From 7653939bd9acbca3c10c9ed86fa2e144bad609d9 Mon Sep 17 00:00:00 2001
From: DocFast Agent <agent@docfast.dev>
Date: Tue, 17 Feb 2026 08:15:03 +0000
Subject: [PATCH] fix: QA audit bugs
 BUG-051/052/056/057/059/062/063/064/065/066/068

- BUG-056: Fix sitemap namespace sitemapns.org -> sitemaps.org
- BUG-062: Extend <main> to wrap all page content (hero+features+pricing+EU section)
- BUG-064: Add sr-only <label> elements to all modal form inputs (signup, recovery, change-email)
- BUG-051/052: Remove duplicate X-Content-Type-Options headers from nginx (let helmet handle)
- BUG-057: Fix JSON-LD and pricing card: Pro plan is 2,500 PDFs/month not 5,000
- BUG-059: Add meta description, canonical URL, og: tags to /docs page
- BUG-063: Change eu-hosting h3 to h2 (correct heading hierarchy)
- BUG-065/066: Add aria-modal=true, role=dialog to modals; aria-label=Close to close buttons
- BUG-068: Add hash-based modal open for #change-email on page load
- Add .sr-only CSS utility class to base and index styles
---
 nginx-docfast.conf                 |  4 ---
 public/docs.html                   | 10 ++++++
 public/impressum.html              |  5 +--
 public/index.html                  | 52 +++++++++++++++++++++++-------
 public/partials/_modals.html       |  4 ++-
 public/partials/_styles_base.html  |  2 ++
 public/partials/_styles_index.html |  1 +
 public/privacy.html                |  5 +--
 public/sitemap.xml                 |  2 +-
 public/src/index.html              | 44 +++++++++++++++++++------
 public/status.html                 |  2 ++
 public/terms.html                  |  7 ++--
 templates/pages/docs.html          | 10 ++++++
 13 files changed, 114 insertions(+), 34 deletions(-)

diff --git a/nginx-docfast.conf b/nginx-docfast.conf
index d0422c6..915916b 100644
--- a/nginx-docfast.conf
+++ b/nginx-docfast.conf
@@ -28,7 +28,6 @@ server {
         # Cache for 1 day
         expires 1d;
         add_header Cache-Control "public, max-age=86400";
-        add_header X-Content-Type-Options nosniff;
     }
 
     location = /sitemap.xml {
@@ -41,7 +40,6 @@ server {
         # Cache for 1 day
         expires 1d;
         add_header Cache-Control "public, max-age=86400";
-        add_header X-Content-Type-Options nosniff;
     }
 
     # Static assets caching
@@ -55,7 +53,6 @@ server {
         # Cache static assets for 1 week
         expires 7d;
         add_header Cache-Control "public, max-age=604800, immutable";
-        add_header X-Content-Type-Options nosniff;
     }
 
     # All other requests
@@ -68,7 +65,6 @@ server {
         proxy_read_timeout 60s;
         
         # Security headers
-        add_header X-Content-Type-Options nosniff;
     }
 
     listen 443 ssl; # managed by Certbot
diff --git a/public/docs.html b/public/docs.html
index 0e6db53..6105b2b 100644
--- a/public/docs.html
+++ b/public/docs.html
@@ -4,6 +4,16 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>DocFast API Documentation</title>
+  <meta name="description" content="DocFast API documentation. Learn how to convert HTML and Markdown to PDF with a simple REST API call. Endpoints, authentication, templates, and examples.">
+  <link rel="canonical" href="https://docfast.dev/docs">
+  <meta property="og:title" content="DocFast API Documentation">
+  <meta property="og:description" content="Convert HTML and Markdown to PDF with a simple REST API call. Full API reference with examples.">
+  <meta property="og:type" content="website">
+  <meta property="og:url" content="https://docfast.dev/docs">
+  <meta property="og:image" content="https://docfast.dev/og-image.png">
+  <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:title" content="DocFast API Documentation">
+  <meta name="twitter:description" content="Convert HTML and Markdown to PDF with a simple REST API call.">
   <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
   <link rel="stylesheet" href="/swagger-ui/swagger-ui.css">
   <style>
diff --git a/public/impressum.html b/public/impressum.html
index 7c13fc2..de6d85a 100644
--- a/public/impressum.html
+++ b/public/impressum.html
@@ -44,6 +44,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
   footer .container { flex-direction: column; text-align: center; }
   .nav-links { gap: 16px; }
 }
+
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
 </head>
 <body>
@@ -96,9 +98,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
     <div class="footer-links">
       <a href="/">Home</a>
       <a href="/docs">Docs</a>
-      <a href="/health">API Status</a>
+      <a href="/status">API Status</a>
       <a href="/#change-email" class="open-email-change">Change Email</a>
-      <a href="mailto:support@docfast.dev">Support</a>
       <a href="/impressum">Impressum</a>
       <a href="/privacy">Privacy Policy</a>
       <a href="/terms">Terms of Service</a>
diff --git a/public/index.html b/public/index.html
index fd15056..2fc7b0b 100644
--- a/public/index.html
+++ b/public/index.html
@@ -17,7 +17,7 @@
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"5,000 PDFs per month","billingIncrement":"P1M"}]}
+{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"2,500 PDFs per month","billingIncrement":"P1M"}]}
 </script>
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <style>
@@ -262,6 +262,7 @@ html, body {
 
