nibula 1.6.0 → 1.6.1

package/src/backend/example.config.php

@@ -1,38 +1,38 @@
-<?php
-declare(strict_types=1);
-
-/**
- * Mirror of src/backend/example.config.js
- *
- * Versioned, secret-free template. On setup, copy this file to config.php and
- * fill in real values. config.php is git-ignored and stays local.
- */
-
-return [
-    // Default key for protected endpoints that don't have a specific key in CUSTOM_ENDPOINT_KEYS
-    'GENERAL_API_KEY' => 'DEFAULT_KEY',
-
-    // If you want to restrict access to protected endpoints to specific clients, define custom keys per endpoint.
-    // For subfolder endpoints, use the relative path ('subfolder/endpoint')
-    'CUSTOM_ENDPOINT_KEYS' => [
-        'subfolder/example-protected' => 'custom-key',
-    ],
-
-    'GENERAL_ALLOWED_ORIGINS' => [
-        '*',
-        // 'https://example.com',
-    ],
-
-    'CUSTOM_ENDPOINT_ORIGINS' => [
-        'subfolder/example-protected' => ['https://app.example.com'],
-    ],
-
-    // Database configuration
-    'DB_HOST' => '127.0.0.1',
-    'DB_NAME' => 'example_db',
-    'DB_USER' => 'root',
-    'DB_PASS' => '',
-
-    // Environment: 'production' hides error details; anything else = debug.
-    'APP_ENV' => 'production',
+<?php
+declare(strict_types=1);
+
+/**
+ * Mirror of src/backend/example.config.js
+ *
+ * Versioned, secret-free template. On setup, copy this file to config.php and
+ * fill in real values. config.php is git-ignored and stays local.
+ */
+
+return [
+    // Default key for protected endpoints that don't have a specific key in CUSTOM_ENDPOINT_KEYS
+    'GENERAL_API_KEY' => 'DEFAULT_KEY',
+
+    // If you want to restrict access to protected endpoints to specific clients, define custom keys per endpoint.
+    // For subfolder endpoints, use the relative path ('subfolder/endpoint')
+    'CUSTOM_ENDPOINT_KEYS' => [
+        'subfolder/example-protected' => 'custom-key',
+    ],
+
+    'GENERAL_ALLOWED_ORIGINS' => [
+        '*',
+        // 'https://example.com',
+    ],
+
+    'CUSTOM_ENDPOINT_ORIGINS' => [
+        'subfolder/example-protected' => ['https://app.example.com'],
+    ],
+
+    // Database configuration
+    'DB_HOST' => '127.0.0.1',
+    'DB_NAME' => 'example_db',
+    'DB_USER' => 'root',
+    'DB_PASS' => '',
+
+    // Environment: 'production' hides error details; anything else = debug.
+    'APP_ENV' => 'production',
 ];

package/src/backend/package.json

@@ -1,17 +1,17 @@
-{
-  "name": "backend-node",
-  "version": "1.0.0",
-  "private": true,
-  "description": "Node.js backend for a Nibula site. Coexists with the PHP backend; pick one at scaffold time. Front controller: _core/index.js.",
-  "main": "_core/index.js",
-  "type": "commonjs",
-  "scripts": {
-    "start": "node _core/index.js"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "dependencies": {
-    "mysql2": "^3.11.0"
-  }
-}
+{
+  "name": "backend-node",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Node.js backend for a Nibula site. Coexists with the PHP backend; pick one at scaffold time. Front controller: _core/index.js.",
+  "main": "_core/index.js",
+  "type": "commonjs",
+  "scripts": {
+    "start": "node _core/index.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "mysql2": "^3.11.0"
+  }
+}

