From d68859cc9a6764f7a5c59e7fa3590ad3f7e2daad Mon Sep 17 00:00:00 2001
From: kert <kert@rack.localdomain>
Date: Thu, 12 Nov 2026 20:31:13 -0500
Subject: [PATCH] fix(infra): dashboard opts out of the inject-fhirworx overlay
 the standard way (theme false), head tag restored

---
 infra/nginx/index.html             | 10 ++++------
 infra/traefik/dynamic/services.yml |  2 +-
 2 files changed, 5 insertions(+), 7 deletions(-)

diff --git a/infra/nginx/index.html b/infra/nginx/index.html
index e6a83b6..f99eede 100644
--- a/infra/nginx/index.html
+++ b/infra/nginx/index.html
@@ -11,12 +11,10 @@
          carries a version: the first 8 hex of the stylesheet's md5. Change it
          with every edit to dashboard.css so the page and its CSS arrive together. -->
     <link rel="stylesheet" href="/dashboard.css?v=c6219441">
-    <!-- The head end tag is left out on purpose (HTML allows it). Traefik's
-         inject-fhirworx middleware rewrites that tag on this host to append
-         /fhirworx.css, the overlay for third-party UIs, and its generic rules
-         (h1, h2, [class*=header], [class*=tag], a) override dashboard.css:
-         a small h1, a navy section bar that hides its heading, a mono box
-         around the tagline. Without the tag the rewrite has nothing to match. -->
+    <!-- dashboard is "theme" false in infra/traefik/dynamic/services.yml:
+         the inject-fhirworx overlay (fhirworx.css for third-party UIs) is not
+         applied here, so dashboard.css alone styles this page. -->
+</head>
 <body>
     <!-- Tile glyphs: Tabler Icons 3.41.0 outline (MIT), the set the marimo
          theme overlay already uses; database-search and link come from the
diff --git a/infra/traefik/dynamic/services.yml b/infra/traefik/dynamic/services.yml
index 7209311..2307200 100644
--- a/infra/traefik/dynamic/services.yml
+++ b/infra/traefik/dynamic/services.yml
@@ -1,6 +1,6 @@
 {{- $domain := env "DOMAIN" | default "fhirworx.io" -}}
 {{- $reef := dict
-  "dashboard"          (dict "port" "80"    "theme" true  "extra_hosts" (list $domain) "mw" "secure-headers")
+  "dashboard"          (dict "port" "80"    "theme" false "extra_hosts" (list $domain) "mw" "secure-headers")
   "docs"               (dict "port" "80"    "theme" false "mw" "git-sso,secure-headers")
   "git"                (dict "port" "3000"  "theme" false "mw" "secure-headers")
   "notebooks"          (dict "port" "2718"  "theme" false "mw" "git-sso,secure-headers")