Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/src/components/MaintenanceWrapper.tsx

@@ -0,0 +1,59 @@
+import React, { useEffect } from 'react';
+import { useLocation } from 'react-router-dom';
+import { useQuery } from '@tanstack/react-query';
+import { MaintenanceMode } from './MaintenanceMode';
+import { useMaintenanceMode } from '../contexts/MaintenanceContext';
+import { setMaintenanceModeCallback, api, getAuthToken } from '../config/api';
+
+interface MaintenanceWrapperProps {
+  children: React.ReactNode;
+}
+
+export const MaintenanceWrapper: React.FC<MaintenanceWrapperProps> = ({ children }) => {
+  const location = useLocation();
+  const { isMaintenanceMode, setMaintenanceMode } = useMaintenanceMode();
+  
+  // Check if current route is admin route
+  const isAdminRoute = location.pathname.startsWith('/admin');
+  const hasAdminAuth = !!getAuthToken(true);
+
+  // Register the maintenance mode callback
+  useEffect(() => {
+    setMaintenanceModeCallback((enabled: boolean) => {
+      setMaintenanceMode(enabled);
+    });
+  }, [setMaintenanceMode]);
+
+  // Check maintenance mode on mount and when location changes
+  useQuery({
+    queryKey: ['maintenance-check', location.pathname],
+    queryFn: async () => {
+      try {
+        // Make a lightweight request to check maintenance status
+        await api.get('/public/settings');
+        // If successful, maintenance mode is off
+        setMaintenanceMode(false);
+        return { maintenance: false };
+      } catch (error: any) {
+        if (error.response?.status === 503) {
+          // Only set maintenance mode for non-admin routes or unauthenticated admin routes
+          if (!isAdminRoute || !hasAdminAuth) {
+            setMaintenanceMode(true);
+            return { maintenance: true };
+          }
+        }
+        return { maintenance: false };
+      }
+    },
+    staleTime: 30000, // Check every 30 seconds
+    retry: false, // Don't retry on failure
+    enabled: (!isAdminRoute || !hasAdminAuth) && !isMaintenanceMode, // Don't check if already in maintenance
+  });
+
+  // Show maintenance page if in maintenance mode and not on admin route with auth
+  if (isMaintenanceMode && (!isAdminRoute || !hasAdminAuth)) {
+    return <MaintenanceMode />;
+  }
+
+  return <>{children}</>;
+};