nobswebdev 4a534a8007 Add production deployment guide and restrict CORS to development. ...

Document clearnet, TLS, and Tor setup; enable Nest CORS only in development and skip CORS_ORIGINS validation in production.

2026-10-28 22:07:32 +01:00

..

config

Add production deployment guide and restrict CORS to development.

2026-10-28 22:07:32 +01:00

consts

Add GET /i/:id/:secret hotlink image decrypt stream.

2026-10-26 21:47:30 +01:00

database

Fix drop lastViewedAt migration order for fresh databases.

2026-10-27 22:09:45 +01:00

middlewares

Verify ALTCHA before upload body parse with single-use replay store.

2026-10-12 20:18:36 +02:00

modules

Trust nginx proxy and drop hotlink response headers from Nest.

2026-10-28 20:56:21 +01:00

types

Verify ALTCHA before upload body parse with single-use replay store.

2026-10-12 20:18:36 +02:00

utils

Add UploadCleanupService for cron purge and delete uploads.

2026-10-27 21:07:01 +01:00

validation/decorators

Restrict hotlink mimeType to image/* and harden image responses.

2026-10-26 23:06:23 +01:00

AppModule.ts

Verify ALTCHA before upload body parse with single-use replay store.

2026-10-12 20:18:36 +02:00

main.ts

Add production deployment guide and restrict CORS to development.

2026-10-28 22:07:32 +01:00