diff --git a/api/src/app.ts b/api/src/app.ts
index dfe02a7..55afaca 100644
--- a/api/src/app.ts
+++ b/api/src/app.ts
@@ -35,20 +35,14 @@ if (process.env.NODE_ENV === 'development') {
   app.use('/api/v1/test-env', (await import('./misc/routers/test-env.ts')).default)
 }
 
-if (process.env.NODE_ENV !== 'development') {
-  // in development the UI is served by the Vite dev server through nginx
-  const cspDirectives = { ...defaultNonceCSPDirectives }
-  // necessary to use vjsf without pre-compilation
-  cspDirectives['script-src'] = "'unsafe-eval' " + defaultNonceCSPDirectives['script-src']
-  // necessary for vjsf to fetch remote services
-  cspDirectives['connect-src'] = "'self' https:"
-  app.use(await createSpaMiddleware(resolve(import.meta.dirname, '../../ui/dist'), uiConfig, {
-    csp: {
-      nonce: true,
-      header: cspDirectives
-    },
-    privateDirectoryUrl: config.privateDirectoryUrl
-  }))
-}
+const cspDirectives = { ...defaultNonceCSPDirectives }
+// necessary to use vjsf without pre-compilation
+cspDirectives['script-src'] = "'unsafe-eval' " + defaultNonceCSPDirectives['script-src']
+// necessary for vjsf to fetch remote services
+cspDirectives['connect-src'] = "'self' https:"
+app.use(await createSpaMiddleware(resolve(import.meta.dirname, '../../ui/dist'), uiConfig, {
+  csp: { nonce: true, header: cspDirectives },
+  privateDirectoryUrl: config.privateDirectoryUrl
+}))
 
 app.use(errorHandler)
diff --git a/docker-compose.yml b/docker-compose.yml
index 36e598a..ad13ce6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -55,7 +55,7 @@ services:
   data-fair:
     profiles:
       - dev
-    image: ghcr.io/data-fair/data-fair:5
+    image: ghcr.io/data-fair/data-fair:6
     restart: on-failure:10
     network_mode: host
     depends_on: