4 Commits

Include renames

Author	SHA1	Message	Date
paul	08da01f021	feat: update GitHub mirror workflow to start history from specific commit ... - Start history from commit 7aca927937 instead of orphan branch - Use cherry-pick to preserve meaningful commit history - Automatically exclude files that only existed before target commit - Add comprehensive error handling and logging - Maintain clean linear history for GitHub repository	2025-07-24 16:57:07 +02:00
paul	b4b09c1650	feat: enhance mirror-to-github workflow with commit-based history filtering ... - Replace orphan branch approach with commit-based filtering from cfa29ad5cb - Add automatic removal of sensitive files (env, logs, gitea configs) - Implement robust git operations with fallback mechanisms - Add comprehensive debugging and error handling - Ensure same security exclusions as manual process	2025-07-24 16:57:07 +02:00
paulandClaude	b3f240b2a5	chore: add production todo list and update CI/CD configs ... - Added PRODUCTION_TODO_LIST.md with 9 completed production fixes - Updated .gitea/workflows/mirror-to-github.yml - Updated .gitignore This commit includes all the production fixes implemented: 1. Password complexity settings 2. Gallery login security improvements 3. Analytics configuration fixes 4. Translation additions 5. UI/UX improvements 6. Date format consistency 7. Chrome compatibility fixes All tasks have been completed and tested for production deployment. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-24 16:57:07 +02:00
paulandClaude	1773ed5f95	Initial commit - Project start (July 17, 2025) ... Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-24 16:57:07 +02:00