Adds an in-memory, IP-based fixed-window rate limit (max 3 req/hour)
to app/api/familyguard-flyer/route.ts to mitigate an email-spam/abuse
vector where any client could trigger outbound emails and DB inserts
with no limit. Also guards against a non-string `email` field in the
request body, which previously threw an uncaught TypeError (HTTP 500)
instead of the intended 400 validation response.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhY1QhDXGWfyhrxaJvfpNt
Creates POST /api/familyguard-flyer endpoint that validates email format
and DSGVO consent, records download intent in Supabase flyer_downloads table,
and sends notification and download link emails (fire-and-forget) before
returning the flyer download URL.
Implements Task 4 of 7-task email-gated flyer download feature.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhY1QhDXGWfyhrxaJvfpNt
Add /pakete/familyguard detail page mirroring the VPN page pattern,
list it as the first tile on /pakete (before Nextcloud + Paperless-ngx),
and promote it with a new section directly below the hero on the homepage.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- DataSovereignty: replace all ASCII encodings with proper German umlauts (oe→ö, ae→ä, ue→ü) throughout all text content
- Header: fix misleading nav label "Datenschutz" → "Datensouveränität" (links to data sovereignty section, not legal page)
- Hero: add "Crailsheim" to visible subheadline for local SEO signal
- Contact: add address/location entry for NAP consistency (Name, Address, Phone)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Create public/google73af89007ffca7c2.html for HTML file verification
- Add verification.google meta tag in layout.tsx as redundant fallback
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Schickt nach eingehender Anfrage automatisch eine Bestätigungsmail an
den Anfragenden mit Betreff, Dankestext und direkter Telefonnummer.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Ohne dieses Netz kann der Container supabase-kong nicht erreichen,
was zu "TypeError: fetch failed" in EmailQueue und 401 beim Admin-Login führt.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- next.config.ts: serverExternalPackages für nodemailer hinzugefügt
- instrumentation.ts: statischen Import durch dynamischen ersetzt, damit
Webpack email-queue.ts (und damit nodemailer) nicht im Edge-Bundle analysiert
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Modul 01 (Email): mailer.ts mit Nodemailer + Supabase-Queue, SMTP-Test-Route
- Modul 02 (Admin-Auth): JWT-Sessions, Rate-Limiting, Token-Blacklist, Audit-Logs, Login-Route
- Modul 03 (Analytics): PageTracker, page_views/phone_clicks Tracking, Admin-Analytics-Seite
- Modul 06 (Kunden-Portal): Supabase Auth Login/Registrierung, Kundendashboard, Middleware
- Modul 07 (KPI-Dashboard): Admin-Statistik mit Anfragen-Übersicht und Monats-Diagramm
- contact/route.ts: speichert Anfragen jetzt in Supabase
- Supabase-Types für alle neuen Tabellen ergänzt
- app/admin/page.tsx: Redirect zu /admin/analytics
- AnalyticsTabs: Design-Inkonsistenz behoben (Light-Mode-Karten auf Dark umgestellt)
- layout.tsx: Umlauts-Fehler in Metadata-Description behoben
- lib/audit-log.ts: TypeScript null→undefined Mapping für reason-Feld
- modules/: Wiederverwendbare Modul-Templates mit Migrations und Integrations-Prompts
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
MBO-Tech-IT