screenshots: faces sidecar health, all three failure modes (#1069)

.dockerignore

@@ -1,20 +0,0 @@
-.git
-.gitignore
-*.md
-.env
-.env.*
-docker-compose*.yml
-.DS_Store
-node_modules
-npm-debug.log
-coverage
-.nyc_output
-.vscode
-.idea
-*.swp
-*.swo
-storage/events/active/*
-storage/events/archived/*
-storage/thumbnails/*
-data/*.db
-logs/*

.drone.yml

@@ -1,114 +0,0 @@
-kind: pipeline
-type: docker
-name: default
-
-steps:
-  # Build Backend Docker Image
-  - name: build-backend
-    image: plugins/docker
-    settings:
-      repo: registry.local.nothaft.cloud/picpeak-backend
-      tags: 
-        - latest
-        - ${DRONE_COMMIT_SHA:0:8}
-        - ${DRONE_BRANCH}-latest
-      dockerfile: backend/Dockerfile
-      context: backend/
-      registry: registry.local.nothaft.cloud
-      build_args:
-        - VERSION=${DRONE_TAG:-dev}
-      
-  # Build Frontend Docker Image
-  - name: build-frontend
-    image: plugins/docker
-    settings:
-      repo: registry.local.nothaft.cloud/picpeak-frontend
-      tags: 
-        - latest
-        - ${DRONE_COMMIT_SHA:0:8}
-        - ${DRONE_BRANCH}-latest
-      dockerfile: frontend/Dockerfile
-      context: frontend/
-      registry: registry.local.nothaft.cloud
-      build_args:
-        - VERSION=${DRONE_TAG:-dev}
-        - VITE_API_URL=${VITE_API_URL:-/api}
-
-trigger:
-  branch:
-    - main
-    - develop
-  event:
-    - push
-    - pull_request
-
----
-kind: pipeline
-type: docker
-name: release
-
-steps:
-  # Build Backend Release
-  - name: build-backend-release
-    image: plugins/docker
-    settings:
-      repo: registry.local.nothaft.cloud/picpeak-backend
-      tags:
-        - ${DRONE_TAG}
-        - latest
-      dockerfile: backend/Dockerfile
-      context: backend/
-      registry: registry.local.nothaft.cloud
-      
-  # Build Frontend Release
-  - name: build-frontend-release
-    image: plugins/docker
-    settings:
-      repo: registry.local.nothaft.cloud/picpeak-frontend
-      tags:
-        - ${DRONE_TAG}
-        - latest
-      dockerfile: frontend/Dockerfile
-      context: frontend/
-      registry: registry.local.nothaft.cloud
-
-  # -------- NEW: Publish Docker images to GitHub Container Registry --------
-  - name: push-backend-ghcr
-    image: plugins/docker
-    settings:
-      repo: ghcr.io/the-luap/picpeak-backend
-      tags:
-        - ${DRONE_TAG}
-        - latest
-      dockerfile: backend/Dockerfile
-      context: backend/
-      registry: ghcr.io
-      username:
-        from_secret: GITHUB_USERNAME
-      password:
-        from_secret: GITHUB_TOKEN
-      build_args:
-        - VERSION=${DRONE_TAG}
-
-  - name: push-frontend-ghcr
-    image: plugins/docker
-    settings:
-      repo: ghcr.io/the-luap/picpeak-frontend
-      tags:
-        - ${DRONE_TAG}
-        - latest
-      dockerfile: frontend/Dockerfile
-      context: frontend/
-      registry: ghcr.io
-      username:
-        from_secret: GITHUB_USERNAME
-      password:
-        from_secret: GITHUB_TOKEN
-      build_args:
-        - VERSION=${DRONE_TAG}
-        - VITE_API_URL=${VITE_API_URL:-/api}
-
-
-trigger:
-  event:
-    - tag

.env.example

@@ -1,71 +0,0 @@
-# PicPeak Environment Configuration
-# Copy this file to .env and update with your values
-
-# Environment
-NODE_ENV=production
-
-# JWT Secret (generate with: openssl rand -base64 64)
-JWT_SECRET=your_very_long_random_jwt_secret_here
-
-# Database Configuration (PostgreSQL)
-DATABASE_CLIENT=pg
-DB_USER=picpeak
-# IMPORTANT: Avoid $ character in passwords - Docker Compose interprets it as variable substitution
-# If you must use $, escape it as $$ (e.g., Pass$$word instead of Pass$word)
-DB_PASSWORD=your_secure_postgres_password_here
-DB_NAME=picpeak_prod
-
-# Redis Configuration
-# IMPORTANT: Same warning applies - avoid $ or escape as $$
-REDIS_PASSWORD=your_secure_redis_password_here
-
-# Admin Account (initial setup)
-ADMIN_USERNAME=admin
-ADMIN_EMAIL=admin@yourdomain.com
-
-# Email Configuration
-# For Gmail: use app-specific password
-# For SendGrid: SMTP_USER=apikey, SMTP_PASS=your-api-key
-SMTP_HOST=smtp.gmail.com
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=your-email@gmail.com
-SMTP_PASS=your-app-specific-password
-EMAIL_FROM=noreply@yourdomain.com
-
-# Application URLs
-# Use full origin with scheme, no trailing slash.
-# Admin UI is served by the frontend at /admin.
-FRONTEND_URL=https://yourdomain.com
-ADMIN_URL=https://yourdomain.com
-
-# Frontend API base
-# For pre-built images and production behind a reverse proxy, keep '/api'.
-# If you rebuild the frontend yourself, you may set a full URL at build time.
-VITE_API_URL=/api
-
-# Port Configuration (optional)
-# BACKEND_PORT=3001
-# FRONTEND_PORT=3000
-# DB_PORT=5432
-# REDIS_PORT=6379
-
-# Timezone
-TZ=UTC
-
-# Analytics (Optional - Umami)
-VITE_UMAMI_URL=
-VITE_UMAMI_WEBSITE_ID=
-VITE_UMAMI_SHARE_URL=
-
-# Storage variables (host paths)
-# These control where data is stored on the host. Defaults are local folders.
-APP_STORAGE=./storage
-APP_DATA=./data
-LOGS=./logs
-
-# Note on FRONTEND_API_URL (documentation only):
-# When using pre-built frontend images, runtime env vars cannot override the built JS.
-# Do NOT rely on FRONTEND_API_URL in Compose. Instead, keep VITE_API_URL=/api and
-# let the frontend Nginx proxy /api to the backend. Only if you rebuild the frontend
-# should you change VITE_API_URL at build time.

.gitea/workflows/mirror-to-github.yml

@@ -1,134 +0,0 @@
-name: Mirror to GitHub
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:  # Allow manual triggering
-
-jobs:
-  mirror:
-    runs-on: ubuntu-latest
-    # Note: For GitHub fine-grained tokens, ensure the token has:
-    # - Repository access to the-luap/picpeak
-    # - Repository permissions: Contents (Read and Write), Metadata (Read)
-    # For classic tokens: repo scope is sufficient
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0  # Full history for proper mirroring
-
-      - name: Setup Git
-        run: |
-          git config --global user.name "the-luap"
-          git config --global user.email "paul-nothaft@hotmail.de"
-
-      - name: Remove sensitive files and directories
-        run: |
-          echo "Current files before cleanup:"
-          ls -la | head -10 || true
-          echo "..."
-          
-          # Remove sensitive files/directories if they exist
-          echo "Removing sensitive files..."
-          rm -rf .gitea/ || true
-          rm -rf scripts/install-gitea-runner.sh || true
-          rm -rf .drone* || true
-          rm -rf photo-sharing-prd.md || true
-          rm -rf CLAUDE.md || true
-          rm -rf storage/ || true
-          rm -rf events/ || true
-          rm -rf .playwright-mcp/
-          rm -rf .swarm || true
-          rm -rf .claude-flow || true
-
-          
-          echo "Sensitive files removal completed"
-          
-          # Add and commit the cleanup if there are changes
-          git add -A
-          if ! git diff --cached --quiet; then
-            git commit -m "chore: remove sensitive files for GitHub mirror"
-            echo "✅ Committed cleanup of sensitive files"
-          else
-            echo "✅ No sensitive files to remove"
-          fi
-          
-          echo "Final file structure (top level):"
-          ls -la | head -10 || true
-
-      - name: Check GitHub token
-        env:
-          GITHUBTOKEN: ${{ secrets.GITHUBTOKEN }}
-        run: |
-          if [ -z "$GITHUBTOKEN" ]; then
-            echo "ERROR: GITHUBTOKEN secret is not set!"
-            echo "Please add a GitHub Personal Access Token as a secret named GITHUBTOKEN"
-            echo ""
-            echo "For fine-grained tokens:"
-            echo "  - Go to GitHub Settings > Developer settings > Personal access tokens > Fine-grained tokens"
-            echo "  - Create token with repository access to the-luap/picpeak"
-            echo "  - Grant permissions: Contents (Read and Write), Metadata (Read)"
-            echo ""
-            echo "For classic tokens:"
-            echo "  - Go to GitHub Settings > Developer settings > Personal access tokens > Tokens (classic)"
-            echo "  - Create token with 'repo' scope"
-            exit 1
-          else
-            echo "✅ GitHub token is available (length: ${#GITHUBTOKEN})"
-            # Try to detect token type (fine-grained tokens are typically longer)
-            if [ ${#GITHUBTOKEN} -gt 80 ]; then
-              echo "📌 Token appears to be a fine-grained personal access token"
-            else
-              echo "📌 Token appears to be a classic personal access token"
-            fi
-          fi
-
-      - name: Push to GitHub
-        env:
-          GITHUBTOKEN: ${{ secrets.GITHUBTOKEN }}
-          GIT_TRACE: 1  # Enable Git trace for debugging if needed
-        run: |
-          # Remove existing github remote if it exists
-          git remote remove github || true
-          
-          # Configure Git to use the token for authentication
-          # This method works for both classic and fine-grained tokens
-          git config --global url."https://the-luap:${GITHUBTOKEN}@github.com/".insteadOf "https://github.com/"
-          
-          # Add GitHub remote (clean URL without credentials)
-          git remote add github https://github.com/the-luap/picpeak.git
-          
-          # Verify remote was added
-          echo "GitHub remote configuration:"
-          git remote -v
-          
-          # Push to GitHub main branch with error handling
-          echo "Pushing to GitHub..."
-          if git push github main --force 2>&1; then
-            echo "✅ Push to GitHub completed successfully!"
-          else
-            echo "❌ Push to GitHub failed!"
-            echo ""
-            echo "Common issues and solutions:"
-            echo "1. Token permissions: Ensure your token has 'Contents: write' permission"
-            echo "2. Token expiration: Check if your token has expired"
-            echo "3. Repository access: Verify the token has access to the-luap/picpeak repository"
-            echo ""
-            echo "For fine-grained tokens, required permissions:"
-            echo "  - Repository access: the-luap/picpeak"
-            echo "  - Repository permissions: Contents (Read and Write), Metadata (Read)"
-            echo ""
-            echo "For classic tokens, required scope: 'repo'"
-            exit 1
-          fi
-          
-          # Clean up the git config after push
-          git config --global --unset url."https://the-luap:${GITHUBTOKEN}@github.com/".insteadOf
-
-      - name: Workflow completed
-        run: |
-          echo "✅ Mirror to GitHub workflow completed successfully!"
-          echo "📊 Repository mirrored to: https://github.com/the-luap/picpeak"
-          echo "🔒 Sensitive files have been removed from the mirror"

.gitea/workflows/test.yml

@@ -1,52 +0,0 @@
-name: Test and Lint
-
-on:
-  push:
-    branches: [ main, develop ]
-  pull_request:
-    branches: [ main ]
-
-jobs:
-  backend-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: '18'
-      
-      - name: Install backend dependencies
-        working-directory: ./backend
-        run: npm ci
-      
-      - name: Run backend linting
-        working-directory: ./backend
-        run: npm run lint || true  # Continue on lint errors for now
-      
-      - name: Run backend tests
-        working-directory: ./backend
-        run: npm test || true  # Continue on test failures for now
-  
-  frontend-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: '18'
-      
-      - name: Install frontend dependencies
-        working-directory: ./frontend
-        run: npm ci --legacy-peer-deps
-      
-      - name: Run frontend linting
-        working-directory: ./frontend
-        run: npm run lint || true  # Continue on lint errors for now
-      
-      - name: Build frontend
-        working-directory: ./frontend
-        run: npm run build

.gitea/workflows/version-and-release.yml

@@ -1,267 +0,0 @@
-name: Version and Release
-
-on:
-  push:
-    branches: [ main ]
-    paths-ignore:
-      - '**.md'
-      - '.gitea/**'
-      - '.drone.yml'
-
-jobs:
-  version-bump:
-    runs-on: ubuntu-latest
-    outputs:
-      new_version: ${{ steps.version.outputs.new_version }}
-      version_changed: ${{ steps.version.outputs.version_changed }}
-      component_changed: ${{ steps.version.outputs.component_changed }}
-    steps:
-      - uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.GITEA_TOKEN || github.token }}
-      
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: '18'
-      
-      - name: Configure Git
-        run: |
-          git config --global user.name 'Gitea Actions Bot'
-          git config --global user.email 'actions@gitea.local'
-      
-      - name: Detect changes and bump version
-        id: version
-        run: |
-          set -e  # Exit on error
-          
-          echo "=== Debug Info ==="
-          echo "GitHub event before: ${{ github.event.before }}"
-          echo "GitHub SHA: ${{ github.sha }}"
-          echo "Current directory: $(pwd)"
-          echo "Git log (last 5): $(git log --oneline -5)"
-          
-          # Get the commit range for changed files
-          if [ "${{ github.event.before }}" != "0000000000000000000000000000000000000000" ] && [ "${{ github.event.before }}" != "" ]; then
-            COMMIT_RANGE="${{ github.event.before }}..${{ github.sha }}"
-            echo "Using commit range: $COMMIT_RANGE"
-            CHANGED_FILES=$(git diff --name-only $COMMIT_RANGE || echo "")
-          else
-            # First commit or no previous commit, check against HEAD~1 if it exists
-            if git rev-parse HEAD~1 >/dev/null 2>&1; then
-              COMMIT_RANGE="HEAD~1..HEAD"
-              echo "Using commit range: $COMMIT_RANGE"
-              CHANGED_FILES=$(git diff --name-only $COMMIT_RANGE || echo "")
-            else
-              echo "First commit detected, checking all files"
-              CHANGED_FILES=$(git ls-files)
-            fi
-          fi
-          
-          echo "Changed files:"
-          echo "$CHANGED_FILES"
-          
-          # Check what changed (using echo to pipe to grep to avoid grep exit codes)
-          BACKEND_CHANGED=$(echo "$CHANGED_FILES" | grep -c '^backend/' || echo "0")
-          FRONTEND_CHANGED=$(echo "$CHANGED_FILES" | grep -c '^frontend/' || echo "0")
-          ROOT_CHANGED=$(echo "$CHANGED_FILES" | grep -c -E '^(package\.json|docker-compose|Dockerfile|scripts/)' || echo "0")
-          
-          echo "Backend files changed: $BACKEND_CHANGED"
-          echo "Frontend files changed: $FRONTEND_CHANGED"
-          echo "Root files changed: $ROOT_CHANGED"
-          
-          # Get current versions
-          BACKEND_VERSION=$(node -p "require('./backend/package.json').version" 2>/dev/null || echo "1.0.0")
-          FRONTEND_VERSION=$(node -p "require('./frontend/package.json').version" 2>/dev/null || echo "1.0.0")
-          
-          echo "Current backend version: $BACKEND_VERSION"
-          echo "Current frontend version: $FRONTEND_VERSION"
-          
-          # Determine what to update based on changes
-          BACKEND_UPDATE=false
-          FRONTEND_UPDATE=false
-          COMPONENT_CHANGED="none"
-          
-          if [ "$ROOT_CHANGED" -gt 0 ]; then
-            # Root changes affect both components
-            BACKEND_UPDATE=true
-            FRONTEND_UPDATE=true
-            COMPONENT_CHANGED="both"
-            SOURCE_VERSION=$BACKEND_VERSION
-            echo "Root changes detected - updating both components"
-          elif [ "$BACKEND_CHANGED" -gt 0 ] && [ "$FRONTEND_CHANGED" -gt 0 ]; then
-            # Both components changed
-            BACKEND_UPDATE=true
-            FRONTEND_UPDATE=true
-            COMPONENT_CHANGED="both"
-            # Use the higher version as source
-            if [ "$(printf '%s\n' "$BACKEND_VERSION" "$FRONTEND_VERSION" | sort -V | tail -n1)" = "$BACKEND_VERSION" ]; then
-              SOURCE_VERSION=$BACKEND_VERSION
-            else
-              SOURCE_VERSION=$FRONTEND_VERSION
-            fi
-            echo "Both backend and frontend changed - updating both"
-          elif [ "$BACKEND_CHANGED" -gt 0 ]; then
-            # Only backend changed
-            BACKEND_UPDATE=true
-            COMPONENT_CHANGED="backend"
-            SOURCE_VERSION=$BACKEND_VERSION
-            echo "Only backend changed - updating backend"
-          elif [ "$FRONTEND_CHANGED" -gt 0 ]; then
-            # Only frontend changed
-            FRONTEND_UPDATE=true
-            COMPONENT_CHANGED="frontend"
-            SOURCE_VERSION=$FRONTEND_VERSION
-            echo "Only frontend changed - updating frontend"
-          else
-            echo "No relevant changes detected"
-            echo "version_changed=false" >> $GITHUB_OUTPUT
-            echo "component_changed=none" >> $GITHUB_OUTPUT
-            echo "new_version=" >> $GITHUB_OUTPUT
-            exit 0
-          fi
-          
-          echo "Component changed: $COMPONENT_CHANGED"
-          echo "Source version: $SOURCE_VERSION"
-          echo "Backend update: $BACKEND_UPDATE"
-          echo "Frontend update: $FRONTEND_UPDATE"
-          
-          # Calculate new version
-          IFS='.' read -r -a version_parts <<< "$SOURCE_VERSION"
-          MAJOR="${version_parts[0]}"
-          MINOR="${version_parts[1]}"
-          PATCH="${version_parts[2]}"
-          
-          # Increment patch version
-          NEW_PATCH=$((PATCH + 1))
-          NEW_VERSION="$MAJOR.$MINOR.$NEW_PATCH"
-          
-          echo "New version: $NEW_VERSION"
-          echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT
-          echo "component_changed=$COMPONENT_CHANGED" >> $GITHUB_OUTPUT
-          
-          # Update versions in package.json files
-          if [ "$BACKEND_UPDATE" = true ]; then
-            echo "Updating backend version to $NEW_VERSION"
-            cd backend && npm version $NEW_VERSION --no-git-tag-version
-            cd ..
-          fi
-          
-          if [ "$FRONTEND_UPDATE" = true ]; then
-            echo "Updating frontend version to $NEW_VERSION"
-            cd frontend && npm version $NEW_VERSION --no-git-tag-version
-            cd ..
-          fi
-          
-          # Check if there are changes to commit
-          if [[ -n $(git status --porcelain) ]]; then
-            echo "version_changed=true" >> $GITHUB_OUTPUT
-          else
-            echo "version_changed=false" >> $GITHUB_OUTPUT
-          fi
-      
-      - name: Commit version bump
-        if: steps.version.outputs.version_changed == 'true'
-        run: |
-          set -e  # Exit on any error
-          
-          # First, ensure we have the latest changes
-          echo "Fetching latest changes..."
-          git fetch origin main
-          
-          # Check if we're behind and need to update
-          LOCAL=$(git rev-parse HEAD)
-          REMOTE=$(git rev-parse origin/main)
-          
-          if [ "$LOCAL" != "$REMOTE" ]; then
-            echo "Local is behind remote, pulling changes..."
-            git pull origin main --no-rebase
-          fi
-          
-          COMPONENT="${{ steps.version.outputs.component_changed }}"
-          
-          if [ "$COMPONENT" = "both" ]; then
-            git add backend/package.json backend/package-lock.json frontend/package.json frontend/package-lock.json
-            git commit -m "chore: bump version to ${{ steps.version.outputs.new_version }} (backend + frontend)"
-          elif [ "$COMPONENT" = "backend" ]; then
-            git add backend/package.json backend/package-lock.json
-            git commit -m "chore: bump backend version to ${{ steps.version.outputs.new_version }}"
-          elif [ "$COMPONENT" = "frontend" ]; then
-            git add frontend/package.json frontend/package-lock.json
-            git commit -m "chore: bump frontend version to ${{ steps.version.outputs.new_version }}"
-          fi
-          
-          # Pull latest changes before pushing to avoid conflicts
-          echo "Pulling latest changes from origin/main..."
-          if ! git pull --rebase origin main; then
-            echo "Rebase failed, attempting to resolve..."
-            # If rebase fails, abort and try a regular merge
-            git rebase --abort || true
-            git pull origin main --no-rebase
-          fi
-          
-          # Push the changes with retry logic
-          echo "Pushing version bump..."
-          PUSH_SUCCESS=false
-          
-          for i in 1 2 3; do
-            echo "Push attempt $i of 3..."
-            
-            # Try to push
-            if git push origin main 2>&1; then
-              echo "Successfully pushed version bump on attempt $i"
-              PUSH_SUCCESS=true
-              break
-            else
-              echo "Push failed on attempt $i"
-              
-              if [ $i -lt 3 ]; then
-                echo "Waiting 5 seconds before retry..."
-                sleep 5
-                
-                echo "Pulling latest changes..."
-                git fetch origin main
-                
-                # Try rebase first, fall back to merge
-                if ! git rebase origin/main; then
-                  echo "Rebase failed, trying merge..."
-                  git rebase --abort 2>/dev/null || true
-                  git pull origin main --no-rebase
-                fi
-              fi
-            fi
-          done
-          
-          if [ "$PUSH_SUCCESS" = "false" ]; then
-            echo "ERROR: Failed to push after 3 attempts"
-            exit 1
-          fi
-      
-      - name: Create Git tag
-        if: steps.version.outputs.version_changed == 'true'
-        run: |
-          COMPONENT="${{ steps.version.outputs.component_changed }}"
-          
-          if [ "$COMPONENT" = "both" ]; then
-            TAG_MESSAGE="Release v${{ steps.version.outputs.new_version }} (backend + frontend)"
-          elif [ "$COMPONENT" = "backend" ]; then
-            TAG_MESSAGE="Release v${{ steps.version.outputs.new_version }} (backend)"
-          elif [ "$COMPONENT" = "frontend" ]; then
-            TAG_MESSAGE="Release v${{ steps.version.outputs.new_version }} (frontend)"
-          fi
-          
-          git tag -a "v${{ steps.version.outputs.new_version }}" -m "$TAG_MESSAGE"
-          git push origin "v${{ steps.version.outputs.new_version }}"
-  
-  trigger-drone:
-    needs: version-bump
-    if: needs.version-bump.outputs.version_changed == 'true'
-    runs-on: ubuntu-latest
-    steps:
-      - name: Trigger Drone Build
-        run: |
-          echo "Version bumped to ${{ needs.version-bump.outputs.new_version }}"
-          echo "Component(s) changed: ${{ needs.version-bump.outputs.component_changed }}"
-          echo "Drone will automatically trigger on the new tag"
-          # Drone CI will automatically trigger on the tag push event

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,47 +0,0 @@
----
-name: Bug report
-about: Create a report to help us improve PicPeak
-title: '[BUG] '
-labels: 'bug'
-assignees: ''
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-1. Go to '...'
-2. Click on '....'
-3. Scroll down to '....'
-4. See error
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
-
-**Screenshots**
-If applicable, add screenshots to help explain your problem.
-
-**Environment (please complete the following information):**
- - OS: [e.g. Ubuntu 22.04]
- - Browser: [e.g. Chrome 120, Safari 17]
- - PicPeak Version: [e.g. 1.0.22]
- - Deployment Method: [e.g. Docker Compose, Manual]
- - Database: [e.g. PostgreSQL 15, SQLite]
-
-**Logs**
-Please include relevant logs:
-```
-# Backend logs
-docker-compose logs backend | tail -50
-
-# Frontend console errors
-[paste any browser console errors]
-```
-
-**Additional context**
-Add any other context about the problem here.
-
-**Possible Solution**
-If you have an idea how to fix the issue, please describe it here.

.github/ISSUE_TEMPLATE/config.yml

@@ -1,11 +0,0 @@
-blank_issues_enabled: false
-contact_links:
-  - name: 📚 Documentation
-    url: https://github.com/the-luap/picpeak/blob/main/DEPLOYMENT.md
-    about: Please read the documentation before opening an issue
-  - name: 💬 Discussions
-    url: https://github.com/the-luap/picpeak/discussions
-    about: Ask questions and discuss with the community
-  - name: 🔒 Security Issues
-    url: https://github.com/the-luap/picpeak/blob/main/SECURITY.md
-    about: Please review our security policy for reporting vulnerabilities

.github/ISSUE_TEMPLATE/documentation.md

@@ -1,33 +0,0 @@
----
-name: Documentation
-about: Report issues or improvements needed in documentation
-title: '[DOCS] '
-labels: 'documentation'
-assignees: ''
-
----
-
-**What documentation needs improvement?**
-Please specify which document or section needs attention:
-- [ ] README.md
-- [ ] DEPLOYMENT.md
-- [ ] CONTRIBUTING.md
-- [ ] API Documentation
-- [ ] Code Comments
-- [ ] Other: ___________
-
-**Describe the issue**
-What's wrong or missing in the documentation?
-
-**Suggested improvement**
-How would you improve this documentation?
-
-**Target audience**
-Who is this documentation for?
-- [ ] New users setting up PicPeak
-- [ ] Developers contributing to the project
-- [ ] System administrators
-- [ ] End users (photographers/clients)
-
-**Additional context**
-Add any other context, examples, or references here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,38 +0,0 @@
----
-name: Feature request
-about: Suggest an idea for PicPeak
-title: '[FEATURE] '
-labels: 'enhancement'
-assignees: ''
-
----
-
-**Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-**Describe the solution you'd like**
-A clear and concise description of what you want to happen.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
-
-**Use Case**
-Please describe how this feature would be used:
-- Who would use it? (photographers, clients, admins)
-- When would they use it?
-- Why is it important?
-
-**Similar Features**
-Are there similar features in:
-- PicDrop
-- Scrapbook.de
-- Other photo sharing platforms
-
-**Mockups or Examples**
-If applicable, add mockups, diagrams, or links to similar implementations.
-
-**Additional context**
-Add any other context or screenshots about the feature request here.
-
-**Implementation Ideas**
-If you have technical ideas about how this could be implemented, please share them.

.github/ISSUE_TEMPLATE/question.md

@@ -1,26 +0,0 @@
----
-name: Question
-about: Ask a question about PicPeak
-title: '[QUESTION] '
-labels: 'question'
-assignees: ''
-
----
-
-**Question**
-What would you like to know about PicPeak?
-
-**Context**
-Please provide context to help us answer your question better:
-- What are you trying to achieve?
-- What have you already tried?
-- Which documentation have you consulted?
-
-**Environment**
-If relevant to your question:
-- PicPeak Version:
-- Deployment Method:
-- Operating System:
-
-**Related Issues or Discussions**
-Link to any related issues, discussions, or documentation.

.github/ISSUE_TEMPLATE/security_vulnerability.md

@@ -1,37 +0,0 @@
----
-name: Security Vulnerability
-about: Report security issues privately
-title: '[SECURITY] '
-labels: 'security'
-assignees: ''
-
----
-
-⚠️ **IMPORTANT: For serious security vulnerabilities, please DO NOT create a public issue.**
-
-Instead, please email security@example.com with the details.
-
-For minor security improvements or questions, you can use this template:
-
-**Type of Security Issue**
-- [ ] Authentication/Authorization
-- [ ] Data Exposure
-- [ ] Input Validation
-- [ ] Configuration Issue
-- [ ] Dependency Vulnerability
-- [ ] Other: ___________
-
-**Description**
-Brief description of the security concern.
-
-**Impact**
-What could an attacker potentially do?
-
-**Steps to Reproduce**
-If applicable, how can this be reproduced?
-
-**Suggested Fix**
-If you have ideas on how to fix this issue.
-
-**References**
-Any relevant security advisories, CVEs, or documentation.

.github/pull_request_template.md

@@ -1,49 +0,0 @@
-## Description
-
-Please include a summary of the changes and which issue is fixed. Include relevant motivation and context.
-
-Fixes # (issue)
-
-## Type of change
-
-Please delete options that are not relevant.
-
-- [ ] Bug fix (non-breaking change which fixes an issue)
-- [ ] New feature (non-breaking change which adds functionality)
-- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
-- [ ] Documentation update
-- [ ] Performance improvement
-- [ ] Code refactoring
-
-## How Has This Been Tested?
-
-Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce.
-
-- [ ] Unit tests pass (`npm test`)
-- [ ] Manual testing completed
-- [ ] Tested on Docker deployment
-- [ ] Tested on production-like environment
-
-**Test Configuration**:
-* PicPeak Version:
-* Node.js Version:
-* Database: PostgreSQL / SQLite
-* Browser:
-
-## Checklist:
-
-- [ ] My code follows the style guidelines of this project
-- [ ] I have performed a self-review of my code
-- [ ] I have commented my code, particularly in hard-to-understand areas
-- [ ] I have made corresponding changes to the documentation
-- [ ] My changes generate no new warnings
-- [ ] I have added tests that prove my fix is effective or that my feature works
-- [ ] New and existing unit tests pass locally with my changes
-- [ ] Any dependent changes have been merged and published
-- [ ] I have updated the CHANGELOG.md file
-
-## Screenshots (if appropriate):
-
-## Additional Notes:
-
-Add any additional notes, concerns, or discussion points here.

.github/workflows/README-DOCKER.md

@@ -1,213 +0,0 @@
-# Docker Build and Push Workflow
-
-This GitHub Actions workflow automatically builds and pushes Docker images for both the backend and frontend to GitHub Container Registry (ghcr.io).
-
-## Features
-
-- 🔧 **Automatic builds** on push to main/develop branches, PRs, and releases
-- 🏗️ **Multi-architecture support** (linux/amd64 and linux/arm64)
-- 🏷️ **Smart tagging** based on branches, versions, and commits
-- 🔒 **Security scanning** with Trivy vulnerability scanner
-- 💾 **Build caching** for faster subsequent builds
-- 📊 **Build summaries** in GitHub Actions UI
-
-## Authentication
-
-The workflow uses the built-in `GITHUB_TOKEN` for authentication with GitHub Container Registry. No additional setup or personal access tokens are required.
-
-### Required Permissions
-
-The workflow automatically sets the necessary permissions:
-- `contents: read` - To checkout the repository
-- `packages: write` - To push images to ghcr.io
-- `security-events: write` - To upload security scan results
-
-## Image Tags
-
-Images are automatically tagged based on the trigger event:
-
-| Event | Tags Generated |
-|-------|---------------|
-| Push to main | `latest`, `main`, `main-<short-sha>` |
-| Push to develop | `develop`, `develop-<short-sha>` |
-| Pull Request | `pr-<number>` |
-| Release (v1.2.3) | `1.2.3`, `1.2`, `1`, `latest` |
-| Manual trigger | Based on branch + optional push |
-
-## Usage
-
-### Pull Images
-
-Once published, images can be pulled using:
-
-```bash
-# Pull backend image
-docker pull ghcr.io/the-luap/picpeak/backend:latest
-
-# Pull frontend image
-docker pull ghcr.io/the-luap/picpeak/frontend:latest
-
-# Pull specific version
-docker pull ghcr.io/the-luap/picpeak/backend:v1.0.0
-
-# Pull for specific architecture
-docker pull --platform linux/arm64 ghcr.io/the-luap/picpeak/backend:latest
-```
-
-### Using in Docker Compose
-
-```yaml
-version: '3.8'
-
-services:
-  backend:
-    image: ghcr.io/the-luap/picpeak/backend:latest
-    environment:
-      - NODE_ENV=production
-    ports:
-      - "3001:3000"
-
-  frontend:
-    image: ghcr.io/the-luap/picpeak/frontend:latest
-    ports:
-      - "80:80"
-```
-
-### Using in Kubernetes
-
-```yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: picpeak-backend
-spec:
-  replicas: 3
-  template:
-    spec:
-      containers:
-      - name: backend
-        image: ghcr.io/the-luap/picpeak/backend:latest
-        imagePullPolicy: Always
-```
-
-## Manual Workflow Trigger
-
-You can manually trigger the workflow from the Actions tab:
-
-1. Go to Actions → "Build and Push Docker Images"
-2. Click "Run workflow"
-3. Select branch and whether to push images
-4. Click "Run workflow"
-
-## Security Scanning
-
-The workflow includes Trivy vulnerability scanning that:
-- Scans for CRITICAL and HIGH severity vulnerabilities
-- Uploads results to GitHub Security tab
-- Available under Security → Code scanning alerts
-
-## Build Optimization
-
-The workflow uses several optimization techniques:
-
-1. **GitHub Actions Cache**: Speeds up builds by caching layers
-2. **Multi-stage builds**: Reduces final image size
-3. **Parallel builds**: Backend and frontend build simultaneously
-4. **Smart rebuilds**: Only rebuilds changed components
-
-## Troubleshooting
-
-### Permission Denied Errors
-
-If you encounter permission errors when pushing images:
-
-1. **First-time setup**: The first push creates a private package. You may need to:
-   - Go to your package settings at `https://github.com/users/YOUR_USERNAME/packages`
-   - Link the package to your repository
-   - Set package visibility (public/private)
-
-2. **Organization repositories**: Ensure the organization allows GitHub Actions to create packages
-
-### Build Failures
-
-Check the workflow logs in the Actions tab for detailed error messages. Common issues:
-- Missing dependencies in package.json
-- Dockerfile syntax errors
-- Network issues during package installation
-
-### Image Not Found
-
-If images aren't visible after successful push:
-- Check package visibility settings
-- Ensure you're authenticated to pull private images:
-  ```bash
-  echo $GITHUB_TOKEN | docker login ghcr.io -u YOUR_USERNAME --password-stdin
-  ```
-
-## Package Management
-
-### View Packages
-
-Your Docker images are available at:
-- Backend: `https://github.com/users/the-luap/packages/container/package/picpeak%2Fbackend`
-- Frontend: `https://github.com/users/the-luap/packages/container/package/picpeak%2Ffrontend`
-
-### Delete Old Versions
-
-To save storage, you can delete old versions:
-1. Go to package settings
-2. Click on "Manage versions"
-3. Select versions to delete
-4. Click "Delete selected versions"
-
-### Set Retention Policy
-
-Configure automatic cleanup in package settings:
-1. Go to package settings
-2. Click on "Manage Actions access"
-3. Set retention days for untagged versions
-
-## Best Practices
-
-1. **Use semantic versioning** for releases (e.g., v1.2.3)
-2. **Test images locally** before pushing to production
-3. **Monitor security alerts** from Trivy scans
-4. **Clean up old images** regularly to save storage
-5. **Use specific tags** in production (avoid `latest`)
-
-## Advanced Configuration
-
-### Custom Registry
-
-To use a different registry, update the workflow:
-
-```yaml
-env:
-  REGISTRY: docker.io  # or your custom registry
-  BACKEND_IMAGE_NAME: yourusername/picpeak-backend
-```
-
-### Additional Platforms
-
-To build for more platforms:
-
-```yaml
-platforms: linux/amd64,linux/arm64,linux/arm/v7
-```
-
-### Custom Build Arguments
-
-Add build arguments in the workflow:
-
-```yaml
-build-args: |
-  NODE_VERSION=20
-  API_URL=${{ secrets.API_URL }}
-```
-
-## Related Documentation
-
-- [GitHub Container Registry Docs](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry)
-- [Docker Build Action](https://github.com/docker/build-push-action)
-- [Trivy Security Scanner](https://github.com/aquasecurity/trivy)
-- [Multi-platform Builds](https://docs.docker.com/build/building/multi-platform/)

.github/workflows/docker-build.yml

@@ -1,223 +0,0 @@
-name: Build and Push Docker Images
-
-on:
-  push:
-    branches: [ main, develop ]
-    tags: [ 'v*.*.*' ]
-  pull_request:
-    branches: [ main ]
-  release:
-    types: [ published ]
-  workflow_dispatch:
-    inputs:
-      push:
-        description: 'Push images to registry'
-        required: false
-        default: 'false'
-        type: choice
-        options:
-          - 'true'
-          - 'false'
-
-env:
-  REGISTRY: ghcr.io
-  BACKEND_IMAGE_NAME: ${{ github.repository }}/backend
-  FRONTEND_IMAGE_NAME: ${{ github.repository }}/frontend
-
-jobs:
-  build-backend:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-      security-events: write
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-      with:
-        platforms: linux/amd64,linux/arm64
-
-    - name: Log in to Container Registry
-      if: github.event_name != 'pull_request' || github.event.inputs.push == 'true'
-      uses: docker/login-action@v3
-      with:
-        registry: ${{ env.REGISTRY }}
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Extract metadata for Backend
-      id: meta-backend
-      uses: docker/metadata-action@v5
-      with:
-        images: ${{ env.REGISTRY }}/${{ env.BACKEND_IMAGE_NAME }}
-        labels: |
-          org.opencontainers.image.title=PicPeak Backend
-          org.opencontainers.image.description=PicPeak photo sharing platform backend service
-          org.opencontainers.image.vendor=PicPeak
-          maintainer=${{ github.repository_owner }}
-        tags: |
-          type=ref,event=branch
-          type=ref,event=pr
-          type=semver,pattern={{version}}
-          type=semver,pattern={{major}}.{{minor}}
-          type=semver,pattern={{major}}
-          type=sha,prefix={{branch}}-,format=short
-          type=raw,value=latest,enable={{is_default_branch}}
-
-    - name: Build and push Backend Docker image
-      uses: docker/build-push-action@v5
-      with:
-        context: ./backend
-        file: ./backend/Dockerfile
-        push: ${{ github.event_name != 'pull_request' || github.event.inputs.push == 'true' }}
-        tags: ${{ steps.meta-backend.outputs.tags }}
-        labels: ${{ steps.meta-backend.outputs.labels }}
-        platforms: linux/amd64,linux/arm64
-        cache-from: type=gha,scope=backend
-        cache-to: type=gha,mode=max,scope=backend
-        build-args: |
-          CACHEBUST=${{ github.run_number }}
-          BUILD_DATE=${{ github.event.head_commit.timestamp }}
-          VCS_REF=${{ github.sha }}
-          VERSION=${{ steps.meta-backend.outputs.version }}
-
-    - name: Run Trivy vulnerability scanner
-      if: github.event_name != 'pull_request'
-      uses: aquasecurity/trivy-action@master
-      with:
-        image-ref: ${{ env.REGISTRY }}/${{ env.BACKEND_IMAGE_NAME }}:${{ steps.meta-backend.outputs.version }}
-        format: 'sarif'
-        output: 'trivy-backend.sarif'
-        severity: 'CRITICAL,HIGH'
-        timeout: '10m'
-
-    - name: Upload Trivy scan results to GitHub Security tab
-      if: github.event_name != 'pull_request'
-      uses: github/codeql-action/upload-sarif@v3
-      with:
-        sarif_file: 'trivy-backend.sarif'
-        category: 'backend-vulnerabilities'
-
-  build-frontend:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-      security-events: write
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-      with:
-        platforms: linux/amd64,linux/arm64
-
-    - name: Log in to Container Registry
-      if: github.event_name != 'pull_request' || github.event.inputs.push == 'true'
-      uses: docker/login-action@v3
-      with:
-        registry: ${{ env.REGISTRY }}
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Extract metadata for Frontend
-      id: meta-frontend
-      uses: docker/metadata-action@v5
-      with:
-        images: ${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE_NAME }}
-        labels: |
-          org.opencontainers.image.title=PicPeak Frontend
-          org.opencontainers.image.description=PicPeak photo sharing platform frontend application
-          org.opencontainers.image.vendor=PicPeak
-          maintainer=${{ github.repository_owner }}
-        tags: |
-          type=ref,event=branch
-          type=ref,event=pr
-          type=semver,pattern={{version}}
-          type=semver,pattern={{major}}.{{minor}}
-          type=semver,pattern={{major}}
-          type=sha,prefix={{branch}}-,format=short
-          type=raw,value=latest,enable={{is_default_branch}}
-
-    - name: Build and push Frontend Docker image
-      uses: docker/build-push-action@v5
-      with:
-        context: ./frontend
-        file: ./frontend/Dockerfile
-        push: ${{ github.event_name != 'pull_request' || github.event.inputs.push == 'true' }}
-        tags: ${{ steps.meta-frontend.outputs.tags }}
-        labels: ${{ steps.meta-frontend.outputs.labels }}
-        platforms: linux/amd64,linux/arm64
-        cache-from: type=gha,scope=frontend
-        cache-to: type=gha,mode=max,scope=frontend
-        build-args: |
-          CACHEBUST=${{ github.run_number }}
-          BUILD_DATE=${{ github.event.head_commit.timestamp }}
-          VCS_REF=${{ github.sha }}
-          VERSION=${{ steps.meta-frontend.outputs.version }}
-
-    - name: Run Trivy vulnerability scanner
-      if: github.event_name != 'pull_request'
-      uses: aquasecurity/trivy-action@master
-      with:
-        image-ref: ${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE_NAME }}:${{ steps.meta-frontend.outputs.version }}
-        format: 'sarif'
-        output: 'trivy-frontend.sarif'
-        severity: 'CRITICAL,HIGH'
-        timeout: '10m'
-
-    - name: Upload Trivy scan results to GitHub Security tab
-      if: github.event_name != 'pull_request'
-      uses: github/codeql-action/upload-sarif@v3
-      with:
-        sarif_file: 'trivy-frontend.sarif'
-        category: 'frontend-vulnerabilities'
-
-  # Note: The publish-manifest job is not needed since docker/build-push-action@v5
-  # automatically creates multi-arch manifests when building for multiple platforms.
-  # The images are already properly tagged and include all architectures.
-
-  summary:
-    needs: [build-backend, build-frontend]
-    if: always()
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    
-    steps:
-    - name: Build Summary
-      run: |
-        echo "## 🐳 Docker Build Summary" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        
-        if [[ "${{ needs.build-backend.result }}" == "success" ]]; then
-          echo "✅ **Backend**: Successfully built" >> $GITHUB_STEP_SUMMARY
-        else
-          echo "❌ **Backend**: Build failed" >> $GITHUB_STEP_SUMMARY
-        fi
-        
-        if [[ "${{ needs.build-frontend.result }}" == "success" ]]; then
-          echo "✅ **Frontend**: Successfully built" >> $GITHUB_STEP_SUMMARY
-        else
-          echo "❌ **Frontend**: Build failed" >> $GITHUB_STEP_SUMMARY
-        fi
-        
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "### 📦 Images" >> $GITHUB_STEP_SUMMARY
-        echo "- Backend: \`${{ env.REGISTRY }}/${{ env.BACKEND_IMAGE_NAME }}\`" >> $GITHUB_STEP_SUMMARY
-        echo "- Frontend: \`${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE_NAME }}\`" >> $GITHUB_STEP_SUMMARY
-        
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "### 🏷️ Tags" >> $GITHUB_STEP_SUMMARY
-        echo "Images are tagged based on:" >> $GITHUB_STEP_SUMMARY
-        echo "- Branch name (for branch pushes)" >> $GITHUB_STEP_SUMMARY
-        echo "- PR number (for pull requests)" >> $GITHUB_STEP_SUMMARY
-        echo "- Version tags (for releases)" >> $GITHUB_STEP_SUMMARY
-        echo "- Short SHA with branch prefix" >> $GITHUB_STEP_SUMMARY
-        echo "- \`latest\` (for main branch)" >> $GITHUB_STEP_SUMMARY

