4 Commits

Author	SHA1	Message	Date
Marcel	103d454e14	fix(rate-limit): only trust X-Forwarded-For from known reverse proxies ... Without this guard any client could send X-Forwarded-For: <spoofed-ip> and bypass per-IP rate limiting entirely. Also switches expireAfterWrite → expireAfterAccess so the 1-minute window starts at first request, not last, and fixes the .gitignore entry that accidentally merged **/test-results/ and .worktrees/ into one broken pattern. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-19 01:20:11 +02:00
Marcel	b4004fce56	chore: ignore .worktrees/ directory	2026-04-19 00:17:32 +02:00
Marcel	273b43261f	chore: update ignore file	2026-03-17 13:35:32 +00:00
Marcel	e63adb964d	restructure: flatten workspace nesting, move devcontainer to root ... - backend/workspaces/backend/ → backend/ - backend/workspaces/frontend/ → frontend/ - backend/.devcontainer/ + .vscode/ → repo root (where VS Code expects them) - loose scripts/SQL files → scripts/ - replace nested git repo with single repo at project root - update docker-compose.yml build context and devcontainer.json path - add root .gitignore Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-15 11:47:58 +01:00