paul/picpeak
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
84 Commits 7 Branches 144 Tags
f439d0b318f57032221e5fd1c0f9bbb06304aced
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
paul f439d0b318
Test Gitea Actions / test (push) Successful in 15s
Details
continuous-integration/drone/push Build is passing
Details
fix(security): enhance security headers and tighten CORS configuration 
- Configure custom Content Security Policy for React app compatibility
- Add Permissions-Policy header to disable unnecessary browser features
- Set HSTS to 1 year with preload flag for better transport security
- Update referrer policy to strict-origin-when-cross-origin
- Restrict CORS localhost origins to development environment only
- Production deployments now only allow configured FRONTEND_URL and ADMIN_URL
- Addresses security headers configuration issues from security scan

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-13 19:48:28 +02:00
.gitea/workflows
feat: add Gitea Actions test workflow and setup documentation
2025-07-12 09:28:06 +02:00
.github/workflows
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
backend
fix(security): enhance security headers and tighten CORS configuration
2025-07-13 19:48:28 +02:00
data
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
deploy
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
docs
fix(security): eliminate default admin password vulnerability
2025-07-12 23:50:21 +02:00
frontend
fix(security): sanitize CMS content to prevent XSS attacks
2025-07-13 19:11:02 +02:00
logs
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
migrations
Fix language setting not being saved to database on admin settings page
2025-07-08 09:49:45 +02:00
nginx
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
scripts
feat(security): implement secure JWT secrets for all environments
2025-07-12 23:40:43 +02:00
storage
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
.dockerignore
Add .dockerignore file
2025-07-03 16:27:04 +02:00
.drone.yml
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
.drone.yml.full
feat: add initial Drone CI/CD configuration without security scan
2025-07-11 23:15:38 +02:00
.env.example
feat(security): implement secure JWT secrets for all environments
2025-07-12 23:40:43 +02:00
.env.production.example
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
.gitignore
fix(security): eliminate default admin password vulnerability
2025-07-12 23:50:21 +02:00
CLAUDE.md
Implement complete frontend with admin panel and theme system
2025-07-06 22:04:45 +02:00
complete-setup.sh
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
DEPLOYMENT.md
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
docker-compose.local.yml
feat(security): implement secure JWT secrets for all environments
2025-07-12 23:40:43 +02:00
docker-compose.prod.yml
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
docker-compose.runner.yml
feat: add Gitea runner installation scripts
2025-07-12 09:30:39 +02:00
docker-compose.yml
feat(security): implement secure JWT secrets for all environments
2025-07-12 23:40:43 +02:00
LICENSE
Initial commit
2025-07-03 16:25:53 +02:00
package-lock.json
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
package.json
Fix language setting not being saved to database on admin settings page
2025-07-08 09:49:45 +02:00
photo-sharing-prd.md
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
README-LOCAL.md
fix(security): eliminate default admin password vulnerability
2025-07-12 23:50:21 +02:00
README.md
fix(security): eliminate default admin password vulnerability
2025-07-12 23:50:21 +02:00
SETUP_GUIDE.md
refactor: rename project from wedding-photo-sharing to PicPeak
2025-07-12 09:22:14 +02:00
setup-remaining-files.sh
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
start-local.sh
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
stop-local.sh
Add complete frontend implementation and Docker deployment setup
2025-07-06 20:23:13 +02:00
test-maintenance.sh
Fix brand theme application and add comprehensive translations
2025-07-08 17:07:40 +02:00
TODO.md
Fix gallery mobile view issues
2025-07-11 08:30:07 +02:00
update-local.sh
Fix language setting not being saved to database on admin settings page
2025-07-08 09:49:45 +02:00

README.md

Photo Sharing Platform

A secure, self-hosted photo sharing platform designed for weddings and events. Features automatic expiration, email notifications, and simple file-based management.

Features

  • 🔒 Password Protected Galleries
  • ⏰ Automatic Expiration
  • 📧 Email Notifications
  • 📁 Simple File Management
  • 📊 Analytics Integration
  • 🎨 Customizable Themes
  • 📱 Mobile Responsive
  • ⚡ Docker Ready

Quick Start

  1. Clone the repository
  2. Run ./scripts/install.sh
  3. Configure .env file
  4. Setup SSL: ./scripts/setup-ssl.sh
  5. Start: docker-compose -f docker-compose.prod.yml up -d

Default credentials: Check ADMIN_CREDENTIALS.txt after first setup

Documentation

See DEPLOYMENT.md for detailed deployment instructions.

License

MIT License

Reference in New Issue View Git Blame Copy Permalink
S
Description
Secure photo sharing platform for weddings and events with automatic expiration and email notifications
Readme MIT 48 MiB
Releases 1
PicPeak v1.0.93 Latest
2025-07-24 15:24:20 +02:00
Languages
JavaScript 49.5%
TypeScript 47.6%
Shell 2.2%
CSS 0.6%
Dockerfile 0.1%