Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

backend/src/routes/publicSettings.js

@@ -0,0 +1,54 @@
+const express = require('express');
+const { db } = require('../database/db');
+const router = express.Router();
+
+// Get public settings (branding and theme)
+router.get('/', async (req, res) => {
+  try {
+    // Fetch branding, theme, general, and select security settings
+    const settings = await db('app_settings')
+      .whereIn('setting_type', ['branding', 'theme', 'general', 'security'])
+      .select('setting_key', 'setting_value');
+    
+    // Convert to object format
+    const settingsObject = {};
+    settings.forEach(setting => {
+      try {
+        settingsObject[setting.setting_key] = setting.setting_value 
+          ? JSON.parse(setting.setting_value) 
+          : null;
+      } catch (e) {
+        // If parsing fails, use the raw value
+        settingsObject[setting.setting_key] = setting.setting_value;
+      }
+    });
+
+    // Return only safe public settings
+    const publicSettings = {
+      branding_company_name: settingsObject.branding_company_name || '',
+      branding_company_tagline: settingsObject.branding_company_tagline || '',
+      branding_support_email: settingsObject.branding_support_email || '',
+      branding_footer_text: settingsObject.branding_footer_text || '',
+      branding_watermark_enabled: settingsObject.branding_watermark_enabled || false,
+      branding_watermark_logo_url: settingsObject.branding_watermark_logo_url || '',
+      branding_watermark_position: settingsObject.branding_watermark_position || 'bottom-right',
+      branding_watermark_opacity: settingsObject.branding_watermark_opacity || 50,
+      branding_watermark_size: settingsObject.branding_watermark_size || 15,
+      branding_favicon_url: settingsObject.branding_favicon_url || '',
+      branding_logo_url: settingsObject.branding_logo_url || '',
+      theme_config: settingsObject.theme_config || null,
+      default_language: settingsObject.general_default_language || 'en',
+      enable_analytics: settingsObject.general_enable_analytics !== false,
+      enable_recaptcha: settingsObject.security_enable_recaptcha === true || settingsObject.security_enable_recaptcha === 'true',
+      recaptcha_site_key: settingsObject.security_recaptcha_site_key || null,
+      maintenance_mode: settingsObject.general_maintenance_mode === true || settingsObject.general_maintenance_mode === 'true'
+    };
+
+    res.json(publicSettings);
+  } catch (error) {
+    console.error('Public settings fetch error:', error);
+    res.status(500).json({ error: 'Failed to fetch settings' });
+  }
+});
+
+module.exports = router;