refactor: Replace custom X-Auth-Redirect header with standard HTTP redirect for unauthorized access.

feat: Implement a gatekeeper service for access control and add CMS health monitoring with a connectivity notice.
chore: update .env.example with current environment variable examples.
2026-02-01 16:52:57 +01:00 · 2026-02-01 16:27:52 +01:00 · 2026-02-01 15:16:46 +01:00 · 2026-02-01 14:55:38 +01:00 · 2026-02-01 14:26:44 +01:00 · 2026-02-01 14:17:09 +01:00
53 changed files with 6009 additions and 285 deletions
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,5 +1,6 @@
 node_modules
 .next
+!.next/cache
 .git
 .DS_Store
 .env
--- a/.env
+++ b/.env
@@ -19,3 +19,13 @@ MAIL_USERNAME=postmaster@mg.mintel.me
 MAIL_PASSWORD=4592fcb94599ee1a45b4ac2386fd0a64-102c75d8-ca2870e6
 MAIL_FROM="KLZ Cables <postmaster@mg.mintel.me>"
 MAIL_RECIPIENTS=marc@cablecreations.de,info@klz-cables.com
+
+# Directus
+DIRECTUS_URL=https://cms.klz-cables.com
+DIRECTUS_KEY=59fb8f4c1a51b18fe28ad947f713914e
+DIRECTUS_SECRET=7459038d41401dfb11254cf7f1ef2d0f
+DIRECTUS_ADMIN_EMAIL=marc@mintel.me
+DIRECTUS_ADMIN_PASSWORD=Tim300493.
+DIRECTUS_DB_NAME=directus
+DIRECTUS_DB_USER=directus
+DIRECTUS_DB_PASSWORD=directus
--- a/.env.example
+++ b/.env.example
@@ -39,6 +39,10 @@ MAIL_RECIPIENTS=info@klz-cables.com
 # Logging
 # ────────────────────────────────────────────────────────────────────────────
 LOG_LEVEL=info
+GATEKEEPER_PASSWORD=klz2026
+SENTRY_DSN=
+# For Directus Error Tracking
+# SENTRY_ENVIRONMENT is set automatically by CI

 # ────────────────────────────────────────────────────────────────────────────
 # Deployment Configuration (CI/CD only)
@@ -48,11 +52,6 @@ IMAGE_TAG=latest
 TRAEFIK_HOST=klz-cables.com
 ENV_FILE=.env

-# ────────────────────────────────────────────────────────────────────────────
-# Varnish Cache (Docker only)
-# ────────────────────────────────────────────────────────────────────────────
-VARNISH_CACHE_SIZE=256m
-
 # ============================================================================
 # IMPORTANT NOTES
 # ============================================================================
--- a/.env.production
+++ b/.env.production
@@ -26,6 +26,15 @@ MAIL_PASSWORD=
 MAIL_FROM=KLZ Cables <noreply@klz-cables.com>
 MAIL_RECIPIENTS=info@klz-cables.com

+# Strapi
+STRAPI_DATABASE_NAME=strapi
+STRAPI_DATABASE_USERNAME=strapi
+STRAPI_DATABASE_PASSWORD=
+APP_KEYS=
+API_TOKEN_SALT=
+ADMIN_JWT_SECRET=
+TRANSFER_TOKEN_SALT=
+JWT_SECRET=

 # Varnish Cache Size (optional)
 VARNISH_CACHE_SIZE=256m
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,32 @@
+name: CI - Lint, Typecheck & Test
+
+on:
+  push:
+    branches-ignore:
+      - main
+  pull_request:
+
+jobs:
+  quality-assurance:
+    runs-on: docker
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: 🔍 Lint
+        run: npm run lint
+
+      - name: 🏗️ Typecheck
+        run: npm run typecheck
+
+      - name: 🧪 Test
+        run: npm run test
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -6,51 +6,61 @@ on:
      - main
    tags:
      - 'v*'
+  workflow_dispatch:
+    inputs:
+      skip_long_checks:
+        description: 'Skip tests? (true/false)'
+        required: false
+        default: 'false'
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false

 jobs:
-  build-and-deploy:
+  # ──────────────────────────────────────────────────────────────────────────────
+  # JOB 1: Prepare & Determine Environment
+  # ──────────────────────────────────────────────────────────────────────────────
+  prepare:
+    name: 🔍 Prepare Environment
    runs-on: docker
-
+    outputs:
+      target:           ${{ steps.determine.outputs.target }}
+      image_tag:        ${{ steps.determine.outputs.image_tag }}
+      env_file:         ${{ steps.determine.outputs.env_file }}
+      traefik_host:     ${{ steps.determine.outputs.traefik_host }}
+      next_public_base_url: ${{ steps.determine.outputs.next_public_base_url }}
+      directus_url:     ${{ steps.determine.outputs.directus_url }}
+      directus_host:    ${{ steps.determine.outputs.directus_host }}
+      project_name:     ${{ steps.determine.outputs.project_name }}
+      is_prod:          ${{ steps.determine.outputs.is_prod }}
+      gotify_title:     ${{ steps.determine.outputs.gotify_title }}
+      gotify_priority:  ${{ steps.determine.outputs.gotify_priority }}
+      short_sha:        ${{ steps.determine.outputs.short_sha }}
+      commit_msg:       ${{ steps.determine.outputs.commit_msg }}
    steps:
-      # ──────────────────────────────────────────────────────────────────────────────
-      # Workflow Start & Basic Info
-      # ──────────────────────────────────────────────────────────────────────────────
-      - name: 📢 Workflow Start
-        run: |
-          echo "┌──────────────────────────────────────────────────────────────┐"
-          echo "│ 🚀 KLZ Cables Deployment Workflow gestartet                  │"
-          echo "├──────────────────────────────────────────────────────────────┤"
-          echo "│ Repository: ${{ github.repository }}                        │"
-          echo "│ Ref:        ${{ github.ref }}                               │"
-          echo "│ Ref-Name:   ${{ github.ref_name }}                          │"
-          echo "│ Commit:     ${{ github.sha }}                               │"
-          echo "│ Actor:      ${{ github.actor }}                             │"
-          echo "│ Datum:      $(date -u +'%Y-%m-%d %H:%M:%S UTC')             │"
-          echo "└──────────────────────────────────────────────────────────────┘"
-
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

