/* apps/orchestrator/src/nav.css
 *
 * Shared nav bar styling for dashboard.html, verify.html, install.html, and
 * the nav injected into Authelia's own portal page (apps/authelia/nginx/
 * nginx.conf's sub_filter on `location /authelia/`).
 *
 * That last one is why this is a real external stylesheet instead of the
 * inline <style> blocks the first three pages used to each carry their own
 * copy of: Authelia's page has a strict CSP (`style-src 'self' 'nonce-...'`)
 * that blocks inline <style> tags and style= attributes outright — but an
 * EXTERNAL same-origin stylesheet is governed by the 'self' keyword, no
 * nonce required, the same way `script-src 'self'` already allowed
 * /logout.js and /authelia-nav.js as external <script src> tags. This file
 * is the fix for that — served at the origin root (not /pwa/) since it's
 * loaded by every page, not just the PWA install flow.
 */
nav.tabs { display: flex; gap: 0.5rem; border-bottom: 1px solid #8884; margin-bottom: 1.5rem; }
nav.tabs a { padding: 0.6rem 1rem; text-decoration: none; color: inherit; opacity: 0.6; border-bottom: 2px solid transparent; }
nav.tabs a.active { opacity: 1; border-bottom-color: #4f7cff; font-weight: 600; }