Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

frontend/src/components/MaintenanceMode.tsx

@@ -0,0 +1,113 @@
+import React, { useEffect } from 'react';
+import { AlertTriangle } from 'lucide-react';
+import { useQuery } from '@tanstack/react-query';
+import { useTranslation } from 'react-i18next';
+import { api } from '../config/api';
+import { buildResourceUrl } from '../utils/url';
+
+interface BrandingSettings {
+  branding_company_name?: string;
+  branding_company_tagline?: string;
+  branding_support_email?: string;
+  branding_footer_text?: string;
+  branding_favicon_url?: string;
+  branding_logo_url?: string;
+  default_language?: string;
+}
+
+export const MaintenanceMode: React.FC = () => {
+  const { t, i18n } = useTranslation();
+  
+  // Fetch branding settings
+  const { data: settings } = useQuery<BrandingSettings>({
+    queryKey: ['public-settings-maintenance'],
+    queryFn: async () => {
+      try {
+        const response = await api.get('/public/settings');
+        return response.data;
+      } catch (error) {
+        // Return empty object if settings can't be fetched
+        return {};
+      }
+    },
+    staleTime: 5 * 60 * 1000, // Cache for 5 minutes
+    retry: false, // Don't retry on failure
+  });
+
+  // Set language based on system settings
+  useEffect(() => {
+    if (settings?.default_language && settings.default_language !== i18n.language) {
+      i18n.changeLanguage(settings.default_language);
+    }
+  }, [settings?.default_language, i18n]);
+
+  return (
+    <div className="min-h-screen bg-neutral-50 flex flex-col">
+      {/* Header with branding - Always show, with PicPeak logo as fallback */}
+      <div className="bg-white border-b border-neutral-200 py-4">
+        <div className="container">
+          <div className="flex items-center justify-center">
+            <img 
+              src={settings?.branding_logo_url ? 
+                (settings.branding_logo_url.startsWith('http') 
+                  ? settings.branding_logo_url 
+                  : buildResourceUrl(settings.branding_logo_url))
+                : '/picpeak-logo-transparent.png'
+              } 
+              alt={settings?.branding_company_name || 'PicPeak'}
+              className="h-12 w-auto object-contain"
+            />
+            {settings?.branding_company_name && settings.branding_company_name !== 'PicPeak' && (
+              <div className="ml-4 text-center">
+                <h2 className="text-xl font-semibold text-neutral-800">{settings.branding_company_name}</h2>
+                {settings.branding_company_tagline && (
+                  <p className="text-sm text-neutral-600">{settings.branding_company_tagline}</p>
+                )}
+              </div>
+            )}
+          </div>
+        </div>
+      </div>
+
+      {/* Main content */}
+      <div className="flex-1 flex items-center justify-center p-4">
+        <div className="max-w-md w-full text-center">
+          <div className="inline-flex items-center justify-center w-20 h-20 bg-amber-100 rounded-full mb-6">
+            <AlertTriangle className="w-10 h-10 text-amber-600" />
+          </div>
+          
+          <h1 className="text-3xl font-bold text-neutral-900 mb-4">
+            {t('maintenance.title')}
+          </h1>
+          
+          <p className="text-lg text-neutral-600 mb-8">
+            {t('maintenance.message')}
+          </p>
+          
+          {settings?.branding_support_email && (
+            <p className="text-sm text-neutral-500 mt-8">
+              {t('maintenance.urgentMatters')}{' '}
+              <a 
+                href={`mailto:${settings.branding_support_email}`}
+                className="text-primary-600 hover:text-primary-700"
+              >
+                {settings.branding_support_email}
+              </a>
+            </p>
+          )}
+        </div>
+      </div>
+
+      {/* Footer */}
+      {settings?.branding_footer_text && (
+        <footer className="py-4 border-t border-neutral-200">
+          <div className="container text-center">
+            <p className="text-sm text-neutral-500">
+              {settings.branding_footer_text}
+            </p>
+          </div>
+        </footer>
+      )}
+    </div>
+  );
+};