.gitignore

@@ -1,83 +0,0 @@
-# Dependencies
-node_modules/
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-
-# Environment files
-.env
-.env.local
-.env.development.local
-.env.test.local
-.env.production.local
-
-# Docker override file
-docker-compose.override.yml
-
-# Security - Never commit credentials
-ADMIN_CREDENTIALS.txt
-ADMIN_PASSWORD_RESET.txt
-*_CREDENTIALS.txt
-*_PASSWORD_RESET.txt
-
-# Storage and data
-storage/events/active/*
-storage/events/archived/*
-storage/thumbnails/*
-data/*.db
-data/*.db-journal
-logs/*
-
-# Build outputs
-build/
-dist/
-*.log
-
-# OS files
-.DS_Store
-Thumbs.db
-
-# IDE files
-.vscode/
-.idea/
-*.swp
-*.swo
-
-# Test coverage
-coverage/
-.nyc_output/
-
-# Temporary files
-*.tmp
-*.temp
-
-# Backup and test directories
-backups/
-test-archiver/
-
-# Keep directory structure
-!storage/events/active/.gitkeep
-!storage/events/archived/.gitkeep
-!storage/thumbnails/.gitkeep
-!data/.gitkeep
-!logs/.gitkeep
-
-# development files
-backend/.swarm/
-.claudedocs/
-backend/data/
-backend/docs/
-backend/logs/
-logs/
-storage/
-data/
-certbot/
-
-# Ignore local contributor guide copy
-AGENTS.md
-
-# Local artifacts from browser tooling
-.playwright-mcp/
-
-# Local SQLite files in backend
-backend/*.sqlite*

CLAUDE.md

@@ -1,386 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Product Overview
-
-A secure photo sharing platform designed for weddings and events, enabling photographers to share time-limited, password-protected galleries. The platform features automatic expiration, archiving, and a scrappbook.de-inspired modern, minimalist UI.
-
-## Architecture Overview
-
-- **Backend**: Node.js/Express API with SQLite/PostgreSQL, file-based photo storage
-- **Frontend**: React SPA with scrappbook.de-style design (requires implementation)
-- **Storage**: File-based with active/archived separation
-- **Services**: Background workers for email, archiving, file watching, and expiration monitoring
-- **Analytics**: Umami integration for engagement tracking
-
-## Essential Commands
-
-### Backend Development
-```bash
-cd backend
-npm install               # Install dependencies
-npm run migrate          # Initialize database schema
-npm run dev              # Start with hot-reload (port 3001)
-npm test                 # Run Jest tests
-npm run lint             # ESLint checks
-```
-
-### Running a Single Test
-```bash
-cd backend
-npm test -- path/to/test.test.js
-npm test -- --testNamePattern="test name"
-```
-
-### Production Deployment
-See [DEPLOYMENT_GUIDE.md](./DEPLOYMENT_GUIDE.md) for comprehensive deployment instructions including:
-- Docker Compose deployment
-- PM2 deployment
-- Manual installation
-- Non-nginx deployment options
-- SSL/HTTPS setup
-- Troubleshooting guide
-
-**⚠️ CRITICAL PRODUCTION NOTICE:**
-- Production runs on a SEPARATE SERVER - never assume local changes affect production
-- ALWAYS request production server details before any troubleshooting
-- NO trial-and-error approaches in production - data loss is unacceptable
-- Every change must be thoroughly analyzed and tested locally first
-
-## Key Product Requirements (from PRD)
-
-### Core Features
-1. **File-Based System**: Drop photos in folders → automatic gallery creation
-2. **Automatic Expiration**: Default 30 days, with 7-day warning emails
-3. **Password Protection**: Secure access with customizable passwords
-4. **Automatic Archiving**: ZIP compression and storage after expiration
-5. **Email Notifications**: Creation, warning, and expiration notifications
-6. **Analytics**: Umami tracking for views, downloads, and engagement
-
-### Folder Structure
-```
-/events/
-  ├── active/
-  │   ├── wedding-smith-jones-2024-06-15/
-  │   │   ├── collages/
-  │   │   └── individual/
-  │   └── birthday-emma-2024-07-20/
-  └── archived/
-      └── wedding-smith-jones-2024-06-15.zip
-```
-
-## Frontend Implementation Requirements
-
-### Design Style (scrappbook.de-inspired)
-- **Color Palette**: Primary green (#5C8762), neutral backgrounds
-- **Typography**: Clean, modern sans-serif (Noto Sans or similar)
-- **Layout**: Minimalist, modular sections with grid-based photo displays
-- **Aesthetic**: Professional yet approachable, photographer-focused
-
-### Key Frontend Components to Build
-1. **Landing Page**: Password entry with event preview
-2. **Gallery View**: 
-   - Responsive photo grid with lazy loading
-   - Toggle between collages/individual photos
-   - Prominent expiration banner
-   - Download urgency indicators
-3. **Photo Lightbox**: Full-screen viewing with zoom
-4. **Mobile-First**: Responsive design with touch gestures
-5. **Personalization**: Dynamic theming per event type
-
-### User Experience Priorities
-- Clear expiration warnings (sticky banner)
-- One-click "Download All" for urgent galleries
-- Smooth image loading with skeleton screens
-- Intuitive navigation between photo categories
-- Professional presentation matching photographer branding
-
-## Key Architecture Patterns
-
-### Authentication Flow
-- JWT-based with separate tokens for admin and gallery access
-- Gallery tokens include event-specific claims
-- Auth middleware: `backend/src/middleware/auth.js`
-  - `adminAuth` - Admin panel protection
-  - `photoAuth` - Protected photo access  
-  - `verifyGalleryAccess` - Gallery-specific validation
-
-### Database Schema (Knex/SQLite)
-Main tables:
-- `events` - Gallery metadata with expiration, custom messages, themes
-- `photos` - Photo records linked to events
-- `access_logs` - IP-based usage tracking
-- `email_queue` - Async email processing
-- `admin_users` - Admin authentication
-
-### Service Architecture
-Background services run as separate processes:
-- **emailService**: Processes email queue with retry logic
-- **archiveService**: Creates ZIP archives of expired events
-- **expirationChecker**: Cron job for expiration warnings
-- **fileWatcher**: Monitors for new photo uploads
-- **backupService**: Scheduled backups with checksum-based change detection
-
-### API Structure
-- `/api/admin/*` - Admin panel endpoints (requires adminAuth)
-- `/api/gallery/*` - Public gallery endpoints  
-- `/api/auth/*` - Authentication endpoints
-- Rate limiting: 100 req/15min (general), 5 req/15min (auth)
-
-## Critical Implementation Notes
-
-1. **Security**: All gallery access requires valid JWT with event-specific claims
-2. **Expiration**: Events auto-expire based on `expires_at`, with 7-day email warnings
-3. **Email Queue**: Async processing with retry logic, check `email_queue` table
-4. **File Processing**: Sharp library for thumbnail generation (300x300)
-5. **Frontend Status**: Only skeleton exists - requires full implementation based on PRD
-6. **Umami Analytics**: Track password entries, downloads, views, expiration warnings
-
-## Troubleshooting Guidelines
-
-### Before ANY Production Troubleshooting:
-1. **ALWAYS request specific details**:
-   - Production server URL/IP
-   - Current error messages/logs
-   - Recent changes or deployments
-   - Affected users/galleries
-   - Time of issue occurrence
-
-2. **Thorough Analysis Required**:
-   - Use detailed thinking/analysis for EVERY troubleshooting task
-   - Review all related code before suggesting changes
-   - Consider all potential side effects
-   - Never make assumptions about production environment
-
-3. **Safe Troubleshooting Steps**:
-   - First, reproduce issue in local/dev environment
-   - Analyze logs without modifying production
-   - Create detailed action plan before any changes
-   - Always have rollback strategy ready
-   - Document every step taken
-
-### Common Issues & Safe Approaches:
-- **Email not sending**: Check email_queue table, SMTP settings, service status
-- **Photos not loading**: Verify file permissions, storage paths, nginx config
-- **Gallery access issues**: Check JWT tokens, expiration dates, access_logs
-- **Performance problems**: Analyze with monitoring tools first, never experiment
-
-### Data Safety Rules:
-- NEVER delete or modify production data without explicit backup confirmation
-- ALWAYS verify backups exist before any data operations
-- NO direct database modifications without transaction safety
-- Log all actions for audit trail
-
-## Environment Variables
-
-### Backend (.env)
-- `JWT_SECRET` - Token signing
-- `ADMIN_URL`, `FRONTEND_URL` - CORS origins
-- `SMTP_*` - Email configuration
-- `DB_*` - PostgreSQL credentials (production)
-- `UMAMI_URL` - Umami instance URL (for server-side tracking)
-- `UMAMI_WEBSITE_ID` - Website ID from Umami
-
-### Frontend (.env)
-- `VITE_API_URL` - Backend API URL
-- `VITE_UMAMI_URL` - Umami analytics URL
-- `VITE_UMAMI_WEBSITE_ID` - Website ID from Umami
-- `VITE_UMAMI_SHARE_URL` - (Optional) Public share URL for embedded dashboard
-
-## Testing Approach
-- Jest with Supertest for API testing
-- Test files in `__tests__` directories
-- Database migrations run before tests
-- Mock email sending in tests
-
-## Umami Analytics Integration
-
-The frontend includes comprehensive Umami analytics integration for tracking user behavior and gallery performance.
-
-### Tracked Events:
-- **Gallery Events**:
-  - `gallery_password_entry` - Password attempts (success/failure)
-  - `gallery_photo_view` - Individual photo views
-  - `gallery_photo_download` - Single photo downloads
-  - `gallery_bulk_download` - Bulk/all photo downloads
-  - `gallery_expired` - Expired gallery access attempts
-- **Admin Events**:
-  - `admin_login` - Admin authentication
-  - `admin_event_created` - New event creation
-  - `admin_event_archived` - Event archiving
-  - `admin_event_deleted` - Event deletion
-  - `admin_settings_updated` - Settings changes
-- **User Behavior**:
-  - Search queries (with debouncing)
-  - Expiration warning views
-  - Page views with automatic tracking
-
-### Setup:
-1. Install Umami (self-hosted or cloud)
-2. Create a website in Umami dashboard
-3. Set environment variables:
-   ```
-   VITE_UMAMI_URL=https://your-umami-instance.com
-   VITE_UMAMI_WEBSITE_ID=your-website-id
-   VITE_UMAMI_SHARE_URL=https://your-umami-instance.com/share/...
-   ```
-
-### Analytics Dashboard:
-- Admin panel includes analytics page at `/admin/analytics`
-- Summary view with key metrics
-- Option to embed full Umami dashboard
-- Real-time event tracking
-
-## Accessibility & Performance Features
-
-### Accessibility (WCAG 2.1 AA Compliance)
-- **Error Boundaries**: Graceful error handling with recovery options
-- **Skip Links**: Skip to main content for keyboard navigation
-- **ARIA Labels**: Proper labeling for screen readers
-- **Focus Management**: Focus trap in modals, visible focus indicators
-- **Keyboard Navigation**: Full keyboard support in gallery lightbox (arrows, escape, +/-, d for download)
-- **Loading States**: Skeleton screens instead of spinners for better UX
-- **Offline Support**: Visual indicator when offline
-- **Form Validation**: Accessible error messages with aria-describedby
-
-### Performance Optimizations
-- **Lazy Loading**: Images load on scroll with Intersection Observer
-- **Skeleton Screens**: Instant visual feedback during loading
-- **Error Recovery**: Component-level error boundaries prevent full page crashes
-- **Optimistic Updates**: Immediate UI updates with background sync
-- **Debounced Search**: Prevents excessive API calls
-- **Analytics**: Non-blocking Umami integration
-
-### Component Library Enhancements
-- `<ErrorBoundary>` - Catches and displays errors gracefully
-- `<PageErrorBoundary>` - Full-page error recovery
-- `<Skeleton>` - Flexible skeleton loader with variants
-- `<OfflineIndicator>` - Network status monitoring
-- `<SkipLink>` - Accessibility navigation
-- `useFocusTrap` - Modal focus management hook
-- `useOnlineStatus` - Network status hook
-
-## Theme System & Branding
-
-### Theme Features
-- **Dynamic Theming**: CSS variables for runtime theme switching
-- **Preset Themes**: Default, Wedding, Birthday, Corporate, Minimal
-- **Customization Options**:
-  - Primary/Accent/Background/Text colors
-  - Font family selection
-  - Border radius (none, sm, md, lg)
-  - Custom logo upload
-  - Custom CSS injection
-- **Event-Specific Themes**: Override global theme per gallery
-- **Live Preview**: Real-time theme changes in admin panel
-
-### Theme Context API
-```typescript
-const { theme, setTheme, setThemeByName } = useTheme();
-```
-
-### Branding Settings
-- Company name, tagline, and support email
-- Custom footer text
-- Optional watermarking on downloads
-- Logo upload for gallery header
-
-### CSS Variables
-```css
---color-primary: #5C8762;
---color-primary-light: #7aa583;
---color-primary-dark: #4a6f4f;
---color-accent: #22c55e;
---color-background: #fafafa;
---color-text: #171717;
---font-family: 'Inter', sans-serif;
---border-radius: 0.5rem;
-```
-
-## Backup Service
-
-### Overview
-The backup service provides automated, scheduled backups of all photo data with checksum-based change detection to minimize transfer overhead.
-
-### Features
-- **Multiple Destinations**: Local directory, remote server (rsync), S3-compatible storage
-- **Change Detection**: SHA256 checksums track file changes, only modified files are backed up
-- **Scheduled Execution**: Configurable cron-based scheduling (default: 2 AM daily)
-- **Email Notifications**: Alerts on backup failure, optional success notifications
-- **Retention Management**: Automatic cleanup of old backup runs based on retention policy
-- **Progress Tracking**: Database storage of backup history, file states, and statistics
-
-### Configuration
-Backup settings are stored in `app_settings` table with `backup_` prefix:
-- `backup_enabled`: Enable/disable the service
-- `backup_schedule`: Cron expression (e.g., '0 2 * * *')
-- `backup_destination_type`: 'local', 'rsync', or 's3'
-- `backup_retention_days`: How long to keep backup history
-- `backup_include_archived`: Whether to backup archived events
-- `backup_exclude_patterns`: File patterns to exclude
-
-### API Endpoints
-- `GET /api/admin/backup/config` - Get current configuration
-- `PUT /api/admin/backup/config` - Update configuration
-- `GET /api/admin/backup/status` - Get backup status and history
-- `POST /api/admin/backup/run` - Trigger manual backup
-- `POST /api/admin/backup/test-connection` - Test destination connectivity
-
-### Testing
-Run backup service test: `npm run test-backup`
-
-### Database Tables
-- `backup_runs`: Tracks each backup execution with statistics
-- `backup_file_states`: Stores file checksums for change detection
-
-## Thumbnail Generation
-
-### Square Thumbnail Implementation (Issue #12 Fix)
-The system now generates **square 300x300px thumbnails** to prevent blurry/stretched images in the gallery grid:
-
-- **Problem**: Previously generated 300px width with proportional height (e.g., 300x200 for 3:2 photos), but CSS forced square display causing distortion
-- **Solution**: Thumbnails now use `cover` fit mode to crop to exact 300x300px dimensions with center positioning
-- **Configuration**: Settings stored in `app_settings` table with keys: `thumbnail_width`, `thumbnail_height`, `thumbnail_fit`, `thumbnail_quality`, `thumbnail_format`
-- **Migration**: Run `040_add_thumbnail_settings.js` to add default square thumbnail settings
-- **Regeneration Script**: Use `scripts/regenerate-square-thumbnails.js` to update existing thumbnails
-
-### Thumbnail Settings API
-- `GET /api/admin/thumbnails/settings` - Get current thumbnail configuration
-- `PUT /api/admin/thumbnails/settings` - Update thumbnail settings (requires regeneration)
-- `POST /api/admin/thumbnails/regenerate` - Regenerate all thumbnails with new settings
-- `GET /api/admin/thumbnails/regenerate/status` - Check regeneration progress
-
-## Success Metrics (from PRD)
-- Time to generate gallery: <2 minutes
-- Guest satisfaction: >90%
-- System uptime: 99.9%
-- Email delivery rate: >98%
-- Successful archiving: 100%
-
-## Documentation & Development Practices
-
-### Documentation Guidelines:
-- **NEVER create new documentation files for simple tasks**
-- **ALWAYS update existing documentation (like this CLAUDE.md)**
-- Only create new .md files when explicitly requested
-- Avoid creating temporary scripts for one-off tasks
-
-### Development Best Practices:
-- Test all changes thoroughly in local environment first
-- Use version control for all changes
-- Keep commits atomic and well-described
-- Review impact on all integrated services
-- Consider backward compatibility
-- Update tests when changing functionality
-
-### Production Deployment Checklist:
-- [ ] All tests passing locally
-- [ ] Linting and type checks pass
-- [ ] Database migrations tested with rollback plan
-- [ ] Environment variables documented
-- [ ] Backup strategy confirmed
-- [ ] Monitoring alerts configured
-- [ ] Rollback procedure documented
-- [ ] Stakeholders notified of maintenance window
-- always use docker deployment for testing

CODE_OF_CONDUCT.md

@@ -1,27 +0,0 @@
-# PicPeak Community Guidelines
-
-## Our Commitment
-
-We are committed to providing a welcoming and inspiring community for all photographers and developers.
-
-## Expected Behavior
-
-* Be respectful and considerate
-* Welcome newcomers and help them get started
-* Focus on what is best for the community
-* Show empathy towards other community members
-
-## Unacceptable Behavior
-
-* Trolling or insulting comments
-* Personal attacks
-* Public or private harassment
-* Publishing others' private information
-
-## Enforcement
-
-Instances of unacceptable behavior may be reported by [opening an issue](https://github.com/the-luap/picpeak/issues/new?labels=conduct) on GitHub. All complaints will be reviewed and investigated promptly and fairly.
-
-## Attribution
-
-This Code of Conduct is adapted from contributor-covenant.org, version 2.0.

CONTRIBUTING.md

@@ -1,160 +0,0 @@
-# Contributing to PicPeak
-
-First off, thank you for considering contributing to PicPeak! It's people like you that make PicPeak such a great tool for photographers worldwide.
-
-## 🤝 Code of Conduct
-
-This project and everyone participating in it is governed by the [PicPeak Code of Conduct](CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code.
-
-## 🎯 How Can I Contribute?
-
-### Reporting Bugs
-
-Before creating bug reports, please check the existing issues as you might find out that you don't need to create one. When you are creating a bug report, please include as many details as possible:
-
-* **Use a clear and descriptive title**
-* **Describe the exact steps to reproduce the problem**
-* **Provide specific examples to demonstrate the steps**
-* **Describe the behavior you observed and what you expected**
-* **Include screenshots if possible**
-* **Include your environment details** (OS, browser, Docker version, etc.)
-
-### Suggesting Enhancements
-
-Enhancement suggestions are tracked as GitHub issues. When creating an enhancement suggestion, please include:
-
-* **Use a clear and descriptive title**
-* **Provide a detailed description of the suggested enhancement**
-* **Provide specific examples to demonstrate the enhancement**
-* **Describe the current behavior and expected behavior**
-* **Explain why this enhancement would be useful**
-
-### Your First Code Contribution
-
-Unsure where to begin? You can start by looking through these issues:
-
-* [Good first issues](https://github.com/the-luap/picpeak/labels/good%20first%20issue) - issues which should only require a few lines of code
-* [Help wanted issues](https://github.com/the-luap/picpeak/labels/help%20wanted) - issues which need extra attention
-
-### Pull Requests
-
-1. **Fork the repo** and create your branch from `main`
-2. **Install dependencies**:
-   ```bash
-   cd backend && npm install
-   cd ../frontend && npm install
-   ```
-3. **Make your changes** and ensure:
-   - Code follows the existing style
-   - Tests pass: `npm test`
-   - Linting passes: `npm run lint`
-4. **Write tests** if you've added code
-5. **Update documentation** if needed
-6. **Create a Pull Request**
-
-## 💻 Development Setup
-
-### Prerequisites
-
-- Node.js 18+
-- Docker & Docker Compose
-- Git
-
-### Local Development
-
-```bash
-# Clone your fork
-git clone https://github.com/your-username/picpeak.git
-cd picpeak
-
-# Install dependencies
-cd backend && npm install
-cd ../frontend && npm install
-
-# Set up environment
-cp .env.example .env
-# Edit .env with your settings
-
-# Start development servers
-docker-compose -f docker-compose.dev.yml up
-```
-
-### Running Tests
-
-```bash
-# Backend tests
-cd backend && npm test
-
-# Frontend tests
-cd frontend && npm test
-
-# E2E tests
-npm run test:e2e
-```
-
-## 📝 Styleguides
-
-### Git Commit Messages
-
-* Use the present tense ("Add feature" not "Added feature")
-* Use the imperative mood ("Move cursor to..." not "Moves cursor to...")
-* Limit the first line to 72 characters or less
-* Reference issues and pull requests liberally after the first line
-* Consider starting the commit message with an applicable emoji:
-  * 🎨 `:art:` when improving the format/structure of the code
-  * 🐛 `:bug:` when fixing a bug
-  * 🔥 `:fire:` when removing code or files
-  * 📝 `:memo:` when writing docs
-  * 🚀 `:rocket:` when improving performance
-  * ✨ `:sparkles:` when adding a new feature
-
-### JavaScript/TypeScript Styleguide
-
-* Use ES6+ features
-* Prefer async/await over promises
-* Use meaningful variable names
-* Add JSDoc comments for functions
-* Follow ESLint rules
-
-### React Styleguide
-
-* Use functional components with hooks
-* Keep components small and focused
-* Use TypeScript for type safety
-* Follow the existing folder structure
-* Write tests for new components
-
-## 📦 Project Structure
-
-```
-picpeak/
-├── backend/
-│   ├── src/
-│   │   ├── routes/      # API endpoints
-│   │   ├── services/    # Business logic
-│   │   ├── middleware/  # Express middleware
-│   │   └── utils/       # Utilities
-│   └── migrations/      # Database migrations
-├── frontend/
-│   ├── src/
-│   │   ├── components/  # Reusable components
-│   │   ├── pages/       # Page components
-│   │   ├── services/    # API services
-│   │   └── hooks/       # Custom hooks
-│   └── public/          # Static assets
-```
-
-## 🔄 Release Process
-
-1. Update version numbers in package.json files
-2. Update CHANGELOG.md
-3. Create a new release on GitHub
-4. Docker images are automatically built and published
-
-## 📮 Contact
-
-- Create an [issue](https://github.com/the-luap/picpeak/issues) for bugs or features
-- Join [discussions](https://github.com/the-luap/picpeak/discussions) for questions
-- Security issues: Open a [security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub
-
-Thank you for contributing! 🎉

DEPLOYMENT_GUIDE.md

@@ -1,800 +0,0 @@
-# 🚀 PicPeak Deployment Guide
-
-This guide covers multiple deployment options for PicPeak, from simple local setups to production-ready configurations.
-
-## 🎯 Quick Start - Simple Setup (Recommended for Beginners)
-
-For the easiest installation without Docker or complex configurations, use our **unified setup script**:
-
-```bash
-curl -fsSL https://raw.githubusercontent.com/the-luap/picpeak/main/scripts/setup.sh -o setup.sh && \
-chmod +x setup.sh && \
-sudo ./setup.sh
-```
-
-This automated script handles everything including:
-- Choice between Docker or Native installation
-- OS detection and dependency installation
-- Database setup and service configuration
-- SSL/HTTPS setup (optional)
-
-Perfect for:
-- Small to medium deployments
-- Local or VPS installations  
-- Users new to server management
-- Quick testing and evaluation
-
-👉 **See [SIMPLE_SETUP.md](./SIMPLE_SETUP.md) for detailed instructions.**
-
----
-
-## 🐳 Docker Compose Deployment
-
-### Option 1: Using Pre-built Images (Recommended)
-
-PicPeak provides official Docker images via GitHub Container Registry for quick deployment without building:
-
-```bash
-# Clone repository for configuration files
-git clone https://github.com/the-luap/picpeak.git
-cd picpeak
-
-# Copy and configure environment
-cp .env.example .env
-nano .env  # Edit with your values
-
-# Use pre-built images deployment
-docker compose -f docker-compose.production.yml up -d
-```
-
-The production compose file uses:
-- **Backend**: `ghcr.io/the-luap/picpeak/backend:latest`
-- **Frontend**: `ghcr.io/the-luap/picpeak/frontend:latest`
-
-Available tags:
-- `latest` - Latest stable release
-- `main` - Latest main branch build
-- `develop` - Development branch (may be unstable)
-- `v1.0.0` - Specific version tags
-
-### Option 2: Building from Source
-
-If you need to customize the application or the pre-built images aren't available, you can build locally:
-
-## 📋 Table of Contents
-
-- [Prerequisites](#prerequisites)
-- [Quick Start](#quick-start)
-- [Configuration](#configuration)
-- [Deployment](#deployment)
-- [First Login](#first-login)
-- [Reverse Proxy Setup](#reverse-proxy-setup)
-- [Maintenance](#maintenance)
-- [Troubleshooting](#troubleshooting)
- - [External Media Library](#external-media-library)
-
-## Prerequisites
-
-- Docker and Docker Compose installed
-- Domain name (for production)
-- SMTP server credentials for emails
-- At least 2GB RAM and 20GB storage
-
-## 🚀 Quick Start
-
-### Method 1: Using Pre-built Images (Fastest)
-
-1. **Clone the repository for configs**
-   ```bash
-   git clone https://github.com/the-luap/picpeak.git
-   cd picpeak
-   ```
-
-2. **Set up environment**
-   ```bash
-   cp .env.example .env
-   nano .env  # Edit with your values
-   ```
-
-3. **Create required directories**
-   ```bash
-   mkdir -p events/active events/archived data logs backup storage
-   chmod -R 755 events data logs backup storage
-   ```
-
-4. **Deploy using pre-built images**
-   ```bash
-   docker compose -f docker-compose.production.yml up -d
-   ```
-
-5. **Check logs**
-   ```bash
-   docker compose -f docker-compose.production.yml logs -f
-   ```
-
-## External Media Library
-
-PicPeak can reference an existing, read‑only media library mounted into the backend container. This avoids copying originals into PicPeak storage.
-
-- Map your host library path to the container as read‑only in `docker-compose.production.yml`:
-  - Add volume under `backend`: `- ${EXTERNAL_MEDIA}:/external-media:ro`
-  - Add backend env: `EXTERNAL_MEDIA_ROOT=/external-media`
-- In `.env`, set:
-  - `EXTERNAL_MEDIA=/mnt/photos` (example host path)
-  - `EXTERNAL_MEDIA_ROOT=/external-media`
-
-Usage:
-- In Admin → Events, set “Source Mode” to “Reference (external folder)”, select a folder under `/external-media`, then import to index and generate thumbnails. Originals stay in your library.
-
-Backups and Archives:
-- Backups only include data under `STORAGE_PATH` and exclude external originals. The backup manifest includes `metadata.external_references = { excluded: true, events: N, photos: M }` and the Admin UI surfaces a warning.
-- Archiving reference events creates a manifest‑only ZIP and deletes thumbnails for that event. External originals are never moved or deleted.
-
-Local (npm) setup (no Docker):
-
-1. Create or choose a folder that contains your external originals, e.g. `/Users/you/Pictures/picpeak-external` (macOS/Linux) or `C:\\Pictures\\picpeak-external` (Windows).
-2. In `backend/.env` (or your shell), set:
-   - `EXTERNAL_MEDIA_ROOT=/absolute/path/to/picpeak-external`
-   - Ensure `STORAGE_PATH` points to your PicPeak storage (defaults to `./storage`).
-3. Start services from source:
-   - Backend: `cd backend && npm install && npm run migrate && JWT_SECRET=... npm start`
-   - Frontend: `cd frontend && npm install && npm run dev` (or build + serve)
-4. In Admin → Events:
-   - Create an event, set “Source Mode” to “Reference (external folder)”.
-   - Use the folder picker to browse under your `EXTERNAL_MEDIA_ROOT` and select the subfolder to reference.
-   - Click “Import from selected folder” to index files and generate thumbnails on demand.
-
-Notes:
-- PicPeak only reads from `EXTERNAL_MEDIA_ROOT`; it never modifies or deletes your originals there.
-- Thumbnails are generated under `STORAGE_PATH/thumbnails` and are included in backups; originals in `EXTERNAL_MEDIA_ROOT` are excluded.
-- On Windows, use absolute paths (e.g., `C:\\Photos\\Library`) for `EXTERNAL_MEDIA_ROOT`.
-
-### Method 2: Building from Source
-
-1. **Clone the repository**
-   ```bash
-   git clone https://github.com/the-luap/picpeak.git
-   cd picpeak
-   ```
-
-2. **Set up environment**
-   ```bash
-   cp .env.example .env
-   nano .env  # Edit with your values
-   ```
-
-3. **Create required directories**
-   ```bash
-   mkdir -p events/active events/archived data logs backup storage
-   chmod -R 755 events data logs backup storage
-   ```
-
-4. **Build and deploy**
-   ```bash
-   docker compose build
-   docker compose up -d
-   ```
-
-5. **Check logs**
-   ```bash
-   docker compose logs -f
-   ```
-
-## 🔧 Configuration
-
-### Essential Environment Variables
-
-Generate secure values:
-```bash
-# JWT Secret
-openssl rand -base64 64
-
-# Database Password (avoid $ character - see warning below)
-openssl rand -base64 32 | tr -d '$'
-
-# Redis Password (avoid $ character - see warning below)
-openssl rand -base64 32 | tr -d '$'
-```
-
-⚠️ **PASSWORD WARNING**: Docker Compose interprets `$` as variable substitution. Either:
-- Avoid `$` in passwords (recommended - use the commands above)
-- Escape `$` as `$$` (e.g., `Pass$$word` instead of `Pass$word`)
-- Quote the entire value: `DB_PASSWORD='Pass$word'` (less reliable)
-
-### Backend Configuration (.env)
-Update `.env` with:
-- `JWT_SECRET` - Authentication secret (REQUIRED - generate a secure random value)
-- `DB_PASSWORD` - PostgreSQL password
-- `REDIS_PASSWORD` - Redis password
-- `SMTP_*` - Email configuration
-- **URL Configuration** (for backend CORS):
-  - `FRONTEND_URL` - Frontend origin (use full URL with scheme, no trailing slash)
-    - Example (Docker): `http://localhost:3000`
-  - `ADMIN_URL` - Admin origin (same as `FRONTEND_URL` for Docker; full URL, no trailing slash)
-    - Example (Docker): `http://localhost:3000`
-  
-  Notes:
-  - Do not include trailing `/` (e.g., use `http://host:3000`, not `http://host:3000/`).
-  - Always include the scheme (`http://` or `https://`).
-  - The backend compares origins strictly for CORS; malformed values will cause login requests to fail with 500.
-
-#### External Database Example
-To use an external PostgreSQL instead of the bundled container, set the following in `.env` and ensure the `postgres` service is disabled or removed:
-
-```env
-DB_HOST=db.example.com
-DB_PORT=5432
-DB_USER=picpeak
-DB_PASSWORD=change_me
-DB_NAME=picpeak_prod
-```
-
-Compose uses these values via `env_file: .env`. The backend service also defaults `DB_HOST=${DB_HOST:-postgres}` so if you don’t set `DB_HOST` it will use the bundled `postgres` container.
-
-### Frontend Configuration (frontend/.env)
-Create `frontend/.env` from `frontend/.env.example`:
-```bash
-cp frontend/.env.example frontend/.env
-```
-
-Update `frontend/.env` with:
-- `VITE_API_URL` - Backend API URL
-  - Docker (pre-built images) and production behind reverse proxy: `/api` (recommended; avoids CORS and matches the frontend Nginx proxy in the image)
-  - Local dev (Vite): `http://localhost:3001` or `/api` if proxying through a dev proxy
-
-Note: When using pre-built frontend images, runtime container env does not change the already-built JS. Prefer the default `/api` and let the frontend Nginx proxy forward to the backend.
-
-⚠️ **IMPORTANT PORT CONFIGURATION**: 
-- The frontend runs on port **3000** in Docker (exposed via nginx)
-- The backend API runs on port **3001**
-- The frontend `.env` file MUST point to the correct backend port (3001)
-- Default `.env.example` is configured for Docker deployment
-
-### Email Configuration Examples
-
-#### Gmail
-```env
-SMTP_HOST=smtp.gmail.com
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=your-email@gmail.com
-SMTP_PASS=your-app-specific-password
-```
-
-#### SendGrid
-```env
-SMTP_HOST=smtp.sendgrid.net
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=apikey
-SMTP_PASS=your-sendgrid-api-key
-```
-
-## 📦 Deployment
-
-### Using Pre-built Images (Fastest)
-
-```bash
-# Pull latest images from GitHub Container Registry
-docker pull ghcr.io/the-luap/picpeak/backend:latest
-docker pull ghcr.io/the-luap/picpeak/frontend:latest
-
-# Start services using production compose file
-docker compose -f docker-compose.production.yml up -d
-
-# View running containers
-docker compose ps
-```
-
-### Building from Source (For Customization)
-
-```bash
-# Build images locally
-docker compose build
-
-# Or build with no cache for clean build
-docker compose build --no-cache
-
-# Start all services
-docker compose up -d
-
-# View running containers
-docker compose ps
-```
-
-### Access Points
-
-By default, services are exposed on:
-- Frontend (UI + Admin): http://localhost:3000 (admin at `/admin`)
-- Backend/API: http://localhost:3001 (API only; no UI routes)
-- PostgreSQL: localhost:5432 (if needed)
-- Redis: localhost:6379 (if needed)
-
-### Initial Admin Setup
-
-When deploying for the first time, an admin account is automatically created with a secure, randomly generated password. This password is displayed in the Docker logs during initialization and **must be changed** on first login.
-
-#### Finding the Auto-Generated Admin Password
-
-The admin password is automatically generated during the first startup and displayed in the backend container logs. Here's how to find it:
-
-**Option 1: Search Docker logs for admin password** (recommended)
-```bash
-# Find the auto-generated admin password in logs
-docker compose logs backend | grep "Admin password"
-```
-
-You should see output like:
-```
-✅ Admin password generated: BraveTiger6231!
-```
-
-**Option 2: View the complete initialization logs**
-```bash
-# View the complete admin setup logs
-docker compose logs backend | grep -A 10 "Admin user created"
-```
-
-**Option 3: Check the saved credentials file**
-```bash
-# The password is also saved in the backend container
-docker exec picpeak-backend cat data/ADMIN_CREDENTIALS.txt
-```
-
-**Option 4: Use the helper script**
-```bash
-# Show current admin username and email (password is hidden)
-docker exec picpeak-backend node scripts/show-admin-credentials.js
-
-# Reset the admin password to a new random password
-docker exec picpeak-backend node scripts/show-admin-credentials.js --reset
-```
-
-#### Important Security Notes
-
-- **Login requires the email address**, not username
-- The admin password is only displayed once during initial setup
-- **Password change is MANDATORY** on first login - the system will force you to change it
-- If you lose the password before first login, use the `--reset` option to generate a new one
-- New password requirements: minimum 12 characters, mixed case, numbers, and special characters
-
-## 🔐 First Login
-
-After deployment, you must complete the first login process which includes mandatory password change for security.
-
-### Step 1: Locate Your Admin Password
-
-1. **Find the auto-generated password** from the credentials file:
-   ```bash
-   # Docker deployment
-   docker compose exec backend cat /app/data/ADMIN_CREDENTIALS.txt
-   
-   # Or directly from the host (if you have access)
-   cat data/ADMIN_CREDENTIALS.txt
-   ```
-
-2. **Note the admin email** (default: `admin@example.com` unless customized)
-
-### Step 2: Access Admin Panel
-
-1. Navigate to your frontend domain and open the admin section:
-   - `http://your-domain.com/admin` (behind reverse proxy)
-   - `http://localhost:3000/admin` (Docker local)
-   
-   The backend at `:3001` serves API only and does not serve the admin UI.
-2. Login using:
-   - **Email**: `admin@example.com` (or your custom admin email)
-   - **Password**: The auto-generated password from the logs
-
-### Step 3: Mandatory Password Change
-
-Upon first login, the system will **automatically redirect** you to change your password:
-
-1. **You cannot skip this step** - it's enforced for security
-2. Enter the current auto-generated password
-3. Create a new secure password meeting these requirements:
-   - Minimum 12 characters
-   - At least one uppercase letter
-   - At least one lowercase letter
-   - At least one number
-   - At least one special character (!@#$%^&*)
-
-### Security Best Practices for New Password
-
-- **Use a unique password** not used elsewhere
-- **Consider a password manager** for generation and storage
-- **Include mixed characters**: `MySecureP@ssw0rd2024!`
-- **Avoid personal information** (names, dates, etc.)
-- **Save securely** - you cannot recover this password easily
-
-### If You Lose Access
-
-If you lose your admin credentials after the first login, you'll need to manually reset the password in the database or create a new admin user through the database.
-
-**Note**: The credentials file (`ADMIN_CREDENTIALS.txt`) is only created during initial deployment and contains the first admin password. After changing the password, this file becomes outdated but is kept for reference.
-
-#### Configuring Admin Email
-
-By default, the admin email is `admin@example.com`. To use a different email address, set it in your `.env` file before first deployment:
-
-```env
-# .env
-ADMIN_EMAIL=your-email@yourdomain.com
-```
-
-**Note**: This only works on first deployment. To change the admin email after deployment, you'll need to update it in the database or create a new admin user through the admin panel.
-
-## 🔒 Reverse Proxy Setup
-
-For production deployments, you should use a reverse proxy for SSL/HTTPS. The application exposes ports directly, allowing you to use any reverse proxy solution.
-
-### Option 1: Nginx
-
-Install nginx and create `/etc/nginx/sites-available/picpeak`:
-
-```nginx
-server {
-    listen 80;
-    server_name your-domain.com;
-    return 301 https://$server_name$request_uri;
-}
-
-server {
-    listen 443 ssl http2;
-    server_name your-domain.com;
-
-    ssl_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/your-domain.com/privkey.pem;
-
-    # Frontend
-    location / {
-        proxy_pass http://localhost:3000;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    # Frontend (serves UI and /admin/*)
-    location / {
-        proxy_pass http://localhost:3000;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    # Backend API and protected resources
-    location /api {
-        proxy_pass http://localhost:3001;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-    location ~ ^/(photos|thumbnails|uploads) {
-        proxy_pass http://localhost:3001;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-}
-```
-
-Enable the site:
-```bash
-sudo ln -s /etc/nginx/sites-available/picpeak /etc/nginx/sites-enabled/
-sudo nginx -t
-sudo systemctl reload nginx
-```
-
-### Option 2: Traefik
-
-Add labels to `docker-compose.override.yml`:
-
-```yaml
-version: '3.8'
-
-services:
-  frontend:
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.picpeak.rule=Host(`your-domain.com`)"
-      - "traefik.http.routers.picpeak.entrypoints=websecure"
-      - "traefik.http.routers.picpeak.tls.certresolver=letsencrypt"
-      - "traefik.http.services.picpeak.loadbalancer.server.port=80"
-
-  backend:
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.picpeak-api.rule=Host(`your-domain.com`) && PathPrefix(`/api`)"
-      - "traefik.http.routers.picpeak-api.entrypoints=websecure"
-      - "traefik.http.routers.picpeak-api.tls.certresolver=letsencrypt"
-      - "traefik.http.services.picpeak-api.loadbalancer.server.port=3001"
-```
-
-### Option 3: Caddy
-
-Create a `Caddyfile`:
-
-```caddyfile
-your-domain.com {
-    # Frontend
-    handle /* {
-        reverse_proxy localhost:3000
-    }
-
-    # Backend API and admin
-    handle /api/* {
-        reverse_proxy localhost:3001
-    }
-    
-    handle /admin/* {
-        reverse_proxy localhost:3001
-    }
-
-    # Protected resources
-    handle /photos/* {
-        reverse_proxy localhost:3001
-    }
-
-    handle /thumbnails/* {
-        reverse_proxy localhost:3001
-    }
-
-    handle /uploads/* {
-        reverse_proxy localhost:3001
-    }
-}
-```
-
-### SSL Certificates
-
-For any reverse proxy, you can use Let's Encrypt:
-
-```bash
-# With Certbot
-sudo certbot certonly --webroot -w /var/www/certbot -d your-domain.com
-
-# Or use your reverse proxy's built-in ACME support
-```
-
-## 🔧 Maintenance
-
-### Viewing Logs
-
-```bash
-# All services
-docker compose logs -f
-
-# Specific service
-docker compose logs -f backend
-docker compose logs -f frontend
-```
-
-### Backup
-
-#### Manual Backup
-```bash
-# Database backup
-docker exec picpeak-postgres pg_dump -U picpeak picpeak_prod > backup/db_$(date +%Y%m%d_%H%M%S).sql
-
-# Files backup
-tar -czf backup/photos_$(date +%Y%m%d_%H%M%S).tar.gz events/
-```
-
-#### Automated Backup
-The application includes a built-in backup service. Configure it in the admin panel:
-1. Login to admin panel
-2. Go to Settings → Backup
-3. Configure destination and schedule
-4. Enable backup service
-
-### Updates
-
-#### Method 1: Using Pre-built Images (Recommended)
-
-```bash
-# Pull latest changes (for configuration updates)
-git pull
-
-# Pull latest images from GitHub Container Registry
-docker compose -f docker-compose.production.yml pull
-
-# Restart with new images
-docker compose -f docker-compose.production.yml down
-docker compose -f docker-compose.production.yml up -d
-
-# Verify services are healthy
-docker compose -f docker-compose.production.yml ps
-```
-
-#### Method 2: Building from Source
-
-```bash
-# Pull latest changes
-git pull
-
-# Rebuild and restart
-docker compose down
-docker compose build --no-cache
-docker compose up -d
-
-# Verify services are healthy
-docker compose ps
-```
-
-#### Specific Version Updates
-
-To use a specific version of the images:
-
-```bash
-# Edit docker-compose.production.yml to specify version tags
-# Change: ghcr.io/the-luap/picpeak/backend:latest
-# To:     ghcr.io/the-luap/picpeak/backend:v1.0.0
-
-# Then pull and restart
-docker compose -f docker-compose.production.yml pull
-docker compose -f docker-compose.production.yml up -d
-```
-
-### Database Migrations
-
-Migrations run automatically on startup, but you can run them manually:
-
-```bash
-docker exec picpeak-backend npm run migrate
-```
-
-## 🚨 Troubleshooting
-
-### Common Issues
-
-#### 502 Bad Gateway / Login Failures
-**This is the most common deployment issue!** Usually caused by misconfigured URLs or network problems:
-
-1. **CORS Configuration Errors**:
-   ```bash
-   # WRONG - Missing port will cause CORS errors
-   FRONTEND_URL=http://10.0.252.12
-   
-   # CORRECT - Include the port you're accessing from
-   FRONTEND_URL=http://10.0.252.12:3000
-   ```
-   
-   The backend validates Origin headers against `FRONTEND_URL` for CORS. If they don't match exactly, you'll get 500 errors on login.
-
-2. **After Container Restarts**:
-   - Nginx may have cached old container IPs
-   - Solution: `docker restart picpeak-frontend`
-   - Always wait 30-60 seconds for health checks
-
-3. **Backend Not Starting After Migrations**:
-   - The logs may only show migrations completed
-   - Check if server is actually running: `docker exec picpeak-backend ps aux | grep node`
-   - Should see `node server.js` process
-
-4. **Login After Fresh Install**:
-   - Check backend logs for auto-generated admin password: `docker compose logs backend | grep "Admin password"`
-   - Email: `admin@example.com` (or your custom admin email from .env)
-   - Password: Auto-generated and shown in logs (e.g., `BraveTiger6231!`)
-   - Remember: Password MUST be changed on first login
-
-5. **Complete Fix Sequence**:
-   ```bash
-   # 1. Fix your .env file URLs
-   # 2. Full restart
-   docker-compose down
-   docker-compose up -d
-   
-   # 3. Wait for healthy status
-   sleep 60
-   docker ps  # All should show (healthy)
-   
-   # 4. Test backend directly
-   curl http://localhost:3001/health
-   
-   # 5. Test through frontend
-   curl http://localhost:3000/api/public/settings
-   ```
-
-#### Port Already in Use
-```bash
-# Check what's using the port
-sudo lsof -i :3000
-sudo lsof -i :3001
-
-# Change ports in .env
-FRONTEND_PORT=3002
-BACKEND_PORT=3003
-```
-
-#### Docker Compose Variable Substitution Errors
-If you see warnings like:
-```
-WARN[0000] The "fgbf" variable is not set. Defaulting to a blank string.
-```
-
-This means your password contains `$` which Docker Compose interprets as a variable. Solutions:
-1. **Best**: Generate passwords without `$`: `openssl rand -base64 32 | tr -d '$'`
-2. **Alternative**: Escape `$` as `$$` in your .env file
-3. **Example**: `DB_PASSWORD=Pass@#$$fgbf` instead of `DB_PASSWORD=Pass@#$fgbf`
-
-#### Permission Errors
-```bash
-# Fix ownership
-sudo chown -R 1000:1000 events data logs backup storage
-chmod -R 755 events data logs backup storage
-```
-
-#### Database Connection Issues
-```bash
-# Check if database is running
-docker compose ps
-docker compose logs postgres
-
-# Test connection
-docker exec picpeak-postgres pg_isready
-```
-
-#### Email Not Sending
-- Verify SMTP settings in .env
-- Check email queue: `docker exec picpeak-backend psql -U picpeak -d picpeak_prod -c "SELECT * FROM email_queue ORDER BY created_at DESC LIMIT 10;"`
-- For Gmail, use app-specific password
-- Check logs: `docker compose logs backend | grep email`
-
-### Health Checks
-
-```bash
-# Backend health
-curl http://localhost:3001/api/health
-
-# Frontend health
-curl http://localhost:3000
-
-# Database health
-docker exec picpeak-postgres pg_isready
-```
-
-### Useful Commands
-
-```bash
-# Enter backend container
-docker exec -it picpeak-backend sh
-
-# Enter database
-docker exec -it picpeak-postgres psql -U picpeak picpeak_prod
-
-# Reset admin password
-docker exec picpeak-backend node scripts/show-admin-credentials.js --reset
-
-# Check disk usage
-df -h
-du -sh events/ storage/ backup/
-
-# View running processes
-docker compose top
-```
-
-## Security Recommendations
-
-1. **Use HTTPS**: Always use a reverse proxy with SSL in production
-2. **Firewall**: Only expose necessary ports (80, 443)
-3. **Secure passwords**: Use strong, unique passwords for all services
-4. **Regular updates**: Keep Docker images and system packages updated
-5. **Backup strategy**: Set up automated backups and test restoration
-6. **Monitor logs**: Regularly check logs for suspicious activity
-7. **Rate limiting**: The app includes built-in rate limiting, configure as needed
-
-## Support
-
-For issues and questions:
-- Check logs first: `docker compose logs`
-- Review documentation in the repository
-- Check existing issues on GitHub
-- Create a new issue with:
-  - Error messages
-  - Log output
-  - Environment details (without secrets)
-  - Steps to reproduce

