Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

scripts/generate-jwt-secret.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+# Generate a secure JWT secret for PicPeak
+
+echo "==================================="
+echo "JWT Secret Generator for PicPeak"
+echo "==================================="
+echo ""
+
+# Generate the secret
+SECRET=$(openssl rand -hex 32)
+
+echo "Your new JWT secret (64 characters):"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "$SECRET"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+echo "To use this secret:"
+echo ""
+echo "1. For Docker Compose (.env file):"
+echo "   JWT_SECRET=$SECRET"
+echo ""
+echo "2. For environment variable:"
+echo "   export JWT_SECRET=$SECRET"
+echo ""
+echo "3. For systemd service:"
+echo "   Environment=\"JWT_SECRET=$SECRET\""
+echo ""
+echo "⚠️  IMPORTANT:"
+echo "   - Keep this secret secure and never commit it to version control"
+echo "   - Use different secrets for different environments"
+echo "   - Store production secrets in a secure secret management system"
+echo "   - Rotate secrets regularly (every 90 days recommended)"
+echo ""