 nobswebdev
|
0ef4993ad9
|
Serve hotlink images by single-segment access token URL.
Legacy GET /i/:uploadId/:secret unchanged. Lookup new uploads by access token hash; decrypt with token from path.
|
2026-11-02 00:24:02 +01:00 |
|
|
nobswebdev
|
4a534a8007
|
Add production deployment guide and restrict CORS to development.
Document clearnet, TLS, and Tor setup; enable Nest CORS only in development and skip CORS_ORIGINS validation in production.
|
2026-10-28 22:07:32 +01:00 |
|
|
nobswebdev
|
915d62f09a
|
Trust nginx proxy and drop hotlink response headers from Nest.
Rate limits use X-Forwarded-For behind prod nginx; hotlink security headers are set on /i/ in nginx only.
|
2026-10-28 20:56:21 +01:00 |
|
|
nobswebdev
|
5db90f02c5
|
Add GET /i/:id/:secret hotlink image decrypt stream.
|
2026-10-26 21:47:30 +01:00 |
|
|
nobswebdev
|
7f99256863
|
Verify ALTCHA before upload body parse with single-use replay store.
Run challenge TTL and replay tracking in middleware, remove the guard, and
wire ScheduleModule for pruning used solutions.
|
2026-10-12 20:18:36 +02:00 |
|
|
nobswebdev
|
64041aa9a8
|
add TypeORM postgres config and migration runner.
|
2026-10-05 20:54:50 +02:00 |
|
|
nobswebdev
|
a785ce775f
|
add NestJS skeleton and GET /api/health-check.
Thin API bootstrap with config module and nullcart-style health route for Docker checks.
|
2026-09-27 23:05:28 +02:00 |
|