LICENSE

@@ -1,9 +0,0 @@
-MIT License
-
-Copyright (c) 2025 paul
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

README.md

@@ -1,240 +0,0 @@
-# 📸 PicPeak - Open Source Photo Sharing for Events
-
-<div align="center">
-  <img src="docs/picpeak-logo.png" alt="PicPeak Logo" width="300" />
-  
-  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-  [![Docker](https://img.shields.io/badge/docker-%230db7ed.svg?style=flat&logo=docker&logoColor=white)](https://www.docker.com/)
-  [![Node.js](https://img.shields.io/badge/node.js-6DA55F?style=flat&logo=node.js&logoColor=white)](https://nodejs.org/)
-  [![React](https://img.shields.io/badge/react-%2320232a.svg?style=flat&logo=react&logoColor=%2361DAFB)](https://reactjs.org/)
-</div>
-
-**PicPeak** is a powerful, self-hosted open-source alternative to commercial photo-sharing platforms like PicDrop.com and Scrapbook.de. Designed specifically for photographers and event organizers, PicPeak makes it simple to share beautiful, time-limited photo galleries with clients while maintaining full control over your data and branding.
-
-![PicPeak Gallery Preview](docs/screenshot-gallery.png)
-
-## 🌟 Why Choose PicPeak?
-
-Unlike expensive SaaS solutions, PicPeak gives you:
-
-- **💰 No Monthly Fees** - One-time setup, unlimited galleries
-- **🔒 Complete Data Control** - Your photos stay on your server
-- **🎨 White-Label Ready** - Full branding customization
-- **📱 Mobile-First Design** - Beautiful on all devices
-- **🚀 Lightning Fast** - Optimized performance and caching
-- **🌍 Multi-Language** - Built-in i18n support (EN, DE)
-
-## ✨ Key Features
-
-### For Photographers
-- 📁 **Drag & Drop Upload** - Simply drop photos into folders
-- 🔗 **External Media (Reference Mode)** - Browse and import from a read‑only external folder library without copying originals
-- ⏰ **Auto-Expiring Galleries** - Set expiration dates (default: 30 days)
-- 🔐 **Password Protection** - Secure client galleries
-- 📧 **Automated Emails** - Creation confirmations and expiration warnings
-- 📊 **Analytics Dashboard** - Track views, downloads, and engagement
-- 🎨 **Custom Themes** - Match your brand perfectly
-
-### For Clients
-- 🖼️ **Beautiful Galleries** - Clean, modern interface
-- 📱 **Mobile Optimized** - Swipe through photos on any device
-- ⬇️ **Bulk Downloads** - Download all photos with one click
-- 🔍 **Smart Search** - Find photos quickly
-- 📤 **Guest Uploads** - Optional client photo uploads
-- 🛡️ **Download Protection** - Advanced image protection with watermarking and right-click prevention
-
-### Technical Excellence
-- 🐳 **Docker Ready** - Deploy in minutes
-- 🔄 **Auto-Processing** - Automatic thumbnail generation
-- 🗂️ **Reference Library Support** - Point PicPeak at `EXTERNAL_MEDIA_ROOT` to reference existing originals, index quickly, and generate thumbnails on demand
-- 💾 **Smart Storage** - Automatic archiving of expired galleries
-- 🛡️ **Security First** - JWT auth, rate limiting, CORS protection
-- 📈 **Scalable** - From small studios to large agencies
-
-## 🚀 Quick Start
-
-Get PicPeak running in under 5 minutes:
-
-```bash
-# Clone the repository
-git clone https://github.com/the-luap/picpeak.git
-cd picpeak
-
-# Copy environment template
-cp .env.example .env
-
-# Edit configuration (required: JWT_SECRET)
-nano .env
-
-# Start with Docker Compose
-docker-compose up -d
-
-# Access at http://localhost:3005
-```
-
-## 📖 Documentation
-
-- 📘 [**Deployment Guide**](DEPLOYMENT_GUIDE.md) - Detailed installation instructions
-  - Includes the new [External Media Library](DEPLOYMENT_GUIDE.md#external-media-library) reference mode
-- 🤝 [**Contributing**](CONTRIBUTING.md) - How to contribute
-- 📜 [**License**](LICENSE) - MIT License
-- 🔒 [**Security**](SECURITY.md) - Security policies
-- 📋 [**Code of Conduct**](CODE_OF_CONDUCT.md) - Community guidelines
-
-## 🎯 Use Cases
-
-Perfect for:
-- 💒 **Wedding Photographers** - Share ceremony photos securely
-- 🎂 **Event Photography** - Birthday parties, corporate events
-- 📸 **Portrait Studios** - Client galleries with download limits
-- 🏢 **Corporate Events** - Internal photo sharing with branding
-- 🎓 **School Photography** - Secure parent access with expiration
-
-## 🏗️ Tech Stack
-
-- **Backend**: Node.js, Express, SQLite/PostgreSQL
-- **Frontend**: React, Tailwind CSS, Framer Motion
-- **Storage**: File-based with automatic archiving
-- **Email**: SMTP with customizable templates
-- **Analytics**: Privacy-focused with Umami integration
-
-## 💻 System Requirements
-
-### Minimum Requirements
-- **CPU**: 2 CPU cores
-- **RAM**: 2GB minimum
-- **Storage**: 20GB minimum (plus photo storage needs)
-- **OS**: Linux (Ubuntu 20.04+), macOS, or Windows with WSL2
-- **Node.js**: v18.0.0 or higher
-- **Database**: SQLite (included) or PostgreSQL 12+
-
-### Docker Requirements (Recommended)
-- **Docker**: v20.10.0+
-- **Docker Compose**: v2.0.0+
-
-## 🤝 Contributing
-
-We love contributions! PicPeak is built by photographers, for photographers. Whether you're fixing bugs, adding features, or improving documentation, your help is welcome.
-
-See our [Contributing Guide](CONTRIBUTING.md) for details.
-
-## 📊 Comparison with Alternatives
-
-| Feature | PicPeak | PicDrop | Scrapbook.de |
-|---------|---------|---------|--------------|
-| Self-Hosted | ✅ | ❌ | ❌ |
-| Custom Branding | ✅ Full | Limited | Limited |
-| Monthly Cost | $0 | $29-199 | €19-99 |
-| Storage Limit | Unlimited* | 50-500GB | 100-1000GB |
-| Client Uploads | ✅ | ✅ | ✅ |
-| API Access | ✅ | Paid | ❌ |
-| Open Source | ✅ | ❌ | ❌ |
-
-*Limited only by your server storage
-
-## 🛡️ Security
-
-PicPeak takes security seriously:
-- 🔐 Password hashing with bcrypt
-- 🎫 JWT-based authentication
-- 🚦 Rate limiting on all endpoints
-- 🛡️ CORS protection
-- 📝 Activity logging
-- 🔒 Secure file access
-
-Found a security issue? Please open a [security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub
-
-## 📸 Screenshots
-
-### 🎛️ **Admin Dashboard**
-Get a complete overview of your photo galleries, analytics, and system status.
-
-<img src="docs/screenshot-dashboard.png" alt="PicPeak Admin Dashboard" width="800" />
-
-### 📊 **Analytics & Insights**
-Track gallery performance, view statistics, and monitor user engagement.
-
-<img src="docs/screenshot-analytics.png" alt="PicPeak Analytics Dashboard" width="800" />
-
-### 📁 **Event Management**
-Organize and manage your photo galleries with intuitive event management tools.
-
-<img src="docs/screenshots-events.png" alt="PicPeak Events Management" width="800" />
-
-### ✨ **Key Interface Highlights**
-
-<details>
-<summary>👆 Click to see more interface details</summary>
-
-#### What makes PicPeak's interface special:
-
-- **🎨 Clean Design**: Modern, photographer-friendly interface
-- **📱 Responsive**: Perfect on desktop, tablet, and mobile
-- **⚡ Fast Loading**: Optimized for quick photo browsing
-- **🔒 Secure Access**: Password-protected galleries with expiration
-- **📤 Easy Uploads**: Drag & drop functionality for effortless photo management
-- **🎯 Client-Focused**: Intuitive gallery experience for your clients
-
-</details>
-
-## 🗺️ Roadmap
-
-We're constantly improving PicPeak and welcome contributions from our community! If you have ideas for new features or want to help implement existing ones, please open an issue or submit a pull request. Your contributions help make PicPeak better for everyone.
-
-### 🚧 Beta Features (Use at your own risk)
-
-These features are currently in beta testing and may have limited functionality or stability:
-
-| Feature | Description | Status |
-|---------|-------------|--------|
-| **Download Protection** | Advanced image protection system with canvas rendering, invisible watermarking, and right-click prevention to protect your photos from unauthorized downloads | 🧪 Beta |
-| **Simple Deployment Script** | One-click deployment script for quick server setup with automated configuration and dependency installation | 🧪 Beta |
-
-### 📋 Future Enhancements
-
-| Feature | Description | Priority | Status |
-|---------|-------------|----------|---------|
-| **Backup & Restore** | Comprehensive backup system with S3/MinIO support, automated scheduling, and safe restore functionality | High | ✅ Implemented |
-| **External Media Library (Reference Mode)** | Use an external folder library as a read‑only source with import and on‑demand thumbnail generation | High | ✅ Implemented |
-| **Gallery Templates** | Additional gallery layouts and themes (masonry, slideshow, story-style) for different event types | Medium | 🔄 Open |
-| **Face Recognition** | AI-powered face detection to help guests find their photos and create automatic person-based albums | Low | 🔄 Open |
-| **Gallery Feedback** | Allow guests to like, rate, and comment on photos with admin notifications and moderation | Medium | ✅ Implemented |
-| **Video Support** | Upload and display videos alongside photos in galleries with streaming support | Low | 🔄 Open |
-| **Multiple Administrators** | Support for multiple admin accounts with role-based permissions and activity tracking | Low | 📋 Planned |
-
-**Status Legend:** ✅ Implemented | 🚧 In Progress | 🔄 Open | 📋 Planned
-
-## 🙏 Acknowledgments
-
-PicPeak is inspired by the best features of commercial platforms while remaining completely open source. Special thanks to all contributors who make this project possible.
-
-### 🤖 AI-Assisted Development
-
-This project was generated with the assistance of AI technology, but has been:
-- ✅ **Fully tested end-to-end** by human developers
-- 🔒 **Security audited** with comprehensive security checks
-- 👨‍💻 **Human-reviewed** for code quality and best practices
-- 🧪 **Production-tested** in real-world scenarios
-
-We believe in transparent development practices and the responsible use of AI as a tool to accelerate development while maintaining high standards of quality and security.
-
-## 📄 License
-
-PicPeak is released under the [MIT License](LICENSE). Use it freely for personal or commercial projects.
-
-## 🚀 Ready to Get Started?
-
-1. ⭐ **Star this repository** to show your support
-2. 📖 Read the [Deployment Guide](DEPLOYMENT_GUIDE.md)
-3. 🐛 Report issues or request features
-4. 🤝 Join our community and contribute!
-
----
-
-<p align="center">
-  Made with ❤️ by photographers, for photographers
-  <br>
-  <a href="https://github.com/the-luap/picpeak">GitHub</a> •
-  <a href="DEPLOYMENT_GUIDE.md">Documentation</a> •
-  <a href="https://github.com/the-luap/picpeak/issues">Support</a>
-</p>

SECURITY.md

@@ -1,88 +0,0 @@
-# Security Policy
-
-## Supported Versions
-
-We release patches for security vulnerabilities. Currently supported versions:
-
-| Version | Supported          |
-| ------- | ------------------ |
-| 1.x.x   | :white_check_mark: |
-| < 1.0   | :x:                |
-
-## Reporting a Vulnerability
-
-We take the security of PicPeak seriously. If you have discovered a security vulnerability, please follow these steps:
-
-### 1. **Do NOT create a public GitHub issue**
-
-### 2. Report the vulnerability by:
-- Opening a [security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub
-- Mark it clearly as "SECURITY" in the title
-- Include:
-  - Description of the vulnerability
-  - Steps to reproduce
-  - Potential impact
-  - Suggested fix (if any)
-
-### 3. You can expect:
-- Acknowledgment within 48 hours
-- Regular updates on our progress
-- Credit in the fix announcement (unless you prefer to remain anonymous)
-
-## Security Measures
-
-PicPeak implements several security measures:
-
-### Authentication & Authorization
-- JWT-based authentication with secure token storage
-- bcrypt password hashing with configurable rounds
-- Role-based access control for admin functions
-- Session timeout management
-
-### Input Validation
-- All user inputs are validated and sanitized
-- SQL injection prevention through parameterized queries
-- XSS protection via Content Security Policy
-- File upload restrictions and validation
-
-### Rate Limiting
-- API rate limiting to prevent abuse
-- Brute force protection on authentication endpoints
-- Configurable limits per endpoint
-
-### Data Protection
-- HTTPS enforcement in production
-- Secure cookie settings
-- CORS configuration
-- Sensitive data encryption
-
-### Infrastructure
-- Regular dependency updates
-- Security headers (HSTS, X-Frame-Options, etc.)
-- Activity logging for audit trails
-- Automated backups
-
-## Best Practices for Deployment
-
-1. **Always use HTTPS** in production
-2. **Change default passwords** immediately
-3. **Keep dependencies updated** regularly
-4. **Configure firewall rules** appropriately
-5. **Monitor logs** for suspicious activity
-6. **Backup regularly** and test restoration
-
-## Vulnerability Disclosure
-
-We believe in responsible disclosure. Once a vulnerability is fixed:
-
-1. We'll publish a security advisory
-2. Credit researchers (with permission)
-3. Detail the impact and mitigation steps
-4. Release patches for all supported versions
-
-## Contact
-
-- Security issues: [Create a security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub
-- General support: [GitHub Issues](https://github.com/the-luap/picpeak/issues)
-
-Thank you for helping keep PicPeak and its users safe!

SIMPLE_SETUP.md

@@ -1,543 +0,0 @@
-# 🚀 PicPeak Simple Setup Guide
-
-This guide provides easy installation instructions for PicPeak on Linux servers with both Docker and non-Docker options.
-
-## 📋 Quick Start
-
-### One-Line Installation
-
-```bash
-# Download and run the unified setup script
-curl -fsSL https://raw.githubusercontent.com/the-luap/picpeak/main/scripts/setup.sh -o setup.sh && \
-chmod +x setup.sh && \
-sudo ./setup.sh
-```
-
-The script will automatically detect your environment and recommend the best installation method.
-
-## 🎯 Installation Methods
-
-### Method 1: Docker Installation (Recommended)
-Best for: Most users, easy updates, isolated environment
-
-```bash
-sudo ./setup.sh --docker
-```
-
-**Pros:**
-- ✅ Easier installation and updates
-- ✅ Better isolation from system
-- ✅ Consistent environment across platforms
-- ✅ Built-in PostgreSQL and Redis
-
-**Cons:**
-- ❌ Requires more resources (~4GB RAM recommended)
-- ❌ Additional Docker overhead
-
-### Method 2: Native Installation
-Best for: Resource-constrained systems, Raspberry Pi, direct control
-
-```bash
-sudo ./setup.sh --native
-```
-
-**Pros:**
-- ✅ Lower resource usage (~1GB RAM minimum)
-- ✅ Direct system control
-- ✅ No Docker overhead
-- ✅ Better for ARM devices
-
-**Cons:**
-- ❌ More complex setup
-- ❌ System dependencies required
-- ❌ Manual update process
-
-## 📋 System Requirements
-
-### Minimum Requirements
-- **OS**: Ubuntu 20.04+, Debian 11+, Fedora 38+, RHEL/CentOS 8+, Raspberry Pi OS
-- **RAM**: 
-  - Docker: 2GB minimum (4GB recommended)
-  - Native: 1GB minimum (2GB recommended)
-- **Storage**: 2GB for application + space for photos
-- **Network**: Port 3001 (or 80/443 with proxy)
-
-### Supported Platforms
-- ✅ Ubuntu 20.04, 22.04, 24.04
-- ✅ Debian 11, 12
-- ✅ Raspberry Pi OS (32-bit and 64-bit)
-- ✅ Fedora 38, 39, 40
-- ✅ RHEL/CentOS/Rocky/AlmaLinux 8, 9
-
-## 🛠️ Installation Options
-
-### Interactive Mode (Default)
-```bash
-sudo ./setup.sh
-```
-
-The script will prompt you to choose:
-1. Installation method (Docker or Native)
-2. Admin email and password
-3. Domain configuration (optional)
-4. Email server settings (optional)
-5. SSL/HTTPS setup (optional)
-
-### Unattended Installation
-
-#### Docker with full configuration:
-```bash
-sudo ./setup.sh --docker --unattended \
-  --domain photos.example.com \
-  --email admin@example.com \
-  --admin-password SecurePass123 \
-  --smtp-host smtp.gmail.com \
-  --smtp-port 587 \
-  --smtp-user your-email@gmail.com \
-  --smtp-pass your-app-password \
-  --enable-ssl
-```
-
-#### Native with minimal configuration:
-```bash
-sudo ./setup.sh --native --unattended \
-  --email admin@example.com \
-  --admin-password SecurePass123
-```
-
-### Command Line Options
-
-| Option | Description | Example |
-|--------|-------------|---------|
-| `--docker` | Use Docker installation | `--docker` |
-| `--native` | Use native installation | `--native` |
-| `--unattended` | Run without prompts | `--unattended` |
-| `--domain` | Domain for HTTPS setup | `--domain photos.example.com` |
-| `--email` | Admin email address | `--email admin@example.com` |
-| `--admin-password` | Set admin password | `--admin-password MySecurePass` |
-| `--smtp-host` | SMTP server hostname | `--smtp-host smtp.gmail.com` |
-| `--smtp-port` | SMTP server port | `--smtp-port 587` |
-| `--smtp-user` | SMTP username | `--smtp-user user@gmail.com` |
-| `--smtp-pass` | SMTP password | `--smtp-pass app-password` |
-| `--enable-ssl` | Enable HTTPS with Let's Encrypt | `--enable-ssl` |
-| `--port` | Custom port (native only) | `--port 8080` |
-| `--update` | Update existing installation | `--update` |
-| `--uninstall` | Remove installation | `--uninstall` |
-| `--help` | Show help message | `--help` |
-
-## 🏗️ What Gets Installed
-
-### Docker Installation
-```
-~/picpeak/                    # Or custom directory
-├── docker-compose.yml        # Service definitions
-├── .env                      # Configuration
-├── storage/
-│   └── events/              # Photo storage
-│       ├── active/          # Current galleries
-│       └── archived/        # Expired galleries
-├── logs/                    # Application logs
-└── backup/                  # Backup directory
-```
-
-**Services:**
-- PicPeak Backend (Node.js application)
-- PostgreSQL Database
-- Redis Cache
-- Nginx Reverse Proxy (optional)
-- Background Workers
-
-### Native Installation
-```
-/opt/picpeak/                # Installation directory
-├── backend/                 # Application code
-├── events/                  # Photo storage
-│   ├── active/             # Current galleries
-│   └── archived/           # Expired galleries
-├── logs/                   # Application logs
-└── config/                 # Configuration files
-```
-
-**Services (systemd):**
-- `picpeak-backend` - Main application
-- `picpeak-workers` - Background workers
-- `caddy` - Web server (optional)
-
-## 🌐 Access Methods
-
-### Direct Access (Simplest)
-- Docker: `http://your-server:3000` (frontend and admin at `/admin`)
-- Backend/API: `http://your-server:3001` (API only; no UI routes)
-  
-For native installs, serve the built frontend (e.g., with nginx or Caddy) and access the admin at `/admin` on the frontend domain.
-
-### With Domain & HTTPS
-If configured during setup:
-- `https://your-domain.com` - Gallery frontend
-- `https://your-domain.com/admin` - Admin panel
-
-### Behind Existing Proxy
-Add to your Nginx/Apache configuration (split frontend vs backend):
-```nginx
-# Frontend (UI + /admin/*)
-location / {
-    proxy_pass http://localhost:3000;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection 'upgrade';
-    proxy_set_header Host $host;
-    proxy_cache_bypass $http_upgrade;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-}
-
-# Backend API and protected resources
-location /api {
-    proxy_pass http://localhost:3001;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection 'upgrade';
-    proxy_set_header Host $host;
-    proxy_cache_bypass $http_upgrade;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    client_max_body_size 100M;
-}
-location ~ ^/(photos|thumbnails|uploads) {
-    proxy_pass http://localhost:3001;
-    proxy_http_version 1.1;
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-}
-```
-
-## 📁 Managing Galleries
-
-### Creating a Gallery
-
-#### Method 1: Via Admin Panel (Recommended)
-1. Login to admin panel
-2. Click "Create New Event"
-3. Configure settings and upload photos
-
-#### Method 2: File System
-```bash
-# Docker installation
-mkdir -p ~/picpeak/storage/events/active/wedding-smith-2024
-cp /path/to/photos/* ~/picpeak/storage/events/active/wedding-smith-2024/
-
-# Native installation
-sudo mkdir -p /opt/picpeak/events/active/wedding-smith-2024
-sudo cp /path/to/photos/* /opt/picpeak/events/active/wedding-smith-2024/
-sudo chown -R picpeak:picpeak /opt/picpeak/events/active/wedding-smith-2024
-```
-
-### Gallery Structure
-```
-wedding-smith-2024/
-├── collages/        # Group photos
-├── individual/      # Individual photos
-└── thumbnails/      # Auto-generated thumbnails
-```
-
-## 🔧 Service Management
-
-### Docker Installation
-
-```bash
-cd ~/picpeak
-
-# Check status
-docker compose ps
-
-# View logs
-docker compose logs -f
-
-# Stop services
-docker compose down
-
-# Start services
-docker compose up -d
-
-# Restart services
-docker compose restart
-
-# Update PicPeak
-docker compose pull
-docker compose up -d
-```
-
-### Native Installation
-
-```bash
-# Check status
-sudo systemctl status picpeak-backend
-sudo systemctl status picpeak-workers
-
-# View logs
-sudo journalctl -u picpeak-backend -f
-sudo journalctl -u picpeak-workers -f
-
-# Start services
-sudo systemctl start picpeak-backend picpeak-workers
-
-# Stop services
-sudo systemctl stop picpeak-backend picpeak-workers
-
-# Restart services
-sudo systemctl restart picpeak-backend picpeak-workers
-
-# Update PicPeak
-sudo ./setup.sh --update
-```
-
-## ⚙️ Configuration
-
-### Docker Configuration
-Edit `~/picpeak/.env`:
-```bash
-nano ~/picpeak/.env
-docker compose restart
-```
-
-### Native Configuration
-Edit `/opt/picpeak/app/backend/.env`:
-```bash
-sudo nano /opt/picpeak/app/backend/.env
-sudo systemctl restart picpeak-backend
-```
-
-### Key Settings
-
-| Setting | Description | Default |
-|---------|-------------|---------|
-| `JWT_SECRET` | Token signing secret | Auto-generated |
-| `ADMIN_EMAIL` | Admin email | admin@example.com |
-| `ADMIN_PASSWORD` | Admin password | Auto-generated |
-| `PHOTOS_DIR` | Photo storage path | Varies by method |
-| `SMTP_ENABLED` | Email notifications | false |
-| `DEFAULT_EXPIRY_DAYS` | Gallery expiration | 30 |
-
-## 📧 Email Configuration
-
-### Gmail Setup
-1. Enable 2-Factor Authentication
-2. Generate App Password
-3. Configure:
-```env
-SMTP_ENABLED=true
-SMTP_HOST=smtp.gmail.com
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=your-email@gmail.com
-SMTP_PASS=your-app-password
-SMTP_FROM=noreply@yourdomain.com
-```
-
-### SendGrid Setup
-1. Sign up at sendgrid.com (100 emails/day free)
-2. Create API key
-3. Configure:
-```env
-SMTP_ENABLED=true
-SMTP_HOST=smtp.sendgrid.net
-SMTP_PORT=587
-SMTP_USER=apikey
-SMTP_PASS=your-sendgrid-api-key
-SMTP_FROM=verified-sender@yourdomain.com
-```
-
-## 🔄 Maintenance
-
-### Backups
-
-#### Docker:
-```bash
-# Backup script included
-cd ~/picpeak
-./backup.sh
-
-# Manual backup
-docker exec picpeak-postgres pg_dump -U picpeak picpeak > backup.sql
-tar -czf photos-backup.tar.gz storage/events/
-```
-
-#### Native:
-```bash
-# Database backup
-sudo cp /opt/picpeak/app/backend/data/photo_sharing.db /backup/database-$(date +%Y%m%d).sqlite
-
-# Photos backup
-sudo tar -czf /backup/photos-$(date +%Y%m%d).tar.gz /opt/picpeak/events/
-```
-
-### Updates
-
-```bash
-# Docker
-cd ~/picpeak
-docker compose pull
-docker compose up -d
-
-# Native
-sudo ./setup.sh --update
-```
-
-### Uninstall
-
-```bash
-# Will prompt for confirmation and data removal options
-sudo ./setup.sh --uninstall
-```
-
-## 🐛 Troubleshooting
-
-### Common Issues
-
-#### Service Won't Start
-```bash
-# Docker
-docker compose logs backend
-docker compose down && docker compose up -d
-
-# Native
-sudo journalctl -u picpeak-backend -n 50
-sudo systemctl restart picpeak-backend
-```
-
-#### Can't Access Admin Panel
-1. Check firewall:
-```bash
-# Ubuntu/Debian
-sudo ufw allow 3001
-
-# RHEL/CentOS
-sudo firewall-cmd --add-port=3001/tcp --permanent
-sudo firewall-cmd --reload
-```
-
-2. Verify service:
-```bash
-# Docker
-curl http://localhost:3001/api/health
-
-# Native
-sudo systemctl is-active picpeak-backend
-```
-
-#### Photos Not Showing
-```bash
-# Check permissions (Native)
-sudo chown -R picpeak:picpeak /opt/picpeak/events/
-sudo chmod -R 755 /opt/picpeak/events/
-
-# Check permissions (Docker)
-ls -la ~/picpeak/storage/events/
-```
-
-#### Reset Admin Password
-
-```bash
-# Docker
-docker exec picpeak-backend node scripts/reset-admin-password.js
-
-# Native
-cd /opt/picpeak/app/backend
-sudo -u picpeak node scripts/reset-admin-password.js
-```
-
-### Getting Help
-
-1. **Check logs:**
-   - Docker: `docker compose logs -f`
-   - Native: `sudo journalctl -u picpeak-backend -f`
-   - Installation: `/tmp/picpeak-setup-*.log`
-
-2. **Documentation:**
-   - [Full Documentation](https://github.com/the-luap/picpeak)
-   - [Deployment Guide](./DEPLOYMENT_GUIDE.md)
-
-3. **Support:**
-   - [GitHub Issues](https://github.com/the-luap/picpeak/issues)
-   - Include: Error messages, system info (`uname -a`), installation method
-
-## 🔒 Security Best Practices
-
-### Essential Security
-1. **Change default admin password immediately**
-2. **Use HTTPS for production** (Let's Encrypt included)
-3. **Configure firewall** (only open necessary ports)
-4. **Regular updates** (system and PicPeak)
-5. **Automated backups** (configure in admin panel)
-
-### Advanced Security
-- Use VPN for admin panel access
-- Configure fail2ban for brute force protection
-- Enable audit logging
-- Regular security scans
-- Implement IP whitelisting
-
-## 📊 Performance Optimization
-
-### Docker Optimization
-```yaml
-# Adjust in docker-compose.yml
-services:
-  backend:
-    deploy:
-      resources:
-        limits:
-          cpus: '2'
-          memory: 2G
-```
-
-### Native Optimization
-```bash
-# Increase Node.js memory
-echo "NODE_OPTIONS=--max-old-space-size=2048" >> /opt/picpeak/app/backend/.env
-sudo systemctl restart picpeak-backend
-```
-
-## 🎯 Quick Setup Examples
-
-### Home/Office Network
-```bash
-# Simple local setup without domain
-sudo ./setup.sh --native --email admin@local.com
-```
-
-### Public Website with HTTPS
-```bash
-# Full production setup
-sudo ./setup.sh --docker \
-  --domain photos.company.com \
-  --email admin@company.com \
-  --enable-ssl
-```
-
-### Raspberry Pi Setup
-```bash
-# Optimized for ARM devices
-sudo ./setup.sh --native \
-  --port 8080 \
-  --email pi@local.com
-```
-
-## ✅ Post-Installation Checklist
-
-- [ ] Admin password changed
-- [ ] Email configuration tested
-- [ ] First test gallery created
-- [ ] Backup schedule configured
-- [ ] Firewall rules applied
-- [ ] SSL certificate working (if applicable)
-- [ ] Monitoring setup
-- [ ] Documentation bookmarked
-
----
-
-**PicPeak Setup v1.0** | [Documentation](https://github.com/the-luap/picpeak) | [Support](https://github.com/the-luap/picpeak/issues)

backend/.dockerignore

@@ -1,14 +0,0 @@
-node_modules
-npm-debug.log
-.env
-storage/events/active/*
-storage/events/archived/*
-storage/thumbnails/*
-data/*.db
-logs/*
-coverage
-.git
-.gitignore
-README.md
-.eslintrc.js
-jest.config.js

backend/.env.example

@@ -1,59 +0,0 @@
-# Backend Environment Variables Example
-# Copy this file to .env and update with your values
-
-# Application
-NODE_ENV=production
-PORT=3001
-
-# Security
-# Generate with: openssl rand -base64 32
-JWT_SECRET=your-very-secure-jwt-secret-at-least-32-characters-long-example123456
-
-# URLs (adjust for your domain)
-ADMIN_URL=https://photos.example.com
-FRONTEND_URL=https://photos.example.com
-BACKEND_URL=https://photos.example.com  # Or https://api.photos.example.com if separate
-
-# Database Configuration
-DATABASE_CLIENT=pg
-DB_HOST=localhost
-DB_PORT=5432
-DB_USER=picpeak
-DB_PASSWORD=your-secure-database-password-change-this
-DB_NAME=picpeak
-
-# Email Configuration (Examples for common providers)
-# Gmail example:
-# SMTP_HOST=smtp.gmail.com
-# SMTP_PORT=587
-# SMTP_SECURE=false
-# SMTP_USER=your-email@gmail.com
-# SMTP_PASS=your-app-specific-password
-
-# SendGrid example:
-SMTP_HOST=smtp.sendgrid.net
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=apikey
-SMTP_PASS=your-sendgrid-api-key
-EMAIL_FROM=noreply@example.com
-
-# Storage Paths
-# Docker deployment:
-STORAGE_PATH=/app/storage
-EVENTS_PATH=/app/storage/events
-ARCHIVE_PATH=/app/storage/events/archived
-
-# Local development:
-# STORAGE_PATH=./storage
-# EVENTS_PATH=./storage/events
-# ARCHIVE_PATH=./storage/events/archived
-
-# Analytics Backend Configuration (OPTIONAL)
-# Used for server-side tracking only
-# Primary configuration should be done through Admin UI > Settings > Analytics
-# UMAMI_URL=https://analytics.example.com
-# UMAMI_WEBSITE_ID=b4d3c2a1-5678-90ab-cdef-1234567890ab
-
-# Logging
-LOG_LEVEL=info

backend/.eslintrc.js

@@ -1,23 +0,0 @@
-module.exports = {
-  env: {
-    browser: false,
-    es2021: true,
-    node: true,
-    jest: true
-  },
-  extends: [
-    'eslint:recommended'
-  ],
-  parserOptions: {
-    ecmaVersion: 'latest',
-    sourceType: 'module'
-  },
-  rules: {
-    'indent': ['error', 2],
-    'linebreak-style': ['error', 'unix'],
-    'quotes': ['error', 'single'],
-    'semi': ['error', 'always'],
-    'no-unused-vars': ['error', { 'argsIgnorePattern': '^_' }],
-    'no-console': ['warn', { allow: ['warn', 'error'] }]
-  }
-};

backend/Dockerfile

@@ -1,52 +0,0 @@
-FROM node:18-alpine AS builder
-
-# Add build arguments
-ARG CACHEBUST=1
-ARG BUILD_DATE
-ARG VCS_REF
-ARG VERSION
-
-# Add labels for GitHub Container Registry
-LABEL org.opencontainers.image.source="https://github.com/the-luap/picpeak"
-LABEL org.opencontainers.image.description="PicPeak Backend Service"
-LABEL org.opencontainers.image.licenses="MIT"
-
-WORKDIR /app
-
-# Copy package files
-COPY package*.json ./
-
-# Install dependencies
-RUN npm ci --only=production
-
-# Copy application files
-COPY . .
-
-# Production stage
-FROM node:18-alpine
-
-WORKDIR /app
-
-# Install dumb-init for proper signal handling and postgresql-client for database checks
-RUN apk add --no-cache dumb-init postgresql-client
-
-# Create non-root user
-RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
-
-# Copy from builder
-COPY --from=builder --chown=nodejs:nodejs /app/node_modules ./node_modules
-COPY --chown=nodejs:nodejs . .
-
-# Make wait script executable
-RUN chmod +x wait-for-db.sh
-
-# Create necessary directories
-RUN mkdir -p storage/events/active storage/events/archived storage/thumbnails data logs && \
-    chown -R nodejs:nodejs storage data logs
-
-USER nodejs
-
-EXPOSE 3000
-
-ENTRYPOINT ["dumb-init", "--"]
-CMD ["./wait-for-db.sh", "node", "server.js"]

backend/Dockerfile.dev

@@ -1,29 +0,0 @@
-FROM node:18-alpine
-
-WORKDIR /app
-
-# Install dumb-init for proper signal handling
-RUN apk add --no-cache dumb-init
-
-# Copy package files
-COPY package*.json ./
-
-# Install all dependencies (including dev)
-RUN npm install
-
-# Copy application files
-COPY . .
-
-# Create necessary directories
-RUN mkdir -p storage/events/active storage/events/archived storage/thumbnails data logs
-
-# Create non-root user
-RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
-RUN chown -R nodejs:nodejs /app
-
-USER nodejs
-
-EXPOSE 3000
-
-ENTRYPOINT ["dumb-init", "--"]
-CMD ["npm", "run", "dev"]

backend/__tests__/README.md

@@ -1,229 +0,0 @@
-# Enhanced Backup System Test Suite
-
-This directory contains comprehensive tests for the enhanced backup system with S3 support.
-
-## Test Structure
-
-### Unit Tests
-- `services/backupService.enhanced.test.js` - Unit tests for the enhanced backup service
-  - Configuration management
-  - S3 backup functionality
-  - Manifest generation
-  - Error handling and recovery
-  - Backward compatibility (local and rsync)
-  - Service lifecycle management
-
-### Integration Tests
-- `integration/backup-s3.test.js` - Integration tests for S3 backups
-  - Real S3/MinIO connection tests
-  - Full backup process with actual files
-  - Incremental backup verification
-  - Manifest storage and retrieval
-  - Error recovery scenarios
-
-### Manual Integration Test Script
-- `../scripts/test-backup-integration.js` - Comprehensive manual testing script
-  - Can test against MinIO, AWS S3, or any S3-compatible service
-  - Tests all backup types (S3, local, rsync)
-  - Performance testing with large files
-  - Detailed progress reporting
-
-## Running Tests
-
-### Prerequisites
-
-1. **For Unit Tests**: No special setup required, all dependencies are mocked.
-
-2. **For Integration Tests**: Requires a running S3-compatible service (MinIO recommended)
-   ```bash
-   # Start MinIO using Docker
-   docker run -d \
-     -p 9000:9000 \
-     -p 9001:9001 \
-     --name minio-test \
-     -e MINIO_ROOT_USER=minioadmin \
-     -e MINIO_ROOT_PASSWORD=minioadmin \
-     minio/minio server /data --console-address ":9001"
-   ```
-
-3. **Environment Variables** (for integration tests):
-   ```bash
-   # Optional - defaults work with local MinIO
-   export TEST_S3_ENDPOINT=http://localhost:9000
-   export TEST_S3_ACCESS_KEY=minioadmin
-   export TEST_S3_SECRET_KEY=minioadmin
-   
-   # Skip S3 tests if no S3 service available
-   export SKIP_S3_TESTS=true
-   ```
-
-### Running Unit Tests
-
-```bash
-# Run all backup service tests
-npm test -- __tests__/services/backupService.enhanced.test.js
-
-# Run specific test suite
-npm test -- __tests__/services/backupService.enhanced.test.js -t "S3 Backup Functionality"
-
-# Run with coverage
-npm test -- --coverage __tests__/services/backupService.enhanced.test.js
-```
-
-### Running Integration Tests
-
-```bash
-# Ensure MinIO is running first!
-
-# Run S3 integration tests
-npm test -- __tests__/integration/backup-s3.test.js
-
-# Run with verbose output
-npm test -- __tests__/integration/backup-s3.test.js --verbose
-
-# Skip S3 tests if needed
-SKIP_S3_TESTS=true npm test -- __tests__/integration/backup-s3.test.js
-```
-
-### Running Manual Integration Tests
-
-```bash
-# Test with local MinIO (default)
-node scripts/test-backup-integration.js
-
-# Test with AWS S3
-node scripts/test-backup-integration.js \
-  --endpoint https://s3.amazonaws.com \
-  --access-key YOUR_ACCESS_KEY \
-  --secret-key YOUR_SECRET_KEY \
-  --bucket your-test-bucket
-
-# Test local backup
-node scripts/test-backup-integration.js --type local
-
-# Test with cleanup after completion
-node scripts/test-backup-integration.js --cleanup
-
-# Verbose output
-node scripts/test-backup-integration.js --verbose
-```
-
-## Test Coverage
-
-The test suite covers:
-
-### Configuration
-- ✅ Database configuration retrieval
-- ✅ JSON parsing and error handling
-- ✅ Configuration validation
-- ✅ Required field validation
-
-### S3 Functionality
-- ✅ S3 client initialization
-- ✅ Connection testing
-- ✅ File upload with progress tracking
-- ✅ Large file handling (multipart upload)
-- ✅ Metadata and custom headers
-- ✅ Error handling and retries
-
-### Backup Process
-- ✅ Full backup execution
-- ✅ Incremental backup (changed files only)
-- ✅ File checksum calculation and comparison
-- ✅ Database backup inclusion
-- ✅ Archive inclusion toggle
-- ✅ File size limits
-
-### Manifest Generation
-- ✅ Full manifest generation
-- ✅ Incremental manifest with parent reference
-- ✅ JSON and YAML format support
-- ✅ Manifest validation
-- ✅ S3 manifest storage and retrieval
-- ✅ Checksum verification
-
-### Error Handling
-- ✅ S3 connection failures
-- ✅ File read errors
-- ✅ Individual file failure recovery
-- ✅ Retry logic with exponential backoff
-- ✅ Email notifications on failure
-- ✅ Concurrent backup prevention
-
-### Backward Compatibility
-- ✅ Local directory backup
-- ✅ Rsync backup
-- ✅ Existing manifest format support
-
-### Service Management
-- ✅ Cron job scheduling
-- ✅ Service start/stop
-- ✅ Manual backup triggering
-- ✅ Backup history and status
-
-## Mock Setup
-
-The unit tests use comprehensive mocking:
-
-```javascript
-// Database mocking
-jest.mock('../../src/database/db');
-
-// S3 client mocking
-jest.mock('../../src/services/storage/s3Storage');
-
-// File system mocking
-const mockFs = require('mock-fs');
-
-// Cron job mocking
-jest.mock('node-cron');
-```
-
-## CI/CD Integration
-
-To run tests in CI/CD pipeline:
-
-```yaml
-# Example GitHub Actions
-- name: Run Unit Tests
-  run: npm test -- __tests__/services/backupService.enhanced.test.js
-
-- name: Start MinIO
-  run: |
-    docker run -d \
-      -p 9000:9000 \
-      --name minio-test \
-      -e MINIO_ROOT_USER=minioadmin \
-      -e MINIO_ROOT_PASSWORD=minioadmin \
-      minio/minio server /data
-
-- name: Run Integration Tests
-  run: npm test -- __tests__/integration/backup-s3.test.js
-```
-
-## Debugging Tests
-
-```bash
-# Run tests in debug mode
-node --inspect-brk ./node_modules/.bin/jest __tests__/services/backupService.enhanced.test.js
-
-# Run single test with console output
-npm test -- __tests__/services/backupService.enhanced.test.js -t "should perform S3 backup" --verbose
-```
-
-## Performance Considerations
-
-- Integration tests create real files and S3 objects
-- Each test run creates a unique S3 bucket to avoid conflicts
-- Cleanup is automatic but can be disabled for debugging
-- Large file tests (10MB+) are included but can be slow
-
-## Adding New Tests
-
-When adding new backup features:
-
-1. Add unit tests to `backupService.enhanced.test.js`
-2. Add integration tests to `backup-s3.test.js` if S3-specific
-3. Update manual test script for comprehensive testing
-4. Ensure mocks are properly configured
-5. Document any new environment requirements

backend/__tests__/integration/backup-s3.test.js

@@ -1,506 +0,0 @@
-const { describe, it, expect, jest, beforeAll, afterAll, beforeEach, afterEach } = require('@jest/globals');
-const { S3Client, CreateBucketCommand, DeleteBucketCommand, ListObjectsV2Command, DeleteObjectsCommand } = require('@aws-sdk/client-s3');
-const path = require('path');
-const fs = require('fs').promises;
-const crypto = require('crypto');
-
-// Load services
-const backupService = require('../../src/services/backupService');
-const S3StorageAdapter = require('../../src/services/storage/s3Storage');
-const { db, initialize: initDb } = require('../../src/database/db');
-const logger = require('../../src/utils/logger');
-
-// Test configuration
-const TEST_CONFIG = {
-  endpoint: process.env.TEST_S3_ENDPOINT || 'http://localhost:9000',
-  accessKeyId: process.env.TEST_S3_ACCESS_KEY || 'minioadmin',
-  secretAccessKey: process.env.TEST_S3_SECRET_KEY || 'minioadmin',
-  bucket: 'test-backup-bucket-' + Date.now(),
-  region: 'us-east-1'
-};
-
-describe('S3 Backup Integration Tests', () => {
-  let s3Client;
-  let testStoragePath;
-  let originalEnv;
-
-  beforeAll(async () => {
-    // Skip if no S3 endpoint configured
-    if (process.env.SKIP_S3_TESTS === 'true') {
-      console.log('Skipping S3 integration tests (SKIP_S3_TESTS=true)');
-      return;
-    }
-
-    // Save original environment
-    originalEnv = { ...process.env };
-
-    // Initialize S3 client for test setup
-    s3Client = new S3Client({
-      endpoint: TEST_CONFIG.endpoint,
-      region: TEST_CONFIG.region,
-      credentials: {
-        accessKeyId: TEST_CONFIG.accessKeyId,
-        secretAccessKey: TEST_CONFIG.secretAccessKey
-      },
-      forcePathStyle: true
-    });
-
-    // Create test bucket
-    try {
-      await s3Client.send(new CreateBucketCommand({ Bucket: TEST_CONFIG.bucket }));
-      console.log(`Created test bucket: ${TEST_CONFIG.bucket}`);
-    } catch (error) {
-      if (error.name !== 'BucketAlreadyOwnedByYou') {
-        console.error('Failed to create test bucket:', error);
-        throw error;
-      }
-    }
-
-    // Initialize database
-    await initDb();
-    await db.migrate.latest();
-
-    // Create test storage directory
-    testStoragePath = path.join(__dirname, '../fixtures/test-storage');
-    await fs.mkdir(testStoragePath, { recursive: true });
-    process.env.STORAGE_PATH = testStoragePath;
-
-    // Set up test data
-    await setupTestData();
-
-    // Mock logger to reduce noise
-    logger.info = jest.fn();
-    logger.debug = jest.fn();
-    logger.warn = jest.fn();
-    logger.error = jest.fn();
-  });
-
-  afterAll(async () => {
-    if (process.env.SKIP_S3_TESTS === 'true') return;
-
-    try {
-      // Clean up S3 bucket
-      await cleanupS3Bucket();
-      await s3Client.send(new DeleteBucketCommand({ Bucket: TEST_CONFIG.bucket }));
-      console.log(`Deleted test bucket: ${TEST_CONFIG.bucket}`);
-    } catch (error) {
-      console.error('Failed to cleanup S3 bucket:', error);
-    }
-
-    // Clean up test storage
-    await fs.rm(testStoragePath, { recursive: true, force: true });
-
-    // Restore environment
-    process.env = originalEnv;
-
-    // Close database
-    await db.destroy();
-  });
-
-  beforeEach(async () => {
-    if (process.env.SKIP_S3_TESTS === 'true') {
-      return;
-    }
-
-    // Clean backup tables
-    await db('backup_runs').del();
-    await db('backup_file_states').del();
-    await db('database_backup_runs').del();
-
-    // Configure S3 backup settings
-    await configureS3Backup();
-  });
-
-  afterEach(async () => {
-    if (process.env.SKIP_S3_TESTS === 'true') return;
-
-    // Clean up S3 objects created during test
-    await cleanupS3Bucket();
-  });
-
-  describe('S3 Connection and Configuration', () => {
-    it('should successfully connect to S3-compatible storage', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      const s3Adapter = new S3StorageAdapter({
-        ...TEST_CONFIG,
-        bucket: TEST_CONFIG.bucket,
-        forcePathStyle: true,
-        sslEnabled: false
-      });
-
-      const connected = await s3Adapter.testConnection();
-      expect(connected).toBe(true);
-    });
-
-    it('should validate S3 configuration before backup', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Remove required configuration
-      await db('app_settings')
-        .where('setting_key', 'backup_s3_secret_key')
-        .del();
-
-      await backupService.runBackup();
-
-      const lastRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      expect(lastRun.status).toBe('failed');
-      expect(lastRun.error_message).toContain('S3 backup configuration incomplete');
-    });
-  });
-
-  describe('Full S3 Backup Process', () => {
-    it('should perform complete S3 backup with all file types', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Run backup
-      await backupService.runBackup();
-
-      // Verify backup run completed
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      expect(backupRun.status).toBe('completed');
-      expect(backupRun.files_backed_up).toBeGreaterThan(0);
-      expect(backupRun.total_size_bytes).toBeGreaterThan(0);
-
-      // Verify files in S3
-      const s3Objects = await listS3Objects();
-      expect(s3Objects.length).toBeGreaterThan(0);
-
-      // Check for expected file types
-      const hasPhotos = s3Objects.some(obj => obj.Key.includes('events/active'));
-      const hasThumbnails = s3Objects.some(obj => obj.Key.includes('thumbnails'));
-      const hasManifest = s3Objects.some(obj => obj.Key.includes('backup-manifest'));
-      const hasSummary = s3Objects.some(obj => obj.Key.includes('backup-summary.json'));
-
-      expect(hasPhotos).toBe(true);
-      expect(hasThumbnails).toBe(true);
-      expect(hasManifest).toBe(true);
-      expect(hasSummary).toBe(true);
-    });
-
-    it('should handle large file uploads with multipart', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Create a large test file (15MB)
-      const largeFilePath = path.join(testStoragePath, 'events/active/large-photo.jpg');
-      const largeFileSize = 15 * 1024 * 1024; // 15MB
-      const largeFileContent = Buffer.alloc(largeFileSize, 'x');
-      await fs.writeFile(largeFilePath, largeFileContent);
-
-      // Run backup
-      await backupService.runBackup();
-
-      // Verify large file was uploaded
-      const s3Objects = await listS3Objects();
-      const largeFileUploaded = s3Objects.some(obj => 
-        obj.Key.includes('large-photo.jpg') && obj.Size === largeFileSize
-      );
-
-      expect(largeFileUploaded).toBe(true);
-    });
-
-    it('should include database backup when available', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Create a mock database backup
-      const dbBackupPath = path.join(testStoragePath, 'backups/db-backup.sql');
-      await fs.mkdir(path.dirname(dbBackupPath), { recursive: true });
-      await fs.writeFile(dbBackupPath, 'CREATE TABLE test (id INT);');
-
-      // Record database backup
-      await db('database_backup_runs').insert({
-        started_at: new Date(),
-        completed_at: new Date(),
-        status: 'completed',
-        backup_type: 'sqlite',
-        file_path: dbBackupPath,
-        file_size_bytes: 100,
-        checksum: 'test123',
-        statistics: JSON.stringify({ tables: {} }),
-        table_checksums: JSON.stringify({})
-      });
-
-      // Configure to include database
-      await db('app_settings')
-        .where('setting_key', 'backup_include_database')
-        .update({ setting_value: 'true' });
-
-      // Run backup
-      await backupService.runBackup();
-
-      // Verify database backup in S3
-      const s3Objects = await listS3Objects();
-      const hasDbBackup = s3Objects.some(obj => obj.Key.includes('database/db-backup.sql'));
-      expect(hasDbBackup).toBe(true);
-    });
-  });
-
-  describe('Incremental Backup', () => {
-    it('should only upload changed files in incremental backup', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // First backup - full
-      await backupService.runBackup();
-
-      const firstRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      const firstObjectCount = (await listS3Objects()).length;
-
-      // Wait a moment to ensure different timestamps
-      await new Promise(resolve => setTimeout(resolve, 100));
-
-      // Modify one file
-      const modifiedFile = path.join(testStoragePath, 'events/active/event1/photo1.jpg');
-      await fs.writeFile(modifiedFile, 'modified content');
-
-      // Second backup - incremental
-      await backupService.runBackup();
-
-      const secondRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      expect(secondRun.id).not.toBe(firstRun.id);
-      expect(secondRun.files_backed_up).toBe(1); // Only modified file
-
-      // Check manifest indicates incremental
-      if (secondRun.manifest_path) {
-        const manifest = await backupService.getBackupManifest(secondRun.id);
-        expect(manifest.manifest.incremental).toBeDefined();
-        expect(manifest.manifest.incremental.modified_files_count).toBe(1);
-      }
-    });
-
-    it('should track file states across backups', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      await backupService.runBackup();
-
-      // Check file states are recorded
-      const fileStates = await db('backup_file_states').select('*');
-      expect(fileStates.length).toBeGreaterThan(0);
-
-      // Verify checksums are stored
-      const hasChecksums = fileStates.every(state => state.checksum !== null);
-      expect(hasChecksums).toBe(true);
-    });
-  });
-
-  describe('S3 Manifest Storage', () => {
-    it('should upload manifest to S3 and retrieve it', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Configure YAML manifest format
-      await db('app_settings')
-        .where('setting_key', 'backup_manifest_format')
-        .update({ setting_value: '"yaml"' });
-
-      await backupService.runBackup();
-
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      expect(backupRun.manifest_path).toMatch(/^s3:\/\//);
-
-      // Retrieve manifest
-      const { manifest, summary } = await backupService.getBackupManifest(backupRun.id);
-
-      expect(manifest).toBeDefined();
-      expect(manifest.backup.id).toBeDefined();
-      expect(summary).toContain('BACKUP MANIFEST SUMMARY');
-    });
-
-    it('should validate manifest integrity', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      await backupService.runBackup();
-
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      const validationResult = await backupService.validateBackupManifest(backupRun.manifest_path);
-
-      expect(validationResult.valid).toBe(true);
-      expect(validationResult.manifest).toBeDefined();
-    });
-  });
-
-  describe('Error Recovery', () => {
-    it('should handle S3 connection failures gracefully', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Configure with invalid endpoint
-      await db('app_settings')
-        .where('setting_key', 'backup_s3_endpoint')
-        .update({ setting_value: '"http://invalid-endpoint:9999"' });
-
-      await backupService.runBackup();
-
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      expect(backupRun.status).toBe('failed');
-      expect(backupRun.error_message).toBeDefined();
-    });
-
-    it('should continue backup despite individual file failures', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Create a file that will be deleted during backup
-      const tempFile = path.join(testStoragePath, 'events/active/temp.jpg');
-      await fs.writeFile(tempFile, 'temporary');
-
-      // Mock file deletion during backup
-      const originalUpload = S3StorageAdapter.prototype.upload;
-      let callCount = 0;
-      S3StorageAdapter.prototype.upload = jest.fn(async function(localPath, s3Key, options) {
-        callCount++;
-        if (callCount === 2) {
-          // Delete the temp file to cause an error
-          await fs.unlink(tempFile).catch(() => {});
-        }
-        return originalUpload.call(this, localPath, s3Key, options);
-      });
-
-      await backupService.runBackup();
-
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      // Should complete despite one file error
-      expect(backupRun.status).toBe('completed');
-      expect(backupRun.files_backed_up).toBeGreaterThan(0);
-
-      // Restore original method
-      S3StorageAdapter.prototype.upload = originalUpload;
-    });
-
-    it('should retry failed uploads with exponential backoff', async () => {
-      if (process.env.SKIP_S3_TESTS === 'true') return;
-
-      // Mock S3 upload to fail twice then succeed
-      const originalUpload = S3StorageAdapter.prototype.upload;
-      let attemptCount = 0;
-      S3StorageAdapter.prototype.upload = jest.fn(async function(localPath, s3Key, options) {
-        attemptCount++;
-        if (attemptCount <= 2) {
-          const error = new Error('Network timeout');
-          error.code = 'ETIMEDOUT';
-          throw error;
-        }
-        return originalUpload.call(this, localPath, s3Key, options);
-      });
-
-      await backupService.runBackup();
-
-      const backupRun = await db('backup_runs')
-        .orderBy('started_at', 'desc')
-        .first();
-
-      // Should succeed after retries
-      expect(backupRun.status).toBe('completed');
-      expect(attemptCount).toBeGreaterThan(2);
-
-      // Restore original method
-      S3StorageAdapter.prototype.upload = originalUpload;
-    });
-  });
-
-  // Helper functions
-
-  async function setupTestData() {
-    // Create test directory structure
-    const dirs = [
-      'events/active/event1',
-      'events/active/event2',
-      'events/archived',
-      'thumbnails',
-      'uploads'
-    ];
-
-    for (const dir of dirs) {
-      await fs.mkdir(path.join(testStoragePath, dir), { recursive: true });
-    }
-
-    // Create test files
-    const files = [
-      { path: 'events/active/event1/photo1.jpg', content: 'photo1 content' },
-      { path: 'events/active/event1/photo2.jpg', content: 'photo2 content' },
-      { path: 'events/active/event2/photo3.jpg', content: 'photo3 content' },
-      { path: 'events/archived/old-event.zip', content: 'archived content' },
-      { path: 'thumbnails/thumb1.jpg', content: 'thumbnail content' },
-      { path: 'uploads/logo.png', content: 'logo content' }
-    ];
-
-    for (const file of files) {
-      await fs.writeFile(
-        path.join(testStoragePath, file.path),
-        file.content
-      );
-    }
-  }
-
-  async function configureS3Backup() {
-    const settings = [
-      { setting_key: 'backup_enabled', setting_value: 'true' },
-      { setting_key: 'backup_destination_type', setting_value: '"s3"' },
-      { setting_key: 'backup_s3_bucket', setting_value: `"${TEST_CONFIG.bucket}"` },
-      { setting_key: 'backup_s3_region', setting_value: `"${TEST_CONFIG.region}"` },
-      { setting_key: 'backup_s3_endpoint', setting_value: `"${TEST_CONFIG.endpoint}"` },
-      { setting_key: 'backup_s3_access_key', setting_value: `"${TEST_CONFIG.accessKeyId}"` },
-      { setting_key: 'backup_s3_secret_key', setting_value: `"${TEST_CONFIG.secretAccessKey}"` },
-      { setting_key: 'backup_s3_force_path_style', setting_value: 'true' },
-      { setting_key: 'backup_s3_ssl_enabled', setting_value: 'false' },
-      { setting_key: 'backup_include_archived', setting_value: 'true' },
-      { setting_key: 'backup_incremental', setting_value: 'true' },
-      { setting_key: 'backup_max_file_size_mb', setting_value: '100' }
-    ];
-
-    for (const setting of settings) {
-      await db('app_settings')
-        .insert({
-          setting_type: 'backup',
-          ...setting,
-          created_at: new Date(),
-          updated_at: new Date()
-        })
-        .onConflict(['setting_type', 'setting_key'])
-        .merge();
-    }
-  }
-
-  async function listS3Objects() {
-    const response = await s3Client.send(new ListObjectsV2Command({
-      Bucket: TEST_CONFIG.bucket
-    }));
-    return response.Contents || [];
-  }
-
-  async function cleanupS3Bucket() {
-    try {
-      const objects = await listS3Objects();
-      if (objects.length > 0) {
-        await s3Client.send(new DeleteObjectsCommand({
-          Bucket: TEST_CONFIG.bucket,
-          Delete: {
-            Objects: objects.map(obj => ({ Key: obj.Key }))
-          }
-        }));
-      }
-    } catch (error) {
-      console.error('Failed to cleanup S3 objects:', error);
-    }
-  }
-});

backend/__tests__/services/backupService.enhanced.test.js

@@ -1,751 +0,0 @@
-const { describe, it, expect, jest, beforeEach, afterEach } = require('@jest/globals');
-const mockFs = require('mock-fs');
-const path = require('path');
-const crypto = require('crypto');
-const { EventEmitter } = require('events');
-
-// Mock dependencies before requiring the module
-jest.mock('../../src/database/db');
-jest.mock('../../src/utils/logger');
-jest.mock('../../src/services/emailProcessor');
-jest.mock('node-cron');
-jest.mock('../../src/services/backupManifest');
-jest.mock('../../src/services/storage/s3Storage');
-
-const backupService = require('../../src/services/backupService');
-const { db } = require('../../src/database/db');
-const logger = require('../../src/utils/logger');
-const { queueEmail } = require('../../src/services/emailProcessor');
-const cron = require('node-cron');
-const backupManifest = require('../../src/services/backupManifest');
-const S3StorageAdapter = require('../../src/services/storage/s3Storage');
-
-describe('Enhanced Backup Service Tests', () => {
-  let mockDb;
-  let mockS3Client;
-  let mockCronJob;
-
-  beforeEach(() => {
-    // Reset all mocks
-    jest.clearAllMocks();
-    
-    // Mock database
-    mockDb = {
-      select: jest.fn().mockReturnThis(),
-      where: jest.fn().mockReturnThis(),
-      orderBy: jest.fn().mockReturnThis(),
-      limit: jest.fn().mockReturnThis(),
-      first: jest.fn(),
-      insert: jest.fn(),
-      update: jest.fn(),
-      delete: jest.fn()
-    };
-    db.mockReturnValue(mockDb);
-    
-    // Mock cron job
-    mockCronJob = {
-      stop: jest.fn()
-    };
-    cron.schedule.mockReturnValue(mockCronJob);
-    
-    // Mock S3 client
-    mockS3Client = {
-      testConnection: jest.fn().mockResolvedValue(true),
-      upload: jest.fn().mockResolvedValue({ Location: 's3://bucket/key' }),
-      uploadStream: jest.fn().mockResolvedValue({ Location: 's3://bucket/key' }),
-      download: jest.fn().mockResolvedValue(),
-      exists: jest.fn().mockResolvedValue(false),
-      delete: jest.fn().mockResolvedValue(),
-      list: jest.fn().mockResolvedValue({ Contents: [] })
-    };
-    S3StorageAdapter.mockImplementation(() => mockS3Client);
-    
-    // Mock backup manifest
-    backupManifest.generateManifest = jest.fn().mockResolvedValue({
-      backup: { id: 'test-backup-123' },
-      version: '2.0'
-    });
-    backupManifest.saveManifest = jest.fn().mockResolvedValue('/path/to/manifest.json');
-    backupManifest.loadManifest = jest.fn().mockResolvedValue({});
-    backupManifest.validateManifest = jest.fn();
-    backupManifest.generateSummaryReport = jest.fn().mockReturnValue('Summary report');
-    
-    // Mock logger
-    logger.info = jest.fn();
-    logger.error = jest.fn();
-    logger.warn = jest.fn();
-    logger.debug = jest.fn();
-  });
-
-  afterEach(() => {
-    mockFs.restore();
-  });
-
-  describe('getBackupConfig', () => {
-    it('should retrieve and parse backup configuration from database', async () => {
-      const mockSettings = [
-        { setting_key: 'backup_enabled', setting_value: 'true' },
-        { setting_key: 'backup_destination_type', setting_value: '"s3"' },
-        { setting_key: 'backup_s3_bucket', setting_value: '"test-bucket"' },
-        { setting_key: 'backup_retention_days', setting_value: '30' }
-      ];
-      
-      mockDb.select.mockResolvedValue(mockSettings);
-      
-      const config = await backupService.getBackupConfig();
-      
-      expect(config).toEqual({
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_retention_days: 30
-      });
-      
-      expect(db).toHaveBeenCalledWith('app_settings');
-      expect(mockDb.where).toHaveBeenCalledWith('setting_type', 'backup');
-    });
-
-    it('should handle JSON parse errors gracefully', async () => {
-      const mockSettings = [
-        { setting_key: 'backup_enabled', setting_value: 'invalid-json' }
-      ];
-      
-      mockDb.select.mockResolvedValue(mockSettings);
-      
-      const config = await backupService.getBackupConfig();
-      
-      expect(config).toEqual({
-        backup_enabled: 'invalid-json'
-      });
-    });
-
-    it('should return null on database error', async () => {
-      mockDb.select.mockRejectedValue(new Error('Database error'));
-      
-      const config = await backupService.getBackupConfig();
-      
-      expect(config).toBeNull();
-      expect(logger.error).toHaveBeenCalled();
-    });
-  });
-
-  describe('S3 Backup Functionality', () => {
-    beforeEach(() => {
-      // Mock file system
-      mockFs({
-        '/storage/events/active/event1': {
-          'photo1.jpg': Buffer.from('photo1 content'),
-          'photo2.jpg': Buffer.from('photo2 content')
-        },
-        '/storage/events/archived/event2.zip': Buffer.from('archived content'),
-        '/storage/thumbnails': {
-          'thumb1.jpg': Buffer.from('thumb1 content')
-        },
-        '/storage/uploads': {
-          'logo.png': Buffer.from('logo content')
-        }
-      });
-      
-      process.env.STORAGE_PATH = '/storage';
-    });
-
-    it('should perform S3 backup with correct configuration', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_region: 'us-east-1',
-        backup_s3_endpoint: 'https://s3.amazonaws.com',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret',
-        backup_include_archived: true,
-        backup_max_file_size_mb: 100
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.where.mockReturnThis();
-      mockDb.first.mockResolvedValue(null);
-      mockDb.insert.mockResolvedValue([1]);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      jest.spyOn(backupService, 'getDatabaseBackupInfo').mockResolvedValue({
-        type: 'sqlite',
-        backupFile: null,
-        hasChanged: true
-      });
-      
-      await backupService.runBackup();
-      
-      expect(S3StorageAdapter).toHaveBeenCalledWith({
-        bucket: 'test-bucket',
-        region: 'us-east-1',
-        endpoint: 'https://s3.amazonaws.com',
-        accessKeyId: 'test-key',
-        secretAccessKey: 'test-secret',
-        forcePathStyle: false,
-        sslEnabled: true,
-        maxRetries: 3,
-        retryDelay: 1000
-      });
-      
-      expect(mockS3Client.testConnection).toHaveBeenCalled();
-      expect(mockS3Client.upload).toHaveBeenCalled();
-    });
-
-    it('should handle S3 upload failures gracefully', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      mockS3Client.testConnection.mockRejectedValue(new Error('Connection failed'));
-      
-      await backupService.runBackup();
-      
-      expect(logger.error).toHaveBeenCalledWith('S3 backup failed:', expect.any(Error));
-      expect(mockDb.update).toHaveBeenCalledWith(expect.objectContaining({
-        status: 'failed',
-        error_message: expect.stringContaining('Connection failed')
-      }));
-    });
-
-    it('should skip unchanged files in incremental backup', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret',
-        backup_incremental: true
-      };
-      
-      // Mock existing file state
-      mockDb.first.mockImplementation((query) => {
-        if (query === undefined) {
-          return Promise.resolve({
-            file_path: 'events/active/event1/photo1.jpg',
-            checksum: crypto.createHash('sha256').update('photo1 content').digest('hex')
-          });
-        }
-        return Promise.resolve(null);
-      });
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      await backupService.runBackup();
-      
-      // Should skip unchanged file
-      const uploadCalls = mockS3Client.upload.mock.calls;
-      const photo1Uploaded = uploadCalls.some(call => 
-        call[1].includes('photo1.jpg')
-      );
-      expect(photo1Uploaded).toBe(false);
-    });
-
-    it('should include database backup when configured', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret',
-        backup_include_database: true
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      jest.spyOn(backupService, 'getDatabaseBackupInfo').mockResolvedValue({
-        type: 'sqlite',
-        backupFile: '/backup/db-backup.sql',
-        size: 1024000,
-        checksum: 'abc123',
-        hasChanged: false
-      });
-      
-      // Mock database backup file
-      mockFs({
-        '/storage/events/active': {},
-        '/backup/db-backup.sql': Buffer.from('database backup content')
-      });
-      
-      await backupService.runBackup();
-      
-      // Verify database backup was uploaded
-      const uploadCalls = mockS3Client.upload.mock.calls;
-      const dbBackupUploaded = uploadCalls.some(call => 
-        call[1].includes('database/db-backup.sql')
-      );
-      expect(dbBackupUploaded).toBe(true);
-    });
-
-    it('should validate required S3 configuration', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket'
-        // Missing access key and secret key
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      await backupService.runBackup();
-      
-      expect(logger.error).toHaveBeenCalledWith(
-        'S3 backup failed:',
-        expect.objectContaining({
-          message: expect.stringContaining('S3 backup configuration incomplete')
-        })
-      );
-    });
-  });
-
-  describe('Manifest Generation', () => {
-    it('should generate and save manifest for successful backup', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 'local',
-        backup_destination_path: '/backup',
-        backup_manifest_format: 'json'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      mockFs({
-        '/storage/events/active/event1': {
-          'photo1.jpg': Buffer.from('photo1 content')
-        },
-        '/backup': {}
-      });
-      
-      await backupService.runBackup();
-      
-      expect(backupManifest.generateManifest).toHaveBeenCalledWith(
-        expect.objectContaining({
-          backupType: 'full',
-          backupPath: '/backup',
-          format: 'json'
-        })
-      );
-      
-      expect(backupManifest.saveManifest).toHaveBeenCalled();
-    });
-
-    it('should generate incremental manifest when parent exists', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 'local',
-        backup_destination_path: '/backup'
-      };
-      
-      const lastBackup = {
-        id: 1,
-        manifest_path: '/backup/manifests/previous.json',
-        manifest_id: 'previous-backup-123'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([2]);
-      mockDb.first.mockImplementation(() => Promise.resolve(lastBackup));
-      mockDb.orderBy.mockReturnThis();
-      mockDb.where.mockReturnThis();
-      mockDb.whereNot = jest.fn().mockReturnThis();
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      mockFs({
-        '/storage/events/active': {},
-        '/backup': {}
-      });
-      
-      await backupService.runBackup();
-      
-      expect(backupManifest.loadManifest).toHaveBeenCalledWith('/backup/manifests/previous.json');
-      expect(backupManifest.generateIncrementalManifest).toHaveBeenCalled();
-    });
-
-    it('should upload manifest to S3 for S3 backups', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret',
-        backup_manifest_format: 'yaml'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      const manifest = {
-        backup: { id: 'backup-123' },
-        version: '2.0'
-      };
-      backupManifest.generateManifest.mockResolvedValue(manifest);
-      
-      mockFs({
-        '/storage/events/active': {},
-        '/storage/temp': {}
-      });
-      
-      await backupService.runBackup();
-      
-      // Verify manifest was uploaded to S3
-      const uploadCalls = mockS3Client.upload.mock.calls;
-      const manifestUploaded = uploadCalls.some(call => 
-        call[1].includes('manifests/backup-manifest-backup-123.yaml')
-      );
-      expect(manifestUploaded).toBe(true);
-    });
-  });
-
-  describe('Backward Compatibility', () => {
-    it('should support local backup destination', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 'local',
-        backup_destination_path: '/backup/local'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      mockFs({
-        '/storage/events/active/event1': {
-          'photo1.jpg': Buffer.from('photo1 content')
-        },
-        '/backup/local': {}
-      });
-      
-      await backupService.runBackup();
-      
-      // Verify files were copied to local destination
-      const fs = require('fs');
-      const destPath = '/backup/local/events/active/event1/photo1.jpg';
-      expect(fs.existsSync(destPath)).toBe(true);
-    });
-
-    it('should support rsync backup destination', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 'rsync',
-        backup_rsync_host: 'backup.example.com',
-        backup_rsync_user: 'backup',
-        backup_rsync_path: '/remote/backup'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      // Mock exec for rsync
-      const { exec } = require('child_process');
-      const mockExec = jest.fn((cmd, callback) => {
-        callback(null, { stdout: 'Number of files transferred: 1\nTotal file size: 1024 bytes' });
-      });
-      exec.mockImplementation(mockExec);
-      
-      mockFs({
-        '/storage/events/active': {}
-      });
-      
-      await backupService.runBackup();
-      
-      expect(mockExec).toHaveBeenCalledWith(
-        expect.stringContaining('rsync'),
-        expect.any(Function)
-      );
-    });
-  });
-
-  describe('Error Handling and Recovery', () => {
-    it('should handle file read errors gracefully', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_s3_access_key: 'test-key',
-        backup_s3_secret_key: 'test-secret'
-      };
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.first.mockResolvedValue(null);
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      // Mock file that throws error on read
-      const fs = require('fs');
-      const originalCreateReadStream = fs.createReadStream;
-      fs.createReadStream = jest.fn((path) => {
-        if (path.includes('error.jpg')) {
-          const stream = new EventEmitter();
-          process.nextTick(() => stream.emit('error', new Error('File read error')));
-          return stream;
-        }
-        return originalCreateReadStream(path);
-      });
-      
-      mockFs({
-        '/storage/events/active': {
-          'error.jpg': Buffer.from('content'),
-          'good.jpg': Buffer.from('content')
-        }
-      });
-      
-      await backupService.runBackup();
-      
-      // Should continue with other files despite error
-      expect(logger.error).toHaveBeenCalledWith(
-        expect.stringContaining('Failed to backup file'),
-        expect.any(Error)
-      );
-      
-      fs.createReadStream = originalCreateReadStream;
-    });
-
-    it('should send failure email on backup error', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 's3',
-        backup_s3_bucket: 'test-bucket',
-        backup_email_on_failure: true
-      };
-      
-      const admins = [
-        { email: 'admin1@example.com', is_active: true },
-        { email: 'admin2@example.com', is_active: true }
-      ];
-      
-      mockDb.select.mockResolvedValue([]);
-      mockDb.insert.mockResolvedValue([1]);
-      mockDb.where.mockReturnThis();
-      
-      jest.spyOn(backupService, 'getBackupConfig')
-        .mockResolvedValueOnce(config)
-        .mockResolvedValueOnce(config);
-      
-      // Force an error
-      jest.spyOn(backupService, 'getFilesToBackup').mockRejectedValue(new Error('Storage error'));
-      
-      // Mock admin users query
-      db.mockImplementation((table) => {
-        if (table === 'admin_users') {
-          return {
-            where: jest.fn().mockResolvedValue(admins)
-          };
-        }
-        return mockDb;
-      });
-      
-      await backupService.runBackup();
-      
-      expect(queueEmail).toHaveBeenCalledTimes(2);
-      expect(queueEmail).toHaveBeenCalledWith(
-        null,
-        'admin1@example.com',
-        'backup_failed',
-        expect.objectContaining({
-          error_message: 'Storage error'
-        })
-      );
-    });
-
-    it('should handle concurrent backup attempts', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_destination_type: 'local',
-        backup_destination_path: '/backup'
-      };
-      
-      jest.spyOn(backupService, 'getBackupConfig').mockResolvedValue(config);
-      
-      mockFs({
-        '/storage/events/active': {},
-        '/backup': {}
-      });
-      
-      // Start two backups concurrently
-      const backup1 = backupService.runBackup();
-      const backup2 = backupService.runBackup();
-      
-      await Promise.all([backup1, backup2]);
-      
-      // Second backup should be skipped
-      expect(logger.warn).toHaveBeenCalledWith('Backup already running, skipping');
-    });
-  });
-
-  describe('Service Lifecycle', () => {
-    it('should start backup service with cron schedule', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_schedule: '0 3 * * *' // 3 AM daily
-      };
-      
-      mockDb.select.mockResolvedValue(
-        Object.entries(config).map(([key, value]) => ({
-          setting_key: key,
-          setting_value: value.toString()
-        }))
-      );
-      
-      await backupService.startBackupService();
-      
-      expect(cron.schedule).toHaveBeenCalledWith('0 3 * * *', expect.any(Function));
-      expect(logger.info).toHaveBeenCalledWith('Backup service started with schedule: 0 3 * * *');
-    });
-
-    it('should stop existing job when restarting service', async () => {
-      const config = {
-        backup_enabled: true,
-        backup_schedule: '0 2 * * *'
-      };
-      
-      mockDb.select.mockResolvedValue(
-        Object.entries(config).map(([key, value]) => ({
-          setting_key: key,
-          setting_value: value.toString()
-        }))
-      );
-      
-      // Start service twice
-      await backupService.startBackupService();
-      await backupService.startBackupService();
-      
-      expect(mockCronJob.stop).toHaveBeenCalled();
-    });
-
-    it('should not start service when backup is disabled', async () => {
-      const config = {
-        backup_enabled: false
-      };
-      
-      mockDb.select.mockResolvedValue([
-        { setting_key: 'backup_enabled', setting_value: 'false' }
-      ]);
-      
-      await backupService.startBackupService();
-      
-      expect(cron.schedule).not.toHaveBeenCalled();
-      expect(logger.info).toHaveBeenCalledWith('Backup service is disabled');
-    });
-  });
-
-  describe('Backup Status and History', () => {
-    it('should return backup status with recent runs', async () => {
-      const recentRuns = [
-        {
-          id: 1,
-          started_at: new Date(),
-          completed_at: new Date(),
-          status: 'completed',
-          files_backed_up: 100,
-          total_size_bytes: 1024000,
-          manifest_path: '/backup/manifest.json'
-        }
-      ];
-      
-      mockDb.limit.mockResolvedValue(recentRuns);
-      
-      backupManifest.validateManifest.mockImplementation(() => true);
-      
-      const status = await backupService.getBackupStatus();
-      
-      expect(status).toEqual({
-        isRunning: false,
-        isHealthy: true,
-        lastRun: expect.objectContaining({
-          ...recentRuns[0],
-          manifestValid: true
-        }),
-        recentRuns: recentRuns,
-        nextScheduledRun: expect.any(String)
-      });
-    });
-
-    it('should clean up old backup runs', async () => {
-      mockDb.delete.mockResolvedValue(5);
-      
-      await backupService.cleanupOldBackupRuns(30);
-      
-      expect(mockDb.where).toHaveBeenCalledWith('started_at', '<', expect.any(Date));
-      expect(mockDb.delete).toHaveBeenCalled();
-      expect(logger.info).toHaveBeenCalledWith('Cleaned up 5 old backup runs');
-    });
-  });
-
-  describe('getBackupManifest', () => {
-    it('should retrieve manifest from local filesystem', async () => {
-      const backupRun = {
-        id: 1,
-        manifest_path: '/backup/manifests/backup-123.json'
-      };
-      
-      mockDb.first.mockResolvedValue(backupRun);
-      
-      const manifest = { backup: { id: 'backup-123' } };
-      backupManifest.loadManifest.mockResolvedValue(manifest);
-      backupManifest.generateSummaryReport.mockReturnValue('Summary');
-      
-      const result = await backupService.getBackupManifest(1);
-      
-      expect(result).toEqual({
-        manifest: manifest,
-        summary: 'Summary'
-      });
-    });
-
-    it('should retrieve manifest from S3', async () => {
-      const backupRun = {
-        id: 1,
-        manifest_path: 's3://test-bucket/backups/manifests/backup-123.json'
-      };
-      
-      mockDb.first.mockResolvedValue(backupRun);
-      mockDb.select.mockResolvedValue([
-        { setting_key: 'backup_s3_access_key', setting_value: '"test-key"' },
-        { setting_key: 'backup_s3_secret_key', setting_value: '"test-secret"' }
-      ]);
-      
-      const manifest = { backup: { id: 'backup-123' } };
-      backupManifest.loadManifest.mockResolvedValue(manifest);
-      
-      await backupService.getBackupManifest(1);
-      
-      expect(S3StorageAdapter).toHaveBeenCalled();
-      expect(mockS3Client.download).toHaveBeenCalledWith(
-        'backups/manifests/backup-123.json',
-        expect.any(String)
-      );
-    });
-  });
-});

backend/audit-backend.json

@@ -1,22 +0,0 @@
-{
-  "auditReportVersion": 2,
-  "vulnerabilities": {},
-  "metadata": {
-    "vulnerabilities": {
-      "info": 0,
-      "low": 0,
-      "moderate": 0,
-      "high": 0,
-      "critical": 0,
-      "total": 0
-    },
-    "dependencies": {
-      "prod": 329,
-      "dev": 307,
-      "optional": 54,
-      "peer": 1,
-      "peerOptional": 0,
-      "total": 690
-    }
-  }
-}

backend/docs/SECURITY_LOGGING.md

@@ -1,161 +0,0 @@
-# Security Logging Documentation
-
-## Overview
-This document describes the comprehensive security logging implemented in the PicPeak application to track authentication failures, rate limiting, and suspicious activities.
-
-## Log Files
-
-### 1. **security.log**
-- Location: `logs/security.log`
-- Contains: All security-related events (authentication, rate limiting, suspicious activity)
-- Max Size: 20MB with rotation (keeps 10 files)
-- Format: JSON with timestamp
-
-### 2. **error.log**
-- Location: `logs/error.log`
-- Contains: All error-level logs including auth failures
-- Max Size: 10MB with rotation (keeps 5 files)
-
-### 3. **combined.log**
-- Location: `logs/combined.log`
-- Contains: All logs (info, warn, error)
-- Max Size: 50MB with rotation (keeps 10 files)
-
-## Security Events Logged
-
-### Rate Limiting
-When rate limits are exceeded, the following is logged:
-```json
-{
-  "timestamp": "2024-01-18 14:23:45.123",
-  "level": "warn",
-  "message": "Rate limit exceeded",
-  "security": true,
-  "ip": "192.168.1.1",
-  "path": "/api/admin/login",
-  "method": "POST",
-  "authenticated": false,
-  "userAgent": "Mozilla/5.0...",
-  "referer": "https://app.example.com",
-  "origin": "https://app.example.com",
-  "headers": {
-    "x-forwarded-for": "192.168.1.1",
-    "x-real-ip": "192.168.1.1"
-  },
-  "requestUrl": "/api/admin/login",
-  "rateLimitInfo": {
-    "limit": 5,
-    "current": 6,
-    "remaining": 0,
-    "resetTime": "2024-01-18T14:38:45.123Z"
-  }
-}
-```
-
-### Authentication Failures
-
-#### Admin Login Failures
-- Tracked in `login_attempts` table
-- Logged with: IP address, username, user agent, timestamp
-- Account lockout after 5 failures in 15 minutes
-
-#### Gallery Password Failures
-- Tracked in `access_logs` table with action='login_fail'
-- Logged with: event_id, IP address, user agent
-- Gallery lockout after 5 failures in 15 minutes
-
-### JWT Validation Failures
-```json
-{
-  "timestamp": "2024-01-18 14:23:45.123",
-  "level": "warn",
-  "message": "JWT validation failed",
-  "ip": "192.168.1.1",
-  "path": "/api/admin/events",
-  "method": "GET",
-  "userAgent": "Mozilla/5.0...",
-  "error": "TokenExpiredError",
-  "message": "jwt expired"
-}
-```
-
-### Suspicious Activity
-- Multiple IPs attempting login for same account
-- Token usage from different IP than issued
-- Token usage after password change
-- Revoked token usage attempts
-
-## Configuration Settings
-
-All rate limiting settings are configurable via the admin panel:
-
-| Setting | Default | Range | Description |
-|---------|---------|-------|-------------|
-| rate_limit_enabled | true | - | Enable/disable rate limiting |
-| rate_limit_window_minutes | 15 | 1-60 | Time window for rate limit |
-| rate_limit_max_requests | 1000 | 10-10000 | Max requests for general endpoints |
-| rate_limit_auth_max_requests | 5 | 1-100 | Max requests for auth endpoints |
-| rate_limit_skip_authenticated | true | - | Skip rate limit for authenticated requests |
-| rate_limit_public_endpoints_only | false | - | Only rate limit public endpoints |
-
-## Database Tables
-
-### login_attempts
-```sql
-- id
-- username
-- ip_address
-- user_agent
-- success (boolean)
-- created_at
-```
-
-### access_logs
-```sql
-- id
-- event_id
-- ip_address
-- user_agent
-- action ('view', 'download', 'login_success', 'login_fail')
-- photo_id (nullable)
-- created_at
-```
-
-## Environment Variables
-
-- `LOG_LEVEL`: Set logging level (default: 'info')
-- `LOG_TO_CONSOLE`: Enable console logging in production (default: false)
-
-## Monitoring Recommendations
-
-1. **Set up alerts for:**
-   - Rate limit exceeded events (possible DDoS)
-   - Multiple failed login attempts from same IP
-   - Account lockout events
-   - JWT validation failures spike
-
-2. **Regular review:**
-   - Check security.log for patterns
-   - Review login_attempts table for brute force attempts
-   - Monitor access_logs for suspicious gallery access patterns
-
-3. **Log analysis tools:**
-   - Use log aggregation tools (ELK stack, Splunk)
-   - Set up dashboards for security metrics
-   - Configure alerts for threshold breaches
-
-## Production Deployment Notes
-
-1. Ensure logs directory has proper permissions
-2. Set up log rotation outside of application if needed
-3. Consider shipping logs to centralized logging service
-4. Monitor disk space for log files
-5. Set `LOG_TO_CONSOLE=true` for container deployments
-
-## Security Best Practices
-
-1. Never log sensitive data (passwords, tokens)
-2. Use generic error messages to prevent user enumeration
-3. Clean up old login attempts regularly (7 days retention)
-4. Monitor for unusual patterns in real-time
-5. Keep rate limit settings appropriate for your usage

backend/ecosystem.config.js

@@ -1,21 +0,0 @@
-module.exports = {
-  apps: [{
-    name: 'picpeak',
-    script: './server.js',
-    instances: 'max',
-    exec_mode: 'cluster',
-    env: {
-      NODE_ENV: 'production',
-      PORT: 3000
-    },
-    error_file: './logs/pm2-error.log',
-    out_file: './logs/pm2-out.log',
-    log_date_format: 'YYYY-MM-DD HH:mm:ss',
-    max_memory_restart: '1G',
-    watch: false,
-    ignore_watch: ['node_modules', 'logs', 'storage'],
-    wait_ready: true,
-    listen_timeout: 3000,
-    kill_timeout: 5000
-  }]
-};

backend/init-production.sh

@@ -1,50 +0,0 @@
-#!/bin/sh
-# init-production.sh - Production initialization script
-
-set -e
-
-echo "🚀 Initializing PicPeak Production Environment..."
-
-# Wait for services to be ready
-echo "⏳ Waiting for database to be fully ready..."
-sleep 3
-
-# Fix permissions if running as root (shouldn't happen with proper Dockerfile)
-if [ "$(id -u)" = "0" ]; then
-    echo "🔧 Fixing file permissions..."
-    chown -R nodejs:nodejs /app/storage /app/data /app/logs 2>/dev/null || true
-fi
-
-# Create required directories
-echo "📁 Creating required directories..."
-mkdir -p /app/storage/events/active \
-         /app/storage/events/archived \
-         /app/storage/thumbnails \
-         /app/storage/uploads/logos \
-         /app/storage/uploads/favicons \
-         /app/data \
-         /app/logs
-
-# Run migrations with safe runner
-echo "🗄️ Running database migrations (safe mode)..."
-NODE_ENV=production npm run migrate:safe
-
-# Create admin user if environment variables are set
-if [ -n "$ADMIN_EMAIL" ] && [ -n "$ADMIN_PASSWORD" ]; then
-    echo "👤 Creating admin user..."
-    node scripts/create-admin.js \
-        --email "$ADMIN_EMAIL" \
-        --username "${ADMIN_USERNAME:-admin}" \
-        --password "$ADMIN_PASSWORD" || echo "Admin user might already exist"
-fi
-
-# Initialize email configuration if variables are set
-if [ -n "$SMTP_HOST" ]; then
-    echo "📧 Email configuration detected via environment variables"
-fi
-
-echo "✅ Production initialization complete!"
-echo "🌐 Starting application server..."
-
-# Start the application
-exec node server.js

backend/jest.config.js

@@ -1,12 +0,0 @@
-module.exports = {
-  testEnvironment: 'node',
-  coverageDirectory: 'coverage',
-  collectCoverageFrom: [
-    'src/**/*.js',
-    '!src/**/*.test.js'
-  ],
-  testMatch: [
-    '**/__tests__/**/*.test.js'
-  ],
-  setupFilesAfterEnv: ['<rootDir>/jest.setup.js']
-};

backend/jest.setup.js

@@ -1,4 +0,0 @@
-beforeAll(() => {
-  process.env.NODE_ENV = 'test';
-  process.env.JWT_SECRET = 'test-secret';
-});

backend/knexfile.js

@@ -1,67 +0,0 @@
-require('dotenv').config();
-
-const path = require('path');
-
-// Database configuration for different environments
-const config = {
-  development: {
-    client: process.env.DATABASE_CLIENT || 'sqlite3',
-    connection: process.env.DATABASE_CLIENT === 'pg' ? {
-      host: process.env.DB_HOST || 'localhost',
-      port: process.env.DB_PORT || 5432,
-      user: process.env.DB_USER || 'postgres',
-      password: process.env.DB_PASSWORD || 'postgres',
-      database: process.env.DB_NAME || 'photo_sharing'
-    } : {
-      filename: path.join(__dirname, process.env.DATABASE_PATH || './data/photo_sharing.db')
-    },
-    useNullAsDefault: process.env.DATABASE_CLIENT !== 'pg',
-    migrations: {
-      directory: './migrations'
-    },
-    seeds: {
-      directory: './seeds'
-    }
-  },
-
-  production: {
-    client: process.env.DATABASE_CLIENT || 'pg',
-    // Support both Postgres and SQLite in production based on DATABASE_CLIENT
-    connection: (process.env.DATABASE_CLIENT || 'pg') === 'pg'
-      ? {
-          host: process.env.DB_HOST || 'db',
-          port: process.env.DB_PORT || 5432,
-          user: process.env.DB_USER || 'picpeak',
-          password: process.env.DB_PASSWORD,
-          database: process.env.DB_NAME || 'picpeak',
-          ssl: process.env.DB_SSL === 'true' ? { rejectUnauthorized: false } : false,
-          // Connection stability settings
-          connectionTimeoutMillis: 30000,
-          idleTimeoutMillis: 30000,
-          keepAlive: true,
-          keepAliveInitialDelayMillis: 0
-        }
-      : {
-          filename: path.join(__dirname, process.env.DATABASE_PATH || './data/photo_sharing.db')
-        },
-    useNullAsDefault: (process.env.DATABASE_CLIENT || 'pg') !== 'pg',
-    pool: (process.env.DATABASE_CLIENT || 'pg') === 'pg'
-      ? {
-          min: 5,
-          max: 25,
-          acquireTimeoutMillis: 60000,
-          createTimeoutMillis: 60000,
-          idleTimeoutMillis: 30000,
-          reapIntervalMillis: 1000,
-          createRetryIntervalMillis: 200,
-          propagateCreateError: false
-        }
-      : undefined,
-    migrations: {
-      directory: './migrations'
-    },
-    acquireConnectionTimeout: 60000
-  }
-};
-
-module.exports = config[process.env.NODE_ENV || 'development'];

backend/migrations/041_add_logo_customization_settings.js

@@ -1,89 +0,0 @@
-exports.up = async function(knex) {
-  console.log('Running migration: 041_add_logo_customization_settings');
-  
-  // Add default logo customization settings
-  const logoSettings = [
-    {
-      setting_key: 'branding_logo_size',
-      setting_value: JSON.stringify('medium'),
-      setting_type: 'branding',
-      description: 'Logo size: small, medium, large, xlarge, or custom',
-      created_at: new Date(),
-      updated_at: new Date()
-    },
-    {
-      setting_key: 'branding_logo_max_height',
-      setting_value: JSON.stringify(48),
-      setting_type: 'branding', 
-      description: 'Maximum logo height in pixels (used when size is custom)',
-      created_at: new Date(),
-      updated_at: new Date()
-    },
-    {
-      setting_key: 'branding_logo_position',
-      setting_value: JSON.stringify('left'),
-      setting_type: 'branding',
-      description: 'Logo position in header: left, center, right',
-      created_at: new Date(),
-      updated_at: new Date()
-    },
-    {
-      setting_key: 'branding_logo_display_header',
-      setting_value: JSON.stringify(true),
-      setting_type: 'branding',
-      description: 'Show logo in gallery header',
-      created_at: new Date(),
-      updated_at: new Date()
-    },
-    {
-      setting_key: 'branding_logo_display_hero',
-      setting_value: JSON.stringify(true),
-      setting_type: 'branding',
-      description: 'Show logo in hero section (for non-grid layouts)',
-      created_at: new Date(),
-      updated_at: new Date()
-    },
-    {
-      setting_key: 'branding_logo_display_mode',
-      setting_value: JSON.stringify('logo_and_text'),
-      setting_type: 'branding',
-      description: 'Display mode: logo_only, text_only, logo_and_text',
-      created_at: new Date(),
-      updated_at: new Date()
-    }
-  ];
-
-  // Insert settings that don't already exist
-  for (const setting of logoSettings) {
-    const exists = await knex('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await knex('app_settings').insert(setting);
-      console.log(`Added setting: ${setting.setting_key}`);
-    } else {
-      console.log(`Setting already exists: ${setting.setting_key}`);
-    }
-  }
-
-  console.log('Migration 041_add_logo_customization_settings completed');
-};
-
-exports.down = async function(knex) {
-  console.log('Rolling back migration: 041_add_logo_customization_settings');
-  
-  // Remove the logo customization settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'branding_logo_size',
-      'branding_logo_max_height',
-      'branding_logo_position',
-      'branding_logo_display_header',
-      'branding_logo_display_hero',
-      'branding_logo_display_mode'
-    ])
-    .del();
-  
-  console.log('Rollback of 041_add_logo_customization_settings completed');
-};

backend/migrations/README.md

@@ -1,46 +0,0 @@
-# Database Migrations
-
-This directory contains database migrations for the Wedding Photo Sharing platform.
-
-## Directory Structure
-
-### `/core`
-Essential migrations that are always run for new deployments. These include:
-- `init.js` - Initial database schema creation
-- Backup service tables (029-035)
-- Gallery feedback tables (033)
-
-### `/legacy`
-Migrations needed only when upgrading from older versions. New deployments can skip these as the core schema already includes all necessary tables and columns.
-
-## For New Deployments
-
-If you're deploying this application for the first time:
-1. The `initializeDatabase()` function in `src/database/db.js` will create all necessary tables
-2. Only migrations in the `/core` directory will be run
-3. This ensures a clean, optimized database schema
-
-## For Existing Deployments
-
-If you're upgrading from an older version:
-1. All migrations (both core and legacy) will be run in sequence
-2. The migration system tracks which migrations have been applied
-3. Only new migrations will be executed
-
-## Running Migrations
-
-```bash
-# Development
-npm run migrate
-
-# Production
-npm run migrate:prod
-```
-
-## Note on Duplicate Migration Numbers
-
-The legacy directory contains renamed duplicates:
-- `014_add_host_name_to_events_duplicate.js` (was duplicate of 014)
-- `027_add_rate_limit_settings_duplicate.js` (was duplicate of 027)
-
-These have been renamed to avoid conflicts while preserving the migration history.

