disable register page

.env.example

@@ -17,6 +17,11 @@ GRAFANA_PASSWORD=change-this-password-in-production
 CELERY_BROKER_URL=redis://redis:6379/0
 CELERY_RESULT_BACKEND=redis://redis:6379/0
 
+# Registration
+# Set to "false" to disable user registration. For prod, build the image with:
+#   docker build --build-arg REGISTRATION_ENABLED=false -t your-image .
+REGISTRATION_ENABLED=true
+
 # MinIO Configuration (Object Storage)
 # MinIO server stays hidden - Flask proxies all requests
 # MINIO_ENDPOINT: Internal Docker network address (for server-to-server communication)

backend/Dockerfile

@@ -1,30 +0,0 @@
-FROM python:3.11-slim
-
-WORKDIR /app
-
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    gcc \
-    postgresql-client \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install Python dependencies
-COPY requirements/ requirements/
-RUN pip install --no-cache-dir -r requirements/prod.txt
-
-# Copy application code
-COPY . .
-
-# Create non-root user
-RUN useradd -m appuser && chown -R appuser:appuser /app
-USER appuser
-
-# Expose port
-EXPOSE 8000
-
-# Health check
-HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
-    CMD curl -f http://localhost:8000/health/ || exit 1
-
-# Run with gunicorn
-CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "4", "wsgi:app"]

backend/app/config.py

@@ -16,6 +16,7 @@ class Config:
     MAX_FAILED_LOGIN_ATTEMPTS = int(os.environ.get("MAX_FAILED_LOGIN_ATTEMPTS", "5"))
     ACCOUNT_LOCK_DURATION_MINUTES = int(os.environ.get("ACCOUNT_LOCK_DURATION_MINUTES", "30"))
     LOCKOUT_STRATEGY = os.environ.get("LOCKOUT_STRATEGY", "timeout")  # "timeout" | "permanent"
+    REGISTRATION_ENABLED = os.environ.get("REGISTRATION_ENABLED", "true").lower() == "true"
 
     # Celery Configuration
     CELERY = {

backend/app/models/login_history.py

@@ -32,7 +32,7 @@ class LoginHistory(db.Model):
             "ip_address": self.ip_address,
             "user_agent": self.user_agent,
             "success": self.success,
-            "created_at": self.created_at.isoformat() if self.created_at else None,
+            "created_at": self.created_at if self.created_at else None,
         }
 
     def __repr__(self):

backend/app/routes/api.py

@@ -1,6 +1,6 @@
 """Auth and user management API routes"""
 
-from flask import Blueprint, jsonify, request
+from flask import Blueprint, current_app, jsonify, request
 from flask_jwt_extended import (
     create_access_token,
     create_refresh_token,
@@ -24,6 +24,9 @@ api_bp = Blueprint("api", __name__)
 @api_bp.route("/auth/register", methods=["POST"])
 def register():
     """Register a new user"""
+    if not current_app.config.get("REGISTRATION_ENABLED", True):
+        return jsonify({"error": "Not found"}), 404
+
     try:
         data = request.get_json()
 

backend/gunicorn.conf.py

@@ -0,0 +1,36 @@
+"""Gunicorn configuration.
+
+All Gunicorn settings live here instead of the Dockerfile CMD so they can be
+tweaked without rebuilding the image, and so the access-log format/timezone are
+defined in one place.
+"""
+
+import os
+import time
+
+
+# ---- Server ----
+bind = "0.0.0.0:8000"
+workers = 2
+
+# ---- Logging ----
+accesslog = "-"
+errorlog = "-"
+capture_output = True
+loglevel = "info"
+
+# %(h)s = real client IP. Gunicorn resolves X-Forwarded-For based on its built-in
+# proxy trust logic (the same mechanism already validated behind Traefik).
+# %(t)s = overridden by CustomLogger -> [2026-08-09 20:41:00 +0300]
+access_log_format = '%(h)s - - [%(t)s] "%(r)s" %(s)s %(b)s "%(f)s" "%(a)s"'
+logger_class = "gunicorn_logger.CustomLogger"
+
+# logger_class = CustomLogger
+
+# ---- Timezone for Python logging / error logs ----
+# Default to UTC unless TZ is set (e.g. TZ=Africa/Nairobi at docker run time).
+os.environ.setdefault("TZ", os.environ.get("TZ", "UTC"))
+try:
+    time.tzset()
+except AttributeError:  # non-Unix
+    pass