package/src/backend/web.config

@@ -1,44 +1,44 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-  IIS config for the Nibula backend folder.
-
-  The front controller is the only reachable file: every other path is rewritten
-  onto it and answered as an API request, so endpoint sources, config.php,
-  migrations and vendor files are never served.
-
-  httpErrors is set to PassThrough here, unlike the site root. Everything under
-  this folder is the API, and the front controller already answers errors with
-  its own JSON envelope (401 for a missing X-Api-Key, 404 for an unknown
-  endpoint, 500 for an unhandled exception). Without PassThrough, IIS replaces
-  those bodies with its own HTML and every API error reaches the client in the
-  wrong format.
--->
-<configuration>
-    <system.webServer>
-        <rewrite>
-            <rules>
-
-                <rule name="PassThroughCoreIndex" stopProcessing="true">
-                    <match url="^_core/index\.php$" ignoreCase="true" />
-                    <action type="None" />
-                </rule>
-
-                <rule name="RewriteToFrontController" stopProcessing="true">
-                    <match url="^(.*)$" ignoreCase="true" />
-                    <action type="Rewrite" url="_core/index.php" appendQueryString="true" />
-                </rule>
-
-            </rules>
-        </rewrite>
-
-        <directoryBrowse enabled="false" />
-
-        <httpErrors errorMode="Custom" existingResponse="PassThrough" />
-
-        <httpProtocol>
-            <customHeaders>
-                <remove name="WWW-Authenticate" />
-            </customHeaders>
-        </httpProtocol>
-    </system.webServer>
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  IIS config for the Nibula backend folder.
+
+  The front controller is the only reachable file: every other path is rewritten
+  onto it and answered as an API request, so endpoint sources, config.php,
+  migrations and vendor files are never served.
+
+  httpErrors is set to PassThrough here, unlike the site root. Everything under
+  this folder is the API, and the front controller already answers errors with
+  its own JSON envelope (401 for a missing X-Api-Key, 404 for an unknown
+  endpoint, 500 for an unhandled exception). Without PassThrough, IIS replaces
+  those bodies with its own HTML and every API error reaches the client in the
+  wrong format.
+-->
+<configuration>
+    <system.webServer>
+        <rewrite>
+            <rules>
+
+                <rule name="PassThroughCoreIndex" stopProcessing="true">
+                    <match url="^_core/index\.php$" ignoreCase="true" />
+                    <action type="None" />
+                </rule>
+
+                <rule name="RewriteToFrontController" stopProcessing="true">
+                    <match url="^(.*)$" ignoreCase="true" />
+                    <action type="Rewrite" url="_core/index.php" appendQueryString="true" />
+                </rule>
+
+            </rules>
+        </rewrite>
+
+        <directoryBrowse enabled="false" />
+
+        <httpErrors errorMode="Custom" existingResponse="PassThrough" />
+
+        <httpProtocol>
+            <customHeaders>
+                <remove name="WWW-Authenticate" />
+            </customHeaders>
+        </httpProtocol>
+    </system.webServer>
 </configuration>

package/src/frontend/.htaccess

@@ -1,51 +1,51 @@
-Options -Indexes
-ErrorDocument 404 /404.html
-ErrorDocument 403 /404.html
-
-<IfModule mod_rewrite.c>
-    RewriteEngine On
-    RewriteBase /
-
-    # Block sensitive files (web.config, dotfiles)
-    RewriteRule ^(web\.config|\..*)$ /404.html [L,NC]
-</IfModule>
-
-# === /api routing — covers BOTH backends ====================================
-#
-# Apache (unlike nginx) cannot health-check an upstream, so it cannot auto-fall
-# back from Node to PHP. The behaviour is:
-#
-#   - mod_proxy available  -> /api is proxied to the Node backend (127.0.0.1:3000)
-#   - mod_proxy NOT present -> /api is rewritten to the PHP front controller
-#
-# Typical shared hosting (Aruba, cPanel) has no mod_proxy, so it uses PHP
-# automatically. On a VPS running Node, mod_proxy sends /api to Node.
-#
-# If you are on a server that HAS mod_proxy but you want to use PHP, comment out
-# the mod_proxy block below.
-
-# --- Node backend (if mod_proxy is available) ---
-<IfModule mod_proxy.c>
-    ProxyPreserveHost On
-    ProxyPass        /api/ http://127.0.0.1:3000/api/ retry=0
-    ProxyPassReverse /api/ http://127.0.0.1:3000/api/
-
-    <IfModule mod_headers.c>
-        RequestHeader set X-Forwarded-For "%{REMOTE_ADDR}s"
-        RequestHeader set X-Forwarded-Proto "https"
-    </IfModule>
-</IfModule>
-
-# --- PHP backend (fallback when mod_proxy is absent) ---
-<IfModule mod_rewrite.c>
-    RewriteEngine On
-    RewriteBase /
-    RewriteRule ^api/(.*)$ backend/_core/index.php [QSA,L]
-</IfModule>
-
-# === Static files ===========================================================
-<IfModule mod_rewrite.c>
-    RewriteCond %{REQUEST_FILENAME} -f [OR]
-    RewriteCond %{REQUEST_FILENAME} -d
-    RewriteRule ^ - [L]
-</IfModule>
+Options -Indexes
+ErrorDocument 404 /404.html
+ErrorDocument 403 /404.html
+
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    RewriteBase /
+
+    # Block sensitive files (web.config, dotfiles)
+    RewriteRule ^(web\.config|\..*)$ /404.html [L,NC]
+</IfModule>
+
+# === /api routing — covers BOTH backends ====================================
+#
+# Apache (unlike nginx) cannot health-check an upstream, so it cannot auto-fall
+# back from Node to PHP. The behaviour is:
+#
+#   - mod_proxy available  -> /api is proxied to the Node backend (127.0.0.1:3000)
+#   - mod_proxy NOT present -> /api is rewritten to the PHP front controller
+#
+# Typical shared hosting (Aruba, cPanel) has no mod_proxy, so it uses PHP
+# automatically. On a VPS running Node, mod_proxy sends /api to Node.
+#
+# If you are on a server that HAS mod_proxy but you want to use PHP, comment out
+# the mod_proxy block below.
+
+# --- Node backend (if mod_proxy is available) ---
+<IfModule mod_proxy.c>
+    ProxyPreserveHost On
+    ProxyPass        /api/ http://127.0.0.1:3000/api/ retry=0
+    ProxyPassReverse /api/ http://127.0.0.1:3000/api/
+
+    <IfModule mod_headers.c>
+        RequestHeader set X-Forwarded-For "%{REMOTE_ADDR}s"
+        RequestHeader set X-Forwarded-Proto "https"
+    </IfModule>
+</IfModule>
+
+# --- PHP backend (fallback when mod_proxy is absent) ---
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    RewriteBase /
+    RewriteRule ^api/(.*)$ backend/_core/index.php [QSA,L]
+</IfModule>
+
+# === Static files ===========================================================
+<IfModule mod_rewrite.c>
+    RewriteCond %{REQUEST_FILENAME} -f [OR]
+    RewriteCond %{REQUEST_FILENAME} -d
+    RewriteRule ^ - [L]
+</IfModule>

package/src/frontend/404.njk

@@ -1,17 +1,17 @@
----
-title: "404"
-permalink: 404.html
-layout: base.njk
----
-
-<!-- !IMPORTANT -->
-<!-- This is the only page that you need to modify statically -->
-
-<div class="fade-in not-found">
-  <h1>Oops! Page not found</h1>
-  <a href="/">Return to homepage</a>
-</div>
-
-
-{# You can also add the includes you need here below
-{% include "component.njk" %} #}
+---
+title: "404"
+permalink: 404.html
+layout: base.njk
+---
+
+<!-- !IMPORTANT -->
+<!-- This is the only page that you need to modify statically -->
+
+<div class="fade-in not-found">
+  <h1>Oops! Page not found</h1>
+  <a href="/">Return to homepage</a>
+</div>
+
+
+{# You can also add the includes you need here below
+{% include "component.njk" %} #}

