5 Commits

Author	SHA1	Message	Date
ralksta	a97b261c14	fix: raise map rate limit 30→120/min, allow 5min private browser cache ... Prevents spurious 429s during normal browsing/refreshing. Browser now caches personalised map data for 5 minutes (private, so CDNs/proxies won't share it between users).	2026-03-13 12:55:07 +01:00
ralksta	d64a7239d1	refactor: audit improvements - rate limit ceiling, map route protection, lazy DevToolbar, lang=de ... - lib/rate-limit.ts: add MAX_STORE_ENTRIES=10k ceiling + evictIfFull() to prevent DDoS memory exhaustion - app/api/map/route.ts: add IP-based rate limiting (30 req/min) with proper Retry-After headers - app/layout.tsx: lang='en' → 'de', DevToolbar loaded via dynamic import (reduces main bundle) - app/layout.tsx: lazy DevToolbar keeps ~17KB out of production bundle via next/dynamic	2026-03-13 11:41:56 +01:00
ralksta	23d8bf0425	refactor: apply Clean Architecture principles ... - Extract EXIF and Swipe logic into custom hooks for Lightbox - Extract Map layout data formatting into mapService - Extract AlbumDetailView and SubpageGridView components from page router - Restructure monolithic config.ts into clean config/ directory	2026-03-08 18:55:45 +01:00
ralksta	e394fe84a0	security: implement AUTH_SECRET and secure map/exif API routes	2026-03-07 08:18:23 +01:00
ralksta	62a7b178d6	feat: add smart map view with location-level clustering ... - /map page with Leaflet (CartoDB dark tiles) - Photos clustered by city/country (not per-photo) - /api/map endpoint with encrypted cover asset IDs - Configurable via gallery.yaml (map: true/false) - Conditional nav link in header - CSP updated for Leaflet CDN and tile servers - Theme-aware popups with cover thumbnails and album links	2026-02-15 23:07:04 +01:00