step 10.5: wip (not ticked)

src/app.js

@@ -45,8 +45,10 @@ function createApp() {
     res.json({ ok: true });
   });
 
-  // Root: send visitors to the login page (there is no index.html)
-  app.get('/', (_req, res) => res.redirect('/login.html'));
+  // Root: serve the landing page
+  app.get('/', (_req, res) => {
+    res.sendFile(path.join(PUBLIC_DIR, 'index.html'));
+  });
 
   // Auth routes (public)
   app.post('/api/auth/register', registerLimiter, authRoutes.postRegister);