 /* Focus-visible for accessibility */
 .btn:focus-visible, a:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -280,7 +281,8 @@ html, body {
   </div>
 </nav>
 
-<main class="hero" role="main">
+<main role="main">
+<section class="hero">
   <div class="container">
     <div class="badge">🚀 Simple PDF API for Developers</div>
     <h1>HTML to <span class="gradient">PDF</span><br>in one API call</h1>
@@ -306,7 +308,7 @@ html, body {
       </div>
     </div>
   </div>
-</main>
+</section>
 
 <section class="trust">
   <div class="container">
@@ -336,7 +338,7 @@ html, body {
     <div class="eu-badge">
       <div class="eu-icon">🇪🇺</div>
       <div class="eu-content">
-        <h3>Hosted in the EU</h3>
+        <h2>Hosted in the EU</h2>
         <p>Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)</p>
       </div>
     </div>
@@ -404,7 +406,7 @@ html, body {
         <div class="price-amount">€9<span> /mo</span></div>
         <div class="price-desc">For production apps and businesses</div>
         <ul class="price-features">
-<li>5,000 PDFs per month</li>
+<li>2,500 PDFs per month</li>
           <li>All conversion endpoints</li>
           <li>All templates included</li>
           <li>Priority support (<a href="mailto:support@docfast.dev">support@docfast.dev</a>)</li>
@@ -415,15 +417,16 @@ html, body {
   </div>
 </section>
 
+</main>
+
 <footer aria-label="Footer">
   <div class="container">
     <div class="footer-left">© 2026 DocFast. Fast PDF generation for developers.</div>
     <div class="footer-links">
       <a href="/">Home</a>
       <a href="/docs">Docs</a>
-      <a href="/health">API Status</a>
+      <a href="/status">API Status</a>
       <a href="/#change-email" class="open-email-change">Change Email</a>
-      <a href="mailto:support@docfast.dev">Support</a>
       <a href="/impressum">Impressum</a>
       <a href="/privacy">Privacy Policy</a>
       <a href="/terms">Terms of Service</a>
@@ -434,12 +437,13 @@ html, body {
 <!-- Signup Modal -->
 <div class="modal-overlay" id="signupModal" role="dialog" aria-label="Sign up for API key">
   <div class="modal">
-    <button class="close" id="btn-close-signup">&times;</button>
+    <button class="close" id="btn-close-signup" aria-label="Close">&times;</button>
 
     <div id="signupInitial" class="active">
       <h2>Get your free API key</h2>
       <p>Enter your email to get started. No credit card required.</p>
       <div class="signup-error" id="signupError"></div>
+      <label for="signupEmail" class="sr-only">Email address</label>
       <input type="email" id="signupEmail" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="signupBtn">Generate API Key →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">100 free PDFs/month • All endpoints included<br><a href="#" class="open-recover" style="color:var(--muted)">Lost your API key? Recover it →</a></p>
@@ -454,6 +458,7 @@ html, body {
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="verifyEmailDisplay"></strong></p>
       <div class="signup-error" id="verifyError"></div>
+      <label for="verifyCode" class="sr-only">Verification code</label>
       <input type="text" id="verifyCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="verifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@@ -476,14 +481,15 @@ html, body {
 
 
 <!-- Recovery Modal -->
-<div class="modal-overlay" id="recoverModal" role="dialog" aria-label="Recover API key">
+<div class="modal-overlay" id="recoverModal" role="dialog" aria-modal="true" aria-label="Recover API key">
   <div class="modal">
-    <button class="close" id="btn-close-recover">&times;</button>
+    <button class="close" id="btn-close-recover" aria-label="Close">&times;</button>
 
