo "/var/lib/docker/volumes/klz-staging_klz_media_data/_data" ;;
-    prod|production) echo "/var/lib/docker/volumes/klz-cablescom_klz_media_data/_data" ;;
+    testing) echo "/var/lib/docker/volumes/etib-testing_etib_media_data/_data" ;;
+    staging) echo "/var/lib/docker/volumes/etib-staging_etib_media_data/_data" ;;
+    prod|production) echo "/var/lib/docker/volumes/e-tibcom_etib_media_data/_data" ;;
     *) echo "❌ Unknown environment: $1"; exit 1 ;;
   esac
 }
 
 get_app_container() {
   case "$1" in
-    testing) echo "klz-testing-klz-app-1" ;;
-    staging) echo "klz-staging-klz-app-1" ;;
-    prod|production) echo "klz-cablescom-klz-app-1" ;;
+    testing) echo "etib-testing-etib-app-1" ;;
+    staging) echo "etib-staging-etib-app-1" ;;
+    prod|production) echo "e-tibcom-etib-app-1" ;;
     *) echo "" ;;
   esac
 }
 
+
 SRC_PATH=$(get_media_path "$SOURCE_ENV")
 TGT_PATH=$(get_media_path "$TARGET_ENV")
 TGT_CONTAINER=$(get_app_container "$TARGET_ENV")

scripts/audit-local.sh

@@ -15,7 +15,8 @@ export NEXT_PUBLIC_CI=true
 export CI=true
 
 docker network create infra 2>/dev/null || true
-docker volume create klz_db_data 2>/dev/null || true
+docker volume create etib_db_data 2>/dev/null || true
+
 
 # 2. Start infra services (DB, CMS, Gatekeeper)
 echo "📦 Starting infrastructure services..."

scripts/check-broken-assets.ts

@@ -7,7 +7,8 @@ const targetUrl =
   process.env.NEXT_PUBLIC_BASE_URL ||
   'http://localhost:3000';
 const limit = process.env.ASSET_CHECK_LIMIT ? parseInt(process.env.ASSET_CHECK_LIMIT) : 20;
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 async function main() {
   console.log(`\n🚀 Starting Strict Asset Integrity Check for: ${targetUrl}`);
@@ -20,9 +21,10 @@ async function main() {
   try {
     console.log(`📥 Fetching sitemap from ${sitemapUrl}...`);
     const response = await axios.get(sitemapUrl, {
-      headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+      headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
     });
 
+
     const $ = cheerio.load(response.data, { xmlMode: true });
     urls = $('url loc')
       .map((i, el) => $(el).text())
@@ -64,7 +66,7 @@ async function main() {
 
   // Inject Gatekeeper session bypassing auth screens
   await page.setCookie({
-    name: 'klz_gatekeeper_session',
+    name: authCookieName,
     value: gatekeeperPassword,
     domain: new URL(targetUrl).hostname,
     path: '/',

scripts/check-forms.ts

@@ -3,7 +3,8 @@ import axios from 'axios';
 import * as cheerio from 'cheerio';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 // Utility for hardcoded delays
 const delay = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -20,7 +21,7 @@ async function main() {
   while (Date.now() - startTime < maxWaitMs) {
     try {
       const resp = await axios.get(targetUrl, {
-        headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+        headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
         timeout: 5000,
         validateStatus: (s) => s === 200,
       });
@@ -50,7 +51,7 @@ async function main() {
   try {
     console.log(`📥 Fetching sitemap from ${sitemapUrl}...`);
     const response = await axios.get(sitemapUrl, {
-      headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+      headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
     });
 
     const $ = cheerio.load(response.data, { xmlMode: true });

scripts/check-html.ts

@@ -5,7 +5,8 @@ import * as path from 'path';
 import { execSync } from 'child_process';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 async function main() {
   console.log(`\n🚀 Starting HTML Validation for: ${targetUrl}`);
@@ -16,10 +17,11 @@ async function main() {
     console.log(`📥 Fetching sitemap from ${sitemapUrl}...`);
 
     const response = await axios.get(sitemapUrl, {
-      headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+      headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
       validateStatus: (status) => status < 400,
     });
 
+
     const $ = cheerio.load(response.data, { xmlMode: true });
     let urls = $('url loc')
       .map((i, el) => $(el).text())
@@ -47,10 +49,11 @@ async function main() {
       const u = urls[i];
       try {
         const res = await axios.get(u, {
-          headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+          headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
           validateStatus: (status) => status < 400,
         });
 
+
         // Generate a safe filename that retains URL information
         const urlStr = new URL(u);
         const safePath = (urlStr.pathname + urlStr.search).replace(/[^a-zA-Z0-9]/g, '_');

scripts/check-http.ts

@@ -2,7 +2,8 @@ import axios from 'axios';
 import * as cheerio from 'cheerio';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 async function main() {
   console.log(`\n🚀 Starting HTTP Sitemap Validation for: ${targetUrl}\n`);
@@ -12,10 +13,11 @@ async function main() {
     console.log(`📥 Fetching sitemap from ${sitemapUrl}...`);
 
     const response = await axios.get(sitemapUrl, {
-      headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+      headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
       validateStatus: (status) => status < 400,
     });
 
+
     const $ = cheerio.load(response.data, { xmlMode: true });
     let urls = $('url loc')
       .map((i, el) => $(el).text())
@@ -42,10 +44,11 @@ async function main() {
       const u = urls[i];
       try {
         const res = await axios.get(u, {
-          headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+          headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
           validateStatus: null, // Don't throw on error status
         });
 
