deploy##++++$#~++++1234567

nginx.conf

@@ -39,8 +39,19 @@ http {
             proxy_read_timeout    1200;
         }
 
+        location /code {
+            proxy_pass http://frei_backend:8080/;
+            proxy_redirect     off;
+            proxy_set_header   Host             $host:$server_port;
+            proxy_set_header   X-Real-IP        $remote_addr;
+            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
+            proxy_connect_timeout 1200;
+            proxy_send_timeout    1200;
+            proxy_read_timeout    1200;
+        }
+
         location /content {
-            proxy_pass http://frei_backend:8080/code/content;
+            proxy_pass http://frei_backend:8080/code/;
             proxy_redirect     off;
             proxy_set_header   Host             $host:$server_port;
             proxy_set_header   X-Real-IP        $remote_addr;
@@ -51,7 +62,7 @@ http {
         }
 
         location /assets {
-            proxy_pass http://frei_backend:8080/code/assets;
+            proxy_pass http://frei_backend:8080/code/;
             proxy_redirect     off;
             proxy_set_header   Host             $host:$server_port;
             proxy_set_header   X-Real-IP        $remote_addr;

src/main/kotlin/inn/ocsf/bee/freigeld/serve/Security.kt

@@ -81,7 +81,7 @@ class Security : WebSecurityConfigurerAdapter() {
                 .csrf()
                 .disable()
                 .authorizeRequests()
-                .antMatchers("/**").permitAll()
+                .antMatchers("/code/**").permitAll()
                 .antMatchers("/api/new/person/**").permitAll()
                 .antMatchers("/ws/**").permitAll()
                 .anyRequest().authenticated()