fix: HTTPS permanent in pipeline, refined dark theme, 16px font

app/frontend/nginx.conf

@@ -1,5 +1,20 @@
+# Redirect HTTP to HTTPS
 server {
     listen 80;
+    server_name taskflow.lizzycloudlab.online lizzycloudlab.online;
+    return 301 https://$host$request_uri;
+}
+
+# HTTPS server
+server {
+    listen 443 ssl;
+    server_name taskflow.lizzycloudlab.online lizzycloudlab.online;
+
+    ssl_certificate     /etc/letsencrypt/live/taskflow.lizzycloudlab.online/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/taskflow.lizzycloudlab.online/privkey.pem;
+
+    ssl_protocols       TLSv1.2 TLSv1.3;
+    ssl_ciphers         HIGH:!aNULL:!MD5;
 
     location / {
         root /usr/share/nginx/html;
@@ -13,4 +28,4 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
     }
-}
+}

app/frontend/src/index.css

@@ -6,10 +6,10 @@
 
 /* ---- CSS variables ---- */
 :root {
-  --bg:          #0a0b0f;
-  --surface:     #111318;
-  --surface2:    #16181f;
-  --border:      #1e2028;
+  --bg:          #0d0f14;
+  --surface:     #13151c;
+  --surface2:    #1a1d26;
+  --border:      #252836;
   --accent:      #6366f1;
   --accent-dim:  rgba(99,102,241,0.12);
   --green:       #22c55e;
@@ -17,8 +17,8 @@
   --red:         #ef4444;
   --red-dim:     rgba(239,68,68,0.12);
   --text:        #f1f5f9;
-  --text-2:      #94a3b8;
-  --text-3:      #3d4257;
+  --text-2:      #a8b4c8;
+  --text-3:      #545970;
 }
 
 /* ---- Base resets ---- */
@@ -32,6 +32,7 @@ html { scroll-behavior: smooth; }
 
 body {
   font-family: 'DM Sans', sans-serif;
+  font-size: 16px;
   background: var(--bg);
   color: var(--text);
   min-height: 100vh;

app/frontend/tailwind.config.js

@@ -7,10 +7,10 @@ export default {
   theme: {
     extend: {
       colors: {
-        bg:       "#0a0b0f",
-        surface:  "#111318",
-        surface2: "#16181f",
-        border:   "#1e2028",
+        bg:       "#0d0f14",
+        surface:  "#13151c",
+        surface2: "#1a1d26",
+        border:   "#252836",
         accent:   "#6366f1",
         "accent-hover": "#4f46e5",
         "accent-dim": "rgba(99,102,241,0.12)",
@@ -19,8 +19,8 @@ export default {
         red:      "#ef4444",
         "red-dim": "rgba(239,68,68,0.12)",
         text1:    "#f1f5f9",
-        text2:    "#94a3b8",
-        text3:    "#3d4257",
+        text2:    "#a8b4c8",
+        text3:    "#545970",
       },
       fontFamily: {
         display: ["Syne", "sans-serif"],