backend/migrations/core/001_init.js

@@ -1,144 +0,0 @@
-const bcrypt = require('bcrypt');
-const { initializeDatabase } = require('../../src/database/db');
-const { generateReadablePassword } = require('../../src/utils/passwordGenerator');
-const fs = require('fs').promises;
-const path = require('path');
-
-exports.up = async function(knex) {
-  console.log('Initializing database schema...');
-  
-  try {
-    // Initialize tables
-    await initializeDatabase();
-    
-    // Create default admin user if none exists
-    const adminExists = await knex('admin_users').first();
-    if (!adminExists) {
-      // Generate a secure random password
-      const generatedPassword = generateReadablePassword();
-      const passwordHash = await bcrypt.hash(generatedPassword, 12); // Increased rounds for better security
-      
-      // Get admin credentials from environment or use defaults
-      const adminUsername = process.env.ADMIN_USERNAME || 'admin';
-      const adminEmail = process.env.ADMIN_EMAIL || 'admin@example.com';
-      
-      await knex('admin_users').insert({
-        username: adminUsername,
-        email: adminEmail,
-        password_hash: passwordHash,
-        must_change_password: true,
-        created_at: new Date()
-      });
-      
-      // Try to save credentials to file, but don't fail if we can't
-      const dataDir = path.join(__dirname, '..', '..', 'data');
-      const setupInfoPath = path.join(dataDir, 'ADMIN_CREDENTIALS.txt');
-      
-      const setupInfo = `
-========================================
-PicPeak Admin Credentials
-========================================
-
-Your admin account has been created with these credentials:
-
-Email: ${adminEmail}
-Password: ${generatedPassword}
-
-IMPORTANT SECURITY NOTES:
-1. Please change this password after first login
-2. This file will be created only once
-3. Store these credentials securely
-4. Delete this file after noting the password
-
-Login URL: ${process.env.ADMIN_URL || 'http://localhost:3001'}/admin
-
-Login with the email address shown above
-
-Generated on: ${new Date().toISOString()}
-========================================
-`;
-      
-      try {
-        // Try to create directory and write file
-        await fs.mkdir(dataDir, { recursive: true });
-        await fs.writeFile(setupInfoPath, setupInfo, 'utf8');
-        console.log(`📁 Credentials also saved to: data/ADMIN_CREDENTIALS.txt`);
-      } catch (error) {
-        // If we can't write the file, that's okay - credentials are shown in console
-        console.log('⚠️  Could not save credentials to file (permission denied)');
-        console.log('   Please copy the credentials shown above');
-      }
-      
-      console.log('\n========================================');
-      console.log('✅ Admin user created successfully!');
-      console.log('========================================');
-      console.log(`Email: ${adminEmail}`);
-      console.log(`Password: ${generatedPassword}`);
-      console.log('\n⚠️  IMPORTANT:');
-      console.log('1. Save these credentials securely');
-      console.log('2. Please change the password after first login');
-      console.log('========================================\n');
-    }
-    
-    // Create default email templates if none exist
-    const templateExists = await knex('email_templates').first();
-    if (!templateExists) {
-      await knex('email_templates').insert([
-        {
-          template_key: 'gallery_created',
-          subject: 'Your Photo Gallery is Ready!',
-          body_html: `<h2>Gallery Created Successfully</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been created successfully!</p>
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: {{gallery_link}}</li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Expires: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests to allow them to view and download photos.</p>`,
-          body_text: 'Gallery Created Successfully\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" has been created successfully!',
-          variables: JSON.stringify(['host_name', 'event_name', 'event_date', 'gallery_link', 'gallery_password', 'expiry_date'])
-        },
-        {
-          template_key: 'expiration_warning',
-          subject: 'Your Photo Gallery Expires Soon',
-          body_html: `<h2>Gallery Expiring Soon</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days.</p>
-<p>After expiration, the gallery will be archived and no longer accessible to guests.</p>
-<p><a href="{{gallery_link}}">Visit Gallery</a></p>`,
-          body_text: 'Gallery Expiring Soon\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" will expire in {{days_remaining}} days.',
-          variables: JSON.stringify(['host_name', 'event_name', 'days_remaining', 'gallery_link'])
-        }
-      ]);
-      console.log('Default email templates created');
-    }
-
-    // Create default email config if none exists
-    const emailConfig = await knex('email_configs').first();
-    if (!emailConfig) {
-      await knex('email_configs').insert({
-        smtp_host: process.env.SMTP_HOST || 'mailhog',
-        smtp_port: process.env.SMTP_PORT || 1025,
-        smtp_secure: process.env.SMTP_SECURE === 'true',
-        smtp_user: process.env.SMTP_USER || '',
-        smtp_pass: process.env.SMTP_PASS || '',
-        from_email: process.env.EMAIL_FROM || 'noreply@photo-sharing.local',
-        from_name: 'Photo Sharing'
-      });
-      console.log('Default email configuration created');
-    }
-
-    console.log('Migrations completed successfully');
-  } catch (error) {
-    console.error('Initial setup failed:', error);
-    throw error;
-  }
-};
-
-exports.down = async function(knex) {
-  // This migration cannot be rolled back as it creates the initial schema
-  console.log('Initial setup cannot be rolled back');
-};

backend/migrations/core/029_add_backup_service_tables.js

@@ -1,220 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  console.log('Adding backup service tables and settings...');
-  
-  // Create backup_runs table to track backup history
-  const hasBackupRunsTable = await db.schema.hasTable('backup_runs');
-  if (!hasBackupRunsTable) {
-    await db.schema.createTable('backup_runs', (table) => {
-      table.increments('id').primary();
-      table.datetime('started_at').notNullable();
-      table.datetime('completed_at');
-      table.string('status').defaultTo('running'); // running, completed, failed
-      table.string('backup_type'); // full, incremental
-      table.integer('files_backed_up').defaultTo(0);
-      table.bigInteger('total_size_bytes').defaultTo(0);
-      table.integer('duration_seconds');
-      table.text('error_message');
-      table.json('statistics'); // Detailed stats about the backup
-      table.json('file_checksums'); // Store checksums for change detection
-    });
-  }
-
-  // Create backup_file_states table to track individual file states
-  const hasBackupFileStatesTable = await db.schema.hasTable('backup_file_states');
-  if (!hasBackupFileStatesTable) {
-    await db.schema.createTable('backup_file_states', (table) => {
-      table.increments('id').primary();
-      table.string('file_path').notNullable();
-      table.string('checksum').notNullable();
-      table.bigInteger('size_bytes');
-      table.datetime('last_modified');
-      table.datetime('last_backed_up');
-      table.boolean('is_archived').defaultTo(false);
-      table.index(['file_path'], 'idx_backup_file_path');
-      table.index(['checksum'], 'idx_backup_checksum');
-    });
-  }
-
-  // Add backup-related settings to app_settings
-  const backupSettings = [
-    {
-      setting_key: 'backup_enabled',
-      setting_value: JSON.stringify(false),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_schedule',
-      setting_value: JSON.stringify('0 2 * * *'), // Default: 2 AM daily
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_destination_type',
-      setting_value: JSON.stringify('local'), // local, rsync, s3
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_destination_path',
-      setting_value: JSON.stringify('/backup/picpeak'),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_rsync_host',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_rsync_user',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_rsync_path',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_rsync_ssh_key',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_endpoint',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_bucket',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_access_key',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_secret_key',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_region',
-      setting_value: JSON.stringify('us-east-1'),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_retention_days',
-      setting_value: JSON.stringify(30),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_include_archived',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_compression',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_email_on_failure',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_email_on_success',
-      setting_value: JSON.stringify(false),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_max_file_size_mb',
-      setting_value: JSON.stringify(5000), // Skip files larger than 5GB
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_exclude_patterns',
-      setting_value: JSON.stringify(['*.tmp', '.DS_Store', 'Thumbs.db']),
-      setting_type: 'backup'
-    }
-  ];
-
-  // Insert backup settings if they don't exist
-  for (const setting of backupSettings) {
-    const exists = await db('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await db('app_settings').insert(setting);
-    }
-  }
-
-  // Add backup-related email templates
-  const backupEmailTemplates = [
-    {
-      template_key: 'backup_failed',
-      subject: 'Backup Failed - Immediate Attention Required',
-      body_html: `<h2>Backup Failed</h2>
-<p>The scheduled backup has failed and requires immediate attention.</p>
-<p><strong>Error Details:</strong></p>
-<ul>
-  <li>Start Time: {{start_time}}</li>
-  <li>Backup Type: {{backup_type}}</li>
-  <li>Error: {{error_message}}</li>
-</ul>
-<p>Please check the system logs for more details and resolve the issue as soon as possible.</p>`,
-      body_text: 'Backup Failed\n\nThe scheduled backup has failed and requires immediate attention.\n\nStart Time: {{start_time}}\nBackup Type: {{backup_type}}\nError: {{error_message}}\n\nPlease check the system logs for more details.',
-      variables: JSON.stringify(['start_time', 'backup_type', 'error_message'])
-    },
-    {
-      template_key: 'backup_completed',
-      subject: 'Backup Completed Successfully',
-      body_html: `<h2>Backup Completed</h2>
-<p>The scheduled backup has been completed successfully.</p>
-<p><strong>Backup Summary:</strong></p>
-<ul>
-  <li>Start Time: {{start_time}}</li>
-  <li>Duration: {{duration}}</li>
-  <li>Files Backed Up: {{files_count}}</li>
-  <li>Total Size: {{total_size}}</li>
-  <li>Backup Type: {{backup_type}}</li>
-</ul>`,
-      body_text: 'Backup Completed\n\nThe scheduled backup has been completed successfully.\n\nStart Time: {{start_time}}\nDuration: {{duration}}\nFiles Backed Up: {{files_count}}\nTotal Size: {{total_size}}\nBackup Type: {{backup_type}}',
-      variables: JSON.stringify(['start_time', 'duration', 'files_count', 'total_size', 'backup_type'])
-    }
-  ];
-
-  // Insert backup email templates if they don't exist
-  for (const template of backupEmailTemplates) {
-    const exists = await db('email_templates')
-      .where('template_key', template.template_key)
-      .first();
-    
-    if (!exists) {
-      await db('email_templates').insert(template);
-    }
-  }
-
-  console.log('Backup service tables and settings added successfully');
-}
-
-async function down() {
-  // Remove backup tables
-  await db.schema.dropTableIfExists('backup_file_states');
-  await db.schema.dropTableIfExists('backup_runs');
-  
-  // Remove backup settings
-  await db('app_settings')
-    .where('setting_type', 'backup')
-    .delete();
-  
-  // Remove backup email templates
-  await db('email_templates')
-    .whereIn('template_key', ['backup_failed', 'backup_completed'])
-    .delete();
-}
-
-module.exports = { up, down };

backend/migrations/core/030_add_database_backup_tables.js

@@ -1,159 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  console.log('Adding database backup tables and settings...');
-  
-  // Create database_backup_runs table to track database backup history
-  const hasDatabaseBackupRunsTable = await db.schema.hasTable('database_backup_runs');
-  if (!hasDatabaseBackupRunsTable) {
-    await db.schema.createTable('database_backup_runs', (table) => {
-      table.increments('id').primary();
-      table.datetime('started_at').notNullable();
-      table.datetime('completed_at');
-      table.string('status').defaultTo('running'); // running, completed, failed
-      table.string('backup_type'); // sqlite, postgresql
-      table.string('destination_path');
-      table.string('file_path');
-      table.bigInteger('file_size_bytes').defaultTo(0);
-      table.bigInteger('original_size_bytes').defaultTo(0);
-      table.integer('duration_seconds');
-      table.string('checksum'); // SHA256 checksum of backup file
-      table.float('compression_ratio'); // Compression percentage
-      table.json('table_checksums'); // Individual table checksums
-      table.text('error_message');
-      table.json('statistics'); // Detailed stats about the backup
-      table.index(['started_at'], 'idx_db_backup_started');
-      table.index(['status'], 'idx_db_backup_status');
-    });
-  }
-
-  // Add database backup-related settings to app_settings
-  const databaseBackupSettings = [
-    {
-      setting_key: 'database_backup_enabled',
-      setting_value: JSON.stringify(false),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_schedule',
-      setting_value: JSON.stringify('0 3 * * *'), // Default: 3 AM daily
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_destination_path',
-      setting_value: JSON.stringify('/backup/database'),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_compress',
-      setting_value: JSON.stringify(true),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_validate_integrity',
-      setting_value: JSON.stringify(true),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_include_checksums',
-      setting_value: JSON.stringify(true),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_retention_days',
-      setting_value: JSON.stringify(30),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_email_on_failure',
-      setting_value: JSON.stringify(true),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_email_on_success',
-      setting_value: JSON.stringify(false),
-      setting_type: 'database_backup'
-    },
-    {
-      setting_key: 'database_backup_max_retries',
-      setting_value: JSON.stringify(3),
-      setting_type: 'database_backup'
-    }
-  ];
-
-  // Insert database backup settings if they don't exist
-  for (const setting of databaseBackupSettings) {
-    const exists = await db('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await db('app_settings').insert(setting);
-    }
-  }
-
-  // Add database backup-related email templates
-  const databaseBackupEmailTemplates = [
-    {
-      template_key: 'database_backup_failed',
-      subject: 'Database Backup Failed - Critical Alert',
-      body_html: `<h2>Database Backup Failed</h2>
-<p>The scheduled database backup has failed and requires immediate attention.</p>
-<p><strong>Error Details:</strong></p>
-<ul>
-  <li>Backup Type: {{backup_type}}</li>
-  <li>Timestamp: {{timestamp}}</li>
-  <li>Error: {{error_message}}</li>
-</ul>
-<p>This is a critical issue that could affect disaster recovery. Please investigate immediately.</p>`,
-      body_text: 'Database Backup Failed\n\nThe scheduled database backup has failed.\n\nBackup Type: {{backup_type}}\nTimestamp: {{timestamp}}\nError: {{error_message}}\n\nThis is critical - please investigate immediately.',
-      variables: JSON.stringify(['backup_type', 'timestamp', 'error_message'])
-    },
-    {
-      template_key: 'database_backup_completed',
-      subject: 'Database Backup Completed Successfully',
-      body_html: `<h2>Database Backup Completed</h2>
-<p>The scheduled database backup has been completed successfully.</p>
-<p><strong>Backup Summary:</strong></p>
-<ul>
-  <li>Backup Type: {{backup_type}}</li>
-  <li>Duration: {{duration}}</li>
-  <li>File Size: {{file_size}}</li>
-  <li>Compression Ratio: {{compression_ratio}}</li>
-  <li>File Path: {{file_path}}</li>
-</ul>`,
-      body_text: 'Database Backup Completed\n\nThe scheduled database backup has been completed successfully.\n\nBackup Type: {{backup_type}}\nDuration: {{duration}}\nFile Size: {{file_size}}\nCompression Ratio: {{compression_ratio}}\nFile Path: {{file_path}}',
-      variables: JSON.stringify(['backup_type', 'duration', 'file_size', 'compression_ratio', 'file_path'])
-    }
-  ];
-
-  // Insert database backup email templates if they don't exist
-  for (const template of databaseBackupEmailTemplates) {
-    const exists = await db('email_templates')
-      .where('template_key', template.template_key)
-      .first();
-    
-    if (!exists) {
-      await db('email_templates').insert(template);
-    }
-  }
-
-  console.log('Database backup tables and settings added successfully');
-}
-
-async function down() {
-  // Remove database backup tables
-  await db.schema.dropTableIfExists('database_backup_runs');
-  
-  // Remove database backup settings
-  await db('app_settings')
-    .where('setting_type', 'database_backup')
-    .delete();
-  
-  // Remove database backup email templates
-  await db('email_templates')
-    .whereIn('template_key', ['database_backup_failed', 'database_backup_completed'])
-    .delete();
-}
-
-module.exports = { up, down };

backend/migrations/core/031_add_backup_manifest_columns.js

@@ -1,86 +0,0 @@
-const { db } = require('../../src/database/db');
-const logger = require('../../src/utils/logger');
-
-async function up() {
-  console.log('Adding backup manifest columns...');
-  
-  // Add manifest columns to backup_runs table
-  const hasManifestPath = await db.schema.hasColumn('backup_runs', 'manifest_path');
-  if (!hasManifestPath) {
-    await db.schema.alterTable('backup_runs', (table) => {
-      table.string('manifest_path'); // Path to the manifest file
-      table.string('manifest_id'); // Unique manifest ID
-      table.string('manifest_format').defaultTo('json'); // json or yaml
-    });
-  }
-
-  // Add backup manifest-related settings to app_settings
-  const manifestSettings = [
-    {
-      setting_key: 'backup_manifest_enabled',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_manifest_format',
-      setting_value: JSON.stringify('json'), // json or yaml
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_manifest_path',
-      setting_value: JSON.stringify('/backup/manifests'),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_manifest_validate',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_manifest_include_checksums',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    }
-  ];
-
-  // Insert manifest settings if they don't exist
-  for (const setting of manifestSettings) {
-    const exists = await db('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await db('app_settings').insert(setting);
-    }
-  }
-
-  console.log('✓ Backup manifest columns and settings added');
-}
-
-async function down() {
-  // Remove manifest columns from backup_runs table
-  const hasManifestPath = await db.schema.hasColumn('backup_runs', 'manifest_path');
-  if (hasManifestPath) {
-    await db.schema.alterTable('backup_runs', (table) => {
-      table.dropColumn('manifest_path');
-      table.dropColumn('manifest_id');
-      table.dropColumn('manifest_format');
-    });
-  }
-
-  // Remove manifest settings
-  await db('app_settings')
-    .where('setting_type', 'backup')
-    .whereIn('setting_key', [
-      'backup_manifest_enabled',
-      'backup_manifest_format',
-      'backup_manifest_path',
-      'backup_manifest_validate',
-      'backup_manifest_include_checksums'
-    ])
-    .delete();
-
-  console.log('✓ Backup manifest columns and settings removed');
-}
-
-module.exports = { up, down };

backend/migrations/core/032_add_restore_runs_table.js

@@ -1,234 +0,0 @@
-// No helpers needed for this migration
-
-/**
- * Add restore_runs table for tracking restore operations
- */
-exports.up = async function(knex) {
-  // Create restore_runs table
-  const hasRestoreRunsTable = await knex.schema.hasTable('restore_runs');
-  if (!hasRestoreRunsTable) {
-    await knex.schema.createTable('restore_runs', table => {
-    table.increments('id').primary();
-    
-    // Timing
-    table.timestamp('started_at').notNullable().defaultTo(knex.fn.now());
-    table.timestamp('completed_at');
-    table.integer('duration_seconds');
-    
-    // Status and type
-    table.string('status', 50).notNullable().defaultTo('running');
-    table.string('restore_type', 50).notNullable(); // full, database, files, selective
-    
-    // Source information
-    table.string('source', 500).notNullable(); // Backup source path or S3 URL
-    table.string('manifest_path', 500); // Path to manifest file
-    
-    // Results
-    table.text('error_message');
-    table.text('statistics'); // JSON object with detailed statistics
-    table.text('restore_log'); // JSON array of log entries
-    
-    // Safety backup
-    table.string('pre_restore_backup_path', 500); // Path to pre-restore safety backup
-    
-    // Flags
-    table.boolean('is_dry_run').defaultTo(false);
-    table.boolean('was_rollback_attempted').defaultTo(false);
-    table.boolean('was_successful').defaultTo(false);
-    
-    // Operator information
-    table.string('operator_type', 50).defaultTo('manual'); // manual, scheduled, api
-    table.integer('operator_user_id').references('id').inTable('admin_users').onDelete('SET NULL');
-    table.string('operator_ip', 50);
-    
-    // Metadata
-    table.text('metadata'); // JSON object for additional data
-    
-    table.index(['status', 'started_at']);
-    table.index(['restore_type', 'started_at']);
-    });
-  }
-  
-  // Create restore_file_operations table for tracking individual file operations
-  const hasRestoreFileOperationsTable = await knex.schema.hasTable('restore_file_operations');
-  if (!hasRestoreFileOperationsTable) {
-    await knex.schema.createTable('restore_file_operations', table => {
-    table.increments('id').primary();
-    
-    table.integer('restore_run_id').notNullable()
-      .references('id').inTable('restore_runs').onDelete('CASCADE');
-    
-    table.string('file_path', 500).notNullable();
-    table.string('operation', 50).notNullable(); // restore, skip, error
-    table.string('status', 50).notNullable(); // pending, in_progress, completed, failed
-    
-    table.bigInteger('file_size');
-    table.string('checksum', 64);
-    table.boolean('checksum_verified').defaultTo(false);
-    
-    table.text('error_message');
-    table.timestamp('started_at');
-    table.timestamp('completed_at');
-    
-    table.index(['restore_run_id', 'status']);
-    table.index(['file_path']);
-    });
-  }
-  
-  // Create restore_validation_results table
-  const hasRestoreValidationResultsTable = await knex.schema.hasTable('restore_validation_results');
-  if (!hasRestoreValidationResultsTable) {
-    await knex.schema.createTable('restore_validation_results', table => {
-    table.increments('id').primary();
-    
-    table.integer('restore_run_id').notNullable()
-      .references('id').inTable('restore_runs').onDelete('CASCADE');
-    
-    table.string('validation_type', 50).notNullable(); // pre-restore, post-restore
-    table.boolean('is_valid').notNullable();
-    
-    table.text('errors'); // JSON array of errors
-    table.text('warnings'); // JSON array of warnings
-    table.text('checksums'); // JSON object with checksum comparisons
-    
-    table.timestamp('validated_at').notNullable().defaultTo(knex.fn.now());
-    
-    table.index(['restore_run_id', 'validation_type']);
-    });
-  }
-  
-  // Add restore-related settings to app_settings
-  const restoreSettings = [
-    {
-      setting_key: 'restore_allow_force',
-      setting_value: JSON.stringify(false),
-      setting_type: 'restore'
-    },
-    {
-      setting_key: 'restore_require_pre_backup',
-      setting_value: JSON.stringify(true),
-      setting_type: 'restore'
-    },
-    {
-      setting_key: 'restore_max_file_size_mb',
-      setting_value: '5000',
-      setting_type: 'restore'
-    },
-    {
-      setting_key: 'restore_verify_checksums',
-      setting_value: JSON.stringify(true),
-      setting_type: 'restore'
-    },
-    {
-      setting_key: 'restore_email_on_completion',
-      setting_value: JSON.stringify(true),
-      setting_type: 'restore'
-    },
-    {
-      setting_key: 'restore_retention_days',
-      setting_value: '30',
-      setting_type: 'restore'
-    }
-  ];
-
-  for (const setting of restoreSettings) {
-    const exists = await knex('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await knex('app_settings').insert(setting);
-    }
-  }
-  
-  // Add new email templates for restore notifications
-  const emailTemplates = [
-    {
-      template_key: 'restore_completed',
-      subject: '✅ Restore Completed Successfully',
-      body_html: `<h2>Restore Operation Completed</h2>
-<p>A restore operation has completed successfully.</p>
-
-<h3>Details:</h3>
-<ul>
-  <li><strong>Restore Type:</strong> {{restore_type}}</li>
-  <li><strong>Duration:</strong> {{duration}}</li>
-  <li><strong>Files Restored:</strong> {{files_restored}}</li>
-  <li><strong>Backup ID:</strong> {{backup_id}}</li>
-  <li><strong>Timestamp:</strong> {{timestamp}}</li>
-</ul>
-
-<p>Please verify that all systems are functioning correctly after the restore.</p>`,
-      body_text: `Restore Operation Completed
-
-A restore operation has completed successfully.
-
-Details:
-- Restore Type: {{restore_type}}
-- Duration: {{duration}}
-- Files Restored: {{files_restored}}
-- Backup ID: {{backup_id}}
-- Timestamp: {{timestamp}}
-
-Please verify that all systems are functioning correctly after the restore.`,
-      variables: JSON.stringify(['restore_type', 'duration', 'files_restored', 'backup_id', 'timestamp'])
-    },
-    {
-      template_key: 'restore_failed',
-      subject: '❌ Restore Operation Failed',
-      body_html: `<h2>Restore Operation Failed</h2>
-<p>A restore operation has failed and requires attention.</p>
-
-<h3>Details:</h3>
-<ul>
-  <li><strong>Restore Type:</strong> {{restore_type}}</li>
-  <li><strong>Error:</strong> {{error_message}}</li>
-  <li><strong>Timestamp:</strong> {{timestamp}}</li>
-</ul>
-
-<p>Please check the system logs for more details and take appropriate action.</p>
-
-<p><strong>Important:</strong> If a pre-restore backup was created, it may be used for recovery.</p>`,
-      body_text: `Restore Operation Failed
-
-A restore operation has failed and requires attention.
-
-Details:
-- Restore Type: {{restore_type}}
-- Error: {{error_message}}
-- Timestamp: {{timestamp}}
-
-Please check the system logs for more details and take appropriate action.
-
-Important: If a pre-restore backup was created, it may be used for recovery.`,
-      variables: JSON.stringify(['restore_type', 'error_message', 'timestamp'])
-    }
-  ];
-  
-  for (const template of emailTemplates) {
-    const exists = await knex('email_templates')
-      .where('template_key', template.template_key)
-      .first();
-    
-    if (!exists) {
-      await knex('email_templates').insert(template);
-    }
-  }
-};
-
-exports.down = async function(knex) {
-  // Remove email templates
-  await knex('email_templates')
-    .whereIn('template_key', ['restore_completed', 'restore_failed'])
-    .delete();
-  
-  // Remove settings
-  await knex('app_settings')
-    .where('setting_type', 'restore')
-    .delete();
-  
-  // Drop tables
-  await knex.schema.dropTableIfExists('restore_validation_results');
-  await knex.schema.dropTableIfExists('restore_file_operations');
-  await knex.schema.dropTableIfExists('restore_runs');
-};

backend/migrations/core/033_add_gallery_feedback.js

@@ -1,152 +0,0 @@
-// No helpers needed for boolean values
-
-exports.up = async function(knex) {
-  console.log('Adding gallery feedback tables...');
-  
-  // Check if tables and columns already exist
-  const hasEventFeedbackSettingsTable = await knex.schema.hasTable('event_feedback_settings');
-  const hasPhotoFeedbackTable = await knex.schema.hasTable('photo_feedback');
-  const hasFeedbackRateLimitsTable = await knex.schema.hasTable('feedback_rate_limits');
-  const hasFeedbackWordFiltersTable = await knex.schema.hasTable('feedback_word_filters');
-  const hasFeedbackCountColumn = await knex.schema.hasColumn('photos', 'feedback_count');
-  
-  // Create event_feedback_settings table
-  if (!hasEventFeedbackSettingsTable) {
-    await knex.schema.createTable('event_feedback_settings', (table) => {
-      table.increments('id').primary();
-      table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
-      table.boolean('feedback_enabled').defaultTo(false);
-      table.boolean('allow_ratings').defaultTo(true);
-      table.boolean('allow_likes').defaultTo(true);
-      table.boolean('allow_comments').defaultTo(false);
-      table.boolean('allow_favorites').defaultTo(true);
-      table.boolean('require_name_email').defaultTo(false);
-      table.boolean('moderate_comments').defaultTo(true);
-      table.boolean('show_feedback_to_guests').defaultTo(true);
-      table.timestamp('created_at').defaultTo(knex.fn.now());
-      table.timestamp('updated_at').defaultTo(knex.fn.now());
-      table.unique(['event_id']);
-    });
-  }
-
-  // Create photo_feedback table
-  if (!hasPhotoFeedbackTable) {
-    await knex.schema.createTable('photo_feedback', (table) => {
-      table.increments('id').primary();
-      table.integer('photo_id').references('id').inTable('photos').onDelete('CASCADE');
-      table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
-      table.string('feedback_type', 20).notNullable();
-      table.integer('rating');
-      table.text('comment_text');
-      table.string('guest_name', 100);
-      table.string('guest_email', 255);
-      table.string('guest_identifier', 64);
-      table.string('ip_address', 45);
-      table.text('user_agent');
-      table.boolean('is_approved').defaultTo(true);
-      table.boolean('is_hidden').defaultTo(false);
-      table.timestamp('created_at').defaultTo(knex.fn.now());
-      table.timestamp('updated_at').defaultTo(knex.fn.now());
-      
-      // Add indexes
-      table.index(['photo_id']);
-      table.index(['event_id']);
-      table.index(['feedback_type']);
-      table.index(['guest_identifier']);
-      
-      // Add check constraint for rating (PostgreSQL)
-      if (knex.client.config.client === 'pg') {
-        table.check('?? >= 1 AND ?? <= 5', ['rating', 'rating']);
-      }
-    });
-  }
-
-  // Create feedback_rate_limits table
-  if (!hasFeedbackRateLimitsTable) {
-    await knex.schema.createTable('feedback_rate_limits', (table) => {
-      table.increments('id').primary();
-      table.string('identifier', 64).notNullable();
-      table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
-      table.string('action_type', 20).notNullable();
-      table.integer('action_count').defaultTo(1);
-      table.timestamp('window_start').defaultTo(knex.fn.now());
-      
-      // Add indexes
-      table.index(['identifier', 'event_id', 'action_type']);
-      table.index(['window_start']);
-    });
-  }
-
-  // Create feedback_word_filters table
-  if (!hasFeedbackWordFiltersTable) {
-    await knex.schema.createTable('feedback_word_filters', (table) => {
-      table.increments('id').primary();
-      table.string('word', 100).notNullable();
-      table.string('severity', 20).defaultTo('moderate');
-      table.boolean('is_active').defaultTo(true);
-      table.timestamp('created_at').defaultTo(knex.fn.now());
-      table.unique(['word']);
-    });
-  }
-
-  // Add feedback summary columns to photos table
-  if (!hasFeedbackCountColumn) {
-    await knex.schema.alterTable('photos', (table) => {
-      table.integer('feedback_count').defaultTo(0);
-      table.integer('like_count').defaultTo(0);
-      table.decimal('average_rating', 3, 2).defaultTo(0);
-      table.integer('favorite_count').defaultTo(0);
-    });
-  }
-
-  // Add feedback notification settings to app_settings
-  const hasFeedbackNotificationEmail = await knex('app_settings')
-    .where('setting_key', 'feedback_notification_email')
-    .first();
-    
-  if (!hasFeedbackNotificationEmail) {
-    await knex('app_settings').insert([
-      {
-        setting_key: 'feedback_notification_email',
-        setting_value: JSON.stringify(''),
-        setting_type: 'feedback'
-      },
-      {
-        setting_key: 'feedback_rate_limits',
-        setting_value: JSON.stringify({
-          rating: { max: 100, window: 3600 }, // 100 ratings per hour
-          comment: { max: 20, window: 3600 }, // 20 comments per hour
-          like: { max: 200, window: 3600 } // 200 likes per hour
-        }),
-        setting_type: 'feedback'
-      }
-    ]);
-  }
-  
-  console.log('Gallery feedback tables created successfully');
-};
-
-exports.down = async function(knex) {
-  console.log('Removing gallery feedback tables...');
-  
-  // Remove feedback settings from app_settings
-  await knex('app_settings')
-    .whereIn('setting_key', ['feedback_notification_email', 'feedback_rate_limits'])
-    .delete();
-
-  // Remove feedback columns from photos table
-  await knex.schema.alterTable('photos', (table) => {
-    table.dropColumn('feedback_count');
-    table.dropColumn('like_count');
-    table.dropColumn('average_rating');
-    table.dropColumn('favorite_count');
-  });
-
-  // Drop tables in reverse order
-  await knex.schema.dropTableIfExists('feedback_word_filters');
-  await knex.schema.dropTableIfExists('feedback_rate_limits');
-  await knex.schema.dropTableIfExists('photo_feedback');
-  await knex.schema.dropTableIfExists('event_feedback_settings');
-  
-  console.log('Gallery feedback tables removed');
-};

backend/migrations/core/034_add_version_to_backups.js

@@ -1,139 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  console.log('Adding version tracking to backup tables...');
-  
-  // Add version columns to database_backup_runs table
-  const hasDatabaseBackupRunsTable = await db.schema.hasTable('database_backup_runs');
-  if (hasDatabaseBackupRunsTable) {
-    const hasAppVersion = await db.schema.hasColumn('database_backup_runs', 'app_version');
-    if (!hasAppVersion) {
-      await db.schema.alterTable('database_backup_runs', (table) => {
-        table.string('app_version'); // Application version
-        table.string('node_version'); // Node.js version
-        table.string('db_schema_version'); // Database schema version (migration name)
-        table.json('environment_info'); // Additional environment information
-      });
-      console.log('Added version columns to database_backup_runs table');
-    }
-  }
-
-  // Add version columns to backup_runs table (file backups)
-  const hasBackupRunsTable = await db.schema.hasTable('backup_runs');
-  if (hasBackupRunsTable) {
-    const hasAppVersion = await db.schema.hasColumn('backup_runs', 'app_version');
-    if (!hasAppVersion) {
-      await db.schema.alterTable('backup_runs', (table) => {
-        table.string('app_version'); // Application version
-        table.string('node_version'); // Node.js version
-        table.string('db_schema_version'); // Database schema version
-        table.json('manifest_info'); // Manifest summary information
-      });
-      console.log('Added version columns to backup_runs table');
-    }
-  }
-
-  // Add restore tracking table
-  const hasRestoreHistoryTable = await db.schema.hasTable('restore_history');
-  if (!hasRestoreHistoryTable) {
-    await db.schema.createTable('restore_history', (table) => {
-      table.increments('id').primary();
-      table.datetime('started_at').notNullable();
-      table.datetime('completed_at');
-      table.string('status').defaultTo('running'); // running, completed, failed, partial
-      table.string('restore_type'); // database, files, full
-      table.string('backup_id'); // Reference to the backup that was restored
-      table.string('backup_app_version'); // Version of app that created the backup
-      table.string('restore_app_version'); // Version of app performing the restore
-      table.string('backup_node_version'); // Node version that created the backup
-      table.string('restore_node_version'); // Node version performing the restore
-      table.string('backup_schema_version'); // Schema version in the backup
-      table.string('restore_schema_version'); // Current schema version
-      table.json('version_compatibility'); // Compatibility check results
-      table.json('restore_options'); // Options used during restore
-      table.json('statistics'); // Restore statistics
-      table.text('warnings'); // Any warnings during restore
-      table.text('error_message'); // Error details if failed
-      table.string('restored_by'); // User who initiated the restore
-      table.index(['started_at'], 'idx_restore_started');
-      table.index(['backup_id'], 'idx_restore_backup_id');
-    });
-    console.log('Created restore_history table');
-  }
-
-  // Add version compatibility settings
-  const versionSettings = [
-    {
-      setting_key: 'backup_require_version_match',
-      setting_value: JSON.stringify(false), // If true, exact version match required for restore
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_allow_minor_version_mismatch',
-      setting_value: JSON.stringify(true), // Allow restoring from same major version
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_warn_on_version_mismatch',
-      setting_value: JSON.stringify(true), // Show warning when versions don't match
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_check_schema_compatibility',
-      setting_value: JSON.stringify(true), // Check if migrations are compatible
-      setting_type: 'backup'
-    }
-  ];
-
-  // Insert version settings if they don't exist
-  for (const setting of versionSettings) {
-    const exists = await db('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await db('app_settings').insert(setting);
-    }
-  }
-
-  console.log('Version tracking for backups added successfully');
-}
-
-async function down() {
-  // Remove version columns from database_backup_runs
-  const hasDatabaseBackupRunsTable = await db.schema.hasTable('database_backup_runs');
-  if (hasDatabaseBackupRunsTable) {
-    await db.schema.alterTable('database_backup_runs', (table) => {
-      table.dropColumn('app_version');
-      table.dropColumn('node_version');
-      table.dropColumn('db_schema_version');
-      table.dropColumn('environment_info');
-    });
-  }
-
-  // Remove version columns from backup_runs
-  const hasBackupRunsTable = await db.schema.hasTable('backup_runs');
-  if (hasBackupRunsTable) {
-    await db.schema.alterTable('backup_runs', (table) => {
-      table.dropColumn('app_version');
-      table.dropColumn('node_version');
-      table.dropColumn('db_schema_version');
-      table.dropColumn('manifest_info');
-    });
-  }
-
-  // Drop restore_history table
-  await db.schema.dropTableIfExists('restore_history');
-
-  // Remove version settings
-  await db('app_settings')
-    .whereIn('setting_key', [
-      'backup_require_version_match',
-      'backup_allow_minor_version_mismatch',
-      'backup_warn_on_version_mismatch',
-      'backup_check_schema_compatibility'
-    ])
-    .delete();
-}
-
-module.exports = { up, down };

