7 Commits

Include renames

Author	SHA1	Message	Date
Paul Nothaft	049837f9d6	fix(nginx): add Docker DNS resolver for Swarm/dynamic service discovery ... - Add resolver 127.0.0.11 directive for Docker's internal DNS - Use variable-based proxy_pass to force per-request DNS resolution - Fix 502 Bad Gateway error on root path in Docker Swarm deployments The issue was that nginx caches DNS lookups at startup, but in Docker Swarm where service IPs can change dynamically, this caused stale DNS entries leading to 502 errors for proxied requests. Bumps version to 2.2.3	2026-01-08 16:25:05 +01:00
Paul Nothaft	3a8d53f492	fix: align backend port to 3000 across all configurations ... The production docker-compose used port 3000 internally but nginx.conf was hardcoded to port 3001, causing 502 errors on the root path (/). Changes: - Update nginx.conf to use backend:3000 - Update docker-compose.yml to use PORT=3000 for consistency - Update port mapping and healthcheck to use port 3000	2026-01-08 15:28:35 +01:00
Paul Nothaft	1931d73b60	fix: resolve branding display issues and invitation parsing errors ... Fixes #84 - Logo and favicon not displaying on branding page and galleries Fixes #85 - Invitations showing undefined expiresAt causing parseISO errors Changes: - Fix nginx.conf: Add ^~ modifier to /uploads location to prioritize proxy over static file matching - Fix vite.config.ts: Add /uploads proxy for development environment - Fix BrandingPage.tsx: Include logo_url from branding settings instead of expecting it from theme - Fix adminUsers.js: Add transformInvitation() to convert snake_case DB fields to camelCase API response - Fix publicSettings.js: Add branding_hide_powered_by to public settings API response - Update README.md: Mark Multiple Administrators feature as implemented - Bump version to 2.2.1	2026-01-08 13:56:02 +01:00
paul	2a4d38813f	feat: overhaul public landing page and backup tooling	2025-09-19 16:39:18 +02:00
paulandClaude	e91209f7cb	fix: resolve multiple issues from GitHub issue #14 ... - Fixed duplicate German translation for 'downloadSelected' button - Added client_max_body_size configuration in nginx for file uploads - Fixed date parsing in FeedbackModerationPanel to handle timestamps - Fixed admin authentication context (req.admin vs req.user) in feedback routes - Enhanced clipboard functionality with fallback for non-HTTPS contexts - Fixed authentication token handling for numeric event IDs in uploads These changes ensure comment moderation works properly, file uploads are configured correctly, and the UI handles all edge cases properly. Fixes #14 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-09-01 22:56:44 +02:00
paulandClaude	1cadce196b	fix: update deployment guide with critical URL configuration and nginx port fixes ... - Add prominent warning about FRONTEND_URL configuration requiring exact port match - Add comprehensive troubleshooting section for 502/CORS login failures - Fix nginx.conf to use correct backend port (3001 instead of 3000) - Document common deployment issues and their solutions - Explain Docker DNS caching issues after container restarts 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-26 00:17:41 +02:00
paulandClaude	1773ed5f95	Initial commit - Project start (July 17, 2025) ... Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-24 16:57:07 +02:00