ralksta
9e52d7a0b8
feat: add visual admin panel with page builder and settings editor
...
- Add /admin route with password-protected visual page builder
- Page Builder: manage hero images, standalone albums, subpages, and sections
- Album Picker: browse all shared Immich albums with search and filtering
- Settings Editor: theme, grid, footer, legal, SEO configuration
- YAML service with atomic writes and automatic backups (content/.backups/)
- HMAC-signed admin sessions (24h expiry, HttpOnly cookies)
- API endpoints: /api/admin/{auth,gallery,settings,albums,reload}
- Enable with ADMIN_PASSWORD env var; disabled by default
- invalidateConfigCache() export for hot-reload after saves
2026-05-29 17:04:37 +02:00
ralksta
771cee517a
security: implement secure IP retrieval with TRUSTED_PROXIES support ( closes #139 )
2026-05-06 12:10:20 +02:00
ralksta
43c59f4bc9
chore: clean up repo root and improve .gitignore
...
- Remove debug scripts: check_albums.js, check_albums.ts
- Remove git-filter-repo binary from root
- Untrack server.log (was accidentally committed)
- Delete .DS_Store files
- Rewrite .gitignore with clear sections: deps, next.js,
TypeScript, testing, logs, env, OS/editor, agent tools,
one-off scripts, deployment, user content
- Add .Jules/ and *.log glob to .gitignore
2026-03-13 11:34:28 +01:00
google-labs-jules[bot]
63e6a2f784
🛡️ Sentinel: [HIGH] Fix missing rate limiting on /api/exif/[id]
...
Co-authored-by: ralksta <16941050+ralksta@users.noreply.github.com >
2026-03-12 11:30:45 +00:00
ralksta
b9993bd29e
fix: gracefully handle Next.js static component fetch rendering when setup configs are completely empty
2026-03-08 21:38:44 +01:00
ralksta
7a1dfdc519
chore: remove unused 3P dependencies (zod, gray-matter, bcryptjs) and switch to native implementations
2026-03-08 21:12:52 +01:00
ralksta
faab17f9cd
fix: increase rate limit and add detailed logging to diagnose broken thumbnails
2026-03-07 09:42:33 +01:00
ralksta
277aab54e1
fix: remove minimum length requirement for AUTH_SECRET for maximum compatibility
2026-03-07 09:35:40 +01:00
ralksta
f790aa3268
fix: restore AUTH_SECRET fallback and fix asset caching to resolve fullscreen loading issues
2026-03-07 09:32:20 +01:00
ralksta
280c5430ca
chore: full implementation of code review recommendations (security, quality, tests)
2026-03-07 09:27:47 +01:00
ralksta
e394fe84a0
security: implement AUTH_SECRET and secure map/exif API routes
2026-03-07 08:18:23 +01:00
ralksta
52fa16c1c8
feat: visual polish & UX — fade-in, theme toggle, scroll-to-top, footer, cursor, badge
...
- Add FadeIn component (IntersectionObserver scroll-reveal + load animation)
- Add dark/light theme toggle (useSyncExternalStore + localStorage)
- Add scroll-to-top button (appears after 300px scroll)
- Add configurable footer with social links (gallery.yaml)
- Add crosshair cursor on photo grid items
- Add 'X photos' count badge on subpage cover images
- Add light theme color palette in tokens.css
2026-02-14 11:47:26 +01:00