backend/gunicorn_logger.py

@@ -0,0 +1,29 @@
+"""Custom Gunicorn logger.
+
+Overrides the default timestamp atom `%(t)s` in access logs from Gunicorn's
+default format `[09/Aug/2026:17:42:48 +0000]` to an ISO-like local-time format
+`[2026-08-09 20:41:00 +0300]`, honoring the TZ environment variable.
+"""
+
+import os
+from datetime import datetime, timezone
+from zoneinfo import ZoneInfo
+
+from gunicorn.glogging import Logger
+
+TIMEZONE = os.environ.get("TZ", "UTC")
+
+
+class CustomLogger(Logger):
+    """Gunicorn logger that emits timezone-aware ISO timestamps."""
+
+    def atoms(self, resp, req, environ, request_time):
+        """Build the log atoms, overriding the time atom with a custom format."""
+        atoms = super().atoms(resp, req, environ, request_time)
+        try:
+            now = datetime.now(ZoneInfo(TIMEZONE))
+        except Exception:
+            now = datetime.now(timezone.utc)
+        # [09/Aug/2026:17:42:48 +0000] -> [2026-08-09 20:41:00 +0300]
+        atoms["t"] = f"[{now.strftime('%Y-%m-%d %H:%M:%S %z')}]"
+        return atoms

backend/tests/test_routes.py

@@ -82,6 +82,23 @@ class TestAuthRoutes:
         data = response.get_json()
         assert "already exists" in data["error"].lower()
 
+    @pytest.mark.auth
+    def test_register_disabled(self, app, client, monkeypatch):
+        """Test registration returns 404 when disabled via config"""
+        monkeypatch.setitem(app.config, "REGISTRATION_ENABLED", False)
+        response = client.post(
+            "/api/auth/register",
+            json={
+                "email": "disabled@example.com",
+                "password": "password123",
+                "confirm_password": "password123",
+            },
+        )
+
+        assert response.status_code == 404
+        data = response.get_json()
+        assert data["error"] == "Not found"
+
     @pytest.mark.auth
     def test_login_success(self, client, regular_user):
         """Test successful login"""

backend/wsgi.py

@@ -1,8 +1,11 @@
 import os
 from app import create_app
+from werkzeug.middleware.proxy_fix import ProxyFix
 
 env = os.environ.get('FLASK_ENV', 'dev')
 app = create_app(env)
+app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_prefix=1)
+
 
 if __name__ == '__main__':
     app.run(host='0.0.0.0', port=8000)