backend/migrations/core/035_enhance_backup_system.js

@@ -1,221 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  console.log('Enhancing backup system...');
-  
-  // Add new settings to app_settings table if they don't exist
-  const backupSettings = [
-    {
-      setting_key: 'backup_s3_force_path_style',
-      setting_value: JSON.stringify(false),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_ssl_enabled',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_s3_prefix',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_incremental',
-      setting_value: JSON.stringify(false),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_include_database',
-      setting_value: JSON.stringify(true),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_encryption_enabled',
-      setting_value: JSON.stringify(false),
-      setting_type: 'backup'
-    },
-    {
-      setting_key: 'backup_database_schedule',
-      setting_value: JSON.stringify(''),
-      setting_type: 'backup'
-    }
-  ];
-
-  // Insert settings if they don't exist
-  for (const setting of backupSettings) {
-    const exists = await db('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await db('app_settings').insert(setting);
-    }
-  }
-
-  // Check and add columns to backup_runs table
-  const hasBackupRunsTable = await db.schema.hasTable('backup_runs');
-  if (hasBackupRunsTable) {
-    // Check for existing columns before adding
-    const hasManifestPath = await db.schema.hasColumn('backup_runs', 'manifest_path');
-    const hasManifestId = await db.schema.hasColumn('backup_runs', 'manifest_id');
-    const hasManifestFormat = await db.schema.hasColumn('backup_runs', 'manifest_format');
-    const hasParentBackupId = await db.schema.hasColumn('backup_runs', 'parent_backup_id');
-    const hasBackupMode = await db.schema.hasColumn('backup_runs', 'backup_mode');
-    
-    if (!hasManifestPath || !hasManifestId || !hasManifestFormat || !hasParentBackupId || !hasBackupMode) {
-      await db.schema.alterTable('backup_runs', (table) => {
-        if (!hasManifestPath) {
-          table.string('manifest_path', 500).comment('Path to backup manifest file');
-        }
-        if (!hasManifestId) {
-          table.uuid('manifest_id').comment('Unique identifier for the manifest');
-        }
-        if (!hasManifestFormat) {
-          table.enum('manifest_format', ['json', 'yaml']).comment('Format of the manifest file');
-        }
-        if (!hasParentBackupId) {
-          table.integer('parent_backup_id').unsigned().references('id').inTable('backup_runs').onDelete('SET NULL').comment('Parent backup for incremental backups');
-        }
-        if (!hasBackupMode) {
-          table.enum('backup_mode', ['full', 'incremental', 'database']).defaultTo('full').comment('Type of backup performed');
-        }
-      });
-    }
-    
-    // Add indexes if they don't exist
-    try {
-      await db.raw('CREATE INDEX IF NOT EXISTS idx_backup_runs_mode_status ON backup_runs(backup_mode, status)');
-      await db.raw('CREATE INDEX IF NOT EXISTS idx_backup_runs_parent ON backup_runs(parent_backup_id)');
-      await db.raw('CREATE INDEX IF NOT EXISTS idx_backup_runs_created_mode ON backup_runs(created_at, backup_mode)');
-    } catch (error) {
-      console.log('Note: Some indexes may already exist, continuing...');
-    }
-  }
-
-  // Create backup_manifest table if it doesn't exist
-  const hasManifestTable = await db.schema.hasTable('backup_manifest');
-  if (!hasManifestTable) {
-    await db.schema.createTable('backup_manifest', (table) => {
-      table.increments('id').primary();
-      table.integer('backup_run_id').unsigned().notNullable().references('id').inTable('backup_runs').onDelete('CASCADE');
-      table.uuid('manifest_id').notNullable().unique().comment('Unique identifier matching backup_runs.manifest_id');
-      table.string('version', 20).notNullable().defaultTo('1.0.0').comment('Manifest schema version');
-      table.enum('format', ['json', 'yaml']).notNullable().defaultTo('json');
-      
-      // Backup metadata
-      table.timestamp('backup_start').notNullable();
-      table.timestamp('backup_end').notNullable();
-      table.bigInteger('total_size').unsigned().comment('Total size of backup in bytes');
-      table.integer('file_count').unsigned().comment('Number of files in backup');
-      table.integer('photo_count').unsigned().comment('Number of photos backed up');
-      table.integer('event_count').unsigned().comment('Number of events backed up');
-      
-      // Incremental backup metadata
-      table.boolean('is_incremental').defaultTo(false);
-      table.uuid('parent_manifest_id').comment('Parent manifest ID for incremental backups');
-      table.timestamp('incremental_since').comment('Timestamp for incremental backup baseline');
-      
-      // Content checksums
-      table.string('checksum_algorithm', 50).defaultTo('sha256').comment('Algorithm used for checksums');
-      table.text('manifest_checksum').comment('Checksum of the manifest file itself');
-      
-      // Storage information
-      table.string('storage_location', 500).comment('Primary storage location (local path or S3 URI)');
-      table.string('storage_provider', 50).comment('Storage provider (local, s3, etc.)');
-      
-      // Encryption metadata
-      table.boolean('is_encrypted').defaultTo(false);
-      table.string('encryption_algorithm', 100).comment('Encryption algorithm used');
-      table.string('encryption_key_id', 255).comment('ID of encryption key used');
-      
-      // Additional metadata as JSON
-      table.json('metadata').comment('Additional metadata as JSON');
-      
-      // Timestamps
-      table.timestamps(true, true);
-      
-      // Indexes
-      table.index(['backup_run_id'], 'idx_manifest_backup_run');
-      table.index(['manifest_id'], 'idx_manifest_uuid');
-      table.index(['parent_manifest_id'], 'idx_manifest_parent');
-      table.index(['backup_start', 'backup_end'], 'idx_manifest_time_range');
-      table.index(['is_incremental', 'created_at'], 'idx_manifest_incremental_created');
-    });
-  }
-
-  // Add composite indexes for common query patterns
-  try {
-    await db.raw(`
-      CREATE INDEX IF NOT EXISTS idx_backup_runs_recent_successful 
-      ON backup_runs(created_at DESC) 
-      WHERE status = 'completed' AND backup_mode = 'full';
-    `);
-    await db.raw(`
-      CREATE INDEX IF NOT EXISTS idx_backup_runs_incremental_chain 
-      ON backup_runs(parent_backup_id, created_at) 
-      WHERE backup_mode = 'incremental';
-    `);
-  } catch (error) {
-    console.log('Note: Some composite indexes may already exist, continuing...');
-  }
-
-  console.log('Backup system enhancements completed');
-}
-
-async function down() {
-  // Drop indexes first
-  try {
-    await db.raw('DROP INDEX IF EXISTS idx_backup_runs_incremental_chain;');
-    await db.raw('DROP INDEX IF EXISTS idx_backup_runs_recent_successful;');
-  } catch (error) {
-    // Ignore errors if indexes don't exist
-  }
-
-  // Drop backup_manifest table
-  await db.schema.dropTableIfExists('backup_manifest');
-
-  // Remove columns from backup_runs if they exist
-  const hasBackupRunsTable = await db.schema.hasTable('backup_runs');
-  if (hasBackupRunsTable) {
-    const hasBackupMode = await db.schema.hasColumn('backup_runs', 'backup_mode');
-    const hasParentBackupId = await db.schema.hasColumn('backup_runs', 'parent_backup_id');
-    const hasManifestFormat = await db.schema.hasColumn('backup_runs', 'manifest_format');
-    const hasManifestId = await db.schema.hasColumn('backup_runs', 'manifest_id');
-    const hasManifestPath = await db.schema.hasColumn('backup_runs', 'manifest_path');
-    
-    if (hasBackupMode || hasParentBackupId || hasManifestFormat || hasManifestId || hasManifestPath) {
-      await db.schema.alterTable('backup_runs', (table) => {
-        if (hasBackupMode) table.dropColumn('backup_mode');
-        if (hasParentBackupId) table.dropColumn('parent_backup_id');
-        if (hasManifestFormat) table.dropColumn('manifest_format');
-        if (hasManifestId) table.dropColumn('manifest_id');
-        if (hasManifestPath) table.dropColumn('manifest_path');
-      });
-    }
-    
-    // Drop indexes
-    try {
-      await db.raw('DROP INDEX IF EXISTS idx_backup_runs_mode_status');
-      await db.raw('DROP INDEX IF EXISTS idx_backup_runs_parent');
-      await db.raw('DROP INDEX IF EXISTS idx_backup_runs_created_mode');
-    } catch (error) {
-      // Ignore errors if indexes don't exist
-    }
-  }
-
-  // Remove settings
-  await db('app_settings')
-    .whereIn('setting_key', [
-      'backup_s3_force_path_style',
-      'backup_s3_ssl_enabled',
-      'backup_s3_prefix',
-      'backup_incremental',
-      'backup_include_database',
-      'backup_encryption_enabled',
-      'backup_database_schedule'
-    ])
-    .delete();
-}
-
-module.exports = { up, down };

backend/migrations/core/036_fix_missing_columns.js

@@ -1,87 +0,0 @@
-// Fix missing columns identified in GitHub issues
-
-exports.up = async function(knex) {
-  console.log('Adding missing columns to database tables...');
-  
-  // Add must_change_password column to admin_users table
-  const hasMustChangePassword = await knex.schema.hasColumn('admin_users', 'must_change_password');
-  if (!hasMustChangePassword) {
-    console.log('Adding must_change_password column to admin_users table...');
-    await knex.schema.table('admin_users', (table) => {
-      table.boolean('must_change_password').defaultTo(false);
-    });
-  }
-  
-  // Add password_changed_at column to admin_users table
-  const hasPasswordChangedAt = await knex.schema.hasColumn('admin_users', 'password_changed_at');
-  if (!hasPasswordChangedAt) {
-    console.log('Adding password_changed_at column to admin_users table...');
-    await knex.schema.table('admin_users', (table) => {
-      table.datetime('password_changed_at');
-    });
-  }
-  
-  // Add require_moderation column to event_feedback_settings table
-  const hasEventFeedbackSettings = await knex.schema.hasTable('event_feedback_settings');
-  if (hasEventFeedbackSettings) {
-    const hasRequireModeration = await knex.schema.hasColumn('event_feedback_settings', 'require_moderation');
-    if (!hasRequireModeration) {
-      console.log('Adding require_moderation column to event_feedback_settings table...');
-      await knex.schema.table('event_feedback_settings', (table) => {
-        table.boolean('require_moderation').defaultTo(true);
-      });
-    }
-  }
-  
-  // Add host_name column to events table if missing
-  const hasHostName = await knex.schema.hasColumn('events', 'host_name');
-  if (!hasHostName) {
-    console.log('Adding host_name column to events table...');
-    await knex.schema.table('events', (table) => {
-      table.string('host_name');
-    });
-  }
-  
-  console.log('Missing columns have been added successfully');
-};
-
-exports.down = async function(knex) {
-  console.log('Removing added columns...');
-  
-  // Remove must_change_password column from admin_users table
-  const hasMustChangePassword = await knex.schema.hasColumn('admin_users', 'must_change_password');
-  if (hasMustChangePassword) {
-    await knex.schema.table('admin_users', (table) => {
-      table.dropColumn('must_change_password');
-    });
-  }
-  
-  // Remove password_changed_at column from admin_users table
-  const hasPasswordChangedAt = await knex.schema.hasColumn('admin_users', 'password_changed_at');
-  if (hasPasswordChangedAt) {
-    await knex.schema.table('admin_users', (table) => {
-      table.dropColumn('password_changed_at');
-    });
-  }
-  
-  // Remove require_moderation column from event_feedback_settings table
-  const hasEventFeedbackSettings = await knex.schema.hasTable('event_feedback_settings');
-  if (hasEventFeedbackSettings) {
-    const hasRequireModeration = await knex.schema.hasColumn('event_feedback_settings', 'require_moderation');
-    if (hasRequireModeration) {
-      await knex.schema.table('event_feedback_settings', (table) => {
-        table.dropColumn('require_moderation');
-      });
-    }
-  }
-  
-  // Remove host_name column from events table
-  const hasHostName = await knex.schema.hasColumn('events', 'host_name');
-  if (hasHostName) {
-    await knex.schema.table('events', (table) => {
-      table.dropColumn('host_name');
-    });
-  }
-  
-  console.log('Columns removed');
-};

backend/migrations/core/037_add_download_controls.js

@@ -1,69 +0,0 @@
-// Add download control features to events table
-
-exports.up = async function(knex) {
-  console.log('Adding download control columns to events table...');
-  
-  // Add download control columns to events table
-  const hasAllowDownloads = await knex.schema.hasColumn('events', 'allow_downloads');
-  if (!hasAllowDownloads) {
-    await knex.schema.table('events', (table) => {
-      table.boolean('allow_downloads').defaultTo(true);
-      table.boolean('disable_right_click').defaultTo(false);
-      table.boolean('watermark_downloads').defaultTo(false);
-      table.text('watermark_text');
-    });
-  }
-  
-  // Add download control settings to app_settings
-  const downloadSettingExists = await knex('app_settings')
-    .where('setting_key', 'default_allow_downloads')
-    .first();
-    
-  if (!downloadSettingExists) {
-    await knex('app_settings').insert([
-      {
-        setting_key: 'default_allow_downloads',
-        setting_value: JSON.stringify(true),
-        setting_type: 'gallery'
-      },
-      {
-        setting_key: 'default_disable_right_click',
-        setting_value: JSON.stringify(false),
-        setting_type: 'gallery'
-      },
-      {
-        setting_key: 'default_watermark_downloads',
-        setting_value: JSON.stringify(false),
-        setting_type: 'gallery'
-      }
-    ]);
-  }
-  
-  console.log('Download control features added successfully');
-};
-
-exports.down = async function(knex) {
-  console.log('Removing download control columns...');
-  
-  // Remove app settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'default_allow_downloads',
-      'default_disable_right_click', 
-      'default_watermark_downloads'
-    ])
-    .delete();
-  
-  // Remove columns from events table
-  const hasAllowDownloads = await knex.schema.hasColumn('events', 'allow_downloads');
-  if (hasAllowDownloads) {
-    await knex.schema.table('events', (table) => {
-      table.dropColumn('allow_downloads');
-      table.dropColumn('disable_right_click');
-      table.dropColumn('watermark_downloads');
-      table.dropColumn('watermark_text');
-    });
-  }
-  
-  console.log('Download control columns removed');
-};

backend/migrations/core/038_add_enhanced_image_protection.js

@@ -1,128 +0,0 @@
-// Add enhanced image protection features
-
-exports.up = async function(knex) {
-  console.log('Adding enhanced image protection features...');
-  
-  // Add protection columns to events table
-  const hasProtectionLevel = await knex.schema.hasColumn('events', 'protection_level');
-  if (!hasProtectionLevel) {
-    await knex.schema.table('events', (table) => {
-      table.enum('protection_level', ['basic', 'standard', 'enhanced', 'maximum']).defaultTo('standard');
-      table.integer('image_quality').defaultTo(85);
-      table.boolean('add_fingerprint').defaultTo(true);
-      table.boolean('enable_devtools_protection').defaultTo(true);
-      table.boolean('use_canvas_rendering').defaultTo(false);
-      table.integer('fragmentation_level').defaultTo(3);
-      table.boolean('overlay_protection').defaultTo(true);
-    });
-  }
-  
-  // Create image access logs table
-  const hasImageAccessLogs = await knex.schema.hasTable('image_access_logs');
-  if (!hasImageAccessLogs) {
-    await knex.schema.createTable('image_access_logs', (table) => {
-      table.increments('id').primary();
-      table.integer('photo_id').unsigned().notNullable();
-      table.integer('event_id').unsigned().notNullable();
-      table.string('client_ip', 45).notNullable();
-      table.text('user_agent');
-      table.string('access_type', 20).defaultTo('view'); // view, download, suspicious
-      table.string('client_fingerprint', 32).notNullable();
-      table.timestamp('accessed_at').defaultTo(knex.fn.now());
-      table.json('metadata'); // Additional security metadata
-      
-      table.foreign('photo_id').references('id').inTable('photos').onDelete('CASCADE');
-      table.foreign('event_id').references('id').inTable('events').onDelete('CASCADE');
-      
-      table.index(['photo_id', 'accessed_at']);
-      table.index(['client_fingerprint', 'accessed_at']);
-      table.index(['client_ip', 'accessed_at']);
-    });
-  }
-  
-  // Add protection settings to app_settings
-  const protectionSettingExists = await knex('app_settings')
-    .where('setting_key', 'default_protection_level')
-    .first();
-    
-  if (!protectionSettingExists) {
-    await knex('app_settings').insert([
-      {
-        setting_key: 'default_protection_level',
-        setting_value: JSON.stringify('standard'),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'default_image_quality',
-        setting_value: JSON.stringify(85),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'enable_devtools_protection',
-        setting_value: JSON.stringify(true),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'max_image_requests_per_minute',
-        setting_value: JSON.stringify(30),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'suspicious_activity_threshold',
-        setting_value: JSON.stringify(10),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'enable_canvas_rendering',
-        setting_value: JSON.stringify(false),
-        setting_type: 'security'
-      },
-      {
-        setting_key: 'default_fragmentation_level',
-        setting_value: JSON.stringify(3),
-        setting_type: 'security'
-      }
-    ]);
-  }
-  
-  console.log('Enhanced image protection features added successfully');
-};
-
-exports.down = async function(knex) {
-  console.log('Removing enhanced image protection features...');
-  
-  // Remove app settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'default_protection_level',
-      'default_image_quality',
-      'enable_devtools_protection',
-      'max_image_requests_per_minute',
-      'suspicious_activity_threshold',
-      'enable_canvas_rendering',
-      'default_fragmentation_level'
-    ])
-    .delete();
-  
-  // Drop image access logs table
-  const hasImageAccessLogs = await knex.schema.hasTable('image_access_logs');
-  if (hasImageAccessLogs) {
-    await knex.schema.dropTable('image_access_logs');
-  }
-  
-  // Remove protection columns from events table
-  const hasProtectionLevel = await knex.schema.hasColumn('events', 'protection_level');
-  if (hasProtectionLevel) {
-    await knex.schema.table('events', (table) => {
-      table.dropColumn('protection_level');
-      table.dropColumn('image_quality');
-      table.dropColumn('add_fingerprint');
-      table.dropColumn('enable_devtools_protection');
-      table.dropColumn('use_canvas_rendering');
-      table.dropColumn('fragmentation_level');
-      table.dropColumn('overlay_protection');
-    });
-  }
-  
-  console.log('Enhanced image protection features removed');
-};

backend/migrations/core/039_add_security_logging.js

@@ -1,117 +0,0 @@
-// Add security logging and monitoring tables
-
-exports.up = async function(knex) {
-  console.log('Adding security logging and monitoring tables...');
-  
-  // Create security logs table for general security events
-  const hasSecurityLogs = await knex.schema.hasTable('security_logs');
-  if (!hasSecurityLogs) {
-    await knex.schema.createTable('security_logs', (table) => {
-      table.increments('id').primary();
-      table.string('event_type', 50).notNullable(); // rate_limit_exceeded, suspicious_activity, etc.
-      table.string('client_ip', 45).notNullable();
-      table.string('client_fingerprint', 32);
-      table.text('user_agent');
-      table.string('request_path');
-      table.string('request_method', 10);
-      table.json('details'); // Additional event details
-      table.timestamp('timestamp').defaultTo(knex.fn.now());
-      
-      // Indexes for performance
-      table.index(['event_type', 'timestamp']);
-      table.index(['client_ip', 'timestamp']);
-      table.index(['client_fingerprint', 'timestamp']);
-    });
-  }
-  
-  // Add security monitoring settings to app_settings
-  const securitySettings = [
-    {
-      setting_key: 'security_monitoring_enabled',
-      setting_value: JSON.stringify(true),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'max_image_requests_per_5_minutes',
-      setting_value: JSON.stringify(100),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'max_image_requests_per_hour',
-      setting_value: JSON.stringify(500),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'block_suspicious_ips',
-      setting_value: JSON.stringify(true),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'log_security_events_to_db',
-      setting_value: JSON.stringify(true),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'auto_block_threshold',
-      setting_value: JSON.stringify(5),
-      setting_type: 'security'
-    }
-  ];
-
-  for (const setting of securitySettings) {
-    const exists = await knex('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-      
-    if (!exists) {
-      await knex('app_settings').insert(setting);
-    }
-  }
-  
-  // Add mime_type column to photos table if it doesn't exist
-  const hasMimeType = await knex.schema.hasColumn('photos', 'mime_type');
-  if (!hasMimeType) {
-    await knex.schema.table('photos', (table) => {
-      table.string('mime_type', 100);
-    });
-    
-    // Update existing photos with default mime type
-    await knex('photos')
-      .whereNull('mime_type')
-      .update({ mime_type: 'image/jpeg' });
-  }
-  
-  console.log('Security logging and monitoring tables added successfully');
-};
-
-exports.down = async function(knex) {
-  console.log('Removing security logging and monitoring tables...');
-  
-  // Remove security settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'security_monitoring_enabled',
-      'max_image_requests_per_5_minutes', 
-      'max_image_requests_per_hour',
-      'block_suspicious_ips',
-      'log_security_events_to_db',
-      'auto_block_threshold'
-    ])
-    .delete();
-  
-  // Drop security logs table
-  const hasSecurityLogs = await knex.schema.hasTable('security_logs');
-  if (hasSecurityLogs) {
-    await knex.schema.dropTable('security_logs');
-  }
-  
-  // Remove mime_type column from photos table
-  const hasMimeType = await knex.schema.hasColumn('photos', 'mime_type');
-  if (hasMimeType) {
-    await knex.schema.table('photos', (table) => {
-      table.dropColumn('mime_type');
-    });
-  }
-  
-  console.log('Security logging and monitoring tables removed');
-};

backend/migrations/core/040_add_thumbnail_settings.js

@@ -1,33 +0,0 @@
-exports.up = async function(knex) {
-  // Add thumbnail settings to app_settings table
-  const thumbnailSettings = [
-    { setting_key: 'thumbnail_width', setting_value: 300, setting_type: 'number' },
-    { setting_key: 'thumbnail_height', setting_value: 300, setting_type: 'number' },
-    { setting_key: 'thumbnail_fit', setting_value: JSON.stringify('cover'), setting_type: 'string' },
-    { setting_key: 'thumbnail_quality', setting_value: 85, setting_type: 'number' },
-    { setting_key: 'thumbnail_format', setting_value: JSON.stringify('jpeg'), setting_type: 'string' }
-  ];
-
-  for (const setting of thumbnailSettings) {
-    const exists = await knex('app_settings').where('setting_key', setting.setting_key).first();
-    if (!exists) {
-      await knex('app_settings').insert({
-        ...setting,
-        updated_at: knex.fn.now()
-      });
-    }
-  }
-};
-
-exports.down = async function(knex) {
-  // Remove thumbnail settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'thumbnail_width',
-      'thumbnail_height', 
-      'thumbnail_fit',
-      'thumbnail_quality',
-      'thumbnail_format'
-    ])
-    .del();
-};

backend/migrations/core/041_add_external_media.js

@@ -1,54 +0,0 @@
-/**
- * Migration 041: Add external media reference support
- * - events.source_mode: 'managed' | 'reference'
- * - events.external_path: relative path under external media root
- * - photos.source_origin: 'managed' | 'external'
- * - photos.external_relpath: relative path within event.external_path
- */
-
-const { addColumnIfNotExists } = require('../helpers');
-
-exports.up = async function(knex) {
-  console.log('Running migration: 041_add_external_media');
-
-  // events.source_mode (default 'managed')
-  await addColumnIfNotExists(knex, 'events', 'source_mode', (table) => {
-    table.string('source_mode').notNullable().defaultTo('managed');
-  });
-
-  // events.external_path (nullable)
-  await addColumnIfNotExists(knex, 'events', 'external_path', (table) => {
-    table.text('external_path');
-  });
-
-  // photos.source_origin (default 'managed')
-  await addColumnIfNotExists(knex, 'photos', 'source_origin', (table) => {
-    table.string('source_origin').notNullable().defaultTo('managed');
-  });
-
-  // photos.external_relpath (nullable)
-  await addColumnIfNotExists(knex, 'photos', 'external_relpath', (table) => {
-    table.text('external_relpath');
-  });
-
-  // Helpful index for queries
-  try {
-    if (knex.client.config.client === 'pg') {
-      await knex.raw("CREATE INDEX IF NOT EXISTS photos_event_source_idx ON photos (event_id, source_origin)");
-    } else {
-      await knex.schema.alterTable('photos', (table) => {
-        table.index(['event_id', 'source_origin'], 'photos_event_source_idx');
-      });
-    }
-  } catch (e) {
-    console.log('Index creation skipped or failed (may already exist):', e.message);
-  }
-
-  console.log('Migration 041_add_external_media completed');
-};
-
-exports.down = async function(knex) {
-  console.log('Rollback: 041_add_external_media');
-  // Keep columns (safe rollback not removing data). Intentionally no-op.
-};
-

backend/migrations/helpers.js

@@ -1,83 +0,0 @@
-/**
- * Migration helper functions for production-safe migrations
- */
-
-/**
- * Create a table only if it doesn't already exist
- */
-async function createTableIfNotExists(knex, tableName, callback) {
-  const exists = await knex.schema.hasTable(tableName);
-  if (!exists) {
-    console.log(`Creating table: ${tableName}`);
-    return knex.schema.createTable(tableName, callback);
-  } else {
-    console.log(`Table ${tableName} already exists, skipping...`);
-  }
-}
-
-/**
- * Add column to table only if it doesn't exist
- */
-async function addColumnIfNotExists(knex, tableName, columnName, callback) {
-  const hasColumn = await knex.schema.hasColumn(tableName, columnName);
-  if (!hasColumn) {
-    console.log(`Adding column ${columnName} to table ${tableName}`);
-    return knex.schema.alterTable(tableName, (table) => {
-      callback(table);
-    });
-  } else {
-    console.log(`Column ${columnName} already exists in table ${tableName}, skipping...`);
-  }
-}
-
-/**
- * Insert data only if it doesn't already exist
- */
-async function insertIfNotExists(knex, tableName, data, uniqueField) {
-  const exists = await knex(tableName)
-    .where(uniqueField, data[uniqueField])
-    .first();
-  
-  if (!exists) {
-    console.log(`Inserting ${uniqueField}: ${data[uniqueField]} into ${tableName}`);
-    return knex(tableName).insert(data);
-  } else {
-    console.log(`${uniqueField}: ${data[uniqueField]} already exists in ${tableName}, skipping...`);
-  }
-}
-
-/**
- * Create index only if it doesn't exist
- */
-async function createIndexIfNotExists(knex, tableName, columns, indexName) {
-  // This is database-specific, works for PostgreSQL
-  if (knex.client.config.client === 'pg') {
-    const result = await knex.raw(`
-      SELECT 1 FROM pg_indexes 
-      WHERE tablename = ? AND indexname = ?
-    `, [tableName, indexName]);
-    
-    if (result.rows.length === 0) {
-      console.log(`Creating index ${indexName} on ${tableName}`);
-      return knex.schema.alterTable(tableName, (table) => {
-        table.index(columns, indexName);
-      });
-    }
-  } else {
-    // For SQLite, just try to create and ignore errors
-    try {
-      await knex.schema.alterTable(tableName, (table) => {
-        table.index(columns, indexName);
-      });
-    } catch (error) {
-      // Index probably already exists
-    }
-  }
-}
-
-module.exports = {
-  createTableIfNotExists,
-  addColumnIfNotExists,
-  insertIfNotExists,
-  createIndexIfNotExists
-};

backend/migrations/legacy/004_add_categories_and_cms.js

@@ -1,125 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  console.log('Adding photo categories and CMS tables...');
-  
-  // Check if tables already exist
-  const hasPhotoCategoriesTable = await db.schema.hasTable('photo_categories');
-  const hasCmsPagesTable = await db.schema.hasTable('cms_pages');
-  const hasCategoryIdColumn = await db.schema.hasColumn('photos', 'category_id');
-  const hasLanguageColumn = await db.schema.hasColumn('admin_users', 'language');
-  
-  // Create photo_categories table
-  if (!hasPhotoCategoriesTable) {
-    await db.schema.createTable('photo_categories', (table) => {
-      table.increments('id').primary();
-      table.string('name', 100).notNullable();
-      table.string('slug', 100).notNullable();
-      table.boolean('is_global').defaultTo(true);
-      table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
-      table.timestamp('created_at').defaultTo(db.fn.now());
-      
-      // Unique constraint for slug within event scope
-      table.unique(['slug', 'event_id']);
-    });
-  }
-
-  // Create cms_pages table
-  if (!hasCmsPagesTable) {
-    await db.schema.createTable('cms_pages', (table) => {
-      table.increments('id').primary();
-      table.string('slug', 100).unique().notNullable();
-      table.text('title_en');
-      table.text('title_de');
-      table.text('content_en');
-      table.text('content_de');
-      table.timestamp('updated_at').defaultTo(db.fn.now());
-    });
-  }
-
-  // Add category_id to photos table
-  if (!hasCategoryIdColumn) {
-    await db.schema.alterTable('photos', (table) => {
-      table.integer('category_id').references('id').inTable('photo_categories');
-    });
-  }
-
-  // Add language preference to admin_users
-  if (!hasLanguageColumn) {
-    await db.schema.alterTable('admin_users', (table) => {
-      table.string('language', 2).defaultTo('en');
-    });
-  }
-
-  // Add language preference to app_settings for global default
-  const hasDefaultLanguageSetting = await db('app_settings')
-    .where('setting_key', 'default_language')
-    .first();
-    
-  if (!hasDefaultLanguageSetting) {
-    await db('app_settings').insert({
-      setting_key: 'default_language',
-      setting_value: JSON.stringify('en'),
-      setting_type: 'general',
-      updated_at: new Date()
-    });
-  }
-
-  // Insert default global categories
-  if (!hasPhotoCategoriesTable) {
-    const defaultCategories = [
-      { name: 'Ceremony', slug: 'ceremony', is_global: true },
-      { name: 'Reception', slug: 'reception', is_global: true },
-      { name: 'Portraits', slug: 'portraits', is_global: true },
-      { name: 'Group Photos', slug: 'group-photos', is_global: true },
-      { name: 'Details', slug: 'details', is_global: true },
-      { name: 'Party', slug: 'party', is_global: true }
-    ];
-
-    await db('photo_categories').insert(defaultCategories);
-  }
-
-  // Insert default legal pages
-  if (!hasCmsPagesTable) {
-    await db('cms_pages').insert([
-      {
-        slug: 'impressum',
-        title_en: 'Legal Notice',
-        title_de: 'Impressum',
-        content_en: '<h2>Legal Notice</h2><p>Please edit this content in the admin panel.</p>',
-        content_de: '<h2>Impressum</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
-        updated_at: new Date()
-      },
-      {
-        slug: 'datenschutz',
-        title_en: 'Privacy Policy',
-        title_de: 'Datenschutzerklärung',
-        content_en: '<h2>Privacy Policy</h2><p>Please edit this content in the admin panel.</p>',
-        content_de: '<h2>Datenschutzerklärung</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
-        updated_at: new Date()
-      }
-    ]);
-  }
-
-  console.log('Photo categories and CMS tables created successfully');
-}
-
-async function down() {
-  // Remove language from app_settings
-  await db('app_settings').where('setting_key', 'default_language').delete();
-  
-  // Drop columns
-  await db.schema.alterTable('admin_users', (table) => {
-    table.dropColumn('language');
-  });
-  
-  await db.schema.alterTable('photos', (table) => {
-    table.dropColumn('category_id');
-  });
-  
-  // Drop tables
-  await db.schema.dropTableIfExists('cms_pages');
-  await db.schema.dropTableIfExists('photo_categories');
-}
-
-module.exports = { up, down };

backend/migrations/legacy/006_add_photo_counter_to_categories.js

@@ -1,28 +0,0 @@
-exports.up = async function(knex) {
-  // Add photo_counter column to photo_categories table
-  await knex.schema.alterTable('photo_categories', function(table) {
-    table.integer('photo_counter').defaultTo(0).notNullable();
-  });
-
-  // Initialize counters based on existing photos
-  const categories = await knex('photo_categories').select('id');
-  
-  for (const category of categories) {
-    const photoCount = await knex('photos')
-      .where('category_id', category.id)
-      .count('id as count')
-      .first();
-    
-    if (photoCount && photoCount.count > 0) {
-      await knex('photo_categories')
-        .where('id', category.id)
-        .update({ photo_counter: photoCount.count });
-    }
-  }
-};
-
-exports.down = async function(knex) {
-  await knex.schema.alterTable('photo_categories', function(table) {
-    table.dropColumn('photo_counter');
-  });
-};

backend/migrations/legacy/007_add_read_at_to_activity_logs.js

@@ -1,15 +0,0 @@
-exports.up = async function(knex) {
-  // Add read_at column to activity_logs table
-  const hasReadAt = await knex.schema.hasColumn('activity_logs', 'read_at');
-  if (!hasReadAt) {
-    await knex.schema.table('activity_logs', (table) => {
-      table.datetime('read_at').nullable();
-    });
-  }
-};
-
-exports.down = async function(knex) {
-  await knex.schema.table('activity_logs', (table) => {
-    table.dropColumn('read_at');
-  });
-};

backend/migrations/legacy/008_add_language_support_to_email_templates.js

@@ -1,35 +0,0 @@
-exports.up = async function(knex) {
-  // Add language-specific columns to email_templates
-  await knex.schema.alterTable('email_templates', function(table) {
-    // Add English versions (rename existing columns for consistency)
-    table.renameColumn('subject', 'subject_en');
-    table.renameColumn('body_html', 'body_html_en');
-    table.renameColumn('body_text', 'body_text_en');
-    
-    // Add German versions
-    table.string('subject_de');
-    table.text('body_html_de');
-    table.text('body_text_de');
-  });
-
-  // Copy existing values to German columns as defaults
-  await knex('email_templates').update({
-    subject_de: knex.raw('subject_en'),
-    body_html_de: knex.raw('body_html_en'),
-    body_text_de: knex.raw('body_text_en')
-  });
-};
-
-exports.down = async function(knex) {
-  await knex.schema.alterTable('email_templates', function(table) {
-    // Remove German columns
-    table.dropColumn('subject_de');
-    table.dropColumn('body_html_de');
-    table.dropColumn('body_text_de');
-    
-    // Rename columns back
-    table.renameColumn('subject_en', 'subject');
-    table.renameColumn('body_html_en', 'body_html');
-    table.renameColumn('body_text_en', 'body_text');
-  });
-};

backend/migrations/legacy/009_update_german_email_templates.js

@@ -1,67 +0,0 @@
-exports.up = async function(knex) {
-  // Update gallery_created template with German content
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject_de: 'Ihre Fotogalerie ist bereit!',
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: {{gallery_link}}</li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Gültig bis: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.</p>`,
-      body_text_de: 'Galerie erfolgreich erstellt\n\nLiebe(r) {{host_name}},\n\nIhre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!'
-    });
-  
-  // Update expiration_warning template with German content
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject_de: 'Ihre Fotogalerie läuft bald ab',
-      body_html_de: `<h2>Galerie läuft bald ab</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" läuft in {{days_remaining}} Tagen ab.</p>
-<p>Nach Ablauf wird die Galerie archiviert und ist für Gäste nicht mehr zugänglich.</p>
-<p><a href="{{gallery_link}}">Galerie besuchen</a></p>`,
-      body_text_de: 'Galerie läuft bald ab\n\nLiebe(r) {{host_name}},\n\nIhre Fotogalerie "{{event_name}}" läuft in {{days_remaining}} Tagen ab.'
-    });
-  
-  // Update gallery_expired template if it exists
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject_de: 'Ihre Fotogalerie {{event_name}} ist abgelaufen',
-      body_html_de: `<h2>Galerie abgelaufen</h2>
-<p>Ihre Fotogalerie für "{{event_name}}" ist abgelaufen und nicht mehr zugänglich.</p>
-<p>Die Fotos wurden zur sicheren Aufbewahrung archiviert. Wenn Sie wieder Zugriff benötigen, wenden Sie sich bitte an den Administrator unter {{admin_email}}.</p>
-<p>Vielen Dank für die Nutzung unseres Foto-Sharing-Services!</p>
-<p>Mit freundlichen Grüßen,<br>Das Foto-Sharing-Team</p>`,
-      body_text_de: 'Ihre Fotogalerie für {{event_name}} ist abgelaufen und nicht mehr zugänglich.\n\nDie Fotos wurden archiviert. Bei Bedarf kontaktieren Sie bitte den Administrator unter {{admin_email}}.'
-    });
-  
-  // Update archive_complete template if it exists
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject_de: 'Archivierung abgeschlossen: {{event_name}}',
-      body_html_de: `<h2>Archivierung abgeschlossen</h2>
-<p>Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.</p>
-<p>Archivgröße: {{archive_size}}</p>
-<p>Das Archiv wird sicher aufbewahrt und kann bei Bedarf wiederhergestellt werden.</p>`,
-      body_text_de: 'Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.\n\nArchivgröße: {{archive_size}}'
-    });
-};
-
-exports.down = async function(knex) {
-  // Reset German fields to null
-  await knex('email_templates').update({
-    subject_de: null,
-    body_html_de: null,
-    body_text_de: null
-  });
-};

backend/migrations/legacy/010_add_missing_email_templates.js

@@ -1,57 +0,0 @@
-exports.up = async function(knex) {
-  // Check if gallery_expired template exists
-  const galleryExpiredExists = await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .first();
-    
-  if (!galleryExpiredExists) {
-    await knex('email_templates').insert({
-      template_key: 'gallery_expired',
-      subject_en: 'Your {{event_name}} photo gallery has expired',
-      body_html_en: `<h2>Gallery Expired</h2>
-<p>Your photo gallery for {{event_name}} has expired and is no longer accessible.</p>
-<p>The photos have been archived for safekeeping. If you need access to them, please contact the event administrator at {{admin_email}}.</p>
-<p>Thank you for using our photo sharing service!</p>
-<p>Best regards,<br>The Photo Sharing Team</p>`,
-      body_text_en: 'Your photo gallery for {{event_name}} has expired and is no longer accessible.\n\nThe photos have been archived. Please contact the administrator at {{admin_email}} if you need access.',
-      subject_de: 'Ihre Fotogalerie {{event_name}} ist abgelaufen',
-      body_html_de: `<h2>Galerie abgelaufen</h2>
-<p>Ihre Fotogalerie für "{{event_name}}" ist abgelaufen und nicht mehr zugänglich.</p>
-<p>Die Fotos wurden zur sicheren Aufbewahrung archiviert. Wenn Sie wieder Zugriff benötigen, wenden Sie sich bitte an den Administrator unter {{admin_email}}.</p>
-<p>Vielen Dank für die Nutzung unseres Foto-Sharing-Services!</p>
-<p>Mit freundlichen Grüßen,<br>Das Foto-Sharing-Team</p>`,
-      body_text_de: 'Ihre Fotogalerie für {{event_name}} ist abgelaufen und nicht mehr zugänglich.\n\nDie Fotos wurden archiviert. Bei Bedarf kontaktieren Sie bitte den Administrator unter {{admin_email}}.',
-      variables: JSON.stringify(['event_name', 'admin_email'])
-    });
-  }
-  
-  // Check if archive_complete template exists
-  const archiveCompleteExists = await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .first();
-    
-  if (!archiveCompleteExists) {
-    await knex('email_templates').insert({
-      template_key: 'archive_complete',
-      subject_en: 'Archive Complete: {{event_name}}',
-      body_html_en: `<h2>Archive Complete</h2>
-<p>The photo gallery "{{event_name}}" has been successfully archived.</p>
-<p>Archive size: {{archive_size}}</p>
-<p>The archive has been stored securely and can be restored if needed.</p>`,
-      body_text_en: 'The photo gallery "{{event_name}}" has been successfully archived.\n\nArchive size: {{archive_size}}',
-      subject_de: 'Archivierung abgeschlossen: {{event_name}}',
-      body_html_de: `<h2>Archivierung abgeschlossen</h2>
-<p>Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.</p>
-<p>Archivgröße: {{archive_size}}</p>
-<p>Das Archiv wird sicher aufbewahrt und kann bei Bedarf wiederhergestellt werden.</p>`,
-      body_text_de: 'Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.\n\nArchivgröße: {{archive_size}}',
-      variables: JSON.stringify(['event_name', 'archive_size'])
-    });
-  }
-};
-
-exports.down = async function(knex) {
-  await knex('email_templates')
-    .whereIn('template_key', ['gallery_expired', 'archive_complete'])
-    .del();
-};

backend/migrations/legacy/011_add_user_upload_settings.js

@@ -1,23 +0,0 @@
-exports.up = async function(knex) {
-  // Add user upload settings to events table
-  await knex.schema.alterTable('events', function(table) {
-    table.boolean('allow_user_uploads').defaultTo(false);
-    table.integer('upload_category_id').references('id').inTable('photo_categories').onDelete('SET NULL');
-  });
-  
-  // Add uploaded_by field to photos table to track who uploaded
-  await knex.schema.alterTable('photos', function(table) {
-    table.string('uploaded_by').defaultTo('admin'); // 'admin' or guest identifier
-  });
-};
-
-exports.down = async function(knex) {
-  await knex.schema.alterTable('events', function(table) {
-    table.dropColumn('allow_user_uploads');
-    table.dropColumn('upload_category_id');
-  });
-  
-  await knex.schema.alterTable('photos', function(table) {
-    table.dropColumn('uploaded_by');
-  });
-};

backend/migrations/legacy/012_add_hero_photo_id.js

@@ -1,15 +0,0 @@
-exports.up = async function(knex) {
-  // Add hero_photo_id to events table
-  const hasColumn = await knex.schema.hasColumn('events', 'hero_photo_id');
-  if (!hasColumn) {
-    await knex.schema.alterTable('events', function(table) {
-      table.integer('hero_photo_id').references('id').inTable('photos').onDelete('SET NULL');
-    });
-  }
-};
-
-exports.down = async function(knex) {
-  await knex.schema.alterTable('events', function(table) {
-    table.dropColumn('hero_photo_id');
-  });
-};

backend/migrations/legacy/013_fix_email_links_and_date_format.js

@@ -1,112 +0,0 @@
-exports.up = async function(knex) {
-  // First, add date format configuration to app_settings table
-  const dateFormatSetting = await knex('app_settings').where('setting_key', 'general_date_format').first();
-  if (!dateFormatSetting) {
-    await knex('app_settings').insert({
-      setting_key: 'general_date_format',
-      setting_value: JSON.stringify({
-        format: 'DD/MM/YYYY',  // European format as default
-        locale: 'en-GB'
-      }),
-      setting_type: 'general',
-      updated_at: new Date()
-    });
-  }
-
-  // Update English email templates to use proper HTML links
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      body_html_en: `<h2>Gallery Successfully Created</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been successfully created!</p>
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Valid Until: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests so they can view and download photos.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">View Gallery</a></p>`,
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Gültig bis: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">Galerie anzeigen</a></p>`
-    });
-
-  // Update expiration warning template
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      body_html_en: `<h2>Gallery Expiring Soon</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days.</p>
-<p>After expiration, the gallery will be archived and no longer accessible to guests.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">Visit Gallery</a></p>
-<p>Gallery Link: <a href="{{gallery_link}}" style="color: #5C8762;">{{gallery_link}}</a></p>`,
-      body_html_de: `<h2>Galerie läuft bald ab</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" läuft in {{days_remaining}} Tagen ab.</p>
-<p>Nach Ablauf wird die Galerie archiviert und ist für Gäste nicht mehr zugänglich.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">Galerie besuchen</a></p>
-<p>Galerie-Link: <a href="{{gallery_link}}" style="color: #5C8762;">{{gallery_link}}</a></p>`
-    });
-
-  // Update gallery expired template
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      body_html_en: `<h2>Gallery Expired</h2>
-<p>Your photo gallery for "{{event_name}}" has expired and is no longer accessible.</p>
-<p>The photos have been safely archived. If you need access again, please contact the administrator at <a href="mailto:{{admin_email}}" style="color: #5C8762;">{{admin_email}}</a>.</p>
-<p>Thank you for using our photo sharing service!</p>
-<p>Best regards,<br>The Photo Sharing Team</p>`,
-      body_html_de: `<h2>Galerie abgelaufen</h2>
-<p>Ihre Fotogalerie für "{{event_name}}" ist abgelaufen und nicht mehr zugänglich.</p>
-<p>Die Fotos wurden zur sicheren Aufbewahrung archiviert. Wenn Sie wieder Zugriff benötigen, wenden Sie sich bitte an den Administrator unter <a href="mailto:{{admin_email}}" style="color: #5C8762;">{{admin_email}}</a>.</p>
-<p>Vielen Dank für die Nutzung unseres Foto-Sharing-Services!</p>
-<p>Mit freundlichen Grüßen,<br>Das Foto-Sharing-Team</p>`
-    });
-};
-
-exports.down = async function(knex) {
-  // Remove date format setting
-  await knex('app_settings').where('setting_key', 'general_date_format').del();
-  
-  // Revert email templates to plain text links
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      body_html_en: `<h2>Gallery Successfully Created</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been successfully created!</p>
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: {{gallery_link}}</li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Valid Until: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests so they can view and download photos.</p>`,
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: {{gallery_link}}</li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Gültig bis: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.</p>`
-    });
-};

backend/migrations/legacy/014_add_default_welcome_message.js

@@ -1,129 +0,0 @@
-exports.up = async function(knex) {
-  // Add default welcome message to app_settings
-  const existingSetting = await knex('app_settings')
-    .where('setting_key', 'general_default_welcome_message')
-    .first();
-  
-  if (!existingSetting) {
-    await knex('app_settings').insert({
-      setting_key: 'general_default_welcome_message',
-      setting_value: JSON.stringify('Thank you for using our photo sharing service! We hope you enjoy your photos.'),
-      setting_type: 'general'
-    });
-  }
-
-  // Update the gallery_created email template to ensure it has the welcome_message placeholder
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      body_html_en: `<h2>Gallery Successfully Created</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been successfully created!</p>
-{{#if welcome_message}}
-<div style="background-color: #f3f4f6; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0 0 10px 0; font-weight: 600; color: #374151;">Personal Message:</p>
-  <p style="margin: 0; color: #4b5563;">{{welcome_message}}</p>
-</div>
-{{/if}}
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Valid Until: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests so they can view and download photos.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">View Gallery</a></p>`,
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-{{#if welcome_message}}
-<div style="background-color: #f3f4f6; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0 0 10px 0; font-weight: 600; color: #374151;">Persönliche Nachricht:</p>
-  <p style="margin: 0; color: #4b5563;">{{welcome_message}}</p>
-</div>
-{{/if}}
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Gültig bis: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">Galerie anzeigen</a></p>`,
-      body_text_en: `Gallery Successfully Created
-
-Dear {{host_name}},
-
-Your photo gallery "{{event_name}}" has been successfully created!
-
-{{#if welcome_message}}
-Personal Message:
-{{welcome_message}}
-
-{{/if}}
-Gallery Details:
-- Event Date: {{event_date}}
-- Gallery Link: {{gallery_link}}
-- Password: {{gallery_password}}
-- Valid Until: {{expiry_date}}
-
-Share this link and password with your guests so they can view and download photos.`,
-      body_text_de: `Galerie erfolgreich erstellt
-
-Liebe(r) {{host_name}},
-
-Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!
-
-{{#if welcome_message}}
-Persönliche Nachricht:
-{{welcome_message}}
-
-{{/if}}
-Galerie-Details:
-- Veranstaltungsdatum: {{event_date}}
-- Galerie-Link: {{gallery_link}}
-- Passwort: {{gallery_password}}
-- Gültig bis: {{expiry_date}}
-
-Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.`
-    });
-};
-
-exports.down = async function(knex) {
-  // Remove the default welcome message setting
-  await knex('app_settings')
-    .where('setting_key', 'general_default_welcome_message')
-    .del();
-
-  // Revert email templates
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      body_html_en: `<h2>Gallery Successfully Created</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been successfully created!</p>
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Valid Until: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests so they can view and download photos.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">View Gallery</a></p>`,
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: <a href="{{gallery_link}}" style="color: #5C8762; text-decoration: none;">{{gallery_link}}</a></li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Gültig bis: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit sie Fotos ansehen und herunterladen können.</p>
-<p><a href="{{gallery_link}}" style="display: inline-block; padding: 10px 20px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px;">Galerie anzeigen</a></p>`
-    });
-};

