Enhance safe area support for iOS devices: update CSS for navbar and body to respect safe area insets and improve layout on mobile screens

.docker-build.env

@@ -1,4 +1,4 @@
 NUITKA_BUILD=0
 INVENTAR_HTTP_PORT=80
 INVENTAR_HTTPS_PORT=443
-INVENTAR_APP_IMAGE=ghcr.io/aiirondev/inventarsystem:latest
+INVENTAR_APP_IMAGE=ghcr.io/aiirondev/legendary-octo-garbanzo:latest

Web/flask.log

@@ -1 +0,0 @@
-[2026-04-19 20:20:39,502] ERROR in app: Error during scheduler shutdown: name '__file__' is not defined

Web/requirements.txt

@@ -15,3 +15,4 @@ python-barcode
 openpyxl
 cryptography
 pywebpush
+py-vapid==1.9.0

Web/static/css/styles.css

@@ -34,6 +34,25 @@
     --ui-shadow-md: 0 10px 24px rgba(0, 0, 0, 0.5);
 }
 
+/* Safe Area Support for iPad notches, Dynamic Island, and rounded corners */
+html {
+    /* Ensure viewport-fit is respected */
+    viewport-fit: cover;
+}
+
+body {
+    /* Respect safe areas on mobile devices */
+    position: relative;
+}
+
+/* Future-proof: Support for various viewport and safe-area features */
+@supports (padding: max(0px)) {
+    body {
+        /* Ensure body padding never conflicts with safe areas */
+        padding: 0;
+    }
+}
+
 /* Make inputs visible in dark mode */
 :root[data-theme="dark"] input, 
 :root[data-theme="dark"] select, 
@@ -172,11 +191,16 @@ select:focus {
     box-shadow: none;
     -webkit-backdrop-filter: blur(10px);
     backdrop-filter: blur(10px);
+    /* Safe area insets for iPad notches and Dynamic Island */
+    padding-left: env(safe-area-inset-left, 0);
+    padding-right: env(safe-area-inset-right, 0);
 }
 
 .navbar-brand {
     font-weight: 800;
     letter-spacing: 0.02em;
+    /* Prevent navbar brand from extending into unsafe areas */
+    word-break: break-word;
 }
 
 @media (max-width: 900px) {
@@ -190,6 +214,41 @@ select:focus {
     }
 }
 
+/* Mobile and tablet safe area handling for navbar */
+@media (max-width: 992px) {
+    .navbar {
+        /* Ensure navbar spans full width but respects safe areas */
+        width: 100vw;
+        margin-left: calc(-50vw + 50%);
+        /* Safe area padding is already handled by navbar class */
+    }
+    
+    .navbar .container-fluid {
+        width: 100%;
+        box-sizing: border-box;
+        /* Ensure padding accounts for safe areas on small screens */
+        padding-left: max(env(safe-area-inset-left, 0), 12px);
+        padding-right: max(env(safe-area-inset-right, 0), 12px);
+    }
+    
+    .navbar-collapse {
+        /* Ensure collapsed navbar respects safe areas */
+        padding-left: env(safe-area-inset-left, 0);
+        padding-right: env(safe-area-inset-right, 0);
+    }
+}
+
+/* iPad-specific landscape and portrait handling */
+@media (max-height: 600px) and (orientation: landscape) {
+    .navbar {
+        padding-top: max(env(safe-area-inset-top, 0), 4px);
+    }
+    
+    .navbar .container-fluid {
+        padding-bottom: 4px;
+    }
+}
+
 /* Edit and generate buttons with theme-aware text for better visibility */
 .edit-button, .duplicate-button, .generate-qr-button {
     color: var(--ui-text) !important; /* Override any existing color */

Web/templates/base.html

@@ -169,13 +169,19 @@
             background-color: var(--module-primary-color) !important;
             position: sticky;
             top: 0;
-            padding-top: env(safe-area-inset-top, 0); /* iOS Safe Area */
+            /* iOS Safe Area insets for notches and rounded corners */
+            padding-top: env(safe-area-inset-top, 0);
+            padding-left: env(safe-area-inset-left, 0);
+            padding-right: env(safe-area-inset-right, 0);
             z-index: 1900;
         }
 
         .navbar .container-fluid {
             gap: 10px;
-            padding-bottom: env(safe-area-inset-bottom, 0); /* Fallback */
+            /* Ensure container respects safe areas on all sides */
+            padding-left: max(env(safe-area-inset-left, 0), 16px);
+            padding-right: max(env(safe-area-inset-right, 0), 16px);
+            padding-bottom: env(safe-area-inset-bottom, 0);
         }
         
         .navbar-brand {

docker-compose-multitenant.yml

@@ -8,9 +8,19 @@
 # Scale example: To support 10 tenants with 20 users each:
 #   docker-compose -f docker-compose-multitenant.yml up -d --scale app=10
 
