Improve typography

.devcontainer/Dockerfile

@@ -47,4 +47,4 @@ RUN \
   echo '[[ ! -f ~/.p10k.zsh ]] || source ~/.p10k.zsh' >> /root/.zshrc && \
   find /usr/share/zsh/plugins/zsh-*/zsh-*.zsh | grep -v .plugin.zsh | sed 's/^/source /' >> /root/.zshrc && \
   wget -O /tmp/rust-analyzer-no-server.vsix https://github.com/rust-lang/rust-analyzer/releases/latest/download/rust-analyzer-no-server.vsix && \
-  curl -s https://raw.githubusercontent.com/nektos/act/master/install.sh | bash
+  wget -O - https://raw.githubusercontent.com/nektos/act/master/install.sh | bash

README.md

@@ -1,6 +1,6 @@
 | **Release** | [![License](https://img.shields.io/github/license/marvinruder/rating-tracker?label=License&style=flat-square)](/LICENSE) [![Latest Release (GitHub)](https://img.shields.io/github/v/release/marvinruder/rating-tracker?label=Latest%20Release&logo=github&sort=semver&style=flat-square)](https://github.com/marvinruder/rating-tracker/releases/latest) [![Latest Release (Docker)](https://img.shields.io/docker/v/marvinruder/rating-tracker?label=Latest%20Release&logo=docker&sort=semver&style=flat-square)](https://hub.docker.com/r/marvinruder/rating-tracker/tags) [![Docker Image Size](https://img.shields.io/docker/image-size/marvinruder/rating-tracker?label=Docker%20Image%20Size&logo=docker&sort=semver&style=flat-square)](https://hub.docker.com/r/marvinruder/rating-tracker/tags) [![Release Date](https://img.shields.io/github/release-date/marvinruder/rating-tracker?label=Release%20Date&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/releases/latest) [![Commits since latest release](https://img.shields.io/github/commits-since/marvinruder/rating-tracker/latest?logo=github&sort=semver&style=flat-square)](https://github.com/marvinruder/rating-tracker/commits) |
 :-:|:-:
-| **Quality** | ![GitHub checks](https://img.shields.io/github/checks-status/marvinruder/rating-tracker/main?logo=github&label=Checks&style=flat-square) [![Codacy grade](https://img.shields.io/codacy/grade/6a7a7b68631a42ef88fc478a709141ea?label=Code%20Quality&logo=codacy&style=flat-square)](http://codacy.com/gh/marvinruder/rating-tracker/dashboard) [![CodeQL](https://img.shields.io/github/actions/workflow/status/marvinruder/rating-tracker/codeql.yml?label=CodeQL&logo=github-actions&style=flat-square)](https://github.com/marvinruder/rating-tracker/actions/workflows/codeql.yml) [![Codacy coverage](https://img.shields.io/codacy/coverage/6a7a7b68631a42ef88fc478a709141ea?logo=codacy&label=Coverage&style=flat-square)](http://codacy.com/gh/marvinruder/rating-tracker/dashboard) [![Jenkins build](https://jenkins.mruder.dev/buildStatus/icon?job=rating-tracker-multibranch%2Fmain&subject=Build&style=flat-square)](https://jenkins.mruder.dev/job/rating-tracker-multibranch) <!-- ![Snyk Vulnerabilities](https://img.shields.io/snyk/vulnerabilities/github/marvinruder/rating-tracker?label=Vulnerabilities&style=flat-square) --> |
+| **Quality** | ![GitHub checks](https://img.shields.io/github/checks-status/marvinruder/rating-tracker/main?logo=github&label=Checks&style=flat-square) [![Codacy grade](https://img.shields.io/codacy/grade/6a7a7b68631a42ef88fc478a709141ea?label=Code%20Quality&logo=codacy&style=flat-square)](http://codacy.com/gh/marvinruder/rating-tracker/dashboard) [![GitHub Actions](https://img.shields.io/github/actions/workflow/status/marvinruder/rating-tracker/github-actions.yml?label=GitHub%20Actions&logo=github-actions&style=flat-square)](https://github.com/marvinruder/rating-tracker/actions/workflows/codeql.yml) [![CodeQL](https://img.shields.io/github/actions/workflow/status/marvinruder/rating-tracker/codeql.yml?label=CodeQL&logo=github-actions&style=flat-square)](https://github.com/marvinruder/rating-tracker/actions/workflows/codeql.yml) [![Codacy coverage](https://img.shields.io/codacy/coverage/6a7a7b68631a42ef88fc478a709141ea?logo=codacy&label=Coverage&style=flat-square)](http://codacy.com/gh/marvinruder/rating-tracker/dashboard) [![Jenkins build](https://jenkins.mruder.dev/buildStatus/icon?job=rating-tracker-multibranch%2Fmain&subject=Build&style=flat-square)](https://jenkins.mruder.dev/job/rating-tracker-multibranch) <!-- ![Snyk Vulnerabilities](https://img.shields.io/snyk/vulnerabilities/github/marvinruder/rating-tracker?label=Vulnerabilities&style=flat-square) --> |
 | **Repository** | [![GitHub Contributors](https://img.shields.io/github/contributors/marvinruder/rating-tracker?label=Contributors&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/graphs/contributors) [![Commit Activity](https://img.shields.io/github/commit-activity/m/marvinruder/rating-tracker?label=Commit%20Activity&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/graphs/commit-activity) [![Last commit](https://img.shields.io/github/last-commit/marvinruder/rating-tracker?label=Last%20Commit&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/commits/main) [![Issues](https://img.shields.io/github/issues/marvinruder/rating-tracker?label=Issues&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/issues) [![Bugs](https://img.shields.io/github/issues/marvinruder/rating-tracker/bug?label=Bug%20Issues&logo=openbugbounty&logoColor=red&style=flat-square)](https://github.com/marvinruder/rating-tracker/issues?q=is%3Aopen+is%3Aissue+label%3Abug) [![Pull Requests](https://img.shields.io/github/issues-pr/marvinruder/rating-tracker?label=Pull%20Requests&logo=github&style=flat-square)](https://github.com/marvinruder/rating-tracker/pulls) |
 | **Dependencies** | [![Typescript](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/dev/typescript?label=Typescript&logo=typescript&color=3178C6&style=flat-square)](https://www.typescriptlang.org) [![esbuild](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/esbuild?filename=packages%2Fbackend%2Fpackage.json&label=esbuild&logo=esbuild&color=FFCF00&style=flat-square)](https://esbuild.github.io) [![Prisma](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/@prisma/client?filename=packages%2Fbackend%2Fpackage.json&label=Prisma&logo=prisma&color=2D3748&style=flat-square)](https://www.prisma.io) [![React](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/react?filename=packages%2Ffrontend%2Fpackage.json&label=React&logo=react&color=61DAFB&style=flat-square)](https://react.dev) [![Material UI](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/@mui/material?filename=packages%2Ffrontend%2Fpackage.json&label=Material%20UI&logo=mui&color=007FFF&style=flat-square)](https://mui.com) [![Vite](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/vite?filename=packages%2Ffrontend%2Fpackage.json&label=Vite&logo=vite&color=646CFF&style=flat-square)](https://vitejs.dev) [![Vitest](https://img.shields.io/github/package-json/dependency-version/marvinruder/rating-tracker/vitest?filename=packages%2Fbackend%2Fpackage.json&label=Vitest&logo=vitest&color=6E9F18&style=flat-square)](https://vitest.dev) ![Package Manager](https://img.shields.io/badge/dynamic/json?label=Package%20Manager&query=%24.packageManager&url=https%3A%2F%2Fraw.githubusercontent.com%2Fmarvinruder%2Frating-tracker%2Fmain%2Fpackage.json&logo=yarn&color=2C8EBB&style=flat-square) |
 