     <div id="recoverInitial" class="active">
       <h2>Recover your API key</h2>
       <p>Enter the email you signed up with. We'll send a verification code.</p>
       <div class="signup-error" id="recoverError"></div>
+      <label for="recoverEmailInput" class="sr-only">Email address</label>
       <input type="email" id="recoverEmailInput" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="recoverBtn">Send Verification Code →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Your key will be shown here after verification — never sent via email</p>
@@ -498,6 +504,7 @@ html, body {
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="recoverEmailDisplay"></strong></p>
       <div class="signup-error" id="recoverVerifyError"></div>
+      <label for="recoverCode" class="sr-only">Verification code</label>
       <input type="text" id="recoverCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="recoverVerifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@@ -520,15 +527,17 @@ html, body {
 
 
 <!-- Email Change Modal -->
-<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-label="Change email">
+<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-modal="true" aria-label="Change email">
   <div class="modal">
-    <button class="close" id="btn-close-email-change">&times;</button>
+    <button class="close" id="btn-close-email-change" aria-label="Close">&times;</button>
 
     <div id="emailChangeInitial" class="active">
       <h2>Change your email</h2>
       <p>Enter your API key and new email address.</p>
       <div class="signup-error" id="emailChangeError"></div>
+      <label for="emailChangeApiKey" class="sr-only">Your API key</label>
       <input type="text" id="emailChangeApiKey" placeholder="Your API key (df_free_... or df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
+      <label for="emailChangeNewEmail" class="sr-only">New email address</label>
       <input type="email" id="emailChangeNewEmail" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="emailChangeBtn">Send Verification Code →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">A verification code will be sent to your new email</p>
@@ -543,6 +552,7 @@ html, body {
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="emailChangeEmailDisplay"></strong></p>
       <div class="signup-error" id="emailChangeVerifyError"></div>
+      <label for="emailChangeCode" class="sr-only">Verification code</label>
       <input type="text" id="emailChangeCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="emailChangeVerifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@@ -557,5 +567,23 @@ html, body {
 </div>
 
 <script src="/app.js"></script>
+
+<script>
+// BUG-068: Open change-email modal when navigating to /#change-email
+(function() {
+  function handleHashModal() {
+    if (window.location.hash === '#change-email') {
+      if (typeof openEmailChange === 'function') {
+        openEmailChange();
+      }
+    }
+  }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', handleHashModal);
+  } else {
+    handleHashModal();
+  }
+})();
+</script>
 </body>
 </html>
diff --git a/public/partials/_modals.html b/public/partials/_modals.html
index 5407e44..92fd84b 100644
--- a/public/partials/_modals.html
+++ b/public/partials/_modals.html
@@ -1,12 +1,13 @@
 <!-- Signup Modal -->
 <div class="modal-overlay" id="signupModal" role="dialog" aria-label="Sign up for API key">
   <div class="modal">
-    <button class="close" id="btn-close-signup">&times;</button>
+    <button class="close" id="btn-close-signup" aria-label="Close">&times;</button>
 
     <div id="signupInitial" class="active">
       <h2>Get your free API key</h2>
       <p>Enter your email to get started. No credit card required.</p>
       <div class="signup-error" id="signupError"></div>
+      <label for="signupEmail" class="sr-only">Email address</label>
       <input type="email" id="signupEmail" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="signupBtn">Generate API Key →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">100 free PDFs/month • All endpoints included<br><a href="#" class="open-recover" style="color:var(--muted)">Lost your API key? Recover it →</a></p>
@@ -21,6 +22,7 @@
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="verifyEmailDisplay"></strong></p>
       <div class="signup-error" id="verifyError"></div>
+      <label for="verifyCode" class="sr-only">Verification code</label>
       <input type="text" id="verifyCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="verifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
diff --git a/public/partials/_styles_base.html b/public/partials/_styles_base.html
index a03e308..3fe5c28 100644
--- a/public/partials/_styles_base.html
+++ b/public/partials/_styles_base.html
@@ -34,4 +34,6 @@ footer .container { display: flex; justify-content: space-between; align-items:
   footer .container { flex-direction: column; text-align: center; }
   .nav-links { gap: 16px; }
 }
+
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
diff --git a/public/partials/_styles_index.html b/public/partials/_styles_index.html
index 326eb7a..9a11270 100644
--- a/public/partials/_styles_index.html
+++ b/public/partials/_styles_index.html
@@ -240,4 +240,5 @@ html, body {
 
