diff --git a/README.md b/README.md index 5df60bc..162dadd 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,11 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p ### Security +
+View security architecture & protections + +
+ | Concern | Protection | | ----------------------- | ------------------------------------------------------------------------------------------------------- | | **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side | @@ -45,6 +50,8 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p **Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich. +
+ ### Infrastructure - **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration @@ -128,6 +135,9 @@ docker compose up -d The gallery will be available at `http://localhost:7211`. +
+Advanced Docker (Standalone, Health Check, Proxy) + ### Standalone Docker ```bash @@ -164,6 +174,8 @@ photos.example.com { } ``` +
+ ## Tech Stack - **Next.js 16** (App Router, standalone output)