docker-compose.yml

@@ -1,191 +0,0 @@
-version: '3.8'
-
-services:
-  backend:
-    build:
-      context: ./backend
-      dockerfile: Dockerfile
-    container_name: crafting-shop-backend
-    ports:
-      - "5000:5000"
-    environment:
-      - FLASK_ENV=${FLASK_ENV:-prod}
-      - SECRET_KEY=${SECRET_KEY}
-      - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
-    depends_on:
-      - postgres
-      - redis
-    networks:
-      - crafting-shop-network
-    volumes:
-      - backend-data:/app/instance
-    restart: unless-stopped
-
-  frontend:
-    build:
-      context: ./frontend
-      dockerfile: Dockerfile
-    container_name: crafting-shop-frontend
-    ports:
-      - "80:80"
-    depends_on:
-      - backend
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-  postgres:
-    image: postgres:15-alpine
-    container_name: crafting-shop-postgres
-    environment:
-      - POSTGRES_USER=${POSTGRES_USER:-crafting}
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
-      - POSTGRES_DB=${POSTGRES_DB:-crafting_shop}
-    volumes:
-      - postgres-data:/var/lib/postgresql/data
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-  redis:
-    image: redis:7-alpine
-    container_name: crafting-shop-redis
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-  minio:
-    image: minio/minio:latest
-    container_name: crafting-shop-minio
-    command: server /data --console-address ":9001"
-    ports:
-      - "9000:9000"
-      - "9001:9001"
-    environment:
-      - MINIO_ROOT_USER=${MINIO_ROOT_USER:-minioadmin}
-      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD:-minioadmin}
-    volumes:
-      - minio-data:/data
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
-      interval: 30s
-      timeout: 20s
-      retries: 3
-
-  celery_worker:
-    build:
-      context: ./backend
-      dockerfile: Dockerfile
-    container_name: crafting-shop-celery-worker
-    command: celery -A celery_worker worker --loglevel=info --concurrency=4
-    environment:
-      - FLASK_ENV=${FLASK_ENV:-prod}
-      - SECRET_KEY=${SECRET_KEY}
-      - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
-      - CELERY_BROKER_URL=redis://redis:6379/0
-      - CELERY_RESULT_BACKEND=redis://redis:6379/0
-    depends_on:
-      - redis
-      - postgres
-      - backend
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD", "celery", "-A", "celery_worker", "inspect", "ping", "-d", "celery@$$HOSTNAME"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-      start_period: 40s
-
-  celery_beat:
-    build:
-      context: ./backend
-      dockerfile: Dockerfile
-    container_name: crafting-shop-celery-beat
-    command: celery -A celery_worker beat --loglevel=info
-    environment:
-      - FLASK_ENV=${FLASK_ENV:-prod}
-      - SECRET_KEY=${SECRET_KEY}
-      - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
-      - CELERY_BROKER_URL=redis://redis:6379/0
-      - CELERY_RESULT_BACKEND=redis://redis:6379/0
-    depends_on:
-      - redis
-      - postgres
-      - backend
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-    volumes:
-      - celery-beat-data:/app/celerybeat
-
-  flower:
-    build:
-      context: ./backend
-      dockerfile: Dockerfile
-    container_name: crafting-shop-flower
-    command: celery -A celery_worker flower --port=5555
-    ports:
-      - "5555:5555"
-    environment:
-      - FLASK_ENV=${FLASK_ENV:-prod}
-      - SECRET_KEY=${SECRET_KEY}
-      - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
-      - CELERY_BROKER_URL=redis://redis:6379/0
-      - CELERY_RESULT_BACKEND=redis://redis:6379/0
-    depends_on:
-      - redis
-      - celery_worker
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: crafting-shop-prometheus
-    ports:
-      - "9090:9090"
-    volumes:
-      - ./infrastructure/monitoring/prometheus.yml:/etc/prometheus/prometheus.yml
-      - prometheus-data:/prometheus
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-  grafana:
-    image: grafana/grafana:latest
-    container_name: crafting-shop-grafana
-    ports:
-      - "3001:3000"
-    environment:
-      - GF_SECURITY_ADMIN_USER=${GRAFANA_USER:-admin}
-      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
-    volumes:
-      - grafana-data:/var/lib/grafana
-    networks:
-      - crafting-shop-network
-    restart: unless-stopped
-
-volumes:
-  postgres-data:
-  redis-data:
-  prometheus-data:
-  grafana-data:
-  backend-data:
-  celery-beat-data:
-  minio-data:
-
-networks:
-  crafting-shop-network:
-    driver: bridge

docker/Dockerfile

@@ -3,6 +3,10 @@
 # ---------------------------------------------------------
 FROM node:18-alpine AS frontend-build
 
+# Build-time configurable: pass --build-arg REGISTRATION_ENABLED=false to disable registration
+ARG REGISTRATION_ENABLED=true
+ENV VITE_REGISTRATION_ENABLED=$REGISTRATION_ENABLED
+
 WORKDIR /app/frontend
 
 # Copy package files first for better caching
@@ -20,6 +24,10 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
+# Build-time configurable for the backend: pass --build-arg REGISTRATION_ENABLED=false to disable registration
+ARG REGISTRATION_ENABLED=true
+ENV REGISTRATION_ENABLED=$REGISTRATION_ENABLED
+
 # Install system dependencies (if needed for python packages)
 # RUN apt-get update && apt-get install -y ... && rm -rf /var/lib/apt/lists/*
 