 /* Focus-visible for accessibility */
 .btn:focus-visible, a:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
\ No newline at end of file
diff --git a/public/privacy.html b/public/privacy.html
index 9a30228..667109f 100644
--- a/public/privacy.html
+++ b/public/privacy.html
@@ -44,6 +44,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
   footer .container { flex-direction: column; text-align: center; }
   .nav-links { gap: 16px; }
 }
+
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
 </head>
 <body>
@@ -178,9 +180,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
     <div class="footer-links">
       <a href="/">Home</a>
       <a href="/docs">Docs</a>
-      <a href="/health">API Status</a>
+      <a href="/status">API Status</a>
       <a href="/#change-email" class="open-email-change">Change Email</a>
-      <a href="mailto:support@docfast.dev">Support</a>
       <a href="/impressum">Impressum</a>
       <a href="/privacy">Privacy Policy</a>
       <a href="/terms">Terms of Service</a>
diff --git a/public/sitemap.xml b/public/sitemap.xml
index 23078ed..967a532 100644
--- a/public/sitemap.xml
+++ b/public/sitemap.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<urlset xmlns="http://www.sitemapns.org/schemas/sitemap/0.9">
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url><loc>https://docfast.dev/</loc><lastmod>2026-02-16</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
   <url><loc>https://docfast.dev/docs</loc><lastmod>2026-02-16</lastmod><changefreq>weekly</changefreq><priority>0.8</priority></url>
   <url><loc>https://docfast.dev/impressum</loc><lastmod>2026-02-16</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
diff --git a/public/src/index.html b/public/src/index.html
index fab6689..2a85240 100644
--- a/public/src/index.html
+++ b/public/src/index.html
@@ -17,7 +17,7 @@
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"5,000 PDFs per month","billingIncrement":"P1M"}]}
+{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"0","priceCurrency":"EUR","name":"Free","description":"100 PDFs/month"},{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"2,500 PDFs per month","billingIncrement":"P1M"}]}
 </script>
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 {{> styles_index}}
@@ -29,7 +29,8 @@
 
 {{> nav_index}}
 
-<main class="hero" role="main">
+<main role="main">
+<section class="hero">
   <div class="container">
     <div class="badge">🚀 Simple PDF API for Developers</div>
     <h1>HTML to <span class="gradient">PDF</span><br>in one API call</h1>
@@ -55,7 +56,7 @@
       </div>
     </div>
   </div>
-</main>
+</section>
 
 <section class="trust">
   <div class="container">
@@ -85,7 +86,7 @@
     <div class="eu-badge">
       <div class="eu-icon">🇪🇺</div>
       <div class="eu-content">
-        <h3>Hosted in the EU</h3>
+        <h2>Hosted in the EU</h2>
         <p>Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)</p>
       </div>
     </div>
@@ -153,7 +154,7 @@
         <div class="price-amount">€9<span> /mo</span></div>
         <div class="price-desc">For production apps and businesses</div>
         <ul class="price-features">
-<li>5,000 PDFs per month</li>
+<li>2,500 PDFs per month</li>
           <li>All conversion endpoints</li>
           <li>All templates included</li>
           <li>Priority support (<a href="mailto:support@docfast.dev">support@docfast.dev</a>)</li>
@@ -164,20 +165,23 @@
   </div>
 </section>
 
+</main>
+
 {{> footer}}
 
 {{> modals}}
 
 
 <!-- Recovery Modal -->
-<div class="modal-overlay" id="recoverModal" role="dialog" aria-label="Recover API key">
+<div class="modal-overlay" id="recoverModal" role="dialog" aria-modal="true" aria-label="Recover API key">
   <div class="modal">
-    <button class="close" id="btn-close-recover">&times;</button>
+    <button class="close" id="btn-close-recover" aria-label="Close">&times;</button>
 
     <div id="recoverInitial" class="active">
       <h2>Recover your API key</h2>
       <p>Enter the email you signed up with. We'll send a verification code.</p>
       <div class="signup-error" id="recoverError"></div>
+      <label for="recoverEmailInput" class="sr-only">Email address</label>
       <input type="email" id="recoverEmailInput" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="recoverBtn">Send Verification Code →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Your key will be shown here after verification — never sent via email</p>
@@ -192,6 +196,7 @@
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="recoverEmailDisplay"></strong></p>
       <div class="signup-error" id="recoverVerifyError"></div>
+      <label for="recoverCode" class="sr-only">Verification code</label>
       <input type="text" id="recoverCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="recoverVerifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@@ -214,15 +219,17 @@
 
