Rate Limiting & Deploy Fixes

Nginx

• Moved rate limiting from the app layer to Nginx
• Restricted server access to Cloudflare IPs only, all other traffic gets 403
• Real client IP is now resolved from CF-Connecting-IP header
• Added per-IP connection limits for /banners and /banners/preview
• Blocked common scraping tools (wget, curl, scrapy, python-requests, etc.)
• Rate limits: 5 req/min (60/hour) for banner creation, 20 req/min (180/hour) for previews

API

• Removed RateLimitRPS from app config, rate limiting is now fully handled by Nginx
• WriteTimeout is now driven by cfg.RequestTimeout instead of a hardcoded value
• Added Bio field to the GitHub user data response

CI/CD

• Fixed deploy and rollback scripts to run from the correct directory
• Automatic database backup is now created before each deploy
• Rollback restores the database from the backup of the previous version

Fix context cancellation issue in stats service

Fix context cancellation issue in stats service

CI/CD Testing Release

Look at this CI/CD flow!

Initial release

Merge pull request #33 from hurtki/feature/ci-docker-image-build

add: CI build push docker image to image registry