From 81f0b38e57b3e9b820c429e1655b81bb16292349 Mon Sep 17 00:00:00 2001 From: ralksta Date: Sun, 8 Mar 2026 16:27:21 +0100 Subject: [PATCH] docs: add production readiness info to README --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 1e6f5ec..054eb33 100644 --- a/README.md +++ b/README.md @@ -43,6 +43,8 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p | **Rate limiting** | Per-IP sliding-window rate limiter on the image proxy (configurable RPM) | | **No direct access** | Visitors interact only with the Next.js app; they have zero knowledge of your Immich server's existence | +**Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich. + ### Infrastructure - **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration