diff --git a/docker-compose.yml b/docker-compose.yml
index 772d141..a9540a6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,7 +10,7 @@ services:
     environment:
       - NODE_ENV=production
       - SUPABASE_URL=${SUPABASE_URL}
-      - SUPABASE_ANON_KEY=${SUPABASE_ANON_KEY}
+      - SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_ANON_KEY}
       - NEXT_PUBLIC_SUPABASE_URL=${SUPABASE_URL}
       - NEXT_PUBLIC_SUPABASE_ANON_KEY=${SUPABASE_ANON_KEY}
     networks:
diff --git a/nuxt4-app/nuxt.config.ts b/nuxt4-app/nuxt.config.ts
index abc8dc0..34d074f 100644
--- a/nuxt4-app/nuxt.config.ts
+++ b/nuxt4-app/nuxt.config.ts
@@ -44,6 +44,30 @@ export default defineNuxtConfig({
       ]
     }
   },
+  nitro: {
+    routeRules: {
+      '/**': {
+        headers: {
+          'Cross-Origin-Embedder-Policy': 'require-corp',
+          'Cross-Origin-Opener-Policy': 'same-origin'
+        }
+      },
+      '/manifest.webmanifest': {
+        headers: {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET',
+          'Content-Type': 'application/manifest+json'
+        }
+      },
+      '/sw.js': {
+        headers: {
+          'Service-Worker-Allowed': '/',
+          'Cache-Control': 'public, max-age=0'
+        }
+      }
+    }
+  },
+
   pwa: {
     registerType: 'autoUpdate',
     strategies: 'generateSW',
@@ -84,7 +108,8 @@ export default defineNuxtConfig({
     },
     workbox: {
       globPatterns: ['**/*.{js,css,html,png,svg,webp,ico,json,woff2}'],
-      navigateFallback: '/',
+      navigateFallback: '/index.html',
+      navigateFallbackDenylist: [/^\/api\//, /^\/outpost\.goauthentik\.io/],
       maximumFileSizeToCacheInBytes: 4 * 1024 * 1024,
       runtimeCaching: [
         {