@@ -41,10 +49,13 @@ USER appuser
 # Expose port
 EXPOSE 8000
 
-# Run with Gunicorn (Production WSGI Server)
-# --bind 0.0.0.0 makes it accessible outside the container
-# --access-logfile - sends access logs to stdout
-# --error-logfile - sends error logs to stderr
-# --capture-output ensures all output is captured
-# --log-level info sets the logging level
-CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "--access-logfile", "-", "--error-logfile", "-", "--capture-output", "--log-level", "info", "wsgi:app"]
+# # Run with Gunicorn (Production WSGI Server)
+# # --bind 0.0.0.0 makes it accessible outside the container
+# # --access-logfile - sends access logs to stdout
+# # --error-logfile - sends error logs to stderr
+# # --capture-output ensures all output is captured
+# # --log-level info sets the logging level
+# CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "--access-logfile", "-", "--access-logformat", "%({x-forwarded-for}i)s - - [%(t)s] \"%(r)s\" %(s)s %(b)s \"%(f)s\" \"%(a)s\"", "--error-logfile", "-", "--capture-output", "--log-level", "info", "wsgi:app"]
+
+ENV TZ=Africa/Nairobi
+CMD ["gunicorn", "-c", "gunicorn.conf.py", "wsgi:app"]

frontend/nginx.conf

@@ -1,42 +0,0 @@
-server {
-    listen 80;
-    server_name localhost;
-    root /usr/share/nginx/html;
-    index index.html;
-
-    # Add real IP logging to Nginx access logs
-    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
-                    '$status $body_bytes_sent "$http_referer" '
-                    '"$http_user_agent" "$http_x_forwarded_for"';
-    
-    access_log /var/log/nginx/access.log main;
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-
-    location /api {
-        proxy_pass http://backend:5000;
-        
-        # Forward the real IP
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # Add these headers too
-        proxy_set_header X-Forwarded-Host $host;
-        proxy_set_header X-Forwarded-Port $server_port;
-    }
-
-    location /health {
-        proxy_pass http://backend:5000;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    gzip on;
-    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+text text/javascript;
-}

frontend/src/App.tsx

@@ -11,6 +11,7 @@ import { Navbar } from './components/Navbar';
 import { Home } from './pages/Home';
 import Login from './pages/Login';
 import { Register } from './pages/Register';
+import { REGISTRATION_ENABLED } from './config/registration';
 import Profile from './pages/Profile';
 import { ProtectedRoute } from './components/ProtectedRoute';
 import { Boards } from './pages/Boards';
@@ -26,6 +27,7 @@ import CreateWiki from './pages/CreateWiki';
 import { WikiDetail } from './pages/WikiDetail';
 import { EditWiki } from './pages/EditWiki';
 import { CardDetail } from './pages/CardDetail';
+import { NotFound } from './pages/NotFound';
 import { BoardDetailLayout } from './components/BoardDetailLayout';
 
 const App = () => {
@@ -59,7 +61,10 @@ const App = () => {
                 />
                 <Route path="/home" element={<Home />} />
                 <Route path="/login" element={<Login />} />
-                <Route path="/register" element={<Register />} />
+                <Route
+                  path="/register"
+                  element={REGISTRATION_ENABLED ? <Register /> : <Navigate to="/login" replace />}
+                />
                 <Route
                   path="/profile"
                   element={
@@ -196,6 +201,7 @@ const App = () => {
                     </ProtectedRoute>
                   }
                 />
+                <Route path="*" element={<NotFound />} />
               </Routes>
             </main>
             {/* Order matters for Z-Index: Loader (70) > Toast (60) > Modal (50) */}

frontend/src/components/Navbar.tsx

@@ -3,6 +3,7 @@ import { useState } from 'react';
 import { useApp } from '../context/AppContext';
 import { useAuth } from '../hooks/useAuth';
 import { TaskboardLogo } from './TaskboardLogo';
+import { REGISTRATION_ENABLED } from '../config/registration';
 import MenuIcon from './icons/MenuIcon';
 import CloseIcon from './icons/CloseIcon';
 import UserIcon from './icons/UserIcon';
@@ -69,12 +70,14 @@ export function Navbar() {
                   >
                     Login
                   </Link>
+                  {REGISTRATION_ENABLED && (
                     <Link
                       to="/register"
                       className="bg-blue-600 hover:bg-blue-700 text-white px-4 py-2 rounded-md text-sm font-medium transition-colors"
                     >
                       Register
                     </Link>
+                  )}
                 </>
               )}
           </div>
@@ -136,6 +139,7 @@ export function Navbar() {
                 >
                   Login
                 </Link>
+                {REGISTRATION_ENABLED && (
                   <Link
                     to="/register"
                     className="bg-blue-600 hover:bg-blue-700 text-white block px-3 py-2 rounded-md text-base font-medium"
@@ -143,6 +147,7 @@ export function Navbar() {
                   >
                     Register
                   </Link>
+                )}
               </>
             )}
           </div>