package/src/frontend/assets/brand/favicon.svg

@@ -1,54 +1,54 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Nibula">
-  <defs>
-    <linearGradient id="nibulaShieldBorder" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#8b6fc4"/>
-      <stop offset="0.5" stop-color="#c9a06a"/>
-      <stop offset="1" stop-color="#f2c17a"/>
-    </linearGradient>
-    <linearGradient id="nibulaN" x1="0" y1="1" x2="1" y2="0">
-      <stop offset="0" stop-color="#6d4fa8"/>
-      <stop offset="0.45" stop-color="#a978b0"/>
-      <stop offset="0.75" stop-color="#e7a55f"/>
-      <stop offset="1" stop-color="#f7d08a"/>
-    </linearGradient>
-    <linearGradient id="nibulaNib" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#f7d89a"/>
-      <stop offset="0.55" stop-color="#e0a95f"/>
-      <stop offset="1" stop-color="#b07d3e"/>
-    </linearGradient>
-    <linearGradient id="nibulaField" x1="0" y1="0" x2="0.6" y2="1">
-      <stop offset="0" stop-color="#3a2c63"/>
-      <stop offset="1" stop-color="#2a2150"/>
-    </linearGradient>
-  </defs>
-
-  <path fill="none" stroke="url(#nibulaShieldBorder)" stroke-width="10" stroke-linejoin="round"
-        d="M256 40 L440 132 L440 320 L256 472 L72 320 L72 132 Z"/>
-  <path fill="url(#nibulaField)" stroke="url(#nibulaShieldBorder)" stroke-width="6" stroke-linejoin="round"
-        d="M256 66 L418 147 L418 310 L256 442 L94 310 L94 147 Z"/>
-
-  <!-- N as one closed outline: up left post, down inner-left, diagonal to inner-bottom-right,
-       up right post, cut corner, down outer-right, close along the bottom -->
-  <path fill="url(#nibulaN)" stroke="#1a1533" stroke-width="7" stroke-linejoin="round"
-        d="M148 362
-           L148 150
-           L206 150
-           L312 300
-           L312 150
-           L370 150
-           L370 205
-           L340 205
-           L340 362
-           L282 362
-           L206 255
-           L206 362
-           Z"/>
-
-  <g stroke="#1a1533" stroke-width="7" stroke-linejoin="round" stroke-linecap="round">
-    <path fill="url(#nibulaNib)" d="M326 300 L382 300 L392 326 L336 326 Z"/>
-    <path fill="none" stroke-width="5" d="M338 313 L386 313"/>
-    <path fill="url(#nibulaNib)" d="M336 326 L392 326 L428 414 L370 380 Z"/>
-    <path fill="none" stroke-width="5" d="M366 342 L402 384"/>
-    <circle cx="376" cy="360" r="6.5" fill="#1a1533" stroke="none"/>
-  </g>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Nibula">
+  <defs>
+    <linearGradient id="nibulaShieldBorder" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#8b6fc4"/>
+      <stop offset="0.5" stop-color="#c9a06a"/>
+      <stop offset="1" stop-color="#f2c17a"/>
+    </linearGradient>
+    <linearGradient id="nibulaN" x1="0" y1="1" x2="1" y2="0">
+      <stop offset="0" stop-color="#6d4fa8"/>
+      <stop offset="0.45" stop-color="#a978b0"/>
+      <stop offset="0.75" stop-color="#e7a55f"/>
+      <stop offset="1" stop-color="#f7d08a"/>
+    </linearGradient>
+    <linearGradient id="nibulaNib" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#f7d89a"/>
+      <stop offset="0.55" stop-color="#e0a95f"/>
+      <stop offset="1" stop-color="#b07d3e"/>
+    </linearGradient>
+    <linearGradient id="nibulaField" x1="0" y1="0" x2="0.6" y2="1">
+      <stop offset="0" stop-color="#3a2c63"/>
+      <stop offset="1" stop-color="#2a2150"/>
+    </linearGradient>
+  </defs>
+
+  <path fill="none" stroke="url(#nibulaShieldBorder)" stroke-width="10" stroke-linejoin="round"
+        d="M256 40 L440 132 L440 320 L256 472 L72 320 L72 132 Z"/>
+  <path fill="url(#nibulaField)" stroke="url(#nibulaShieldBorder)" stroke-width="6" stroke-linejoin="round"
+        d="M256 66 L418 147 L418 310 L256 442 L94 310 L94 147 Z"/>
+
+  <!-- N as one closed outline: up left post, down inner-left, diagonal to inner-bottom-right,
+       up right post, cut corner, down outer-right, close along the bottom -->
+  <path fill="url(#nibulaN)" stroke="#1a1533" stroke-width="7" stroke-linejoin="round"
+        d="M148 362
+           L148 150
+           L206 150
+           L312 300
+           L312 150
+           L370 150
+           L370 205
+           L340 205
+           L340 362
+           L282 362
+           L206 255
+           L206 362
+           Z"/>
+
+  <g stroke="#1a1533" stroke-width="7" stroke-linejoin="round" stroke-linecap="round">
+    <path fill="url(#nibulaNib)" d="M326 300 L382 300 L392 326 L336 326 Z"/>
+    <path fill="none" stroke-width="5" d="M338 313 L386 313"/>
+    <path fill="url(#nibulaNib)" d="M336 326 L392 326 L428 414 L370 380 Z"/>
+    <path fill="none" stroke-width="5" d="M366 342 L402 384"/>
+    <circle cx="376" cy="360" r="6.5" fill="#1a1533" stroke="none"/>
+  </g>
+</svg>