+
         if (res.status >= 400) {
           console.error(`❌ ERROR ${res.status}: ${res.statusText} -> ${u}`);
           hasErrors = true;

scripts/check-locale.ts

@@ -12,7 +12,8 @@ import * as cheerio from 'cheerio';
  */
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 // Expected slug translations: German key → English value
 const SLUG_MAP: Record<string, string> = {
@@ -32,7 +33,8 @@ const REVERSE_SLUG_MAP: Record<string, string> = Object.fromEntries(
   Object.entries(SLUG_MAP).map(([de, en]) => [en, de]),
 );
 
-const headers = { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` };
+const headers = { Cookie: `${authCookieName}=${gatekeeperPassword}` };
+
 
 function getExpectedTranslation(
   sourcePath: string,

scripts/check-security.ts

@@ -1,7 +1,8 @@
 import axios from 'axios';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 const requiredHeaders = [
   'strict-transport-security',
@@ -15,10 +16,11 @@ async function main() {
   console.log(`\n🛡️ Starting Security Headers Scan for: ${targetUrl}\n`);
   try {
     const response = await axios.head(targetUrl, {
-      headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
+      headers: { Cookie: `${authCookieName}=${gatekeeperPassword}` },
       validateStatus: () => true,
     });
 
+
     const headers = response.headers;
     let allPassed = true;
 

scripts/lhci-puppeteer-setup.cjs

@@ -7,9 +7,10 @@ module.exports = async (browser, context) => {
   // Using LHCI_URL or TARGET_URL if available
   const targetUrl =
     process.env.LHCI_URL || process.env.TARGET_URL || 'https://testing.e-tib.com';
-  const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+  const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
   const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
+
   console.log(`🔑 LHCI Auth: Setting gatekeeper cookie (${authCookieName}) for ${new URL(targetUrl).hostname}...`);
 
   await page.setCookie({

scripts/pagespeed-sitemap.ts

@@ -18,9 +18,10 @@ const targetUrl =
   process.env.LHCI_URL ||
   'http://localhost:3000';
 const limit = process.env.PAGESPEED_LIMIT ? parseInt(process.env.PAGESPEED_LIMIT) : 20; // Default limit to avoid infinite runs
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
 const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
+
 async function main() {
   console.log(`\n🚀 Starting PageSpeed test for: ${targetUrl}`);
   console.log(`📊 Limit: ${limit} pages\n`);

scripts/smoke.ts

@@ -1,7 +1,8 @@
 import puppeteer from 'puppeteer';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+
 
 async function run() {
   console.log(`🚀 Smoke Test: ${targetUrl}`);

scripts/wcag-sitemap.ts

@@ -14,7 +14,8 @@ import * as path from 'path';
 
 const targetUrl = process.argv[2] || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
 const limit = process.env.PAGESPEED_LIMIT ? parseInt(process.env.PAGESPEED_LIMIT) : 20;
-const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const gatekeeperPassword = process.env.GATEKEEPER_PASSWORD || 'etib2026';
+const authCookieName = process.env.AUTH_COOKIE_NAME || 'etib_gatekeeper_session';
 
 async function main() {
   console.log(`\n🚀 Starting WCAG Audit for: ${targetUrl}`);
@@ -27,11 +28,12 @@ async function main() {
 
     const response = await axios.get(sitemapUrl, {
       headers: {
-        Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
+        Cookie: `${authCookieName}=${gatekeeperPassword}`,
       },
       validateStatus: (status) => status < 400,
     });
 
+
     const $ = cheerio.load(response.data, { xmlMode: true });
     let urls = $('url loc')
       .map((i, el) => $(el).text())
@@ -92,8 +94,9 @@ async function main() {
           ],
         },
         headers: {
-          Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
+          Cookie: `${authCookieName}=${gatekeeperPassword}`,
         },
+
         timeout: 60000, // Increase timeout for slower pages
       },
       urls: urls,

tests/docker-config.test.ts

@@ -0,0 +1,15 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'node:fs';
+import path from 'node:path';
+
+describe('Docker Configuration Project Name Integrity', () => {
+  it('ensures docker-compose.yml has no legacy klz project fallbacks', () => {
+    const composeContent = fs.readFileSync(path.resolve(process.cwd(), 'docker-compose.yml'), 'utf-8');
+    expect(composeContent).not.toContain('klz');
+  });
+
+  it('ensures docker-compose.dev.yml has no legacy klz project fallbacks', () => {
+    const devComposeContent = fs.readFileSync(path.resolve(process.cwd(), 'docker-compose.dev.yml'), 'utf-8');
+    expect(devComposeContent).not.toContain('klz');
+  });
+});

tests/proxy-config.test.ts

@@ -0,0 +1,21 @@
+import { describe, it, expect } from 'vitest';
+import { config } from '../proxy';
+
+describe('Proxy Middleware Config Matcher', () => {
+  const matcherRegex = new RegExp(`^${config.matcher[0]}`);
+
+
+  it('matches localized page routes for next-intl processing', () => {
+    expect(matcherRegex.test('/de')).toBe(true);
+    expect(matcherRegex.test('/en/contact')).toBe(true);
+    expect(matcherRegex.test('/karriere')).toBe(true);
+  });
+
+  it('excludes static assets with any file extension including uppercase .JPG and subdirectories', () => {
+    // These should NOT match the middleware (expect test to be false so middleware is bypassed)
+    expect(matcherRegex.test('/assets/photos/DJI_0048.JPG')).toBe(false);
+    expect(matcherRegex.test('/assets/videos/web/hero-kabelpflug-poster.jpg')).toBe(false);
+    expect(matcherRegex.test('/assets/logo-white.png')).toBe(false);
+    expect(matcherRegex.test('/_next/image')).toBe(false);
+  });
+});