Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

frontend/src/services/email.service.ts

@@ -0,0 +1,77 @@
+import { api } from '../config/api';
+
+export interface EmailConfig {
+  smtp_host: string;
+  smtp_port: number;
+  smtp_secure: boolean;
+  smtp_user: string;
+  smtp_pass: string;
+  from_email: string;
+  from_name: string;
+}
+
+export interface EmailTemplate {
+  id: number;
+  template_key: string;
+  subject: string; // For backward compatibility
+  body_html: string; // For backward compatibility
+  body_text?: string; // For backward compatibility
+  subject_en: string;
+  subject_de: string;
+  body_html_en: string;
+  body_html_de: string;
+  body_text_en?: string;
+  body_text_de?: string;
+  variables: string[];
+  updated_at: string;
+}
+
+export interface EmailPreview {
+  subject: string;
+  body_html: string;
+  body_text: string;
+}
+
+export const emailService = {
+  // Get email configuration
+  async getConfig(): Promise<EmailConfig> {
+    const response = await api.get<EmailConfig>('/admin/email/config');
+    return response.data;
+  },
+
+  // Update email configuration
+  async updateConfig(config: EmailConfig): Promise<void> {
+    await api.post('/admin/email/config', config);
+  },
+
+  // Test email configuration
+  async testEmail(testEmail: string): Promise<void> {
+    await api.post('/admin/email/test', { test_email: testEmail });
+  },
+
+  // Get all email templates
+  async getTemplates(): Promise<EmailTemplate[]> {
+    const response = await api.get<EmailTemplate[]>('/admin/email/templates');
+    return response.data;
+  },
+
+  // Get single template
+  async getTemplate(key: string): Promise<EmailTemplate> {
+    const response = await api.get<EmailTemplate>(`/admin/email/templates/${key}`);
+    return response.data;
+  },
+
+  // Update email template
+  async updateTemplate(key: string, template: Partial<EmailTemplate>): Promise<void> {
+    await api.put(`/admin/email/templates/${key}`, template);
+  },
+
+  // Preview email template
+  async previewTemplate(key: string, previewData: Record<string, string>, language: 'en' | 'de' = 'en'): Promise<EmailPreview> {
+    const response = await api.post<EmailPreview>(
+      `/admin/email/templates/${key}/preview`,
+      { preview_data: previewData, language }
+    );
+    return response.data;
+  }
+};