package/src/frontend/assets/brand/logo.svg

@@ -1,54 +1,54 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Nibula">
-  <defs>
-    <linearGradient id="nibulaShieldBorder" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#8b6fc4"/>
-      <stop offset="0.5" stop-color="#c9a06a"/>
-      <stop offset="1" stop-color="#f2c17a"/>
-    </linearGradient>
-    <linearGradient id="nibulaN" x1="0" y1="1" x2="1" y2="0">
-      <stop offset="0" stop-color="#6d4fa8"/>
-      <stop offset="0.45" stop-color="#a978b0"/>
-      <stop offset="0.75" stop-color="#e7a55f"/>
-      <stop offset="1" stop-color="#f7d08a"/>
-    </linearGradient>
-    <linearGradient id="nibulaNib" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#f7d89a"/>
-      <stop offset="0.55" stop-color="#e0a95f"/>
-      <stop offset="1" stop-color="#b07d3e"/>
-    </linearGradient>
-    <linearGradient id="nibulaField" x1="0" y1="0" x2="0.6" y2="1">
-      <stop offset="0" stop-color="#3a2c63"/>
-      <stop offset="1" stop-color="#2a2150"/>
-    </linearGradient>
-  </defs>
-
-  <path fill="none" stroke="url(#nibulaShieldBorder)" stroke-width="10" stroke-linejoin="round"
-        d="M256 40 L440 132 L440 320 L256 472 L72 320 L72 132 Z"/>
-  <path fill="url(#nibulaField)" stroke="url(#nibulaShieldBorder)" stroke-width="6" stroke-linejoin="round"
-        d="M256 66 L418 147 L418 310 L256 442 L94 310 L94 147 Z"/>
-
-  <!-- N as one closed outline: up left post, down inner-left, diagonal to inner-bottom-right,
-       up right post, cut corner, down outer-right, close along the bottom -->
-  <path fill="url(#nibulaN)" stroke="#1a1533" stroke-width="7" stroke-linejoin="round"
-        d="M148 362
-           L148 150
-           L206 150
-           L312 300
-           L312 150
-           L370 150
-           L370 205
-           L340 205
-           L340 362
-           L282 362
-           L206 255
-           L206 362
-           Z"/>
-
-  <g stroke="#1a1533" stroke-width="7" stroke-linejoin="round" stroke-linecap="round">
-    <path fill="url(#nibulaNib)" d="M326 300 L382 300 L392 326 L336 326 Z"/>
-    <path fill="none" stroke-width="5" d="M338 313 L386 313"/>
-    <path fill="url(#nibulaNib)" d="M336 326 L392 326 L428 414 L370 380 Z"/>
-    <path fill="none" stroke-width="5" d="M366 342 L402 384"/>
-    <circle cx="376" cy="360" r="6.5" fill="#1a1533" stroke="none"/>
-  </g>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Nibula">
+  <defs>
+    <linearGradient id="nibulaShieldBorder" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#8b6fc4"/>
+      <stop offset="0.5" stop-color="#c9a06a"/>
+      <stop offset="1" stop-color="#f2c17a"/>
+    </linearGradient>
+    <linearGradient id="nibulaN" x1="0" y1="1" x2="1" y2="0">
+      <stop offset="0" stop-color="#6d4fa8"/>
+      <stop offset="0.45" stop-color="#a978b0"/>
+      <stop offset="0.75" stop-color="#e7a55f"/>
+      <stop offset="1" stop-color="#f7d08a"/>
+    </linearGradient>
+    <linearGradient id="nibulaNib" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#f7d89a"/>
+      <stop offset="0.55" stop-color="#e0a95f"/>
+      <stop offset="1" stop-color="#b07d3e"/>
+    </linearGradient>
+    <linearGradient id="nibulaField" x1="0" y1="0" x2="0.6" y2="1">
+      <stop offset="0" stop-color="#3a2c63"/>
+      <stop offset="1" stop-color="#2a2150"/>
+    </linearGradient>
+  </defs>
+
+  <path fill="none" stroke="url(#nibulaShieldBorder)" stroke-width="10" stroke-linejoin="round"
+        d="M256 40 L440 132 L440 320 L256 472 L72 320 L72 132 Z"/>
+  <path fill="url(#nibulaField)" stroke="url(#nibulaShieldBorder)" stroke-width="6" stroke-linejoin="round"
+        d="M256 66 L418 147 L418 310 L256 442 L94 310 L94 147 Z"/>
+
+  <!-- N as one closed outline: up left post, down inner-left, diagonal to inner-bottom-right,
+       up right post, cut corner, down outer-right, close along the bottom -->
+  <path fill="url(#nibulaN)" stroke="#1a1533" stroke-width="7" stroke-linejoin="round"
+        d="M148 362
+           L148 150
+           L206 150
+           L312 300
+           L312 150
+           L370 150
+           L370 205
+           L340 205
+           L340 362
+           L282 362
+           L206 255
+           L206 362
+           Z"/>
+
+  <g stroke="#1a1533" stroke-width="7" stroke-linejoin="round" stroke-linecap="round">
+    <path fill="url(#nibulaNib)" d="M326 300 L382 300 L392 326 L336 326 Z"/>
+    <path fill="none" stroke-width="5" d="M338 313 L386 313"/>
+    <path fill="url(#nibulaNib)" d="M336 326 L392 326 L428 414 L370 380 Z"/>
+    <path fill="none" stroke-width="5" d="M366 342 L402 384"/>
+    <circle cx="376" cy="360" r="6.5" fill="#1a1533" stroke="none"/>
+  </g>
+</svg>