-version: '3.9'
-
 services:
+  # Management Container for multi-tenant scripts
+  tenant-manager:
+    image: docker:cli
+    container_name: tenant-manager
+    restart: "no"
+    profiles:
+      - tools
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - .:/workspace
+    entrypoint: ["sh", "-c", "cd /workspace && ./manage-tenant.sh \"$$@\"", "--"]
+
   nginx:
     image: nginx:1.27-alpine
     container_name: inventarsystem-nginx
@@ -59,9 +69,9 @@ services:
     image: mongo:7.0
     container_name: inventarsystem-mongodb
     restart: unless-stopped
-    command: mongod --wiredTigerCacheSizeGB 2 --journal --dbPath /data/db
-    ports:
-      - "27017:27017"
+    command: mongod --wiredTigerCacheSizeGB 2
+    expose:
+      - "27017"
     volumes:
       - mongodb_data:/data/db
       - ./docker/mongo:/docker-entrypoint-initdb.d:ro
@@ -181,9 +191,6 @@ volumes:
 networks:
   inventar-net:
     driver: bridge
-    ipam:
-      config:
-        - subnet: 172.20.0.0/16
 
 # Scale guidance:
 # 1 tenant (20 users): 1 app instance + redis + mongodb = ~500MB
@@ -197,14 +204,3 @@ networks:
 # - Large (10-20 tenants): 8GB RAM, 4-8 CPU cores
 # - Jumbo (20+ tenants): 16GB+ RAM, 8+ CPU cores with clustering
 
-  # Management Container for multi-tenant scripts
-  tenant-manager:
-    image: bash
-    container_name: tenant-manager
-    restart: "no"
-    profiles:
-      - tools
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-      - .:/workspace
-    entrypoint: ["bash", "-c", "cd /workspace && ./manage-tenant.sh \"$$@\"", "--"]

docker/nginx/multitenant.conf

@@ -37,7 +37,8 @@ upstream inventar_backend {
 
 # Main HTTPS server block
 server {
-    listen 443 ssl http2;
+    listen 443 ssl;
+    http2 on;
     server_name ~^(?<tenant>[a-z0-9-]+)?\.?example\.com$;
 
     # SSL Configuration (wildcard certificate)
@@ -75,9 +76,9 @@ server {
                application/x-javascript application/xml+rss application/json;
     gzip_comp_level 5;
 
-    # Access/Error logs with tenant in filename
-    access_log /var/log/nginx/inventar_access_${tenant}.log combined buffer=32k;
-    error_log /var/log/nginx/inventar_error_${tenant}.log warn;
+    # Access/Error logs
+    access_log /var/log/nginx/inventar_access.log combined buffer=32k;
+    error_log /var/log/nginx/inventar_error.log warn;
 
     # Root location - proxy to app with tenant context
     location / {

manage-tenant.sh

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/bin/sh
 # Script to manage multitenant deployment
 # Allows adding, removing, and restarting tenants without downtime for others
 
@@ -48,11 +48,12 @@ case "$COMMAND" in
         APP_CONTAINER=$(docker ps -qf "name=app" | head -n 1)
         if [ -n "$APP_CONTAINER" ]; then
             docker exec $APP_CONTAINER python3 -c "
-import sys; sys.path.insert(0, '/app/Web'); import settings; from pymongo import MongoClient
+import sys; sys.path.insert(0, '/app/Web'); import settings; from pymongo import MongoClient; import hashlib
 client = MongoClient(settings.MONGODB_HOST, int(settings.MONGODB_PORT))
 db = client[f'{settings.MONGODB_DB}_{sys.argv[1]}']
-db.users.insert_one({'username': 'admin', 'password': 'hashed_password_here', 'role': 'admin'})
-print(f'Tenant {sys.argv[1]} database initialized.')
+hashed_pw = hashlib.sha512('admin123'.encode()).hexdigest()
+db.users.insert_one({'Username': 'admin', 'Password': hashed_pw, 'Role': 'admin', 'Name': 'Admin', 'Nachname': 'User'})
+print(f'Tenant {sys.argv[1]} database initialized. Default admin: admin / admin123')
 " "$TENANT_ID"
             echo "Tenant '$TENANT_ID' successfully added. Ready to use."
         else

requirements.txt

@@ -14,3 +14,4 @@ python-barcode
 openpyxl
 cryptography
 pywebpush
+py-vapid==1.9.0

restart.sh

@@ -3,5 +3,6 @@ set -euo pipefail
 
 SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
 
-"$SCRIPT_DIR/stop.sh"
+"$SCRIPT_DIR/stop.sh" "$@"
+"$SCRIPT_DIR/start.sh" "$@"
 "$SCRIPT_DIR/start.sh"

run-tenant-cmd.sh

@@ -1,3 +1,3 @@
 #!/bin/bash
 # Wrapper to run tenant management fully containerized via docker-compose
-docker-compose -f docker-compose-multitenant.yml --profile tools run --rm tenant-manager "$@"
+docker compose -f docker-compose-multitenant.yml --profile tools run --rm tenant-manager "$@"

start.sh

@@ -14,10 +14,11 @@ if [ "$(id -u)" -ne 0 ] && command -v sudo >/dev/null 2>&1; then
 fi
 