-      # ──────────────────────────────────────────────────────────────────────────────
-      # Environment bestimmen + Commit-Message holen
-      # ──────────────────────────────────────────────────────────────────────────────
      - name: 🔍 Environment & Version ermitteln
        id: determine
        run: |
          TAG="${{ github.ref_name }}"
          SHORT_SHA="${{ github.sha }}"
          SHORT_SHA="${SHORT_SHA:0:9}"
-
-          # Commit-Message holen (erste Zeile)
          COMMIT_MSG=$(git log -1 --pretty=%s || echo "No commit message available")

          if [[ "${{ github.ref_type }}" == "branch" && "$TAG" == "main" ]]; then
            TARGET="testing"
            IMAGE_TAG="main-${SHORT_SHA}"
            ENV_FILE=".env.testing"
-            TRAEFIK_HOST="\`testing.klz-cables.com\`"
+            TRAEFIK_HOST='`testing.klz-cables.com`'
+            NEXT_PUBLIC_BASE_URL="https://testing.klz-cables.com"
+            DIRECTUS_URL="https://cms.testing.klz-cables.com"
+            DIRECTUS_HOST='`cms.testing.klz-cables.com`'
+            PROJECT_NAME="klz-cables-testing"
            IS_PROD="false"
            GOTIFY_TITLE="🧪 Testing-Deploy"
            GOTIFY_PRIORITY=4
@@ -59,7 +69,11 @@ jobs:
              TARGET="production"
              IMAGE_TAG="$TAG"
              ENV_FILE=".env.prod"
-              TRAEFIK_HOST="\`klz-cables.com\`, \`www.klz-cables.com\`"
+              TRAEFIK_HOST='`klz-cables.com`, `www.klz-cables.com`'
+              NEXT_PUBLIC_BASE_URL="https://klz-cables.com"
+              DIRECTUS_URL="https://cms.klz-cables.com"
+              DIRECTUS_HOST='`cms.klz-cables.com`'
+              PROJECT_NAME="klz-cables-prod"
              IS_PROD="true"
              GOTIFY_TITLE="🚀 Production-Release"
              GOTIFY_PRIORITY=6
@@ -67,7 +81,11 @@ jobs:
              TARGET="staging"
              IMAGE_TAG="$TAG"
              ENV_FILE=".env.staging"
-              TRAEFIK_HOST="\`staging.klz-cables.com\`"
+              TRAEFIK_HOST='`staging.klz-cables.com`'
+              NEXT_PUBLIC_BASE_URL="https://staging.klz-cables.com"
+              DIRECTUS_URL="https://cms.staging.klz-cables.com"
+              DIRECTUS_HOST='`cms.staging.klz-cables.com`'
+              PROJECT_NAME="klz-cables-staging"
              IS_PROD="false"
              GOTIFY_TITLE="🧪 Staging-Deploy (Pre-Release)"
              GOTIFY_PRIORITY=5
@@ -84,77 +102,157 @@ jobs:
          echo "image_tag=$IMAGE_TAG" >> $GITHUB_OUTPUT
          echo "env_file=$ENV_FILE" >> $GITHUB_OUTPUT
          echo "traefik_host=$TRAEFIK_HOST" >> $GITHUB_OUTPUT
+          echo "next_public_base_url=$NEXT_PUBLIC_BASE_URL" >> $GITHUB_OUTPUT
+          echo "directus_url=$DIRECTUS_URL" >> $GITHUB_OUTPUT
+          echo "directus_host=$DIRECTUS_HOST" >> $GITHUB_OUTPUT
+          echo "project_name=$PROJECT_NAME" >> $GITHUB_OUTPUT
          echo "is_prod=$IS_PROD" >> $GITHUB_OUTPUT
          echo "gotify_title=$GOTIFY_TITLE" >> $GITHUB_OUTPUT
          echo "gotify_priority=$GOTIFY_PRIORITY" >> $GITHUB_OUTPUT
          echo "short_sha=$SHORT_SHA" >> $GITHUB_OUTPUT
          echo "commit_msg=$COMMIT_MSG" >> $GITHUB_OUTPUT

-      - name: ⏭️ Skip Deployment
-        if: steps.determine.outputs.target == 'skip'
-        run: |
-          echo "Deployment übersprungen – kein passender Trigger (main oder v*-Tag)"
-          exit 0
+  # ──────────────────────────────────────────────────────────────────────────────
+  # JOB 2: Quality Assurance (Lint & Test)
+  # ──────────────────────────────────────────────────────────────────────────────
+  qa:
+    name: 🧪 Quality Assurance
+    needs: prepare
+    if: needs.prepare.outputs.target != 'skip'
+    runs-on: docker
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+
+      - name: 📦 Restore npm cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: 🧪 Run Checks in Parallel
+        if: github.event.inputs.skip_long_checks != 'true'
+        run: |
+          npm run lint &
+          LINT_PID=$!
+          npm run typecheck &
+          TYPE_PID=$!
+          npm run test &
+          TEST_PID=$!
+
+          # Wait for all and fail if any fail
+          wait $LINT_PID || exit 1
+          wait $TYPE_PID || exit 1
+          wait $TEST_PID || exit 1
+
+  # ──────────────────────────────────────────────────────────────────────────────
+  # JOB 3: Build & Push Docker Image
+  # ──────────────────────────────────────────────────────────────────────────────
+  build:
+    name: 🏗️ Build & Push
+    needs: prepare
+    runs-on: docker
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4

-      # ──────────────────────────────────────────────────────────────────────────────
-      # Registry Login
-      # ──────────────────────────────────────────────────────────────────────────────
      - name: 🔐 Registry Login
        run: |
-          echo "🔐 Login zu registry.infra.mintel.me ..."
          echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin

-      # ──────────────────────────────────────────────────────────────────────────────
-      # Build & Push
-      # ──────────────────────────────────────────────────────────────────────────────
      - name: 🏗️ Docker Image bauen & pushen
        env:
-          IMAGE_TAG: ${{ steps.determine.outputs.image_tag }}
-          NEXT_PUBLIC_BASE_URL:          ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_BASE_URL          || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_BASE_URL          || secrets.TESTING_NEXT_PUBLIC_BASE_URL          || secrets.NEXT_PUBLIC_BASE_URL) }}
-          NEXT_PUBLIC_UMAMI_WEBSITE_ID:  ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID  || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.TESTING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID) }}
-          NEXT_PUBLIC_UMAMI_SCRIPT_URL:  ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL  || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.TESTING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL) }}
+          IMAGE_TAG: ${{ needs.prepare.outputs.image_tag }}
+          TARGET:    ${{ needs.prepare.outputs.target }}
+          NEXT_PUBLIC_BASE_URL:          ${{ needs.prepare.outputs.next_public_base_url }}
+          NEXT_PUBLIC_UMAMI_WEBSITE_ID:  ${{ needs.prepare.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID  || (needs.prepare.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.TESTING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID) }}
+          NEXT_PUBLIC_UMAMI_SCRIPT_URL:  ${{ needs.prepare.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL  || (needs.prepare.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.TESTING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL) }}
+          DIRECTUS_URL:                  ${{ needs.prepare.outputs.directus_url }}
        run: |
-          echo "🏗️ Building → ${{ steps.determine.outputs.target }} / $IMAGE_TAG"
+          echo "🏗️ Building → $TARGET / $IMAGE_TAG"
          docker buildx build \
            --pull \
            --platform linux/arm64 \
            --build-arg NEXT_PUBLIC_BASE_URL="$NEXT_PUBLIC_BASE_URL" \
            --build-arg NEXT_PUBLIC_UMAMI_WEBSITE_ID="$NEXT_PUBLIC_UMAMI_WEBSITE_ID" \
            --build-arg NEXT_PUBLIC_UMAMI_SCRIPT_URL="$NEXT_PUBLIC_UMAMI_SCRIPT_URL" \
+            --build-arg DIRECTUS_URL="$DIRECTUS_URL" \
            -t registry.infra.mintel.me/mintel/klz-cables.com:$IMAGE_TAG \
+            --cache-from type=registry,ref=registry.infra.mintel.me/mintel/klz-cables.com:buildcache \
+            --cache-to type=registry,ref=registry.infra.mintel.me/mintel/klz-cables.com:buildcache,mode=max \
            --push .

-      # ──────────────────────────────────────────────────────────────────────────────
-      # Deploy via SSH
-      # ──────────────────────────────────────────────────────────────────────────────
-      - name: 🚀 Deploy to ${{ steps.determine.outputs.target }}
+      - name: 🏗️ Gatekeeper bauen & pushen
        env:
-          IMAGE_TAG:            ${{ steps.determine.outputs.image_tag }}
-          ENV_FILE:             ${{ steps.determine.outputs.env_file }}
-          TRAEFIK_HOST:         ${{ steps.determine.outputs.traefik_host }}
-          # Secrets wie vorher – mit Fallback-Logik pro Umgebung
-          NEXT_PUBLIC_BASE_URL:          ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_BASE_URL          || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_BASE_URL          || secrets.TESTING_NEXT_PUBLIC_BASE_URL          || secrets.NEXT_PUBLIC_BASE_URL) }}
-          NEXT_PUBLIC_UMAMI_WEBSITE_ID:  ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID  || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.TESTING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID) }}
-          NEXT_PUBLIC_UMAMI_SCRIPT_URL:  ${{ steps.determine.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL  || (steps.determine.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.TESTING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL) }}
-          SENTRY_DSN:                    ${{ steps.determine.outputs.target == 'production' && secrets.SENTRY_DSN                    || (steps.determine.outputs.target == 'staging' && secrets.STAGING_SENTRY_DSN                    || secrets.TESTING_SENTRY_DSN                    || secrets.SENTRY_DSN) }}
-          MAIL_HOST:                     ${{ secrets.MAIL_HOST }}
-          MAIL_PORT:                     ${{ secrets.MAIL_PORT }}
-          MAIL_USERNAME:                 ${{ secrets.MAIL_USERNAME }}
-          MAIL_PASSWORD:                 ${{ secrets.MAIL_PASSWORD }}
-          MAIL_FROM:                     ${{ secrets.MAIL_FROM }}
-          MAIL_RECIPIENTS:               ${{ secrets.MAIL_RECIPIENTS }}
+          IMAGE_TAG: ${{ needs.prepare.outputs.image_tag }}
        run: |
-          echo "Deploying ${{ steps.determine.outputs.target }} → $IMAGE_TAG"
+          docker buildx build \
+            --pull \
+            --platform linux/arm64 \
+            -t registry.infra.mintel.me/mintel/klz-cables-gatekeeper:$IMAGE_TAG \
+            --push ./gatekeeper
+
+
+  # ──────────────────────────────────────────────────────────────────────────────
+  # JOB 4: Deploy via SSH
+  # ──────────────────────────────────────────────────────────────────────────────
+  deploy:
+    name: 🚀 Deploy
+    needs: [prepare, build, qa]
+    runs-on: docker
+    env:
+      TARGET:               ${{ needs.prepare.outputs.target }}
+      IMAGE_TAG:            ${{ needs.prepare.outputs.image_tag }}
+      ENV_FILE:             ${{ needs.prepare.outputs.env_file }}
+      TRAEFIK_HOST:         ${{ needs.prepare.outputs.traefik_host }}
+      NEXT_PUBLIC_BASE_URL:          ${{ needs.prepare.outputs.next_public_base_url }}
+      NEXT_PUBLIC_UMAMI_WEBSITE_ID:  ${{ needs.prepare.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID  || (needs.prepare.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.TESTING_NEXT_PUBLIC_UMAMI_WEBSITE_ID  || secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID) }}
+      NEXT_PUBLIC_UMAMI_SCRIPT_URL:  ${{ needs.prepare.outputs.target == 'production' && secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL  || (needs.prepare.outputs.target == 'staging' && secrets.STAGING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.TESTING_NEXT_PUBLIC_UMAMI_SCRIPT_URL  || secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL) }}
+      SENTRY_DSN:                    ${{ needs.prepare.outputs.target == 'production' && secrets.SENTRY_DSN                    || (needs.prepare.outputs.target == 'staging' && secrets.STAGING_SENTRY_DSN                    || secrets.TESTING_SENTRY_DSN                    || secrets.SENTRY_DSN) }}
+      MAIL_HOST:                     ${{ secrets.MAIL_HOST }}
+      MAIL_PORT:                     ${{ secrets.MAIL_PORT }}
+      MAIL_USERNAME:                 ${{ secrets.MAIL_USERNAME }}
+      MAIL_PASSWORD:                 ${{ secrets.MAIL_PASSWORD }}
+      MAIL_FROM:                     ${{ secrets.MAIL_FROM }}
+      MAIL_RECIPIENTS:               ${{ secrets.MAIL_RECIPIENTS }}
+      DIRECTUS_URL:                  ${{ needs.prepare.outputs.directus_url }}
+      DIRECTUS_HOST:                 ${{ needs.prepare.outputs.directus_host }}
+      PROJECT_NAME:                  ${{ needs.prepare.outputs.project_name }}
+      DIRECTUS_KEY:                  ${{ secrets.DIRECTUS_KEY }}
+      DIRECTUS_SECRET:               ${{ secrets.DIRECTUS_SECRET }}
+      DIRECTUS_ADMIN_EMAIL:          ${{ secrets.DIRECTUS_ADMIN_EMAIL }}
+      DIRECTUS_ADMIN_PASSWORD:       ${{ secrets.DIRECTUS_ADMIN_PASSWORD }}
+      DIRECTUS_DB_NAME:              ${{ secrets.DIRECTUS_DB_NAME || 'directus' }}
+      DIRECTUS_DB_USER:              ${{ secrets.DIRECTUS_DB_USER || 'directus' }}
+      DIRECTUS_DB_PASSWORD:          ${{ secrets.DIRECTUS_DB_PASSWORD }}
+      DIRECTUS_API_TOKEN:            ${{ secrets.DIRECTUS_API_TOKEN }}
+      GATEKEEPER_PASSWORD:           ${{ secrets.GATEKEEPER_PASSWORD || 'klz2026' }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: 🚀 Deploy to ${{ env.TARGET }}
+        run: |
+          echo "Deploying $TARGET → $IMAGE_TAG"

-          # SSH vorbereiten
          mkdir -p ~/.ssh
          echo "${{ secrets.ALPHA_SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh-keyscan -H alpha.mintel.me >> ~/.ssh/known_hosts 2>/dev/null

-          # .env-Datei erstellen
          cat > /tmp/klz-cables.env << EOF
-          # Generated by CI - ${{ steps.determine.outputs.target }} - $(date -u)
+          # Generated by CI - $TARGET - $(date -u)
          NODE_ENV=production
          NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
          NEXT_PUBLIC_UMAMI_WEBSITE_ID=$NEXT_PUBLIC_UMAMI_WEBSITE_ID
@@ -167,76 +265,82 @@ jobs:
          MAIL_FROM=$MAIL_FROM
          MAIL_RECIPIENTS=$MAIL_RECIPIENTS

