4 Commits

Include renames

Author	SHA1	Message	Date
paulandClaude	554bf1d43c	CRITICAL FIX: prevent gallery pages redirecting to admin login ... Users were being redirected from gallery pages to admin login due to useLocalizedDate hook trying to fetch admin settings. Fixed by: 1. Added general_date_format to public settings endpoint 2. Created publicSettingsService for unauthenticated access 3. Updated useLocalizedDate to use public settings instead of admin 4. Fixed API interceptor to not redirect on public endpoint 401s 5. Added backups/ and test-archiver/ to .gitignore This restores gallery access for all users. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-23 09:30:35 +02:00
paulandClaude	98ea5e7202	chore: add production todo list and update CI/CD configs ... - Added PRODUCTION_TODO_LIST.md with 9 completed production fixes - Updated .gitea/workflows/mirror-to-github.yml - Updated .gitignore This commit includes all the production fixes implemented: 1. Password complexity settings 2. Gallery login security improvements 3. Analytics configuration fixes 4. Translation additions 5. UI/UX improvements 6. Date format consistency 7. Chrome compatibility fixes All tasks have been completed and tested for production deployment. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-20 21:19:18 +02:00
paulandClaude	0d33f21ee6	fix(security): eliminate default admin password vulnerability ... BREAKING CHANGE: Admin password is now auto-generated on first setup Security improvements: - Remove hardcoded 'admin123' password completely - Generate secure random password on first installation - Save credentials to ADMIN_CREDENTIALS.txt (git-ignored) - Force password change on first login - Implement strong password requirements (12+ chars, mixed case, numbers, special) - Add password strength validation - Increase bcrypt rounds from 10 to 12 New features: - Password generator utility with secure random generation - Human-readable password format (e.g., SwiftEagle3847\!) - Password reset script for existing installations - Comprehensive admin setup documentation - Must-change-password flag in database Migration guide: - New installations: Check ADMIN_CREDENTIALS.txt for generated password - Existing installations: Run scripts/reset-admin-password.js - All users must change password on first login after update This fixes a critical vulnerability where all installations used the same default admin password, allowing unauthorized access. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-12 23:50:21 +02:00
paul	59b1b87cba	Add .gitignore file	2025-07-03 16:26:50 +02:00