 NUITKA_BUILD_VALUE="0"
-HTTP_PORT_VALUE="80"
-HTTPS_PORT_VALUE="443"
+HTTP_PORT_VALUE="8001"
+HTTPS_PORT_VALUE="8443"
 CRON_SETUP_VALUE="${INVENTAR_SETUP_CRON:-1}"
 APP_IMAGE_VALUE="${INVENTAR_APP_IMAGE:-$APP_IMAGE_REPO:latest}"
+COMPOSE_FILE="docker-compose.yml"
 
 usage() {
     cat <<EOF
@@ -26,6 +27,7 @@ Usage: $0 [options]
 Options:
   --no-cron         Do not create or update cron jobs
   --with-cron       Create/update cron jobs (default)
+  --multitenant     Use the multi-tenant architecture deployment
   -h, --help        Show this help message
 EOF
 }
@@ -41,6 +43,10 @@ parse_args() {
                 CRON_SETUP_VALUE="1"
                 shift
                 ;;
+            --multitenant)
+                COMPOSE_FILE="docker-compose-multitenant.yml"
+                shift
+                ;;
             -h|--help)
                 usage
                 exit 0
@@ -450,7 +456,7 @@ stack_owns_host_port() {
     local container_port="$2"
     local mapped_port
 
-    mapped_port="$(docker compose --env-file "$ENV_FILE" port nginx "$container_port" 2>/dev/null | tail -n1 || true)"
+    mapped_port="$(docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" port nginx "$container_port" 2>/dev/null | tail -n1 || true)"
     if [ -z "$mapped_port" ]; then
         return 1
     fi
@@ -493,20 +499,20 @@ configure_host_ports() {
         requested_http="$(awk -F= '/^INVENTAR_HTTP_PORT=/{print $2}' "$ENV_FILE" | tr -d ' ' || true)"
     fi
     if [ -z "$requested_http" ]; then
-        requested_http="80"
+        requested_http="8001"
     fi
 
     if stack_owns_host_port "$requested_http" "80"; then
         HTTP_PORT_VALUE="$requested_http"
     elif port_in_use "$requested_http"; then
-        stop_host_nginx_services || true
+        
 
         if ! port_in_use "$requested_http"; then
             HTTP_PORT_VALUE="$requested_http"
             echo "Freed HTTP port $requested_http by stopping host nginx service"
         else
             HTTP_PORT_VALUE="$(find_free_port 8080)"
-            echo "HTTP port 80 is in use. Using fallback HTTP port: $HTTP_PORT_VALUE"
+            echo "HTTP port is in use. Using fallback HTTP port: $HTTP_PORT_VALUE"
         fi
     else
         HTTP_PORT_VALUE="$requested_http"
@@ -518,13 +524,13 @@ configure_host_ports() {
     fi
 
     if [ -z "$requested_https" ]; then
-        requested_https="443"
+        requested_https="8443"
     fi
 
     if stack_owns_host_port "$requested_https" "443"; then
         HTTPS_PORT_VALUE="$requested_https"
     elif port_in_use "$requested_https"; then
-        stop_host_nginx_services || true
+        
 
         if ! port_in_use "$requested_https"; then
             HTTPS_PORT_VALUE="$requested_https"
@@ -533,7 +539,7 @@ configure_host_ports() {
         fi
 
         HTTPS_PORT_VALUE="$(find_free_port 8443)"
-        echo "HTTPS port 443 is in use. Using fallback HTTPS port: $HTTPS_PORT_VALUE"
+        echo "HTTPS port is in use. Using fallback HTTPS port: $HTTPS_PORT_VALUE"
     else
         HTTPS_PORT_VALUE="$requested_https"
     fi
@@ -550,7 +556,7 @@ EOF
 
 verify_stack_health() {
     local compose_args running_services retry_count=0
-    compose_args=(--env-file "$ENV_FILE")
+    compose_args=(-f "$COMPOSE_FILE" --env-file "$ENV_FILE")
 
     # Try health check with optional restart on first failure
     while [[ $retry_count -lt 2 ]]; do
@@ -605,7 +611,7 @@ ensure_app_image_loaded
 write_env_file
 
 echo "Starting Inventarsystem Docker stack (app + mongodb)..."
-docker compose --env-file "$ENV_FILE" up -d --remove-orphans
+docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d --remove-orphans
 
 verify_stack_health
 

stop.sh

@@ -4,12 +4,26 @@ set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 cd "$SCRIPT_DIR"
 
+COMPOSE_FILE="docker-compose.yml"
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --multitenant)
+            COMPOSE_FILE="docker-compose-multitenant.yml"
+            shift
+            ;;
+        *)
+            shift
+            ;;
+    esac
+done
+
 if ! command -v docker >/dev/null 2>&1; then
     echo "Error: docker command not found. Install Docker first."
     exit 1
 fi
 
 echo "Stopping Inventarsystem Docker stack..."
-docker compose down
+docker compose -f "$COMPOSE_FILE" down
 
 echo "Stack stopped."