backend/migrations/legacy/014_add_host_name_to_events_duplicate.js

@@ -1,35 +0,0 @@
-const { db } = require('../../src/database/db');
-
-async function up() {
-  // Check if host_name column already exists
-  const hasHostName = await db.schema.hasColumn('events', 'host_name');
-  
-  if (!hasHostName) {
-    await db.schema.table('events', (table) => {
-      table.string('host_name').after('event_date');
-    });
-    
-    console.log('Added host_name column to events table');
-  }
-}
-
-async function down() {
-  await db.schema.table('events', (table) => {
-    table.dropColumn('host_name');
-  });
-}
-
-module.exports = { up, down };
-
-// Run migration if called directly
-if (require.main === module) {
-  up()
-    .then(() => {
-      console.log('Migration completed successfully');
-      process.exit(0);
-    })
-    .catch((error) => {
-      console.error('Migration failed:', error);
-      process.exit(1);
-    });
-}

backend/migrations/legacy/015_add_login_attempts_table.js

@@ -1,23 +0,0 @@
-exports.up = async function(knex) {
-  const hasLoginAttemptsTable = await knex.schema.hasTable('login_attempts');
-  
-  if (!hasLoginAttemptsTable) {
-    return knex.schema.createTable('login_attempts', table => {
-      table.increments('id').primary();
-      table.string('identifier').notNullable(); // username or email
-      table.string('ip_address', 45).notNullable(); // IPv4 or IPv6
-      table.text('user_agent');
-      table.timestamp('attempt_time').defaultTo(knex.fn.now());
-      table.boolean('success').defaultTo(false);
-      
-      // Indexes for performance
-      table.index('identifier');
-      table.index('attempt_time');
-      table.index(['identifier', 'success', 'attempt_time']);
-    });
-  }
-};
-
-exports.down = function(knex) {
-  return knex.schema.dropTableIfExists('login_attempts');
-};

backend/migrations/legacy/016_add_auth_security_columns.js

@@ -1,36 +0,0 @@
-exports.up = async function(knex) {
-  // Check if columns already exist to avoid conflicts
-  const hasPasswordChangedAt = await knex.schema.hasColumn('admin_users', 'password_changed_at');
-  const hasLastLoginIp = await knex.schema.hasColumn('admin_users', 'last_login_ip');
-  const hasTwoFactorEnabled = await knex.schema.hasColumn('admin_users', 'two_factor_enabled');
-  const hasTwoFactorSecret = await knex.schema.hasColumn('admin_users', 'two_factor_secret');
-  
-  return knex.schema.table('admin_users', table => {
-    // Add password change tracking
-    if (!hasPasswordChangedAt) {
-      table.timestamp('password_changed_at').nullable();
-    }
-    
-    // Add last login IP for security monitoring  
-    if (!hasLastLoginIp) {
-      table.string('last_login_ip', 45).nullable();
-    }
-    
-    // Add account security flags
-    if (!hasTwoFactorEnabled) {
-      table.boolean('two_factor_enabled').defaultTo(false);
-    }
-    if (!hasTwoFactorSecret) {
-      table.string('two_factor_secret').nullable();
-    }
-  });
-};
-
-exports.down = function(knex) {
-  return knex.schema.table('admin_users', table => {
-    table.dropColumn('password_changed_at');
-    table.dropColumn('last_login_ip');
-    table.dropColumn('two_factor_enabled');
-    table.dropColumn('two_factor_secret');
-  });
-};

backend/migrations/legacy/017_add_token_revocation_tables.js

@@ -1,63 +0,0 @@
-exports.up = async function(knex) {
-  // Check if tables already exist to avoid conflicts
-  const hasRevokedTokensTable = await knex.schema.hasTable('revoked_tokens');
-  const hasUserTokenRevocationsTable = await knex.schema.hasTable('user_token_revocations');
-  
-  // Create revoked_tokens table if it doesn't exist
-  if (!hasRevokedTokensTable) {
-    await knex.schema.createTable('revoked_tokens', table => {
-      table.increments('id').primary();
-      table.string('token_id').notNullable().unique(); // JWT ID or generated ID
-      table.integer('user_id').nullable(); // User who owned the token
-      table.string('token_type', 20); // admin, gallery, etc.
-      table.timestamp('revoked_at').defaultTo(knex.fn.now());
-      table.timestamp('expires_at').notNullable(); // When token would have expired
-      table.string('reason', 100); // password_change, logout, compromised, etc.
-      table.text('metadata'); // Additional JSON data
-      
-      // Indexes for performance
-      table.index('token_id');
-      table.index('user_id');
-      table.index('expires_at'); // For cleanup
-    });
-  }
-  
-  // Create user_token_revocations table if it doesn't exist
-  if (!hasUserTokenRevocationsTable) {
-    await knex.schema.createTable('user_token_revocations', table => {
-      table.integer('user_id').primary();
-      table.timestamp('revoked_at').notNullable();
-      table.string('reason', 100);
-      
-      // Index for quick lookups
-      table.index('revoked_at');
-    });
-  }
-  
-  // Add any missing indexes if tables already existed
-  if (hasRevokedTokensTable) {
-    try {
-      // Try to add indexes if they don't exist (PostgreSQL syntax)
-      await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_token_id_index" ON "revoked_tokens" ("token_id")');
-      await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_user_id_index" ON "revoked_tokens" ("user_id")');
-      await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_expires_at_index" ON "revoked_tokens" ("expires_at")');
-    } catch (error) {
-      // For SQLite compatibility, ignore errors if indexes already exist
-      console.log('Note: Some indexes may already exist, continuing...');
-    }
-  }
-  
-  if (hasUserTokenRevocationsTable) {
-    try {
-      await knex.raw('CREATE INDEX IF NOT EXISTS "user_token_revocations_revoked_at_index" ON "user_token_revocations" ("revoked_at")');
-    } catch (error) {
-      console.log('Note: Some indexes may already exist, continuing...');
-    }
-  }
-};
-
-exports.down = function(knex) {
-  return knex.schema
-    .dropTableIfExists('user_token_revocations')
-    .dropTableIfExists('revoked_tokens');
-};

backend/migrations/legacy/018_add_created_at_to_email_queue.js

@@ -1,23 +0,0 @@
-exports.up = async function(knex) {
-  // Check if created_at column already exists
-  const hasCreatedAt = await knex.schema.hasColumn('email_queue', 'created_at');
-  
-  if (!hasCreatedAt) {
-    await knex.schema.table('email_queue', (table) => {
-      table.datetime('created_at').defaultTo(knex.fn.now());
-    });
-    
-    // Update existing rows to have a created_at value based on scheduled_at
-    await knex('email_queue')
-      .whereNull('created_at')
-      .update({
-        created_at: knex.ref('scheduled_at')
-      });
-  }
-};
-
-exports.down = async function(knex) {
-  await knex.schema.table('email_queue', (table) => {
-    table.dropColumn('created_at');
-  });
-};

backend/migrations/legacy/019_fix_email_templates_columns.js

@@ -1,35 +0,0 @@
-exports.up = async function(knex) {
-  // Check current column structure
-  const hasSubjectEn = await knex.schema.hasColumn('email_templates', 'subject_en');
-  const hasSubject = await knex.schema.hasColumn('email_templates', 'subject');
-  
-  if (hasSubjectEn && !hasSubject) {
-    // The language migration was applied, need to add back basic columns
-    await knex.schema.alterTable('email_templates', function(table) {
-      table.string('subject');
-      table.text('body_html');
-      table.text('body_text');
-    });
-    
-    // Copy English values to the basic columns
-    await knex('email_templates').update({
-      subject: knex.raw('subject_en'),
-      body_html: knex.raw('body_html_en'),
-      body_text: knex.raw('body_text_en')
-    });
-  }
-};
-
-exports.down = async function(knex) {
-  // Check if we have the basic columns
-  const hasSubject = await knex.schema.hasColumn('email_templates', 'subject');
-  const hasSubjectEn = await knex.schema.hasColumn('email_templates', 'subject_en');
-  
-  if (hasSubject && hasSubjectEn) {
-    await knex.schema.alterTable('email_templates', function(table) {
-      table.dropColumn('subject');
-      table.dropColumn('body_html');
-      table.dropColumn('body_text');
-    });
-  }
-};

backend/migrations/legacy/020_ensure_default_email_templates.js

@@ -1,91 +0,0 @@
-exports.up = async function(knex) {
-  // Check if we have the default email templates
-  const templates = await knex('email_templates').select('template_key');
-  const existingKeys = templates.map(t => t.template_key);
-  
-  // Check which columns exist in the table
-  const hasSubjectEn = await knex.schema.hasColumn('email_templates', 'subject_en');
-  const hasSubject = await knex.schema.hasColumn('email_templates', 'subject');
-  
-  // Determine which columns to use based on schema
-  const subjectCol = hasSubjectEn ? 'subject_en' : 'subject';
-  const bodyHtmlCol = hasSubjectEn ? 'body_html_en' : 'body_html';
-  const bodyTextCol = hasSubjectEn ? 'body_text_en' : 'body_text';
-  
-  const defaultTemplates = [
-    {
-      template_key: 'gallery_created',
-      [subjectCol]: 'Your Photo Gallery is Ready!',
-      [bodyHtmlCol]: `<h2>Gallery Created Successfully</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been created successfully!</p>
-<p><strong>Gallery Details:</strong></p>
-<ul>
-  <li>Event Date: {{event_date}}</li>
-  <li>Gallery Link: {{gallery_link}}</li>
-  <li>Password: {{gallery_password}}</li>
-  <li>Expires: {{expiry_date}}</li>
-</ul>
-<p>Share this link and password with your guests to allow them to view and download photos.</p>`,
-      [bodyTextCol]: 'Gallery Created Successfully\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" has been created successfully!',
-      variables: JSON.stringify(['host_name', 'event_name', 'event_date', 'gallery_link', 'gallery_password', 'expiry_date'])
-    },
-    {
-      template_key: 'expiration_warning',
-      [subjectCol]: 'Your Photo Gallery Expires Soon',
-      [bodyHtmlCol]: `<h2>Gallery Expiring Soon</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days.</p>
-<p>After expiration, the gallery will be archived and no longer accessible to guests.</p>
-<p><a href="{{gallery_link}}">Visit Gallery</a></p>`,
-      [bodyTextCol]: 'Gallery Expiring Soon\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" will expire in {{days_remaining}} days.',
-      variables: JSON.stringify(['host_name', 'event_name', 'days_remaining', 'gallery_link'])
-    },
-    {
-      template_key: 'gallery_expired',
-      [subjectCol]: 'Your Photo Gallery Has Expired',
-      [bodyHtmlCol]: `<h2>Gallery Expired</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has expired and been archived.</p>
-<p>The photos are safely stored in our archive system. If you need access to the archived photos, please contact support.</p>`,
-      [bodyTextCol]: 'Gallery Expired\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" has expired and been archived.',
-      variables: JSON.stringify(['host_name', 'event_name'])
-    },
-    {
-      template_key: 'archive_complete',
-      [subjectCol]: 'Gallery Archive Complete',
-      [bodyHtmlCol]: `<h2>Archive Complete</h2>
-<p>Dear {{host_name}},</p>
-<p>Your photo gallery "{{event_name}}" has been successfully archived.</p>
-<p>Archive size: {{archive_size}}</p>
-<p>The archive is stored securely and can be retrieved if needed.</p>`,
-      [bodyTextCol]: 'Archive Complete\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" has been successfully archived.',
-      variables: JSON.stringify(['host_name', 'event_name', 'archive_size'])
-    }
-  ];
-  
-  // Insert missing templates
-  for (const template of defaultTemplates) {
-    if (!existingKeys.includes(template.template_key)) {
-      // If we have language columns, also set German versions with same content
-      if (hasSubjectEn) {
-        template.subject_de = template[subjectCol];
-        template.body_html_de = template[bodyHtmlCol];
-        template.body_text_de = template[bodyTextCol];
-        
-        // Also ensure we have the basic columns if they exist
-        if (hasSubject) {
-          template.subject = template[subjectCol];
-          template.body_html = template[bodyHtmlCol];
-          template.body_text = template[bodyTextCol];
-        }
-      }
-      
-      await knex('email_templates').insert(template);
-    }
-  }
-};
-
-exports.down = async function(knex) {
-  // Don't remove templates on rollback as they might have been customized
-};

backend/migrations/legacy/021_add_default_cms_pages.js

@@ -1,121 +0,0 @@
-exports.up = async function(knex) {
-  // Check if CMS pages already exist
-  const impressumExists = await knex('cms_pages')
-    .where('slug', 'impressum')
-    .first();
-    
-  const datenschutzExists = await knex('cms_pages')
-    .where('slug', 'datenschutz')
-    .first();
-  
-  const pagesToInsert = [];
-  
-  // Add Impressum page if it doesn't exist
-  if (!impressumExists) {
-    pagesToInsert.push({
-      slug: 'impressum',
-      title_en: 'Legal Notice',
-      title_de: 'Impressum',
-      content_en: `<h1>Legal Notice</h1>
-<p>Information according to § 5 TMG</p>
-
-<h2>Responsible for content</h2>
-<p>[Your Name]<br>
-[Your Address]<br>
-[Postal Code City]</p>
-
-<h2>Contact</h2>
-<p>Email: [Your Email Address]<br>
-Phone: [Your Phone Number]</p>
-
-<h2>Disclaimer</h2>
-<h3>Liability for content</h3>
-<p>The contents of our pages were created with great care. However, we cannot guarantee the accuracy, completeness and timeliness of the content.</p>
-
-<h3>Liability for links</h3>
-<p>Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content.</p>`,
-      content_de: `<h1>Impressum</h1>
-<p>Angaben gemäß § 5 TMG</p>
-
-<h2>Verantwortlich für den Inhalt</h2>
-<p>[Ihr Name]<br>
-[Ihre Adresse]<br>
-[PLZ Ort]</p>
-
-<h2>Kontakt</h2>
-<p>E-Mail: [Ihre E-Mail-Adresse]<br>
-Telefon: [Ihre Telefonnummer]</p>
-
-<h2>Haftungsausschluss</h2>
-<h3>Haftung für Inhalte</h3>
-<p>Die Inhalte unserer Seiten wurden mit größter Sorgfalt erstellt. Für die Richtigkeit, Vollständigkeit und Aktualität der Inhalte können wir jedoch keine Gewähr übernehmen.</p>
-
-<h3>Haftung für Links</h3>
-<p>Unser Angebot enthält Links zu externen Webseiten Dritter, auf deren Inhalte wir keinen Einfluss haben. Deshalb können wir für diese fremden Inhalte auch keine Gewähr übernehmen.</p>`,
-      updated_at: new Date()
-    });
-  }
-  
-  // Add Datenschutz page if it doesn't exist
-  if (!datenschutzExists) {
-    pagesToInsert.push({
-      slug: 'datenschutz',
-      title_en: 'Privacy Policy',
-      title_de: 'Datenschutzerklärung',
-      content_en: `<h1>Privacy Policy</h1>
-
-<h2>1. Privacy at a Glance</h2>
-<h3>General Information</h3>
-<p>The following information provides a simple overview of what happens to your personal data when you visit this website.</p>
-
-<h3>Data Collection on This Website</h3>
-<p><strong>Who is responsible for data collection on this website?</strong></p>
-<p>Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice of this website.</p>
-
-<p><strong>How do we collect your data?</strong></p>
-<p>Your data is collected when you provide it to us. This could be data that you enter into a contact form, for example.</p>
-
-<p><strong>What do we use your data for?</strong></p>
-<p>Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.</p>
-
-<h2>2. Hosting</h2>
-<p>This website is hosted externally. The personal data collected on this website is stored on the servers of the host.</p>
-
-<h2>3. General Information and Mandatory Information</h2>
-<h3>Data Protection</h3>
-<p>The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.</p>`,
-      content_de: `<h1>Datenschutzerklärung</h1>
-
-<h2>1. Datenschutz auf einen Blick</h2>
-<h3>Allgemeine Hinweise</h3>
-<p>Die folgenden Hinweise geben einen einfachen Überblick darüber, was mit Ihren personenbezogenen Daten passiert, wenn Sie diese Website besuchen.</p>
-
-<h3>Datenerfassung auf dieser Website</h3>
-<p><strong>Wer ist verantwortlich für die Datenerfassung auf dieser Website?</strong></p>
-<p>Die Datenverarbeitung auf dieser Website erfolgt durch den Websitebetreiber. Dessen Kontaktdaten können Sie dem Impressum dieser Website entnehmen.</p>
-
-<p><strong>Wie erfassen wir Ihre Daten?</strong></p>
-<p>Ihre Daten werden zum einen dadurch erhoben, dass Sie uns diese mitteilen. Hierbei kann es sich z.B. um Daten handeln, die Sie in ein Kontaktformular eingeben.</p>
-
-<p><strong>Wofür nutzen wir Ihre Daten?</strong></p>
-<p>Ein Teil der Daten wird erhoben, um eine fehlerfreie Bereitstellung der Website zu gewährleisten. Andere Daten können zur Analyse Ihres Nutzerverhaltens verwendet werden.</p>
-
-<h2>2. Hosting</h2>
-<p>Diese Website wird extern gehostet. Die personenbezogenen Daten, die auf dieser Website erfasst werden, werden auf den Servern des Hosters gespeichert.</p>
-
-<h2>3. Allgemeine Hinweise und Pflichtinformationen</h2>
-<h3>Datenschutz</h3>
-<p>Die Betreiber dieser Seiten nehmen den Schutz Ihrer persönlichen Daten sehr ernst. Wir behandeln Ihre personenbezogenen Daten vertraulich und entsprechend der gesetzlichen Datenschutzvorschriften sowie dieser Datenschutzerklärung.</p>`,
-      updated_at: new Date()
-    });
-  }
-  
-  // Insert pages if any need to be added
-  if (pagesToInsert.length > 0) {
-    await knex('cms_pages').insert(pagesToInsert);
-  }
-};
-
-exports.down = async function(knex) {
-  // Don't remove CMS pages on rollback as they might have been customized
-};

backend/migrations/legacy/022_fix_json_columns.js

@@ -1,68 +0,0 @@
-exports.up = async function(knex) {
-  console.log('Fixing JSON columns in database...');
-  
-  // Fix email_templates variables column
-  const templates = await knex('email_templates').select('id', 'template_key', 'variables');
-  
-  for (const template of templates) {
-    if (template.variables && typeof template.variables === 'string') {
-      try {
-        // Check if it's already valid JSON
-        JSON.parse(template.variables);
-      } catch (e) {
-        console.log(`Fixing invalid JSON in email template ${template.template_key}`);
-        // Attempt to fix common issues
-        let fixed = template.variables;
-        
-        // If it looks like an array but isn't valid JSON, try to fix it
-        if (fixed.startsWith('[') && fixed.endsWith(']')) {
-          // Extract the content and properly format it
-          const content = fixed.slice(1, -1);
-          const items = content.split(',').map(item => item.trim().replace(/['"]/g, ''));
-          fixed = JSON.stringify(items);
-        } else {
-          // Default to empty array if we can't fix it
-          fixed = JSON.stringify([]);
-        }
-        
-        await knex('email_templates')
-          .where('id', template.id)
-          .update({ variables: fixed });
-      }
-    } else if (!template.variables) {
-      // Set default empty array for null values
-      await knex('email_templates')
-        .where('id', template.id)
-        .update({ variables: JSON.stringify([]) });
-    }
-  }
-  
-  // Fix activity_logs metadata column
-  const activities = await knex('activity_logs').select('id', 'metadata');
-  
-  for (const activity of activities) {
-    if (activity.metadata && typeof activity.metadata === 'string') {
-      try {
-        // Check if it's already valid JSON
-        JSON.parse(activity.metadata);
-      } catch (e) {
-        console.log(`Fixing invalid JSON in activity log ${activity.id}`);
-        // Default to empty object if we can't parse it
-        await knex('activity_logs')
-          .where('id', activity.id)
-          .update({ metadata: JSON.stringify({}) });
-      }
-    } else if (!activity.metadata) {
-      // Set default empty object for null values
-      await knex('activity_logs')
-        .where('id', activity.id)
-        .update({ metadata: JSON.stringify({}) });
-    }
-  }
-  
-  console.log('JSON columns fixed successfully');
-};
-
-exports.down = async function(knex) {
-  // No rollback needed - data fixes only
-};

backend/migrations/legacy/023_ensure_postgres_compatibility.js

@@ -1,22 +0,0 @@
-/**
- * Ensure PostgreSQL compatibility for all insert operations
- * This migration doesn't change the schema but ensures all tables
- * are compatible with .returning() syntax
- */
-
-exports.up = async function(knex) {
-  // This migration is informational only
-  // All insert operations should use .returning('id') going forward
-  
-  console.log('PostgreSQL compatibility check:');
-  console.log('- All INSERT operations should use .returning("id")');
-  console.log('- All date operations should use ISO strings');
-  console.log('- Boolean values are handled automatically by Knex');
-  
-  return Promise.resolve();
-};
-
-exports.down = async function(knex) {
-  // No rollback needed
-  return Promise.resolve();
-};

backend/migrations/legacy/024_fix_boolean_compatibility.js

@@ -1,29 +0,0 @@
-/**
- * Fix boolean compatibility issues between PostgreSQL and SQLite
- * This migration updates the database configuration and existing data
- */
-
-exports.up = async function(knex) {
-  const isPostgres = knex.client.config.client === 'pg';
-  
-  if (!isPostgres) {
-    // Enable foreign keys for SQLite
-    await knex.raw('PRAGMA foreign_keys = ON');
-    
-    // Note: SQLite stores booleans as 0/1
-    // No data migration needed as Knex handles this automatically
-    // But queries must use formatBoolean() helper
-    
-    console.log('SQLite boolean compatibility check:');
-    console.log('- SQLite stores booleans as 0/1');
-    console.log('- All boolean comparisons should use formatBoolean() helper');
-    console.log('- Foreign keys enabled');
-  }
-  
-  return Promise.resolve();
-};
-
-exports.down = async function(knex) {
-  // No rollback needed
-  return Promise.resolve();
-};

backend/migrations/legacy/025_fix_email_queue_updated_at.js

@@ -1,33 +0,0 @@
-/**
- * Fix email_queue table by ensuring it doesn't have updated_at column
- * This migration addresses the PostgreSQL error where queries are trying to update
- * a non-existent updated_at column
- */
-
-exports.up = async function(knex) {
-  // First, check if the column exists
-  const hasUpdatedAt = await knex.schema.hasColumn('email_queue', 'updated_at');
-  
-  if (hasUpdatedAt) {
-    console.log('Found updated_at column in email_queue table, removing it...');
-    await knex.schema.table('email_queue', (table) => {
-      table.dropColumn('updated_at');
-    });
-  }
-  
-  // Also ensure the table has all required columns
-  const hasCreatedAt = await knex.schema.hasColumn('email_queue', 'created_at');
-  if (!hasCreatedAt) {
-    console.log('Adding missing created_at column to email_queue table...');
-    await knex.schema.table('email_queue', (table) => {
-      table.datetime('created_at').defaultTo(knex.fn.now());
-    });
-  }
-  
-  console.log('email_queue table schema fixed');
-};
-
-exports.down = async function(knex) {
-  // In the down migration, we don't add back updated_at since it shouldn't exist
-  // This is intentionally left minimal
-};

backend/migrations/legacy/026_fix_german_email_templates.js

@@ -1,234 +0,0 @@
-exports.up = async function(knex) {
-  // Update gallery_created template with proper German translation
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject_de: 'Ihre Fotogalerie ist bereit!',
-      body_html_de: `<h2>Galerie erfolgreich erstellt</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!</p>
-{{#if welcome_message}}
-<div style="background-color: #f3f4f6; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0 0 10px 0; font-weight: 600; color: #374151;">Persönliche Nachricht:</p>
-  <p style="margin: 0; color: #4b5563;">{{welcome_message}}</p>
-</div>
-{{/if}}
-<p><strong>Galerie-Details:</strong></p>
-<ul>
-  <li>Veranstaltungsdatum: {{event_date}}</li>
-  <li>Galerie-Link: <a href="{{gallery_link}}" style="color: #5C8762;">{{gallery_link}}</a></li>
-  <li>Passwort: {{gallery_password}}</li>
-  <li>Ablaufdatum: {{expiry_date}}</li>
-</ul>
-<p>Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit diese die Fotos ansehen und herunterladen können.</p>
-<p style="background-color: #FEF3C7; padding: 15px; border-radius: 5px; border-left: 4px solid #F59E0B;">
-  <strong>Wichtig:</strong> Diese Galerie läuft am {{expiry_date}} ab. Nach diesem Datum werden die Fotos archiviert und sind nicht mehr zugänglich.
-</p>
-<a href="{{gallery_link}}" style="display: inline-block; padding: 12px 30px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px; font-weight: 500; margin: 20px 0;">Galerie anzeigen</a>
-<p>Mit freundlichen Grüßen,<br>Ihr Foto-Sharing-Team</p>`,
-      body_text_de: `Galerie erfolgreich erstellt
-
-Liebe(r) {{host_name}},
-
-Ihre Fotogalerie "{{event_name}}" wurde erfolgreich erstellt!
-
-{{#if welcome_message}}
-Persönliche Nachricht:
-{{welcome_message}}
-
-{{/if}}
-Galerie-Details:
-- Veranstaltungsdatum: {{event_date}}
-- Galerie-Link: {{gallery_link}}
-- Passwort: {{gallery_password}}
-- Ablaufdatum: {{expiry_date}}
-
-Teilen Sie diesen Link und das Passwort mit Ihren Gästen, damit diese die Fotos ansehen und herunterladen können.
-
-WICHTIG: Diese Galerie läuft am {{expiry_date}} ab. Nach diesem Datum werden die Fotos archiviert und sind nicht mehr zugänglich.
-
-Mit freundlichen Grüßen,
-Ihr Foto-Sharing-Team`
-    });
-
-  // Update expiration_warning template with proper German translation
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject_de: 'Ihre Fotogalerie läuft bald ab',
-      body_html_de: `<h2>Galerie läuft bald ab</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" läuft in <strong>{{days_remaining}} Tagen</strong> ab.</p>
-<p>Nach Ablauf wird die Galerie archiviert und ist für Gäste nicht mehr zugänglich. Bitte stellen Sie sicher, dass alle gewünschten Fotos heruntergeladen wurden.</p>
-<p><strong>Ablaufdatum:</strong> {{expiry_date}}</p>
-<a href="{{gallery_link}}" style="display: inline-block; padding: 12px 30px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px; font-weight: 500; margin: 20px 0;">Galerie jetzt besuchen</a>
-<p style="background-color: #FEE2E2; padding: 15px; border-radius: 5px; border-left: 4px solid #EF4444;">
-  <strong>Erinnerung:</strong> Nach dem {{expiry_date}} können Ihre Gäste nicht mehr auf die Galerie zugreifen.
-</p>
-<p>Mit freundlichen Grüßen,<br>Ihr Foto-Sharing-Team</p>`,
-      body_text_de: `Galerie läuft bald ab
-
-Liebe(r) {{host_name}},
-
-Ihre Fotogalerie "{{event_name}}" läuft in {{days_remaining}} Tagen ab.
-
-Nach Ablauf wird die Galerie archiviert und ist für Gäste nicht mehr zugänglich. Bitte stellen Sie sicher, dass alle gewünschten Fotos heruntergeladen wurden.
-
-Ablaufdatum: {{expiry_date}}
-
-Galerie-Link: {{gallery_link}}
-
-ERINNERUNG: Nach dem {{expiry_date}} können Ihre Gäste nicht mehr auf die Galerie zugreifen.
-
-Mit freundlichen Grüßen,
-Ihr Foto-Sharing-Team`
-    });
-
-  // Update gallery_expired template with proper German translation
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject_de: 'Ihre Fotogalerie {{event_name}} ist abgelaufen',
-      body_html_de: `<h2>Galerie abgelaufen</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Ihre Fotogalerie "{{event_name}}" ist am {{expiry_date}} abgelaufen und wurde archiviert.</p>
-<p>Die Galerie ist nicht mehr für Gäste zugänglich. Alle Fotos wurden sicher in unserem Archivsystem gespeichert.</p>
-<p>Wenn Sie wieder Zugriff auf die archivierten Fotos benötigen, wenden Sie sich bitte an unseren Support:</p>
-<p style="background-color: #F3F4F6; padding: 15px; border-radius: 5px;">
-  <strong>Kontakt:</strong><br>
-  E-Mail: <a href="mailto:{{admin_email}}" style="color: #5C8762;">{{admin_email}}</a><br>
-  {{#if support_phone}}Telefon: {{support_phone}}{{/if}}
-</p>
-<p>Vielen Dank für die Nutzung unseres Foto-Sharing-Services!</p>
-<p>Mit freundlichen Grüßen,<br>Ihr Foto-Sharing-Team</p>`,
-      body_text_de: `Galerie abgelaufen
-
-Liebe(r) {{host_name}},
-
-Ihre Fotogalerie "{{event_name}}" ist am {{expiry_date}} abgelaufen und wurde archiviert.
-
-Die Galerie ist nicht mehr für Gäste zugänglich. Alle Fotos wurden sicher in unserem Archivsystem gespeichert.
-
-Wenn Sie wieder Zugriff auf die archivierten Fotos benötigen, wenden Sie sich bitte an unseren Support:
-
-E-Mail: {{admin_email}}
-{{#if support_phone}}Telefon: {{support_phone}}{{/if}}
-
-Vielen Dank für die Nutzung unseres Foto-Sharing-Services!
-
-Mit freundlichen Grüßen,
-Ihr Foto-Sharing-Team`
-    });
-
-  // Update archive_complete template with proper German translation
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject_de: 'Archivierung abgeschlossen: {{event_name}}',
-      body_html_de: `<h2>Archivierung abgeschlossen</h2>
-<p>Liebe(r) {{host_name}},</p>
-<p>Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.</p>
-<p><strong>Archiv-Details:</strong></p>
-<ul>
-  <li>Archivgröße: {{archive_size}}</li>
-  <li>Archivierungsdatum: {{archive_date}}</li>
-  <li>Anzahl der Fotos: {{photo_count}}</li>
-</ul>
-<p>Das Archiv wird sicher in unserem System aufbewahrt. Bei Bedarf können Sie sich an unseren Support wenden, um Zugriff auf die archivierten Fotos zu erhalten.</p>
-<p style="background-color: #F0FDF4; padding: 15px; border-radius: 5px; border-left: 4px solid #22C55E;">
-  <strong>✓ Erfolgreich archiviert:</strong> Ihre Fotos sind sicher gespeichert und können bei Bedarf wiederhergestellt werden.
-</p>
-<p>Kontakt für Archivzugriff:<br>
-E-Mail: <a href="mailto:{{admin_email}}" style="color: #5C8762;">{{admin_email}}</a></p>
-<p>Mit freundlichen Grüßen,<br>Ihr Foto-Sharing-Team</p>`,
-      body_text_de: `Archivierung abgeschlossen
-
-Liebe(r) {{host_name}},
-
-Die Fotogalerie "{{event_name}}" wurde erfolgreich archiviert.
-
-Archiv-Details:
-- Archivgröße: {{archive_size}}
-- Archivierungsdatum: {{archive_date}}
-- Anzahl der Fotos: {{photo_count}}
-
-Das Archiv wird sicher in unserem System aufbewahrt. Bei Bedarf können Sie sich an unseren Support wenden, um Zugriff auf die archivierten Fotos zu erhalten.
-
-✓ ERFOLGREICH ARCHIVIERT: Ihre Fotos sind sicher gespeichert und können bei Bedarf wiederhergestellt werden.
-
-Kontakt für Archivzugriff:
-E-Mail: {{admin_email}}
-
-Mit freundlichen Grüßen,
-Ihr Foto-Sharing-Team`
-    });
-
-  // Also update the non-language-specific fields to match German for consistency
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject: knex.raw('subject_de'),
-      body_html: knex.raw('body_html_de'),
-      body_text: knex.raw('body_text_de')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject: knex.raw('subject_de'),
-      body_html: knex.raw('body_html_de'),
-      body_text: knex.raw('body_text_de')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject: knex.raw('subject_de'),
-      body_html: knex.raw('body_html_de'),
-      body_text: knex.raw('body_text_de')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject: knex.raw('subject_de'),
-      body_html: knex.raw('body_html_de'),
-      body_text: knex.raw('body_text_de')
-    });
-};
-
-exports.down = async function(knex) {
-  // Revert to previous German translations
-  // This is a simplified rollback - in production you might want to store the old values
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject: knex.raw('subject_en'),
-      body_html: knex.raw('body_html_en'),
-      body_text: knex.raw('body_text_en')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject: knex.raw('subject_en'),
-      body_html: knex.raw('body_html_en'),
-      body_text: knex.raw('body_text_en')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject: knex.raw('subject_en'),
-      body_html: knex.raw('body_html_en'),
-      body_text: knex.raw('body_text_en')
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject: knex.raw('subject_en'),
-      body_html: knex.raw('body_html_en'),
-      body_text: knex.raw('body_text_en')
-    });
-};

backend/migrations/legacy/027_add_language_preferences.js

@@ -1,41 +0,0 @@
-exports.up = async function(knex) {
-  // Add language column to events table if it doesn't exist
-  const hasLanguageInEvents = await knex.schema.hasColumn('events', 'language');
-  if (!hasLanguageInEvents) {
-    await knex.schema.alterTable('events', function(table) {
-      table.string('language', 5).defaultTo('en');
-    });
-  }
-  
-  // Add default_language to email_configs if it doesn't exist
-  const hasDefaultLanguage = await knex.schema.hasColumn('email_configs', 'default_language');
-  if (!hasDefaultLanguage) {
-    await knex.schema.alterTable('email_configs', function(table) {
-      table.string('default_language', 5).defaultTo('en');
-    });
-  }
-  
-  // Set default language to German for the existing email config
-  await knex('email_configs')
-    .update({
-      default_language: 'de'
-    });
-};
-
-exports.down = async function(knex) {
-  // Remove language column from events table
-  const hasLanguageInEvents = await knex.schema.hasColumn('events', 'language');
-  if (hasLanguageInEvents) {
-    await knex.schema.alterTable('events', function(table) {
-      table.dropColumn('language');
-    });
-  }
-  
-  // Remove default_language from email_configs
-  const hasDefaultLanguage = await knex.schema.hasColumn('email_configs', 'default_language');
-  if (hasDefaultLanguage) {
-    await knex.schema.alterTable('email_configs', function(table) {
-      table.dropColumn('default_language');
-    });
-  }
-};

backend/migrations/legacy/027_add_rate_limit_settings_duplicate.js

@@ -1,62 +0,0 @@
-exports.up = async function(knex) {
-  // Add rate limit settings to app_settings
-  const rateLimitSettings = [
-    {
-      setting_key: 'rate_limit_enabled',
-      setting_value: JSON.stringify(true),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'rate_limit_window_minutes',
-      setting_value: JSON.stringify(15),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'rate_limit_max_requests',
-      setting_value: JSON.stringify(1000),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'rate_limit_auth_max_requests',
-      setting_value: JSON.stringify(5),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'rate_limit_skip_authenticated',
-      setting_value: JSON.stringify(true),
-      setting_type: 'security'
-    },
-    {
-      setting_key: 'rate_limit_public_endpoints_only',
-      setting_value: JSON.stringify(false),
-      setting_type: 'security'
-    }
-  ];
-
-  // Insert settings if they don't exist
-  for (const setting of rateLimitSettings) {
-    const exists = await knex('app_settings')
-      .where('setting_key', setting.setting_key)
-      .first();
-    
-    if (!exists) {
-      await knex('app_settings').insert({
-        ...setting
-      });
-    }
-  }
-};
-
-exports.down = async function(knex) {
-  // Remove rate limit settings
-  await knex('app_settings')
-    .whereIn('setting_key', [
-      'rate_limit_enabled',
-      'rate_limit_window_minutes',
-      'rate_limit_max_requests',
-      'rate_limit_auth_max_requests',
-      'rate_limit_skip_authenticated',
-      'rate_limit_public_endpoints_only'
-    ])
-    .del();
-};

backend/migrations/legacy/028_update_english_templates_to_match_german.js

@@ -1,307 +0,0 @@
-exports.up = async function(knex) {
-  // Update English templates to match the quality and content of German templates
-  
-  // 1. Gallery Created - Match German version with proper styling and conditionals
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject_en: 'Your photo gallery is ready',
-      body_html_en: `
-<h2>Hello {{host_name}},</h2>
-
-<p>Your photo gallery <strong>{{event_name}}</strong> for {{event_date}} has been successfully created and is now online!</p>
-
-{{#if welcome_message}}
-<div style="background-color: #f0f8ff; border-left: 4px solid #5C8762; padding: 15px; margin: 20px 0; border-radius: 4px;">
-  <p style="margin: 0;"><strong>Personal message from your photographer:</strong></p>
-  <p style="margin: 10px 0 0 0;">{{welcome_message}}</p>
-</div>
-{{/if}}
-
-<div style="background-color: #f9f9f9; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <h3 style="margin-top: 0;">Your access data:</h3>
-  <ul style="list-style: none; padding: 0;">
-    <li style="margin-bottom: 10px;"><strong>Gallery link:</strong> <a href="{{gallery_link}}" style="color: #5C8762;">{{gallery_link}}</a></li>
-    <li style="margin-bottom: 10px;"><strong>Password:</strong> {{gallery_password}}</li>
-  </ul>
-</div>
-
-<div style="text-align: center; margin: 30px 0;">
-  <a href="{{gallery_link}}" style="display: inline-block; padding: 12px 30px; background-color: #5C8762; color: white; text-decoration: none; border-radius: 5px; font-weight: 500;">View Gallery</a>
-</div>
-
-<div style="background-color: #fff3cd; border: 1px solid #ffeaa7; color: #856404; padding: 15px; border-radius: 4px; margin: 20px 0;">
-  <p style="margin: 0;"><strong>Important:</strong> Your gallery will be available until <strong>{{expiry_date}}</strong>. After this date, the photos will be archived and will only be available upon request.</p>
-</div>
-
-<p>We hope you enjoy your photos!</p>
-
-<p>Best regards,<br>
-Your Photo Sharing Team</p>`,
-      body_text_en: `Hello {{host_name}},
-
-Your photo gallery "{{event_name}}" for {{event_date}} has been successfully created and is now online!
-
-{{#if welcome_message}}
-Personal message from your photographer:
-{{welcome_message}}
-{{/if}}
-
-Your access data:
-- Gallery link: {{gallery_link}}
-- Password: {{gallery_password}}
-
-Important: Your gallery will be available until {{expiry_date}}. After this date, the photos will be archived and will only be available upon request.
-
-We hope you enjoy your photos!
-
-Best regards,
-Your Photo Sharing Team`
-    });
-
-  // 2. Expiration Warning - Match German version with urgency and styling
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject_en: 'Your photo gallery expires soon',
-      body_html_en: `
-<h2>Hello {{host_name}},</h2>
-
-<p>Your photo gallery <strong>{{event_name}}</strong> will expire in <strong style="color: #e74c3c; font-size: 18px;">{{days_remaining}} days</strong>!</p>
-
-<div style="background-color: #fee; border: 1px solid #fcc; color: #c33; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0; font-weight: bold; font-size: 16px;">⚠️ Important Notice</p>
-  <p style="margin: 10px 0 0 0;">After {{expiry_date}}, your gallery will no longer be accessible online. The photos will be archived and will only be available upon special request.</p>
-</div>
-
-<p><strong>Don't miss out – download your photos now!</strong></p>
-
-<div style="text-align: center; margin: 30px 0;">
-  <a href="{{gallery_link}}" style="display: inline-block; padding: 14px 35px; background-color: #e74c3c; color: white; text-decoration: none; border-radius: 5px; font-weight: 600; font-size: 16px;">Visit Gallery Now</a>
-</div>
-
-<div style="background-color: #f9f9f9; padding: 15px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0;"><strong>Quick reminder of your access data:</strong></p>
-  <ul style="list-style: none; padding: 0; margin: 10px 0 0 0;">
-    <li>Gallery link: <a href="{{gallery_link}}" style="color: #5C8762;">{{gallery_link}}</a></li>
-    <li>Password: {{gallery_password}}</li>
-  </ul>
-</div>
-
-<p>If you have any questions, please don't hesitate to contact us.</p>
-
-<p>Best regards,<br>
-Your Photo Sharing Team</p>`,
-      body_text_en: `Hello {{host_name}},
-
-Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days!
-
-⚠️ Important Notice
-After {{expiry_date}}, your gallery will no longer be accessible online. The photos will be archived and will only be available upon special request.
-
-Don't miss out – download your photos now!
-
-Quick reminder of your access data:
-- Gallery link: {{gallery_link}}
-- Password: {{gallery_password}}
-
-If you have any questions, please don't hesitate to contact us.
-
-Best regards,
-Your Photo Sharing Team`
-    });
-
-  // 3. Gallery Expired - Match German version with contact information
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject_en: 'Your photo gallery has expired',
-      body_html_en: `
-<h2>Hello {{host_name}},</h2>
-
-<p>Your photo gallery <strong>{{event_name}}</strong> expired on {{expiry_date}} and is no longer accessible online.</p>
-
-<div style="background-color: #f9f9f9; border-left: 4px solid #5C8762; padding: 20px; margin: 20px 0; border-radius: 4px;">
-  <h3 style="margin-top: 0;">Your photos are safely archived</h3>
-  <p>Don't worry – your photos have been securely archived and are not lost. If you need access to your photos, please contact us:</p>
-  <ul style="list-style: none; padding: 0;">
-    <li style="margin-bottom: 8px;">📧 Email: <a href="mailto:{{support_email}}" style="color: #5C8762;">{{support_email}}</a></li>
-    {{#if support_phone}}
-    <li>📞 Phone: {{support_phone}}</li>
-    {{/if}}
-  </ul>
-</div>
-
-<p>Please have the following information ready when contacting us:</p>
-<ul>
-  <li>Event name: {{event_name}}</li>
-  <li>Event date: {{event_date}}</li>
-  <li>Expiry date: {{expiry_date}}</li>
-</ul>
-
-<p>We'll be happy to help you access your archived photos.</p>
-
-<p>Best regards,<br>
-Your Photo Sharing Team</p>`,
-      body_text_en: `Hello {{host_name}},
-
-Your photo gallery "{{event_name}}" expired on {{expiry_date}} and is no longer accessible online.
-
-Your photos are safely archived
-Don't worry – your photos have been securely archived and are not lost. If you need access to your photos, please contact us:
-
-📧 Email: {{support_email}}
-{{#if support_phone}}📞 Phone: {{support_phone}}{{/if}}
-
-Please have the following information ready when contacting us:
-- Event name: {{event_name}}
-- Event date: {{event_date}}
-- Expiry date: {{expiry_date}}
-
-We'll be happy to help you access your archived photos.
-
-Best regards,
-Your Photo Sharing Team`
-    });
-
-  // 4. Archive Complete - Match German version with success message and details
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject_en: 'Your photo gallery has been successfully archived',
-      body_html_en: `
-<h2>Hello {{host_name}},</h2>
-
-<p>Your photo gallery <strong>{{event_name}}</strong> has been successfully archived.</p>
-
-<div style="background-color: #d4edda; border: 1px solid #c3e6cb; color: #155724; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0; font-weight: bold;">✅ Archive successfully created</p>
-  <p style="margin: 10px 0 0 0;">Your photos are now safely stored in our archive.</p>
-</div>
-
-<div style="background-color: #f9f9f9; padding: 20px; border-radius: 8px; margin: 20px 0;">
-  <h3 style="margin-top: 0;">Archive details:</h3>
-  <ul style="list-style: none; padding: 0;">
-    <li style="margin-bottom: 8px;"><strong>Event:</strong> {{event_name}}</li>
-    <li style="margin-bottom: 8px;"><strong>Archive date:</strong> {{archive_date}}</li>
-    <li style="margin-bottom: 8px;"><strong>Number of photos:</strong> {{photo_count}}</li>
-    <li><strong>Archive size:</strong> {{archive_size}}</li>
-  </ul>
-</div>
-
-<p>If you need access to your archived photos in the future, please contact us at:</p>
-<p style="margin-left: 20px;">
-  📧 <a href="mailto:{{support_email}}" style="color: #5C8762;">{{support_email}}</a><br>
-  {{#if support_phone}}📞 {{support_phone}}{{/if}}
-</p>
-
-<p>Thank you for using our photo sharing service!</p>
-
-<p>Best regards,<br>
-Your Photo Sharing Team</p>`,
-      body_text_en: `Hello {{host_name}},
-
-Your photo gallery "{{event_name}}" has been successfully archived.
-
-✅ Archive successfully created
-Your photos are now safely stored in our archive.
-
-Archive details:
-- Event: {{event_name}}
-- Archive date: {{archive_date}}
-- Number of photos: {{photo_count}}
-- Archive size: {{archive_size}}
-
-If you need access to your archived photos in the future, please contact us at:
-📧 {{support_email}}
-{{#if support_phone}}📞 {{support_phone}}{{/if}}
-
-Thank you for using our photo sharing service!
-
-Best regards,
-Your Photo Sharing Team`
-    });
-
-  // 5. Test Email - Update to match German style
-  await knex('email_templates')
-    .where('template_key', 'test_email')
-    .update({
-      subject_en: 'Test Email - Photo Sharing Platform',
-      body_html_en: `
-<h2>Test Email</h2>
-
-<p>This is a test email from your photo sharing platform.</p>
-
-<div style="background-color: #d4edda; border: 1px solid #c3e6cb; color: #155724; padding: 15px; border-radius: 4px; margin: 20px 0;">
-  <p style="margin: 0;"><strong>✅ Email configuration successful!</strong></p>
-  <p style="margin: 10px 0 0 0;">Your email settings have been configured correctly and emails can be sent.</p>
-</div>
-
-<div style="background-color: #f9f9f9; padding: 15px; border-radius: 8px; margin: 20px 0;">
-  <p style="margin: 0;"><strong>Configuration details:</strong></p>
-  <ul style="margin: 10px 0 0 0;">
-    <li>Timestamp: {{timestamp}}</li>
-    <li>Sender: {{from_email}}</li>
-  </ul>
-</div>
-
-<p>Best regards,<br>
-Your Photo Sharing Team</p>`,
-      body_text_en: `Test Email
-
-This is a test email from your photo sharing platform.
-
-✅ Email configuration successful!
-Your email settings have been configured correctly and emails can be sent.
-
-Configuration details:
-- Timestamp: {{timestamp}}
-- Sender: {{from_email}}
-
-Best regards,
-Your Photo Sharing Team`
-    });
-};
-
-exports.down = async function(knex) {
-  // Revert to previous simpler English templates
-  await knex('email_templates')
-    .where('template_key', 'gallery_created')
-    .update({
-      subject_en: 'Your Photo Gallery is Ready',
-      body_html_en: '<h2>Hello,</h2><p>Your photo gallery "{{event_name}}" has been created.</p><p><strong>Access Link:</strong> <a href="{{gallery_link}}">{{gallery_link}}</a></p><p><strong>Password:</strong> {{gallery_password}}</p><p>The gallery will be available until {{expiry_date}}.</p>',
-      body_text_en: 'Your photo gallery "{{event_name}}" has been created. Access Link: {{gallery_link}} Password: {{gallery_password}} The gallery will be available until {{expiry_date}}.'
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'expiration_warning')
-    .update({
-      subject_en: 'Gallery Expires in {{days_remaining}} Days',
-      body_html_en: '<h2>Reminder</h2><p>Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days.</p><p>Please download your photos before {{expiry_date}}.</p><p><a href="{{gallery_link}}">Access Gallery</a></p>',
-      body_text_en: 'Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days. Please download your photos before {{expiry_date}}. Access Gallery: {{gallery_link}}'
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'gallery_expired')
-    .update({
-      subject_en: 'Gallery Expired',
-      body_html_en: '<h2>Gallery Expired</h2><p>Your photo gallery "{{event_name}}" has expired and is no longer accessible.</p><p>If you need access to your photos, please contact support.</p>',
-      body_text_en: 'Your photo gallery "{{event_name}}" has expired and is no longer accessible. If you need access to your photos, please contact support.'
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'archive_complete')
-    .update({
-      subject_en: 'Gallery Archived',
-      body_html_en: '<h2>Archive Complete</h2><p>Your gallery "{{event_name}}" has been archived.</p><p>Archive size: {{archive_size}}</p>',
-      body_text_en: 'Your gallery "{{event_name}}" has been archived. Archive size: {{archive_size}}'
-    });
-
-  await knex('email_templates')
-    .where('template_key', 'test_email')
-    .update({
-      subject_en: 'Test Email',
-      body_html_en: '<p>This is a test email sent at {{timestamp}}.</p>',
-      body_text_en: 'This is a test email sent at {{timestamp}}.'
-    });
-};