+          # Directus
+          DIRECTUS_URL=$DIRECTUS_URL
+          DIRECTUS_HOST=$DIRECTUS_HOST
+          DIRECTUS_KEY=$DIRECTUS_KEY
+          DIRECTUS_SECRET=$DIRECTUS_SECRET
+          DIRECTUS_ADMIN_EMAIL=$DIRECTUS_ADMIN_EMAIL
+          DIRECTUS_ADMIN_PASSWORD=$DIRECTUS_ADMIN_PASSWORD
+          DIRECTUS_DB_NAME=$DIRECTUS_DB_NAME
+          DIRECTUS_DB_USER=$DIRECTUS_DB_USER
+          DIRECTUS_DB_PASSWORD=$DIRECTUS_DB_PASSWORD
+          DIRECTUS_API_TOKEN=$DIRECTUS_API_TOKEN
+          GATEKEEPER_PASSWORD=$GATEKEEPER_PASSWORD
+
          IMAGE_TAG=$IMAGE_TAG
          TRAEFIK_HOST=$TRAEFIK_HOST
          ENV_FILE=$ENV_FILE
+          AUTH_MIDDLEWARE=$( [[ "$TARGET" == "production" ]] && echo "compress" || echo "${PROJECT_NAME}-auth,compress" )
          EOF

          scp -o StrictHostKeyChecking=accept-new /tmp/klz-cables.env root@alpha.mintel.me:/home/deploy/sites/klz-cables.com/$ENV_FILE
          scp -o StrictHostKeyChecking=accept-new docker-compose.yml root@alpha.mintel.me:/home/deploy/sites/klz-cables.com/docker-compose.yml

-          ssh -o StrictHostKeyChecking=accept-new root@alpha.mintel.me IMAGE_TAG="$IMAGE_TAG" ENV_FILE="$ENV_FILE" TRAEFIK_HOST="$TRAEFIK_HOST" bash << 'EOF'
+          ssh -o StrictHostKeyChecking=accept-new root@alpha.mintel.me IMAGE_TAG="$IMAGE_TAG" ENV_FILE="$ENV_FILE" PROJECT_NAME="$PROJECT_NAME" bash << 'EOF'
            set -e
            cd /home/deploy/sites/klz-cables.com
-
            chmod 600 "$ENV_FILE"
            chown deploy:deploy "$ENV_FILE"
-
            echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
-
            echo "→ Pulling image: $IMAGE_TAG"
-            docker compose --env-file "$ENV_FILE" pull
-
+            docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" pull
            echo "→ Starting containers..."
-            docker compose --env-file "$ENV_FILE" up -d
-
+            docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" up -d --remove-orphans
            docker system prune -f --filter "until=168h"
-
            echo "→ Waiting 15s for warmup..."
            sleep 15
-
            echo "→ Container status:"
-            docker compose --env-file "$ENV_FILE" ps
-
-            if ! docker compose --env-file "$ENV_FILE" ps | grep -q "Up"; then
+            docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" ps
+            if ! docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" ps | grep -q "Up"; then
              echo "❌ Fehler: Container nicht Up!"
-              docker compose --env-file "$ENV_FILE" logs --tail=150
+              docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" logs --tail=150
              exit 1
            fi

-            echo "✅ Deployment erfolgreich!"
-          EOF
-
-          rm -f /tmp/klz-cables.env
-
-      # ──────────────────────────────────────────────────────────────────────────────
-      # Summary & Gotify
-      # ──────────────────────────────────────────────────────────────────────────────
+  # ──────────────────────────────────────────────────────────────────────────────
+  # JOB 5: Notifications
+  # ──────────────────────────────────────────────────────────────────────────────
+  notifications:
+    name: 🔔 Notifications
+    needs: [prepare, qa, build, deploy]
+    if: always()
+    runs-on: docker
+    steps:
      - name: 📊 Deployment Summary
-        if: always()
        run: |
          echo "┌──────────────────────────────┐"
          echo "│ Deployment Summary           │"
          echo "├──────────────────────────────┤"
-          echo "│ Status:     ${{ job.status }} │"
-          echo "│ Umgebung:   ${{ steps.determine.outputs.target || 'skipped' }} │"
-          echo "│ Version:    ${{ steps.determine.outputs.image_tag }} │"
-          echo "│ Commit:     ${{ steps.determine.outputs.short_sha }} │"
-          echo "│ Message:    ${{ steps.determine.outputs.commit_msg }} │"
+          echo "│ Status:     ${{ needs.deploy.result }} │"
+          echo "│ Umgebung:   ${{ needs.prepare.outputs.target || 'skipped' }} │"
+          echo "│ Version:    ${{ needs.prepare.outputs.image_tag }} │"
+          echo "│ Commit:     ${{ needs.prepare.outputs.short_sha }} │"
+          echo "│ Message:    ${{ needs.prepare.outputs.commit_msg }} │"
          echo "└──────────────────────────────┘"

      - name: 🔔 Gotify - Success
-        if: success()
+        if: needs.deploy.result == 'success'
        run: |
          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
-            -F "title=${{ steps.determine.outputs.gotify_title }}" \
-            -F "message=Erfolgreich deployt auf **${{ steps.determine.outputs.target }}**\n\nVersion: **${{ steps.determine.outputs.image_tag }}**\nCommit: ${{ steps.determine.outputs.short_sha }} (${{ steps.determine.outputs.commit_msg }})\nVon: ${{ github.actor }}\nRun: ${{ github.run_id }}" \
-            -F "priority=${{ steps.determine.outputs.gotify_priority }}" || true
+            -F "title=${{ needs.prepare.outputs.gotify_title }}" \
+            -F "message=Erfolgreich deployt auf **${{ needs.prepare.outputs.target }}**\n\nVersion: **${{ needs.prepare.outputs.image_tag }}**\nCommit: ${{ needs.prepare.outputs.short_sha }} (${{ needs.prepare.outputs.commit_msg }})\nVon: ${{ github.actor }}\nRun: ${{ github.run_id }}" \
+            -F "priority=4" || true

      - name: 🔔 Gotify - Failure
-        if: failure()
+        if: needs.deploy.result == 'failure' || needs.build.result == 'failure' || needs.qa.result == 'failure'
        run: |
          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
-            -F "title=❌ Deployment FEHLGESCHLAGEN – ${{ steps.determine.outputs.target || 'unknown' }}" \
-            -F "message=**Fehler beim Deploy auf ${{ steps.determine.outputs.target }}**\n\nVersion: ${{ steps.determine.outputs.image_tag || '?' }}\nCommit: ${{ steps.determine.outputs.short_sha || '?' }}\nVon: ${{ github.actor }}\nRun: ${{ github.run_id }}\n\nBitte Logs prüfen!" \
+            -F "title=❌ Deployment FEHLGESCHLAGEN – ${{ needs.prepare.outputs.target || 'unknown' }}" \
+            -F "message=**Fehler beim Deploy auf ${{ needs.prepare.outputs.target }}**\n\nVersion: ${{ needs.prepare.outputs.image_tag || '?' }}\nCommit: ${{ needs.prepare.outputs.short_sha || '?' }}\nVon: ${{ github.actor }}\nRun: ${{ github.run_id }}\n\nBitte Logs prüfen!" \
            -F "priority=8" || true
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,7 @@
 node_modules
-.next
+.next
+.DS_Store
+
+# Directus
+directus/uploads
+!directus/extensions/
--- a/6
+++ b/6
@@ -8,7 +8,7 @@ WORKDIR /app

 # Install dependencies based on the preferred package manager
 COPY package.json package-lock.json* ./
-RUN npm ci
+RUN --mount=type=cache,target=/root/.npm npm ci


 # Rebuild the source code only when needed
@@ -27,15 +27,17 @@ ENV NEXT_TELEMETRY_DISABLED=1
 ARG NEXT_PUBLIC_BASE_URL
 ARG NEXT_PUBLIC_UMAMI_WEBSITE_ID
 ARG NEXT_PUBLIC_UMAMI_SCRIPT_URL
+ARG DIRECTUS_URL

 ENV NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
 ENV NEXT_PUBLIC_UMAMI_WEBSITE_ID=$NEXT_PUBLIC_UMAMI_WEBSITE_ID
 ENV NEXT_PUBLIC_UMAMI_SCRIPT_URL=$NEXT_PUBLIC_UMAMI_SCRIPT_URL
+ENV DIRECTUS_URL=$DIRECTUS_URL

 # Validate environment variables during build
 RUN npx tsx scripts/validate-env.ts

-RUN npm run build
+RUN --mount=type=cache,target=/app/.next/cache npm run build

 # Production image, copy all the files and run next
 FROM base AS runner
--- a/README.md
+++ b/README.md
@@ -29,6 +29,35 @@ npm run export

 # Or run development server
 npm run dev
+
+### 🏗️ CMS (Strapi)
+The CMS runs in Docker. Use the following npm scripts for local development:
+
+```bash
+# Start Strapi and its database
+npm run cms:dev
+
+# View logs
+npm run cms:logs
+
+# Stop the CMS
+npm run cms:stop
+```
+
+Once running, you can access the Strapi admin panel at `http://localhost:1337/admin`.
+
+### 🔄 Data & Migration
+To sync data or migrate existing content:
+
+```bash
+# Export local data
+npm run cms:export -- my-data.tar.gz
+
+# Import data
+npm run cms:import -- my-data.tar.gz
+
+# Migrate existing MDX data to Strapi
+npm run cms:migrate
 ```

 ### Environment Variables
@@ -73,7 +102,8 @@ NEXT_PUBLIC_SENTRY_DSN=https://PUBLIC_KEY@errors.infra.mintel.me/PROJECT_ID
 - **Framework**: Next.js 14 (App Router)
 - **Language**: TypeScript
 - **Styling**: SCSS
- **Data**: Static JSON (WordPress export)
+- **CMS**: Strapi (Source of Truth)
+- **Data**: Static JSON (WordPress export) & Strapi API
 - **Email**: Resend
 - **Analytics**: Vercel (consent-based)
 - **CAPTCHA**: Cloudflare Turnstile
--- a/app/[locale]/[slug]/opengraph-image.tsx
+++ b/app/[locale]/[slug]/opengraph-image.tsx
@@ -1,6 +1,7 @@
 import { ImageResponse } from 'next/og';
 import { getPageBySlug } from '@/lib/pages';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

@@ -8,11 +9,11 @@ export default async function Image({ params: { locale, slug } }: { params: { lo
  const pageData = await getPageBySlug(slug, locale);

  if (!pageData) {
-    return new ImageResponse(
-      <div style={{ display: 'flex', width: '100%', height: '100%', backgroundColor: '#001a4d' }} />
-    );
+    return new Response('Page not found', { status: 404 });
  }

+  const fonts = await getOgFonts();
+
  return new ImageResponse(
    (
      <OGImageTemplate
@@ -22,8 +23,9 @@ export default async function Image({ params: { locale, slug } }: { params: { lo
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/[locale]/api/og/product/route.tsx
+++ b/app/[locale]/api/og/product/route.tsx
@@ -3,6 +3,7 @@ import { getProductBySlug } from '@/lib/mdx';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
 import { NextRequest } from 'next/server';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

@@ -10,7 +11,7 @@ export async function GET(
  request: NextRequest,
  { params }: { params: { locale: string } }
 ) {
-  const { searchParams } = new URL(request.url);
+  const { searchParams, origin } = new URL(request.url);
  const slug = searchParams.get('slug');
  const locale = params.locale || 'en';

@@ -18,6 +19,7 @@ export async function GET(
    return new Response('Missing slug', { status: 400 });
  }

+  const fonts = await getOgFonts();
  const t = await getTranslations({ locale, namespace: 'Products' });

  // Check if it's a category page
@@ -36,8 +38,8 @@ export async function GET(
        />
      ),
      {
-        width: 1200,
-        height: 630,
+        ...OG_IMAGE_SIZE,
+        fonts,
      }
    );
  }
@@ -45,16 +47,13 @@ export async function GET(
  const product = await getProductBySlug(slug, locale);

  if (!product) {
-    return new ImageResponse(
-      <div style={{ display: 'flex', width: '100%', height: '100%', backgroundColor: '#001a4d' }} />
-    );
+    return new Response('Product not found', { status: 404 });
  }

-  const { origin } = new URL(request.url);
  const featuredImage = product.frontmatter.images?.[0]
    ? (product.frontmatter.images[0].startsWith('http')
-        ? product.frontmatter.images[0]
-        : `${origin}${product.frontmatter.images[0]}`)
+      ? product.frontmatter.images[0]
+      : `${origin}${product.frontmatter.images[0]}`)
    : undefined;

  return new ImageResponse(
@@ -63,12 +62,13 @@ export async function GET(
        title={product.frontmatter.title}
        description={product.frontmatter.description}
        label={product.frontmatter.categories?.[0] || 'Product'}
-        image={featuredImage?.startsWith('http') ? featuredImage : undefined}
+        image={featuredImage}
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/[locale]/blog/[slug]/opengraph-image.tsx
+++ b/app/[locale]/blog/[slug]/opengraph-image.tsx
@@ -1,6 +1,7 @@
 import { ImageResponse } from 'next/og';
 import { getPostBySlug } from '@/lib/blog';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

@@ -8,15 +9,19 @@ export default async function Image({ params: { locale, slug } }: { params: { lo
  const post = await getPostBySlug(slug, locale);

  if (!post) {
-    return new ImageResponse(
-      <div style={{ display: 'flex', width: '100%', height: '100%', backgroundColor: '#001a4d' }} />
-    );
+    return new Response('Post not found', { status: 404 });
  }

+  const fonts = await getOgFonts();
+
+  // We don't have request.url here, but we can assume the domain from SITE_URL or config
+  // For local images during dev, relative paths in <img> might not work in Satori
+  // but if we are in nodejs runtime, we could potentially read from disk.
+  // For now, let's just make sure it's absolute.
  const featuredImage = post.frontmatter.featuredImage
    ? (post.frontmatter.featuredImage.startsWith('http')
-        ? post.frontmatter.featuredImage
-        : `https://klz-cables.com${post.frontmatter.featuredImage}`)
+      ? post.frontmatter.featuredImage
+      : `https://klz-cables.com${post.frontmatter.featuredImage}`)
    : undefined;

  return new ImageResponse(
@@ -25,12 +30,13 @@ export default async function Image({ params: { locale, slug } }: { params: { lo
        title={post.frontmatter.title}
        description={post.frontmatter.excerpt}
        label={post.frontmatter.category || 'Blog'}
-        image={featuredImage?.startsWith('http') ? featuredImage : undefined}
+        image={featuredImage}
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/[locale]/blog/opengraph-image.tsx
+++ b/app/[locale]/blog/opengraph-image.tsx
@@ -1,25 +1,25 @@
 import { ImageResponse } from 'next/og';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

 export default async function Image({ params: { locale } }: { params: { locale: string } }) {
  const t = await getTranslations({ locale, namespace: 'Blog.meta' });
-  const title = t('title');
-  const description = t('description');
+  const fonts = await getOgFonts();

  return new ImageResponse(
    (
      <OGImageTemplate
-        title={title}
-        description={description}
+        title={t('title')}
+        description={t('description')}
        label="Blog"
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
--- a/app/[locale]/contact/opengraph-image.tsx
