It doesn’t matter that website loads javascript code for logged in user, as you need a token (which server will give you after a successful login) to authenticate to apis, it is pretty common to do that way
There wasn’t a client side API, but the API was missing crucial validation of user input (eg only checking the mac address but didn’t check who is actually authenticated)
I’m experiencing a similar issue on my phone and I’m using ublock, it is draining the battery very fast and making the phone hot.
I wonder if there is a good alternative/degoogled chrome for Android?
Your docker install is too old and it doesn’t support that docker-compose version, you probably should update your docker to more recent one (are you running debian 10 on default repositories?), or you could remove logging references from file (these x-logging lines in each service and whole section on top of file)
If you only need a bare minimum, and don’t plan to heavily use CI/CD, container/packages registries, integrations with other tools i would go with gitea/forgejo (you can always use external tools on top), else i would use selfhosted Gitlab, it has pretty much all the things you could imagine to need with software development and deployment