4 Commits

Author	SHA1	Message	Date
User	8384ad9432	security: port binding, invite token auth, cookie flags, rate limiting ... - Docker: bind all backend/frontend ports to 127.0.0.1 only (was 0.0.0.0) - Docker: add shared jagd-network; portal uses container names instead of host ports - Fix: set-password endpoints now require valid invite token (drohnenfuehrer, stoeberhunde) - Fix: auth cookie secure flag enabled in production - Fix: password reset token no longer logged in production - Add: inviteLimiter (10/15min) on set-password routes in all three apps - Add: importUsers capped at 500 entries to prevent DoS - Refactor: rename handler -> drohnenfuehrer/stoeberhundefuehrer across all apps	2026-05-03 10:15:03 +02:00
thomas	770b0b1d38	Fix app labels: replace Nachsuchen with app-specific names in drohnenfuehrer and stoeberhunde ... - drohnenfuehrer: all Nachsuchenführer/Hundeführer labels replaced with Drohnenführer - stoeberhunde: all Nachsuchenführer/Hundeführer labels replaced with Stöberhundeführer - Fixed backend config, controllers, logger, env, package.json, seed.js - Fixed frontend components: Header, UserList, UserForm, PublicUserList, HandlerLogin, AdminPanel, RulesDisplay - Fixed Dockerfiles (PUBLIC_URL), nginx configs, podman-compose.yml, CONTAINER.md, docs - Fixed service worker registration path: /sw.js -> ./sw.js - Fixed portal/index.html	2026-05-03 08:24:28 +02:00
User	6c4d55bdf0	Audit- und Produktionsfixes: sichere Handler-Set-Passwort-Flow, PII-Schutz, sichere Cookies, Upload-MIME-Whitelist, Health-Endpoint, Graceful Shutdown, HSTS/CSP, Seed-Datenbereinigung und Log-Rotation	2026-05-02 22:54:46 +02:00
thomas	5eb14a7826	init: Jagd Apps Heidekreis – Portal, Nachsuche, Drohnenführer, Stöberhunde	2026-05-02 17:31:20 +02:00