+++ b/app/[locale]/contact/opengraph-image.tsx
@@ -1,11 +1,14 @@
 import { ImageResponse } from 'next/og';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

 export default async function Image({ params: { locale } }: { params: { locale: string } }) {
  const t = await getTranslations({ locale, namespace: 'Contact' });
+  const fonts = await getOgFonts();
+
  const title = t('meta.title') || t('title');
  const description = t('meta.description') || t('subtitle');

@@ -18,8 +21,8 @@ export default async function Image({ params: { locale } }: { params: { locale:
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
--- a/app/[locale]/layout.tsx
+++ b/app/[locale]/layout.tsx
@@ -2,6 +2,7 @@ import Footer from '@/components/Footer';
 import Header from '@/components/Header';
 import JsonLd from '@/components/JsonLd';
 import AnalyticsProvider from '@/components/analytics/AnalyticsProvider';
+import CMSConnectivityNotice from '@/components/CMSConnectivityNotice';
 import { Metadata, Viewport } from 'next';
 import { NextIntlClientProvider } from 'next-intl';
 import { getMessages } from 'next-intl/server';
@@ -20,18 +21,18 @@ export const viewport: Viewport = {
  viewportFit: 'cover',
  themeColor: '#001a4d',
 };
- 
+
 export default async function LocaleLayout({
  children,
-  params: {locale}
+  params: { locale }
 }: {
  children: React.ReactNode;
-  params: {locale: string};
+  params: { locale: string };
 }) {
  // Providing all messages to the client
  // side is the easiest way to get started
  const messages = await getMessages();
- 
+
  return (
    <html lang={locale} className="scroll-smooth overflow-x-hidden">
      <body className="flex flex-col min-h-screen font-sans selection:bg-accent selection:text-primary-dark antialiased overflow-x-hidden">
@@ -42,7 +43,8 @@ export default async function LocaleLayout({
            {children}
          </main>
          <Footer />
-          
+          <CMSConnectivityNotice />
+
          {/* Sends pageviews for client-side navigations */}
          <AnalyticsProvider />
        </NextIntlClientProvider>
--- a/app/[locale]/opengraph-image.tsx
+++ b/app/[locale]/opengraph-image.tsx
@@ -1,11 +1,13 @@
 import { ImageResponse } from 'next/og';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

 export default async function Image({ params: { locale } }: { params: { locale: string } }) {
  const t = await getTranslations({ locale, namespace: 'Index.meta' });
+  const fonts = await getOgFonts();

  return new ImageResponse(
    (
@@ -16,8 +18,9 @@ export default async function Image({ params: { locale } }: { params: { locale:
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/[locale]/products/opengraph-image.tsx
+++ b/app/[locale]/products/opengraph-image.tsx
@@ -1,83 +1,29 @@
 import { ImageResponse } from 'next/og';
-import { getProductBySlug } from '@/lib/mdx';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

-export default async function Image({ params: { locale, slug } }: { params: { locale: string, slug?: string[] } }) {
-  const t = await getTranslations('Products');
+export default async function Image({ params: { locale } }: { params: { locale: string } }) {
+  const t = await getTranslations({ locale, namespace: 'Products' });
+  const fonts = await getOgFonts();

-  // If no slug, it's the main products page
-  if (!slug || slug.length === 0) {
-    const title = t('meta.title') || t('title');
-    const description = t('meta.description') || t('subtitle');
-
-    return new ImageResponse(
-      (
-        <OGImageTemplate
-          title={title}
-          description={description}
-          label="Products"
-        />
-      ),
-      {
-        width: 1200,
-        height: 630,
-      }
-    );
-  }
-
-  const productSlug = slug[slug.length - 1];
-
-  // Check if it's a category page
-  const categories = ['low-voltage-cables', 'medium-voltage-cables', 'high-voltage-cables', 'solar-cables'];
-  if (categories.includes(productSlug)) {
-    const categoryKey = productSlug.replace(/-cables$/, '').replace(/-([a-z])/g, (g) => g[1].toUpperCase());
-    const categoryTitle = t.has(`categories.${categoryKey}.title`) ? t(`categories.${categoryKey}.title`) : productSlug;
-    const categoryDesc = t.has(`categories.${categoryKey}.description`) ? t(`categories.${categoryKey}.description`) : '';
-
-    return new ImageResponse(
-      (
-        <OGImageTemplate
-          title={categoryTitle}
-          description={categoryDesc}
-          label="Product Category"
-        />
-      ),
-      {
-        width: 1200,
-        height: 630,
-      }
-    );
-  }
-
-  const product = await getProductBySlug(productSlug, locale);
-
-  if (!product) {
-    return new ImageResponse(
-      <div style={{ display: 'flex', width: '100%', height: '100%', backgroundColor: '#001a4d' }} />
-    );
-  }
-
-  const featuredImage = product.frontmatter.images?.[0]
-    ? (product.frontmatter.images[0].startsWith('http')
-        ? product.frontmatter.images[0]
-        : `https://klz-cables.com${product.frontmatter.images[0]}`)
-    : undefined;
+  const title = t('meta.title') || t('title');
+  const description = t('meta.description') || t('subtitle');

  return new ImageResponse(
    (
      <OGImageTemplate
-        title={product.frontmatter.title}
-        description={product.frontmatter.description}
-        label={product.frontmatter.categories?.[0] || 'Product'}
-        image={featuredImage?.startsWith('http') ? featuredImage : undefined}
+        title={title}
+        description={description}
+        label="Products"
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/[locale]/team/opengraph-image.tsx
+++ b/app/[locale]/team/opengraph-image.tsx
@@ -1,11 +1,14 @@
 import { ImageResponse } from 'next/og';
 import { getTranslations } from 'next-intl/server';
 import { OGImageTemplate } from '@/components/OGImageTemplate';
+import { getOgFonts, OG_IMAGE_SIZE } from '@/lib/og-helper';

 export const runtime = 'nodejs';

 export default async function Image({ params: { locale } }: { params: { locale: string } }) {
  const t = await getTranslations({ locale, namespace: 'Team' });
+  const fonts = await getOgFonts();
+
  const title = t('meta.title') || t('hero.subtitle');
  const description = t('meta.description') || t('hero.title');

@@ -18,8 +21,9 @@ export default async function Image({ params: { locale } }: { params: { locale:
      />
    ),
    {
-      width: 1200,
-      height: 630,
+      ...OG_IMAGE_SIZE,
+      fonts,
    }
  );
 }
+
--- a/app/actions/contact.ts
+++ b/app/actions/contact.ts
@@ -1,5 +1,7 @@
 "use server";

+import client, { ensureAuthenticated } from "@/lib/directus";
+import { createItem } from "@directus/sdk";
 import { sendEmail } from "@/lib/mail/mailer";
 import ContactEmail from "@/components/emails/ContactEmail";
 import React from "react";
@@ -18,10 +20,34 @@ export async function sendContactFormAction(formData: FormData) {
    return { success: false, error: "Missing required fields" };
  }

+  // 1. Save to Directus
+  try {
+    await ensureAuthenticated();
+    if (productName) {
+      await client.request(createItem('product_requests', {
+        product_name: productName,
+        email,
+        message
+      }));
+      logger.info('Product request stored in Directus');
