dev
dd4d306a4e
feat: cloudflared container with optional WireGuard egress
...
- Dockerfile.cloudflared builds cloudflared (official static binary) on Alpine with wireguard-tools
2026-09-12 17:40:42 +03:00
dev
854f2d4650
feat: публикация наружу через Cloudflare Quick Tunnel (cloudflared)
2026-09-12 15:06:56 +03:00
dev
a8e1aa743d
Build app image on host network to bypass bridge egress/TLS issues
2026-09-12 12:22:59 +03:00
dev
fd753c1318
Add cookie notice with settings, jfif preview support, and share page title from link name
2026-09-12 10:05:02 +03:00
dev
f8036fae79
Fix: backup/restore now includes group_photos and entry_photos tables; increase AI request timeout to 120s (configurable via AI_REQUEST_TIMEOUT_MS)
2026-09-11 23:12:16 +03:00
dev
4db02d75bc
Add AI-check details modal on worker page and raise backup upload limit
2026-09-11 16:26:30 +03:00
dev
275ed46dfb
Add HF model auto-download with configurable AI env, and share link visibility toggles
2026-09-11 13:12:13 +03:00
dev
3850fe35e4
Update project files
2026-09-10 11:26:51 +03:00
dev
d6e589d2f5
feat: add branches feature, security audit, and multi-branch support
2026-09-09 09:41:07 +03:00
dev
e0cec0f943
add admin audit log (11), hide stacktraces via NODE_ENV=production (13), validate spam_interval_min>=1 (16)
2026-09-08 12:12:29 +03:00
dev
dd5a2ea288
drop caddy and cloudflared; publish via tailscale funnel; rewrite README
2026-09-08 10:40:20 +03:00
dev
6844d659fc
harden security and add public TLS scaffold
...
- require ADMIN_PASSWORD (no default), remove CORS
- close public DB port, move DB credentials to .env (DB_PASSWORD)
- fix HTML escaping, add helmet + sec headers (no CSP due to inline scripts)
- rate limit public routes by IP (express-rate-limit)
- validate restore data and confine file unlinking to uploads/
- block dangerous upload extensions, 30MB per-entry limit, SVG not served inline
- return 400 on unknown group_id in POST /api/entries
- add commented Caddy/Let's Encrypt reverse-proxy scaffold + Caddyfile.example
- update README
2026-09-07 11:27:04 +03:00
dev
71803d4dcf
expose uploads volume to host via bind mount
2026-09-07 09:41:23 +03:00
dev
6dc54e49b8
batch add students: add optional group selection in batch modal
2026-09-05 18:31:28 +03:00
dev