package/src/frontend/components/global/footer.njk

@@ -1,25 +1,25 @@
-<footer>
-  <div>
-    <h6>{{ site.title }}</h6>
-    <p>{{ site.description }}</p>
-  </div>
-  <div>
-    <h6>Legal</h6>
-    <small>
-      <ul>
-        <li><a href="{{ site.legal.privacy }}">Privacy Policy</a></li>
-        <li><a href="{{ site.legal.cookie }}">Cookie Policy</a></li>
-        <li><a href="{{ site.legal.terms }}">Terms and conditions</a></li>
-      </ul>
-    </small>
-  </div>
-  <div>
-    <h6>
-      &copy; {{ site.legal.copyright.year }}
-      {{ site.site_name }}
-    </h6>
-    <h6>
-      {{ site.legal.copyright.text }}
-    </h6>
-  </div>
-</footer>
+<footer>
+  <div>
+    <h6>{{ site.title }}</h6>
+    <p>{{ site.description }}</p>
+  </div>
+  <div>
+    <h6>Legal</h6>
+    <small>
+      <ul>
+        <li><a href="{{ site.legal.privacy }}">Privacy Policy</a></li>
+        <li><a href="{{ site.legal.cookie }}">Cookie Policy</a></li>
+        <li><a href="{{ site.legal.terms }}">Terms and conditions</a></li>
+      </ul>
+    </small>
+  </div>
+  <div>
+    <h6>
+      &copy; {{ site.legal.copyright.year }}
+      {{ site.site_name }}
+    </h6>
+    <h6>
+      {{ site.legal.copyright.text }}
+    </h6>
+  </div>
+</footer>

package/src/frontend/components/global/header.njk

@@ -1,7 +1,7 @@
-<header>
-  <nav>
-      <a class="logo" href="/">
-        <img src="../../assets/brand/logo.svg" alt="{{ site.title }}" height="40">
-      </a>
-  </nav>
+<header>
+  <nav>
+      <a class="logo" href="/">
+        <img src="../../assets/brand/logo.svg" alt="{{ site.title }}" height="40">
+      </a>
+  </nav>
 </header>