+    } else {
+      await client.request(createItem('contact_submissions', {
+        name,
+        email,
+        message
+      }));
+      logger.info('Contact submission stored in Directus');
+    }
+  } catch (error) {
+    logger.error('Failed to store submission in Directus', { error });
+    // We continue anyway to try sending the email, but maybe we should report this
+  }
+
+  // 2. Send Email
  logger.info('Sending contact form email', { email, productName });

  const subject = productName
-    ? `Product Inquiry: ${productName}` 
+    ? `Product Inquiry: ${productName}`
    : "New Contact Form Submission";

  const result = await sendEmail({
--- a/app/api/health/cms/route.ts
+++ b/app/api/health/cms/route.ts
@@ -0,0 +1,9 @@
+import { checkHealth } from '@/lib/directus';
+import { NextResponse } from 'next/server';
+
+export const dynamic = 'force-dynamic';
+
+export async function GET() {
+    const health = await checkHealth();
+    return NextResponse.json(health, { status: health.status === 'ok' ? 200 : 503 });
+}
--- a/components/CMSConnectivityNotice.tsx
+++ b/components/CMSConnectivityNotice.tsx
@@ -0,0 +1,72 @@
+'use client';
+
+import React, { useEffect, useState } from 'react';
+import { AlertCircle, RefreshCw, Database } from 'lucide-react';
+
+export default function CMSConnectivityNotice() {
+    const [status, setStatus] = useState<'checking' | 'ok' | 'error'>('checking');
+    const [errorMsg, setErrorMsg] = useState('');
+    const [isVisible, setIsVisible] = useState(false);
+
+    useEffect(() => {
+        // Only show in development or if explicitly checking
+        const checkCMS = async () => {
+            try {
+                const response = await fetch('/api/health/cms');
+                const data = await response.json();
+
+                if (data.status !== 'ok') {
+                    setStatus('error');
+                    setErrorMsg(data.message);
+                    setIsVisible(true);
+                } else {
+                    setStatus('ok');
+                    setIsVisible(false);
+                }
+            } catch (err) {
+                setStatus('error');
+                setErrorMsg('Could not connect to CMS health endpoint');
+                setIsVisible(true);
+            }
+        };
+
+        checkCMS();
+    }, []);
+
+    if (!isVisible) return null;
+
+    return (
+        <div className="fixed bottom-4 right-4 z-[9999] animate-slide-up">
+            <div className="bg-red-500/90 backdrop-blur-md border border-red-400 text-white p-4 rounded-2xl shadow-2xl max-w-sm">
+                <div className="flex items-start gap-3">
+                    <div className="bg-white/20 p-2 rounded-lg">
+                        <AlertCircle className="w-5 h-5" />
+                    </div>
+                    <div className="flex-1">
+                        <h4 className="font-bold text-sm mb-1">CMS Issue Detected</h4>
+                        <p className="text-xs opacity-90 leading-relaxed mb-3">
+                            {errorMsg === 'relation "products" does not exist'
+                                ? 'The database schema is missing. Please sync your local data to this environment.'
+                                : errorMsg || 'The application cannot connect to the Directus CMS.'}
+                        </p>
+                        <div className="flex gap-2">
+                            <button
+                                onClick={() => window.location.reload()}
+                                className="bg-white text-red-600 text-[10px] font-bold uppercase tracking-wider px-3 py-1.5 rounded-lg flex items-center gap-2 hover:bg-neutral-100 transition-colors"
+                            >
+                                <RefreshCw className="w-3 h-3" />
+                                Retry
+                            </button>
+                            <button
+                                onClick={() => setIsVisible(false)}
+                                className="bg-black/20 text-white text-[10px] font-bold uppercase tracking-wider px-3 py-1.5 rounded-lg hover:bg-black/30 transition-colors"
+                            >
+                                Dismiss
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    );
+}
--- a/components/OGImageTemplate.tsx
+++ b/components/OGImageTemplate.tsx
@@ -29,6 +29,7 @@ export function OGImageTemplate({
    backgroundColor: mode === 'light' ? '#ffffff' : primaryBlue,
    padding: '80px',
    position: 'relative',
+    fontFamily: 'Inter',
  };

  return (
@@ -63,22 +64,22 @@ export function OGImageTemplate({
              left: 0,
              right: 0,
              bottom: 0,
-              background: 'linear-gradient(to right, rgba(0,26,77,0.9), rgba(0,26,77,0.4))',
+              background: 'linear-gradient(to right, rgba(0,26,77,0.95), rgba(0,26,77,0.6))',
            }}
          />
        </div>
      )}

-      {/* Decorative Scribble Circle (Simplified for Satori) */}
+      {/* Decorative Brand Accent (Top Right) */}
      <div
        style={{
          position: 'absolute',
-          top: '-100px',
-          right: '-100px',
+          top: '-150px',
+          right: '-150px',
          width: '600px',
          height: '600px',
          borderRadius: '300px',
-          backgroundColor: `${accentGreen}1a`,
+          backgroundColor: `${accentGreen}15`,
          display: 'flex',
        }}
      />
@@ -89,11 +90,11 @@ export function OGImageTemplate({
          <div
            style={{
              fontSize: '24px',
-              fontWeight: 'bold',
+              fontWeight: 700,
              color: accentGreen,
              textTransform: 'uppercase',
-              letterSpacing: '0.2em',
-              marginBottom: '24px',
+              letterSpacing: '0.3em',
+              marginBottom: '32px',
              display: 'flex',
            }}
          >
@@ -104,13 +105,14 @@ export function OGImageTemplate({
        {/* Title */}
        <div
          style={{
-            fontSize: '72px',
-            fontWeight: '900',
+            fontSize: title.length > 40 ? '64px' : '82px',
+            fontWeight: 700,
            color: 'white',
-            lineHeight: '1.1',
-            maxWidth: '900px',
-            marginBottom: '32px',
+            lineHeight: '1.05',
+            maxWidth: '950px',
+            marginBottom: '40px',
            display: 'flex',
+            letterSpacing: '-0.02em',
          }}
        >
          {title}
@@ -121,13 +123,14 @@ export function OGImageTemplate({
          <div
            style={{
              fontSize: '32px',
-              color: 'rgba(255,255,255,0.8)',
-              maxWidth: '800px',
+              color: 'rgba(255,255,255,0.7)',
+              maxWidth: '850px',
              lineHeight: '1.4',
              display: 'flex',
+              fontWeight: 400,
            }}
          >
-            {description}
+            {description.length > 160 ? description.substring(0, 157) + '...' : description}
          </div>
        )}
      </div>
@@ -144,33 +147,34 @@ export function OGImageTemplate({
      >
        <div
          style={{
-            width: '120px',
-            height: '8px',
+            width: '80px',