backend/migrations/run-migrations-safe.js

@@ -1,230 +0,0 @@
-const fs = require('fs').promises;
-const path = require('path');
-const { db } = require('../src/database/db');
-
-/**
- * Production-safe migration runner that handles existing schema
- */
-
-// Create or verify migrations tracking table
-async function ensureMigrationsTable() {
-  const tableExists = await db.schema.hasTable('migrations');
-  if (!tableExists) {
-    await db.schema.createTable('migrations', (table) => {
-      table.increments('id').primary();
-      table.string('filename').unique().notNullable();
-      table.timestamp('applied_at').defaultTo(db.fn.now());
-    });
-    console.log('Created migrations tracking table');
-  }
-}
-
-// Check if a migration has been applied
-async function isMigrationApplied(filename) {
-  const result = await db('migrations').where('filename', filename).first();
-  return !!result;
-}
-
-// Mark migration as applied without running it (for existing schema)
-async function markMigrationAsApplied(filename) {
-  // Check if already marked to avoid duplicate key error
-  const isApplied = await isMigrationApplied(filename);
-  if (!isApplied) {
-    await db('migrations').insert({ filename });
-    console.log(`Marked migration ${filename} as applied`);
-  }
-}
-
-// Detect existing schema and mark migrations as applied
-async function detectExistingSchema() {
-  console.log('Detecting existing schema...');
-  
-  const tableChecks = [
-    { table: 'events', migration: '001_init.js' },
-    { table: 'photos', migration: '001_init.js' },
-    { table: 'photo_categories', migration: '004_add_categories_and_cms.js' },
-    { table: 'cms_pages', migration: '004_add_categories_and_cms.js' },
-    { table: 'login_attempts', migration: '015_add_login_attempts_table.js' },
-    { table: 'token_blacklist', migration: '017_add_token_revocation_tables.js' },
-    { table: 'backup_runs', migration: '029_add_backup_service_tables.js' },
-    { table: 'gallery_feedback', migration: '033_add_gallery_feedback.js' },
-  ];
-  
-  for (const check of tableChecks) {
-    const exists = await db.schema.hasTable(check.table);
-    if (exists) {
-      const isApplied = await isMigrationApplied(check.migration);
-      if (!isApplied) {
-        await markMigrationAsApplied(check.migration);
-      }
-    }
-  }
-}
-
-// Run a single migration safely
-async function runMigrationSafely(filepath) {
-  try {
-    const migrationPath = path.join(__dirname, filepath);
-    const migration = require(migrationPath);
-    const filename = path.basename(filepath);
-    
-    if (migration.up) {
-      console.log(`Running migration: ${filepath}`);
-      
-      // Run migration in a transaction if possible
-      if (db.client.config.client === 'pg') {
-        await db.transaction(async (trx) => {
-          await migration.up(trx);
-        });
-      } else {
-        await migration.up(db);
-      }
-      
-      await db('migrations').insert({ filename });
-      console.log(`Migration ${filepath} completed successfully`);
-    }
-  } catch (error) {
-    // Check if error is because schema already exists
-    if (error.code === '42P07' || // PostgreSQL: relation already exists
-        error.code === 'SQLITE_ERROR' && error.message.includes('already exists')) {
-      console.log(`Migration ${filepath} - schema already exists, marking as applied`);
-      await markMigrationAsApplied(path.basename(filepath));
-    } else {
-      throw error;
-    }
-  }
-}
-
-// Main migration runner
-async function runMigrations() {
-  let connection;
-  try {
-    console.log('Starting production-safe database migrations...');
-    
-    // Ensure database connection is ready
-    await db.raw('SELECT 1');
-    console.log('Database connection verified');
-    
-    // Create migrations tracking table
-    await ensureMigrationsTable();
-    
-    // Check if essential tables exist to determine if this is truly a new deployment
-    const hasEventsTable = await db.schema.hasTable('events');
-    const hasPhotosTable = await db.schema.hasTable('photos');
-    const hasAdminTable = await db.schema.hasTable('admin_users');
-    const hasActivityLogsTable = await db.schema.hasTable('activity_logs');
-    
-    // Get applied migrations
-    const appliedMigrations = await db('migrations').select('filename');
-    const appliedFilenames = appliedMigrations.map(m => m.filename);
-    
-    // Check if this is a new deployment
-    // It's new if no essential tables exist OR no migrations have been applied
-    const isNewDeployment = (!hasEventsTable || !hasPhotosTable || !hasAdminTable || !hasActivityLogsTable) || appliedFilenames.length === 0;
-    
-    // Only detect existing schema for truly existing deployments
-    if (!isNewDeployment) {
-      await detectExistingSchema();
-    }
-    
-    // Get migration files from appropriate directories
-    let migrationFiles = [];
-    
-    if (isNewDeployment) {
-      // For new deployments, only run core migrations
-      console.log('New deployment detected - running core migrations only');
-      const coreDir = path.join(__dirname, 'core');
-      const coreFiles = await fs.readdir(coreDir);
-      migrationFiles = coreFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('core', f))
-        .sort((a, b) => {
-          const baseA = path.basename(a);
-          const baseB = path.basename(b);
-          const numA = parseInt(baseA.split('_')[0]);
-          const numB = parseInt(baseB.split('_')[0]);
-          return numA - numB;
-        });
-    } else {
-      // For existing deployments, run all migrations (legacy + core)
-      console.log('Existing deployment detected - checking all migrations');
-      
-      // Get legacy migrations
-      const legacyDir = path.join(__dirname, 'legacy');
-      const legacyFiles = await fs.readdir(legacyDir);
-      const legacyMigrations = legacyFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('legacy', f));
-      
-      // Get core migrations
-      const coreDir = path.join(__dirname, 'core');
-      const coreFiles = await fs.readdir(coreDir);
-      const coreMigrations = coreFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('core', f));
-      
-      // Combine and sort by number
-      migrationFiles = [...legacyMigrations, ...coreMigrations]
-        .sort((a, b) => {
-          const baseA = path.basename(a);
-          const baseB = path.basename(b);
-          const numA = parseInt(baseA.split('_')[0]);
-          const numB = parseInt(baseB.split('_')[0]);
-          return numA - numB;
-        });
-    }
-    
-    // Run pending migrations
-    let pendingCount = 0;
-    let skippedCount = 0;
-    
-    for (const file of migrationFiles) {
-      const filename = path.basename(file);
-      const isApplied = appliedFilenames.includes(filename);
-      if (!isApplied) {
-        await runMigrationSafely(file);
-        pendingCount++;
-      } else {
-        skippedCount++;
-      }
-    }
-    
-    console.log(`\nMigration Summary:`);
-    console.log(`- Applied: ${pendingCount} migration(s)`);
-    console.log(`- Skipped: ${skippedCount} migration(s) (already applied)`);
-    console.log(`- Total: ${migrationFiles.length} migration(s)`);
-    console.log('\nAll migrations completed successfully');
-    
-    // Close database connection
-    await db.destroy();
-    process.exit(0);
-  } catch (error) {
-    console.error('\n❌ Migration failed:', error.message);
-    console.error('Error details:', error);
-    
-    // Close database connection on error
-    try {
-      await db.destroy();
-    } catch (e) {
-      // Ignore
-    }
-    
-    process.exit(1);
-  }
-}
-
-// Add delay for database readiness in production
-async function waitAndRun() {
-  if (process.env.NODE_ENV === 'production') {
-    console.log('Waiting 2 seconds for database readiness...');
-    await new Promise(resolve => setTimeout(resolve, 2000));
-  }
-  await runMigrations();
-}
-
-// Only run if called directly
-if (require.main === module) {
-  waitAndRun();
-}
-
-module.exports = { runMigrations };

backend/migrations/run-migrations.js

@@ -1,134 +0,0 @@
-const fs = require('fs').promises;
-const path = require('path');
-const { db } = require('../src/database/db');
-
-// Create migrations table if it doesn't exist
-async function createMigrationsTable() {
-  const tableExists = await db.schema.hasTable('migrations');
-  if (!tableExists) {
-    await db.schema.createTable('migrations', (table) => {
-      table.increments('id').primary();
-      table.string('filename').unique().notNullable();
-      table.timestamp('applied_at').defaultTo(db.fn.now());
-    });
-    console.log('Created migrations table');
-  }
-}
-
-// Get list of applied migrations
-async function getAppliedMigrations() {
-  const migrations = await db('migrations').select('filename');
-  return migrations.map(m => m.filename);
-}
-
-// Run a single migration
-async function runMigration(filepath) {
-  const migrationPath = path.join(__dirname, filepath);
-  const migration = require(migrationPath);
-  const filename = path.basename(filepath);
-  
-  if (migration.up) {
-    console.log(`Running migration: ${filepath}`);
-    await migration.up(db);
-    await db('migrations').insert({ filename });
-    console.log(`Migration ${filepath} completed`);
-  }
-}
-
-// Main migration runner
-async function runMigrations() {
-  try {
-    console.log('Starting database migrations...');
-    
-    // First run the init.js if it exists but only if migrations table doesn't exist
-    const tableExists = await db.schema.hasTable('migrations');
-    if (!tableExists) {
-      const { initializeDatabase } = require('../src/database/db');
-      console.log('Running initial database setup...');
-      await initializeDatabase();
-    }
-    
-    // Create migrations table
-    await createMigrationsTable();
-    
-    // Get applied migrations
-    const appliedMigrations = await getAppliedMigrations();
-    
-    // Check if this is a new deployment (no migrations have been applied)
-    const isNewDeployment = appliedMigrations.length === 0;
-    
-    // Get migration files from appropriate directories
-    let migrationFiles = [];
-    
-    if (isNewDeployment) {
-      // For new deployments, only run core migrations
-      console.log('New deployment detected - running core migrations only');
-      const coreDir = path.join(__dirname, 'core');
-      const coreFiles = await fs.readdir(coreDir);
-      migrationFiles = coreFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('core', f))
-        .sort((a, b) => {
-          const baseA = path.basename(a);
-          const baseB = path.basename(b);
-          const numA = parseInt(baseA.split('_')[0]);
-          const numB = parseInt(baseB.split('_')[0]);
-          return numA - numB;
-        });
-    } else {
-      // For existing deployments, run all migrations (legacy + core)
-      console.log('Existing deployment detected - checking all migrations');
-      
-      // Get legacy migrations
-      const legacyDir = path.join(__dirname, 'legacy');
-      const legacyFiles = await fs.readdir(legacyDir);
-      const legacyMigrations = legacyFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('legacy', f));
-      
-      // Get core migrations
-      const coreDir = path.join(__dirname, 'core');
-      const coreFiles = await fs.readdir(coreDir);
-      const coreMigrations = coreFiles
-        .filter(f => f.match(/^\d{3}_.*\.js$/))
-        .map(f => path.join('core', f));
-      
-      // Combine and sort by number
-      migrationFiles = [...legacyMigrations, ...coreMigrations]
-        .sort((a, b) => {
-          const numA = parseInt(path.basename(a).split('_')[0]);
-          const numB = parseInt(path.basename(b).split('_')[0]);
-          return numA - numB;
-        });
-    }
-    
-    // Run pending migrations
-    let pendingCount = 0;
-    for (const file of migrationFiles) {
-      const filename = path.basename(file);
-      if (!appliedMigrations.includes(filename)) {
-        await runMigration(file);
-        pendingCount++;
-      }
-    }
-    
-    if (pendingCount === 0) {
-      console.log('No pending migrations');
-    } else {
-      console.log(`Applied ${pendingCount} migration(s)`);
-    }
-    
-    console.log('All migrations completed successfully');
-    process.exit(0);
-  } catch (error) {
-    console.error('Migration failed:', error);
-    process.exit(1);
-  }
-}
-
-// Only run if called directly
-if (require.main === module) {
-  runMigrations();
-}
-
-module.exports = { runMigrations };

backend/package.json

@@ -1,56 +0,0 @@
-{
-  "name": "picpeak-backend",
-  "version": "1.0.119",
-  "description": "Backend for PicPeak event photo sharing platform",
-  "main": "server.js",
-  "scripts": {
-    "start": "node server.js",
-    "dev": "nodemon server.js",
-    "migrate": "node migrations/run-migrations.js",
-    "migrate:safe": "node migrations/run-migrations-safe.js",
-    "test": "jest",
-    "lint": "eslint src/"
-  },
-  "dependencies": {
-    "@aws-sdk/client-s3": "^3.850.0",
-    "@aws-sdk/lib-storage": "^3.850.0",
-    "@aws-sdk/s3-request-presigner": "^3.850.0",
-    "adm-zip": "^0.5.16",
-    "archiver": "^5.3.1",
-    "axios": "^1.10.0",
-    "bcrypt": "6.0.0",
-    "chokidar": "4.0.3",
-    "cors": "^2.8.5",
-    "dotenv": "^16.0.3",
-    "express": "^4.18.2",
-    "express-rate-limit": "^6.7.0",
-    "express-validator": "^7.0.1",
-    "form-data": "^4.0.4",
-    "handlebars": "^4.7.8",
-    "helmet": "^7.0.0",
-    "i18next": "25.3.2",
-    "i18next-browser-languagedetector": "^8.2.0",
-    "i18next-http-backend": "^3.0.2",
-    "joi": "^17.9.1",
-    "js-yaml": "^4.1.0",
-    "jsonwebtoken": "^9.0.0",
-    "knex": "^2.4.2",
-    "mime-types": "^3.0.1",
-    "multer": "^2.0.2",
-    "node-cron": "^3.0.2",
-    "nodemailer": "7.0.5",
-    "pg": "^8.16.3",
-    "react-i18next": "^15.6.0",
-    "sharp": "0.34.3",
-    "sqlite3": "^5.1.6",
-    "uuid": "^11.1.0",
-    "winston": "^3.8.2",
-    "zxcvbn": "^4.4.2"
-  },
-  "devDependencies": {
-    "eslint": "^8.40.0",
-    "jest": "^29.5.0",
-    "nodemon": "^3.1.10",
-    "supertest": "^6.3.3"
-  }
-}

backend/scripts/check-storage.js

@@ -1,132 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Script to check storage directory structure and verify files
- * Usage: node scripts/check-storage.js [eventSlug]
- */
-
-const path = require('path');
-const fs = require('fs').promises;
-const { db } = require('../src/database/db');
-
-const STORAGE_PATH = process.env.STORAGE_PATH || path.join(__dirname, '../../storage');
-
-async function checkDirectory(dirPath, description) {
-  try {
-    await fs.access(dirPath);
-    const stats = await fs.stat(dirPath);
-    const files = await fs.readdir(dirPath);
-    console.log(`✓ ${description}: ${dirPath}`);
-    console.log(`  - Files/Folders: ${files.length}`);
-    console.log(`  - Permissions: ${(stats.mode & parseInt('777', 8)).toString(8)}`);
-    return true;
-  } catch (error) {
-    console.log(`✗ ${description}: ${dirPath} - ${error.message}`);
-    return false;
-  }
-}
-
-async function checkStorageStructure(eventSlug = null) {
-  console.log('Checking storage structure...');
-  console.log(`Storage base path: ${STORAGE_PATH}\n`);
-  
-  // Check main directories
-  await checkDirectory(STORAGE_PATH, 'Storage root');
-  await checkDirectory(path.join(STORAGE_PATH, 'events'), 'Events directory');
-  await checkDirectory(path.join(STORAGE_PATH, 'events/active'), 'Active events');
-  await checkDirectory(path.join(STORAGE_PATH, 'events/archived'), 'Archived events');
-  await checkDirectory(path.join(STORAGE_PATH, 'thumbnails'), 'Thumbnails');
-  await checkDirectory(path.join(STORAGE_PATH, 'uploads'), 'Uploads');
-  
-  console.log('\n---\n');
-  
-  // If event slug provided, check specific event
-  if (eventSlug) {
-    console.log(`Checking specific event: ${eventSlug}`);
-    
-    const event = await db('events').where('slug', eventSlug).first();
-    if (!event) {
-      console.log(`✗ Event not found in database: ${eventSlug}`);
-      return;
-    }
-    
-    console.log(`✓ Event found in database:`);
-    console.log(`  - ID: ${event.id}`);
-    console.log(`  - Name: ${event.event_name}`);
-    console.log(`  - Active: ${event.is_active}`);
-    console.log(`  - Archived: ${event.is_archived}`);
-    
-    // Check event directory
-    const eventDir = path.join(STORAGE_PATH, 'events/active', eventSlug);
-    const eventExists = await checkDirectory(eventDir, 'Event directory');
-    
-    if (eventExists) {
-      const files = await fs.readdir(eventDir);
-      console.log(`  - Photo files: ${files.filter(f => /\.(jpg|jpeg|png|gif)$/i.test(f)).length}`);
-    }
-    
-    // Check photos in database
-    const photos = await db('photos').where('event_id', event.id).select('id', 'filename', 'path', 'thumbnail_path');
-    console.log(`\nDatabase photos: ${photos.length}`);
-    
-    // Check if photo files exist
-    let existingPhotos = 0;
-    let missingPhotos = 0;
-    let existingThumbnails = 0;
-    let missingThumbnails = 0;
-    
-    for (const photo of photos) {
-      const photoPath = path.join(STORAGE_PATH, 'events/active', photo.path);
-      try {
-        await fs.access(photoPath);
-        existingPhotos++;
-      } catch {
-        missingPhotos++;
-        console.log(`  ✗ Missing photo: ${photo.path}`);
-      }
-      
-      if (photo.thumbnail_path) {
-        const thumbPath = path.join(STORAGE_PATH, photo.thumbnail_path.replace(/^\//, ''));
-        try {
-          await fs.access(thumbPath);
-          existingThumbnails++;
-        } catch {
-          missingThumbnails++;
-          console.log(`  ✗ Missing thumbnail: ${photo.thumbnail_path}`);
-        }
-      }
-    }
-    
-    console.log(`\nFile check summary:`);
-    console.log(`  - Photos: ${existingPhotos} exist, ${missingPhotos} missing`);
-    console.log(`  - Thumbnails: ${existingThumbnails} exist, ${missingThumbnails} missing`);
-  } else {
-    // List all event directories
-    try {
-      const activeDir = path.join(STORAGE_PATH, 'events/active');
-      const eventDirs = await fs.readdir(activeDir);
-      console.log(`Active event directories: ${eventDirs.length}`);
-      for (const dir of eventDirs.slice(0, 10)) {
-        console.log(`  - ${dir}`);
-      }
-      if (eventDirs.length > 10) {
-        console.log(`  ... and ${eventDirs.length - 10} more`);
-      }
-    } catch (error) {
-      console.log('Could not list event directories:', error.message);
-    }
-  }
-}
-
-// Parse command line arguments
-const eventSlug = process.argv[2] || null;
-
-// Run the script
-checkStorageStructure(eventSlug).then(async () => {
-  await db.destroy();
-  console.log('\nStorage check complete');
-}).catch(async error => {
-  console.error('Error:', error);
-  await db.destroy();
-  process.exit(1);
-});

backend/scripts/cleanup-thumbnails.js

@@ -1,107 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Script to clean up orphaned and temporary thumbnails
- * Usage: node scripts/cleanup-thumbnails.js [--dry-run]
- */
-
-const path = require('path');
-const fs = require('fs').promises;
-const { db } = require('../src/database/db');
-
-const STORAGE_PATH = process.env.STORAGE_PATH || path.join(__dirname, '../../storage');
-const THUMBNAILS_DIR = path.join(STORAGE_PATH, 'thumbnails');
-
-async function cleanupThumbnails(dryRun = false) {
-  console.log('Starting thumbnail cleanup...');
-  console.log(`Thumbnails directory: ${THUMBNAILS_DIR}`);
-  console.log(`Mode: ${dryRun ? 'DRY RUN' : 'LIVE'}\n`);
-  
-  try {
-    // Get all thumbnail files
-    const files = await fs.readdir(THUMBNAILS_DIR);
-    console.log(`Found ${files.length} files in thumbnails directory`);
-    
-    // Get all valid thumbnail paths from database
-    const validThumbnails = await db('photos')
-      .whereNotNull('thumbnail_path')
-      .select('thumbnail_path');
-    
-    const validPaths = new Set(
-      validThumbnails.map(t => path.basename(t.thumbnail_path))
-    );
-    
-    console.log(`Found ${validPaths.size} valid thumbnails in database\n`);
-    
-    let tempCount = 0;
-    let orphanedCount = 0;
-    let validCount = 0;
-    let deletedCount = 0;
-    
-    for (const file of files) {
-      // Skip directories
-      const filePath = path.join(THUMBNAILS_DIR, file);
-      const stats = await fs.stat(filePath);
-      if (stats.isDirectory()) continue;
-      
-      // Check if it's a temporary file
-      if (file.startsWith('thumb_temp_')) {
-        tempCount++;
-        console.log(`Temporary file: ${file}`);
-        
-        if (!dryRun) {
-          try {
-            await fs.unlink(filePath);
-            deletedCount++;
-          } catch (error) {
-            console.error(`  Failed to delete: ${error.message}`);
-          }
-        }
-      }
-      // Check if it's an orphaned thumbnail
-      else if (!validPaths.has(file)) {
-        orphanedCount++;
-        console.log(`Orphaned file: ${file}`);
-        
-        if (!dryRun) {
-          try {
-            await fs.unlink(filePath);
-            deletedCount++;
-          } catch (error) {
-            console.error(`  Failed to delete: ${error.message}`);
-          }
-        }
-      } else {
-        validCount++;
-      }
-    }
-    
-    console.log('\n--- Summary ---');
-    console.log(`Total files: ${files.length}`);
-    console.log(`Valid thumbnails: ${validCount}`);
-    console.log(`Temporary files: ${tempCount}`);
-    console.log(`Orphaned files: ${orphanedCount}`);
-    if (!dryRun) {
-      console.log(`Deleted files: ${deletedCount}`);
-    } else {
-      console.log(`Files to be deleted: ${tempCount + orphanedCount}`);
-    }
-    
-  } catch (error) {
-    console.error('Error during cleanup:', error);
-    process.exit(1);
-  }
-}
-
-// Parse command line arguments
-const dryRun = process.argv.includes('--dry-run');
-
-// Run the cleanup
-cleanupThumbnails(dryRun).then(async () => {
-  await db.destroy();
-  console.log('\nCleanup complete');
-}).catch(async error => {
-  console.error('Cleanup failed:', error);
-  await db.destroy();
-  process.exit(1);
-});

backend/scripts/create-admin.js

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Script to create an admin user
- * Usage: node scripts/create-admin.js --email admin@example.com --username admin --password yourpassword
- * 
- * If no password is provided, a random one will be generated and displayed
- */
-
-require('dotenv').config();
-const bcrypt = require('bcrypt');
-const { db } = require('../src/database/db');
-const crypto = require('crypto');
-
-// Parse command line arguments
-const args = process.argv.slice(2);
-const getArg = (name) => {
-  const index = args.findIndex(arg => arg === `--${name}`);
-  return index !== -1 && args[index + 1] ? args[index + 1] : null;
-};
-
-const email = getArg('email');
-const username = getArg('username') || email?.split('@')[0] || 'admin';
-let password = getArg('password');
-
-// Validate email
-if (!email) {
-  console.error('Error: Email is required. Use --email admin@example.com');
-  process.exit(1);
-}
-
-// Generate password if not provided
-if (!password) {
-  password = crypto.randomBytes(12).toString('base64').slice(0, 16);
-  console.log(`Generated password: ${password}`);
-  console.log('Please save this password securely!');
-}
-
-async function createAdmin() {
-  try {
-    // Check if user already exists
-    const existingUser = await db('admin_users')
-      .where('email', email)
-      .orWhere('username', username)
-      .first();
-
-    if (existingUser) {
-      console.error(`Error: User with email "${email}" or username "${username}" already exists`);
-      process.exit(1);
-    }
-
-    // Hash password
-    const passwordHash = await bcrypt.hash(password, 10);
-
-    // Create admin user
-    await db('admin_users').insert({
-      username,
-      email,
-      password_hash: passwordHash,
-      is_active: true,
-      created_at: new Date(),
-      updated_at: new Date()
-    });
-
-    console.log(`✅ Admin user created successfully!`);
-    console.log(`   Email: ${email}`);
-    console.log(`   Username: ${username}`);
-    console.log(`   Login URL: ${process.env.ADMIN_URL || 'http://localhost:3000'}/admin/login`);
-    
-    process.exit(0);
-  } catch (error) {
-    console.error('Error creating admin user:', error.message);
-    process.exit(1);
-  }
-}
-
-createAdmin();

backend/scripts/regenerate-square-thumbnails.js

@@ -1,108 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Script to regenerate all thumbnails with new square dimensions
- * This fixes the blurry thumbnail issue by creating proper 300x300 square thumbnails
- */
-
-const path = require('path');
-const fs = require('fs').promises;
-const { db } = require('../src/database/db');
-const { generateThumbnail } = require('../src/services/imageProcessor');
-const logger = require('../src/utils/logger');
-
-const getStoragePath = () => process.env.STORAGE_PATH || path.join(__dirname, '../../storage');
-
-async function regenerateAllThumbnails() {
-  try {
-    console.log('Starting thumbnail regeneration with square dimensions...');
-    
-    // First, ensure the new thumbnail settings are in the database
-    const settings = [
-      { key: 'thumbnail_width', value: '300' },
-      { key: 'thumbnail_height', value: '300' },
-      { key: 'thumbnail_fit', value: 'cover' },
-      { key: 'thumbnail_quality', value: '85' },
-      { key: 'thumbnail_format', value: 'jpeg' }
-    ];
-    
-    for (const setting of settings) {
-      const exists = await db('app_settings').where('key', setting.key).first();
-      if (!exists) {
-        await db('app_settings').insert({
-          ...setting,
-          description: `Thumbnail ${setting.key.replace('thumbnail_', '')}`,
-          created_at: db.fn.now(),
-          updated_at: db.fn.now()
-        });
-        console.log(`Added setting: ${setting.key} = ${setting.value}`);
-      }
-    }
-    
-    // Get all photos
-    const photos = await db('photos')
-      .select('id', 'event_id', 'path', 'filename')
-      .orderBy('id');
-    
-    console.log(`Found ${photos.length} photos to process`);
-    
-    let successCount = 0;
-    let errorCount = 0;
-    let skippedCount = 0;
-    
-    for (let i = 0; i < photos.length; i++) {
-      const photo = photos[i];
-      const progress = Math.round((i + 1) / photos.length * 100);
-      
-      try {
-        const storagePath = getStoragePath();
-        const originalPath = path.join(storagePath, 'events/active', photo.path);
-        
-        // Check if original file exists
-        try {
-          await fs.access(originalPath);
-        } catch (err) {
-          console.log(`[${progress}%] Skipping photo ${photo.id} - original file not found`);
-          skippedCount++;
-          continue;
-        }
-        
-        // Regenerate thumbnail with new square dimensions
-        const thumbnailPath = await generateThumbnail(originalPath, { regenerate: true });
-        
-        if (thumbnailPath) {
-          // Update database with new thumbnail path
-          await db('photos')
-            .where({ id: photo.id })
-            .update({ 
-              thumbnail_path: thumbnailPath,
-              updated_at: db.fn.now()
-            });
-          
-          successCount++;
-          console.log(`[${progress}%] ✓ Regenerated thumbnail for ${photo.filename}`);
-        } else {
-          errorCount++;
-          console.error(`[${progress}%] ✗ Failed to generate thumbnail for ${photo.filename}`);
-        }
-      } catch (error) {
-        errorCount++;
-        console.error(`[${progress}%] ✗ Error processing photo ${photo.id}:`, error.message);
-      }
-    }
-    
-    console.log('\n=== Regeneration Complete ===');
-    console.log(`✓ Success: ${successCount} thumbnails`);
-    console.log(`✗ Errors: ${errorCount} thumbnails`);
-    console.log(`⊘ Skipped: ${skippedCount} thumbnails (original files not found)`);
-    console.log(`Total processed: ${photos.length} photos`);
-    
-    process.exit(0);
-  } catch (error) {
-    console.error('Fatal error during thumbnail regeneration:', error);
-    process.exit(1);
-  }
-}
-
-// Run the script
-regenerateAllThumbnails();

backend/scripts/regenerate-thumbnails.js

@@ -1,141 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Script to regenerate missing thumbnails for photos in the database
- * Usage: node scripts/regenerate-thumbnails.js [eventId]
- */
-
-const path = require('path');
-const fs = require('fs').promises;
-const sharp = require('sharp');
-const { db } = require('../src/database/db');
-
-// Configuration
-const THUMBNAIL_SIZE = 300;
-const STORAGE_PATH = process.env.STORAGE_PATH || path.join(__dirname, '../../storage');
-const THUMBNAILS_DIR = path.join(STORAGE_PATH, 'thumbnails');
-
-async function ensureDirectoryExists(dirPath) {
-  try {
-    await fs.access(dirPath);
-  } catch {
-    await fs.mkdir(dirPath, { recursive: true });
-    console.log(`Created directory: ${dirPath}`);
-  }
-}
-
-async function generateThumbnail(photoPath, thumbnailPath) {
-  try {
-    await sharp(photoPath)
-      .resize(THUMBNAIL_SIZE, THUMBNAIL_SIZE, {
-        fit: 'cover',
-        position: 'center'
-      })
-      .jpeg({ quality: 80 })
-      .toFile(thumbnailPath);
-    
-    return true;
-  } catch (error) {
-    console.error(`Failed to generate thumbnail for ${photoPath}:`, error.message);
-    return false;
-  }
-}
-
-async function regenerateThumbnails(eventId = null) {
-  try {
-    console.log('Starting thumbnail regeneration...');
-    console.log(`Storage path: ${STORAGE_PATH}`);
-    console.log(`Thumbnails directory: ${THUMBNAILS_DIR}`);
-    
-    // Ensure thumbnails directory exists
-    await ensureDirectoryExists(THUMBNAILS_DIR);
-    
-    // Build query
-    let query = db('photos')
-      .join('events', 'photos.event_id', 'events.id')
-      .select(
-        'photos.id',
-        'photos.filename',
-        'photos.path',
-        'photos.thumbnail_path',
-        'events.slug as event_slug'
-      );
-    
-    if (eventId) {
-      query = query.where('photos.event_id', eventId);
-      console.log(`Filtering for event ID: ${eventId}`);
-    }
-    
-    const photos = await query;
-    console.log(`Found ${photos.length} photos to process`);
-    
-    let successCount = 0;
-    let skipCount = 0;
-    let errorCount = 0;
-    
-    for (const photo of photos) {
-      const photoPath = path.join(STORAGE_PATH, 'events/active', photo.path);
-      const thumbnailFilename = `thumb_${photo.filename}`;
-      const thumbnailPath = path.join(THUMBNAILS_DIR, thumbnailFilename);
-      
-      try {
-        // Check if photo file exists
-        await fs.access(photoPath);
-        
-        // Check if thumbnail already exists
-        try {
-          await fs.access(thumbnailPath);
-          console.log(`Thumbnail already exists for ${photo.filename}, skipping...`);
-          skipCount++;
-          continue;
-        } catch {
-          // Thumbnail doesn't exist, generate it
-        }
-        
-        console.log(`Generating thumbnail for ${photo.filename}...`);
-        const success = await generateThumbnail(photoPath, thumbnailPath);
-        
-        if (success) {
-          // Update database with thumbnail path
-          await db('photos')
-            .where('id', photo.id)
-            .update({
-              thumbnail_path: `thumbnails/${thumbnailFilename}`
-            });
-          
-          successCount++;
-          console.log(`✓ Generated thumbnail for ${photo.filename}`);
-        } else {
-          errorCount++;
-        }
-      } catch (error) {
-        console.error(`✗ Photo file not found: ${photoPath}`);
-        errorCount++;
-      }
-    }
-    
-    console.log('\nThumbnail regeneration complete!');
-    console.log(`- Successfully generated: ${successCount}`);
-    console.log(`- Skipped (already exist): ${skipCount}`);
-    console.log(`- Errors: ${errorCount}`);
-    console.log(`- Total processed: ${photos.length}`);
-    
-  } catch (error) {
-    console.error('Error during thumbnail regeneration:', error);
-    process.exit(1);
-  } finally {
-    await db.destroy();
-  }
-}
-
-// Parse command line arguments
-const eventId = process.argv[2] ? parseInt(process.argv[2]) : null;
-
-// Run the script
-regenerateThumbnails(eventId).then(() => {
-  console.log('Script completed successfully');
-  process.exit(0);
-}).catch(error => {
-  console.error('Script failed:', error);
-  process.exit(1);
-});

backend/scripts/reset-admin-password.js

@@ -1,109 +0,0 @@
-#!/usr/bin/env node
-
-const bcrypt = require('bcrypt');
-const { db } = require('../src/database/db');
-const { generateReadablePassword } = require('../src/utils/passwordGenerator');
-const fs = require('fs').promises;
-const path = require('path');
-const readline = require('readline');
-
-const rl = readline.createInterface({
-  input: process.stdin,
-  output: process.stdout
-});
-
-async function question(prompt) {
-  return new Promise((resolve) => {
-    rl.question(prompt, resolve);
-  });
-}
-
-async function resetAdminPassword() {
-  console.log('\n========================================');
-  console.log('PicPeak Admin Password Reset Tool');
-  console.log('========================================\n');
-
-  try {
-    // Check if admin user exists
-    const admin = await db('admin_users')
-      .where({ username: 'admin' })
-      .first();
-
-    if (!admin) {
-      console.error('❌ No admin user found in the database.');
-      console.log('Run migrations first: npm run migrate');
-      process.exit(1);
-    }
-
-    console.log('Found admin user:', admin.username);
-    console.log('Email:', admin.email);
-    console.log('\nThis will reset the password for this admin account.');
-    
-    const confirm = await question('\nDo you want to continue? (yes/no): ');
-    
-    if (confirm.toLowerCase() !== 'yes' && confirm.toLowerCase() !== 'y') {
-      console.log('\n❌ Password reset cancelled.');
-      process.exit(0);
-    }
-
-    // Generate new password
-    const newPassword = generateReadablePassword();
-    const passwordHash = await bcrypt.hash(newPassword, 12);
-
-    // Update the admin user
-    await db('admin_users')
-      .where({ username: 'admin' })
-      .update({
-        password_hash: passwordHash,
-        must_change_password: true,
-        updated_at: new Date()
-      });
-
-    // Save to file
-    const resetInfoPath = path.join(__dirname, '..', '..', 'ADMIN_PASSWORD_RESET.txt');
-    const resetInfo = `
-========================================
-PicPeak Admin Password Reset
-========================================
-
-Password has been reset for admin account:
-
-Username: admin
-New Password: ${newPassword}
-
-IMPORTANT:
-1. You MUST change this password on next login
-2. This file contains sensitive information
-3. Delete this file after noting the password
-
-Login URL: ${process.env.ADMIN_URL || 'http://localhost:3001'}/admin
-
-Reset performed on: ${new Date().toISOString()}
-========================================
-`;
-
-    await fs.writeFile(resetInfoPath, resetInfo, 'utf8');
-
-    console.log('\n✅ Password reset successful!\n');
-    console.log('========================================');
-    console.log('New Credentials:');
-    console.log('========================================');
-    console.log('Username: admin');
-    console.log(`Password: ${newPassword}`);
-    console.log('\n⚠️  IMPORTANT:');
-    console.log('1. You will be required to change this password on next login');
-    console.log('2. Credentials are also saved in: ADMIN_PASSWORD_RESET.txt');
-    console.log('3. Delete the file after noting the password');
-    console.log('========================================\n');
-
-  } catch (error) {
-    console.error('❌ Error resetting password:', error.message);
-    process.exit(1);
-  } finally {
-    rl.close();
-    process.exit(0);
-  }
-}
-
-// Run the reset
-resetAdminPassword();

backend/scripts/set-admin-password.js

@@ -1,39 +0,0 @@
-#!/usr/bin/env node
-
-const bcrypt = require('bcrypt');
-const path = require('path');
-require('dotenv').config({ path: path.join(__dirname, '../.env') });
-
-const knex = require('knex');
-const db = knex({
-  client: process.env.DB_CLIENT || 'pg',
-  connection: {
-    host: process.env.DB_HOST || 'localhost',
-    port: process.env.DB_PORT || 5432,
-    user: process.env.DB_USER || 'picpeak',
-    password: process.env.DB_PASSWORD || 'picpeak',
-    database: process.env.DB_NAME || 'picpeak_dev'
-  }
-});
-
-async function setAdminPassword() {
-  try {
-    const password = 'admin123';
-    const hashedPassword = await bcrypt.hash(password, 10);
-    
-    await db('admin_users')
-      .where('username', 'admin')
-      .update({
-        password_hash: hashedPassword,
-        updated_at: new Date()
-      });
-    
-    console.log('✅ Admin password set to: admin123');
-    process.exit(0);
-  } catch (error) {
-    console.error('❌ Error setting password:', error);
-    process.exit(1);
-  }
-}
-
-setAdminPassword();

backend/scripts/show-admin-credentials.js

@@ -1,67 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Show or reset admin credentials
- */
-
-const bcrypt = require('bcrypt');
-const { db } = require('../src/database/db');
-const { generateReadablePassword } = require('../src/utils/passwordGenerator');
-
-async function showAdminCredentials(resetPassword = false) {
-  try {
-    // Get admin user
-    const admin = await db('admin_users')
-      .where('username', 'admin')
-      .first();
-    
-    if (!admin) {
-      console.error('❌ No admin user found in database');
-      process.exit(1);
-    }
-    
-    console.log('\n========================================');
-    console.log('PicPeak Admin Credentials');
-    console.log('========================================');
-    console.log(`Username: ${admin.username}`);
-    console.log(`Email: ${admin.email}`);
-    
-    if (resetPassword) {
-      // Generate new password
-      const newPassword = generateReadablePassword();
-      const passwordHash = await bcrypt.hash(newPassword, 12);
-      
-      // Update password
-      await db('admin_users')
-        .where('id', admin.id)
-        .update({
-          password_hash: passwordHash,
-          updated_at: new Date()
-        });
-      
-      // Password logging removed for security - check logs or database if needed
-      console.log('Password: [NEWLY RESET - stored in database]');
-      console.log('\n⚠️  IMPORTANT: New password has been set in database!');
-    } else {
-      console.log('Password: [hidden - use --reset flag to generate new password]');
-    }
-    
-    console.log('\nLogin URL: http://localhost:3001/admin');
-    console.log('========================================\n');
-    
-  } catch (error) {
-    console.error('Error:', error.message);
-    process.exit(1);
-  } finally {
-    await db.destroy();
-  }
-}
-
-// Check for reset flag
-const resetPassword = process.argv.includes('--reset');
-
-if (resetPassword) {
-  console.log('🔄 Resetting admin password...');
-}
-
-showAdminCredentials(resetPassword);