frontend/src/config/registration.ts

@@ -0,0 +1,5 @@
+// Inlined at build time by Vite via import.meta.env.
+// Unset (local dev / no build arg) → registration is enabled (backward compatible).
+// Set to "false" via docker build --build-arg REGISTRATION_ENABLED=false → registration disabled.
+export const REGISTRATION_ENABLED =
+  import.meta.env.VITE_REGISTRATION_ENABLED !== 'false';

frontend/src/hooks/useAuth.ts

@@ -3,7 +3,7 @@ import { useApi } from './useApi';
 import { useLoader } from '../context/loaders/useLoader';
 import { useToast } from '../context/toasts/useToast';
 import { useApp } from '../context/AppContext';
-import { User } from '../types';
+import { RegisterData, User } from '../types';
 
 export function useAuth() {
   const navigate = useNavigate();
@@ -58,13 +58,7 @@ export function useAuth() {
     }
   };
 
-  const handleRegister = async (userData: {
-    email: string;
-    password: string;
-    username: string;
-    first_name?: string;
-    last_name?: string;
-  }) => {
+  const handleRegister = async (userData: RegisterData) => {
     try {
       const response = await withLoader(() => registerApi(userData), 'Creating account...');
 

frontend/src/hooks/useCardMutations.ts

@@ -3,7 +3,7 @@ import { useLoader } from '../context/loaders/useLoader';
 import { useToast } from '../context/toasts/useToast';
 import { Card } from '../types/kanban';
 
-export function useCardMutations(boardId: number, onUpdate: () => void) {
+export function useCardMutations(_boardId: number, onUpdate: () => void) {
   const { createCard, updateCard, deleteCard } = useApi();
   const { withLoader } = useLoader();
   const { addNotification } = useToast();
@@ -69,7 +69,7 @@ export function useCardMutations(boardId: number, onUpdate: () => void) {
 
   const moveCard = async (
     card: Card,
-    fromListId: number,
+    _fromListId: number,
     toListId: number,
     newPosition: number
   ) => {

frontend/src/pages/Login.tsx

@@ -3,6 +3,7 @@ import { zodResolver } from '@hookform/resolvers/zod';
 import { z } from 'zod';
 import { Link, useSearchParams } from 'react-router-dom';
 import { useAuth } from '../hooks/useAuth';
+import { REGISTRATION_ENABLED } from '../config/registration';
 
 const loginSchema = z.object({
   email: z.string().min(1, 'Email is required').email('Invalid email address'),
@@ -81,12 +82,14 @@ export default function Login() {
         </button>
       </form>
 
+      {REGISTRATION_ENABLED && (
         <p className="mt-6 text-center text-gray-400">
           Don&lsquo;t have an account?
           <Link to="/register" className="ml-2 text-blue-400 hover:text-blue-300">
             Register
           </Link>
         </p>
+      )}
     </div>
   );
 }

frontend/src/pages/NotFound.tsx

@@ -0,0 +1,30 @@
+import { Link } from "react-router-dom";
+import { useDocumentTitle } from "../hooks/useDocumentTitle";
+import { TaskboardLogo } from "../components/TaskboardLogo";
+
+export function NotFound() {
+  useDocumentTitle("Page Not Found");
+
+  return (
+    <div className="flex-1 p-8 mx-auto w-full max-w-7xl">
+      <div className="text-center py-24">
+        <div className="flex justify-center mb-8">
+          <TaskboardLogo className="h-16 w-auto" />
+        </div>
+        <p className="text-7xl font-bold text-gray-600 mb-4">404</p>
+        <h1 className="text-3xl font-bold text-white mb-4">Page Not Found</h1>
+        <p className="text-lg text-gray-400 mb-8 max-w-md mx-auto">
+          The page you are looking for doesn't exist or may have been moved.
+        </p>
+        <div className="flex flex-wrap justify-center gap-4">
+          <Link
+            to="/"
+            className="bg-gray-700 hover:bg-gray-600 text-white font-medium py-2.5 px-6 rounded-lg transition-colors"
+          >
+            Go Home
+          </Link>
+        </div>
+      </div>
+    </div>
+  );
+}

frontend/src/vite-env.d.ts

@@ -0,0 +1 @@
+/// <reference types="vite/client" />