dev
dd5a2ea288
drop caddy and cloudflared; publish via tailscale funnel; rewrite README
2026-09-08 10:40:20 +03:00
dev
6844d659fc
harden security and add public TLS scaffold
...
- require ADMIN_PASSWORD (no default), remove CORS
- close public DB port, move DB credentials to .env (DB_PASSWORD)
- fix HTML escaping, add helmet + sec headers (no CSP due to inline scripts)
- rate limit public routes by IP (express-rate-limit)
- validate restore data and confine file unlinking to uploads/
- block dangerous upload extensions, 30MB per-entry limit, SVG not served inline
- return 400 on unknown group_id in POST /api/entries
- add commented Caddy/Let's Encrypt reverse-proxy scaffold + Caddyfile.example
- update README
2026-09-07 11:27:04 +03:00
dev
b15abc34aa
stop tracking .env and backup archives; add comprehensive .gitignore
2026-09-07 09:50:02 +03:00
dev
f3885dc0fc
write full project README
2026-09-07 09:48:39 +03:00
dev
7c58cd0d4c
Merge remote-tracking branch 'origin/main'
2026-09-07 09:46:33 +03:00
dev
f13031e9b3
add detach files feature, utf8 filename fix, and error pages
2026-09-07 09:42:28 +03:00
admin
3b0761530e
Initial commit
2026-09-07 06:41:48 +00:00
dev
71803d4dcf
expose uploads volume to host via bind mount
2026-09-07 09:41:23 +03:00
dev
84fed96097
add full dashboard: activity chart, recent entries, group photos, quick actions, active groups, top students
2026-09-06 15:08:39 +03:00
dev
65e5651be2
redesign settings page UX/UI: structured cards, consistent fields, sticky save bar, backup stats and loading states
2026-09-06 14:56:06 +03:00
dev
621c3c3b5c
add soft delete with trash page and group photo chronology with styling
2026-09-06 13:51:47 +03:00
dev
3c22d72a27
show attached files as type icons labeled as resident's works on share page
2026-09-06 12:37:42 +03:00
dev
d8802b508d
add Files admin section: list with filters, search, student/group/date, pagination
2026-09-06 12:25:39 +03:00
dev
9fbd88983c
open attachment images in the same-page lightbox like photos
2026-09-06 12:05:32 +03:00
dev
3d3856bf35
show project files in share page cards with image preview and file download
2026-09-06 11:50:02 +03:00
dev
a117184a2a
make project file tokens public; keep name links with image preview and file download
2026-09-06 11:35:40 +03:00
dev
ac8621c5aa
serve project files by token hash, preview images inline and download other files
2026-09-06 11:33:33 +03:00
dev
c5fdf006f5
add project file upload to student form, project_files table with backup/restore, download in journal, and crash-proof entries endpoint
2026-09-06 11:29:34 +03:00
dev
c2c5f2ed42
add photo placeholder, mirrored camera capture, configurable footer, and student .url zip export
2026-09-06 11:22:00 +03:00
dev
1d25275fd1
redesign index.html: 2-column layout (photo left, fields right), responsive
2026-09-06 00:44:35 +03:00
dev
5f4dfda799
mirror camera preview by default (scaleX(-1))
2026-09-06 00:42:59 +03:00
dev
94ea5606ff
style student filter inputs (#studentFilter, #linkStudent) to match admin design
2026-09-05 20:30:36 +03:00
dev
3b1341a0c2
add autocomplete input for student selection in journal filters, link creation, and links admin
2026-09-05 20:26:21 +03:00
dev
6dc54e49b8
batch add students: add optional group selection in batch modal
2026-09-05 18:31:28 +03:00
dev
admin