@@ -258,14 +258,13 @@ After setting up NGINX as a webserver with SSL, the following virtual host confi
 <summary>View NGINX configuration</summary>
 
 ```nginx
-add_header "Content-Security-Policy" "default-src 'self' 'wasm-unsafe-eval'; worker-src 'self' blob:; img-src 'self' data:; style-src-elem 'self' 'unsafe-inline'; frame-ancestors 'none'; form-action 'self'; base-uri 'none';";
-add_header "Strict-Transport-Security" "max-age=31536000; includeSubDomains" always;
+add_header "Content-Security-Policy" "default-src 'self' 'wasm-unsafe-eval'; worker-src 'self' blob:; img-src 'self' data:; style-src-elem 'self' 'unsafe-inline' rsms.me; style-src rsms.me; font-src rsms.me; frame-ancestors 'none'; form-action 'self'; base-uri 'none';";add_header "Strict-Transport-Security" "max-age=31536000; includeSubDomains" always;
 add_header "X-Frame-Options" "DENY";
 add_header "X-Content-Type-Options" "nosniff";
 add_header "Referrer-Policy" "same-origin";
 add_header "Cross-Origin-Opener-Policy" "same-origin";
 add_header "Cross-Origin-Resource-Policy" "same-site";
-add_header "Cross-Origin-Embedder-Policy" "require-corp";
+add_header "Cross-Origin-Embedder-Policy" "credentialless";
 add_header "Permissions-Policy" "interest-cohort=();";
 
 resolver 127.0.0.11 valid=15s; # DNS resolver from Docker to resolve Docker Compose container names