13 Commits

Include renames

Author	SHA1	Message	Date
MOHandClaude Sonnet 4.6	f490133345	Harden security, fix rate-limiting, and rename proxy ... - Move admin login lockout from client cookie to AppConfig (DB), keyed by hashed client IP — clearing browser cookies no longer bypasses it - Replace rate-limit $transaction (TOCTOU) with atomic SQL INSERT...ON CONFLICT...RETURNING; add stale-entry cleanup on each submission to prevent table bloat - Add 5 s module-level cache for middleware runtime state fetch, reducing per-request DB roundtrips - Rename middleware.ts → proxy.ts to resolve Next.js 16 deprecation warning; update test import accordingly - Require ADMIN_PASSWORD, ADMIN_AUTH_SECRET, ADMIN_BASIC_AUTH_USER, and ADMIN_BASIC_AUTH_PASS in docker-compose.yml (:? syntax) — startup fails loudly instead of using placeholder defaults - Add set -e and informative echo lines to Dockerfile CMD for clearer startup failure attribution - Export requireAdminAuth() from lib/admin-auth for centralised use in admin pages - Add CLAUDE.md with architecture notes and working rules Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-17 22:05:50 +01:00
MOH	635d54cb0e	Use internal origin for runtime locale state	2026-03-15 08:33:27 +01:00
MOH	bfd7adccac	Expose site URL to app container	2026-03-13 16:26:14 +01:00
MOH	db897e22bf	Refactor admin area and remove legacy root paths	2026-03-13 16:14:04 +01:00
MOH	87a597c872	Move admin area to root subdomain	2026-03-12 00:15:12 +01:00
MOH	ead75769ef	fix(deploy): use traefik websecure entrypoint with tls for mohfarawati.de	2026-03-07 16:36:08 +01:00
MOH	0f9f9e5f79	Add production-ready media library	2026-03-07 16:20:11 +01:00
MOH	1ad9ae9629	chore(deploy): simplify traefik router to web and clean compose naming	2026-03-06 17:15:19 +01:00
MOH	a2b0f14338	fix(deploy): restore traefik websecure tls router settings	2026-03-06 16:59:30 +01:00
MOH	ce63cd8b69	feat(ui): admin-only root link and shared header navigation	2026-03-06 16:50:45 +01:00
MOH	631479d02d	Add safe DATABASE_URL fallback for container startup migrations	2026-03-06 15:24:43 +01:00
MOH	725a1c1669	chore: align Traefik proxy setup and production deploy workflow	2026-03-06 14:39:03 +01:00
MOH	f86b7f39f7	feat: initialize mohfarawati app foundation	2026-03-06 13:53:57 +01:00