 
 <!-- Email Change Modal -->
-<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-label="Change email">
+<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-modal="true" aria-label="Change email">
   <div class="modal">
-    <button class="close" id="btn-close-email-change">&times;</button>
+    <button class="close" id="btn-close-email-change" aria-label="Close">&times;</button>
 
     <div id="emailChangeInitial" class="active">
       <h2>Change your email</h2>
       <p>Enter your API key and new email address.</p>
       <div class="signup-error" id="emailChangeError"></div>
+      <label for="emailChangeApiKey" class="sr-only">Your API key</label>
       <input type="text" id="emailChangeApiKey" placeholder="Your API key (df_free_... or df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
+      <label for="emailChangeNewEmail" class="sr-only">New email address</label>
       <input type="email" id="emailChangeNewEmail" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
       <button class="btn btn-primary" style="width:100%" id="emailChangeBtn">Send Verification Code →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">A verification code will be sent to your new email</p>
@@ -237,6 +244,7 @@
       <h2>Enter verification code</h2>
       <p>We sent a 6-digit code to <strong id="emailChangeEmailDisplay"></strong></p>
       <div class="signup-error" id="emailChangeVerifyError"></div>
+      <label for="emailChangeCode" class="sr-only">Verification code</label>
       <input type="text" id="emailChangeCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
       <button class="btn btn-primary" style="width:100%" id="emailChangeVerifyBtn">Verify →</button>
       <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
@@ -251,5 +259,23 @@
 </div>
 
 <script src="/app.js"></script>
+
+<script>
+// BUG-068: Open change-email modal when navigating to /#change-email
+(function() {
+  function handleHashModal() {
+    if (window.location.hash === '#change-email') {
+      if (typeof openEmailChange === 'function') {
+        openEmailChange();
+      }
+    }
+  }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', handleHashModal);
+  } else {
+    handleHashModal();
+  }
+})();
+</script>
 </body>
 </html>
diff --git a/public/status.html b/public/status.html
index b70055b..4aac73d 100644
--- a/public/status.html
+++ b/public/status.html
@@ -44,6 +44,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
   footer .container { flex-direction: column; text-align: center; }
   .nav-links { gap: 16px; }
 }
+
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
 <style>
 .status-hero { text-align: center; padding: 48px 0 32px; }
diff --git a/public/terms.html b/public/terms.html
index 7a0ad71..595cc8d 100644
--- a/public/terms.html
+++ b/public/terms.html
@@ -44,6 +44,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
   footer .container { flex-direction: column; text-align: center; }
   .nav-links { gap: 16px; }
 }
+
+.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; }
 </style>
 </head>
 <body>
@@ -138,7 +140,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
     <ul>
       <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for free tier)</li>
       <li><strong>Maintenance:</strong> Scheduled maintenance with advance notice</li>
-      <li><strong>Status page:</strong> <a href="/health">https://docfast.dev/health</a></li>
+      <li><strong>Status page:</strong> <a href="/status">https://docfast.dev/status</a></li>
     </ul>
 
     <h3>5.2 Performance</h3>
@@ -250,9 +252,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
     <div class="footer-links">
       <a href="/">Home</a>
       <a href="/docs">Docs</a>
-      <a href="/health">API Status</a>
+      <a href="/status">API Status</a>
       <a href="/#change-email" class="open-email-change">Change Email</a>
-      <a href="mailto:support@docfast.dev">Support</a>
       <a href="/impressum">Impressum</a>
       <a href="/privacy">Privacy Policy</a>
       <a href="/terms">Terms of Service</a>
diff --git a/templates/pages/docs.html b/templates/pages/docs.html
index 0e6db53..6105b2b 100644
--- a/templates/pages/docs.html
+++ b/templates/pages/docs.html
@@ -4,6 +4,16 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>DocFast API Documentation</title>
+  <meta name="description" content="DocFast API documentation. Learn how to convert HTML and Markdown to PDF with a simple REST API call. Endpoints, authentication, templates, and examples.">
+  <link rel="canonical" href="https://docfast.dev/docs">
+  <meta property="og:title" content="DocFast API Documentation">
+  <meta property="og:description" content="Convert HTML and Markdown to PDF with a simple REST API call. Full API reference with examples.">
+  <meta property="og:type" content="website">
+  <meta property="og:url" content="https://docfast.dev/docs">
+  <meta property="og:image" content="https://docfast.dev/og-image.png">
+  <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:title" content="DocFast API Documentation">
+  <meta name="twitter:description" content="Convert HTML and Markdown to PDF with a simple REST API call.">
   <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
   <link rel="stylesheet" href="/swagger-ui/swagger-ui.css">
   <style>