+            height: '6px',
            backgroundColor: accentGreen,
-            borderRadius: '4px',
+            borderRadius: '3px',
            marginRight: '24px',
          }}
        />
        <div
          style={{
            fontSize: '24px',
-            fontWeight: 'bold',
+            fontWeight: 700,
            color: 'white',
            textTransform: 'uppercase',
-            letterSpacing: '0.1em',
+            letterSpacing: '0.15em',
+            display: 'flex',
          }}
        >
          KLZ Cables
        </div>
      </div>

-      {/* Saturated Blue Accent */}
+      {/* Saturated Blue Brand Strip */}
      <div
        style={{
          position: 'absolute',
          top: 0,
          right: 0,
-          width: '10px',
+          width: '12px',
          height: '100%',
          backgroundColor: saturatedBlue,
        }}
@@ -178,3 +182,4 @@ export function OGImageTemplate({
    </div>
  );
 }
+
--- a/docker-compose.override.yml
+++ b/docker-compose.override.yml
@@ -1,4 +1,27 @@
 services:
  app:
-    env_file:
-      - .env
+    image: node:20-alpine
+    working_dir: /app
+    command: sh -c "npm install && npx next dev"
+    volumes:
+      - .:/app
+    environment:
+      NODE_ENV: development
+      # Docker Internal Communication
+      DIRECTUS_URL: http://directus:8055
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.klz-app-local.rule=Host(`klz.localhost`)"
+      - "traefik.http.routers.klz-app-local.entrypoints=web"
+      - "traefik.http.routers.klz-app-local.service=klz-cables"
+
+  directus:
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.klz-directus-local.rule=Host(`cms.klz.localhost`)"
+      - "traefik.http.routers.klz-directus-local.entrypoints=web"
+      - "traefik.http.routers.klz-directus-local.service=klz-directus"
+    ports:
+      - "8055:8055"
+    environment:
+      PUBLIC_URL: http://cms.klz.localhost
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,30 +4,106 @@ services:
    restart: always
    networks:
      - infra
-    ports:
-      - "3000:3000"
    env_file:
      - ${ENV_FILE:-.env}
    labels:
      - "traefik.enable=true"
      # HTTP ⇒ HTTPS redirect
-      - "traefik.http.routers.klz-cables-web.rule=Host(${TRAEFIK_HOST}) && !PathPrefix(`/.well-known/acme-challenge/`)"
-      - "traefik.http.routers.klz-cables-web.entrypoints=web"
-      - "traefik.http.routers.klz-cables-web.middlewares=redirect-https"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-web.rule=Host(${TRAEFIK_HOST}) && !PathPrefix(`/.well-known/acme-challenge/`)"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-web.entrypoints=web"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-web.middlewares=redirect-https"
      # HTTPS router
-      - "traefik.http.routers.klz-cables.rule=Host(${TRAEFIK_HOST})"
-      - "traefik.http.routers.klz-cables.entrypoints=websecure"
-      - "traefik.http.routers.klz-cables.tls.certresolver=le"
-      - "traefik.http.routers.klz-cables.tls=true"
-      - "traefik.http.routers.klz-cables.service=klz-cables"
-      - "traefik.http.services.klz-cables.loadbalancer.server.port=3000"
-      - "traefik.http.services.klz-cables.loadbalancer.server.scheme=http"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.rule=Host(${TRAEFIK_HOST})"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.entrypoints=websecure"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.tls.certresolver=le"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.tls=true"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.service=${PROJECT_NAME:-klz-cables}"
+      - "traefik.http.services.${PROJECT_NAME:-klz-cables}.loadbalancer.server.port=3000"
+      - "traefik.http.services.${PROJECT_NAME:-klz-cables}.loadbalancer.server.scheme=http"
      # Forwarded Headers
-      - "traefik.http.middlewares.klz-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
-      - "traefik.http.middlewares.klz-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
+      - "traefik.http.middlewares.${PROJECT_NAME:-klz-cables}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.${PROJECT_NAME:-klz-cables}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
      # Middlewares
-      - "traefik.http.routers.klz-cables.middlewares=klz-forward,compress"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}.middlewares=${PROJECT_NAME:-klz-cables}-forward,${AUTH_MIDDLEWARE:-compress}"
+
+      # Gatekeeper Router (to show the login page)
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-gatekeeper.rule=Host(${TRAEFIK_HOST}) && PathPrefix(`/gatekeeper`)"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-gatekeeper.entrypoints=websecure"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-gatekeeper.tls.certresolver=le"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-gatekeeper.tls=true"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-gatekeeper.service=${PROJECT_NAME:-klz-cables}-gatekeeper"
+
+      # Middleware Definitions
+      - "traefik.http.middlewares.${PROJECT_NAME:-klz-cables}-auth.forwardauth.address=http://${PROJECT_NAME}-gatekeeper:3000/verify"
+      - "traefik.http.middlewares.${PROJECT_NAME:-klz-cables}-auth.forwardauth.trustForwardHeader=true"
+      - "traefik.http.middlewares.${PROJECT_NAME:-klz-cables}-auth.forwardauth.authResponseHeaders=X-Auth-User"
+
+  gatekeeper:
+    image: registry.infra.mintel.me/mintel/klz-cables-gatekeeper:${IMAGE_TAG:-latest}
+    container_name: ${PROJECT_NAME:-klz-cables}-gatekeeper
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - ${ENV_FILE:-.env}
+    environment:
+      PORT: 3000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.services.${PROJECT_NAME:-klz-cables}-gatekeeper.loadbalancer.server.port=3000"
+
+  directus:
+    image: directus/directus:11
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - ${ENV_FILE:-.env}
+    environment:
+      KEY: ${DIRECTUS_KEY}
+      SECRET: ${DIRECTUS_SECRET}
+      ADMIN_EMAIL: ${DIRECTUS_ADMIN_EMAIL}
+      ADMIN_PASSWORD: ${DIRECTUS_ADMIN_PASSWORD}
+      DB_CLIENT: 'pg'
+      DB_HOST: 'directus-db'
+      DB_PORT: '5432'
+      DB_DATABASE: ${DIRECTUS_DB_NAME:-directus}
+      DB_USER: ${DIRECTUS_DB_USER:-directus}
+      DB_PASSWORD: ${DIRECTUS_DB_PASSWORD:-directus}
+      WEBSOCKETS_ENABLED: 'true'
+      PUBLIC_URL: ${DIRECTUS_URL:-https://cms.klz-cables.com}
+      # Error Tracking
+      SENTRY_DSN: ${SENTRY_DSN}
+      SENTRY_ENVIRONMENT: ${TARGET:-development}
+    volumes:
+      - ./directus/uploads:/directus/uploads
+      - ./directus/extensions:/directus/extensions
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-directus.rule=Host(${DIRECTUS_HOST})"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-directus.entrypoints=websecure"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-directus.tls.certresolver=le"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-directus.tls=true"
+      - "traefik.http.routers.${PROJECT_NAME:-klz-cables}-directus.middlewares=${PROJECT_NAME:-klz-cables}-forward,${AUTH_MIDDLEWARE:-compress}"
+      - "traefik.http.services.${PROJECT_NAME:-klz-cables}-directus.loadbalancer.server.port=8055"
+
+  directus-db:
+    image: postgres:15-alpine
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - ${ENV_FILE:-.env}
+    environment:
+      POSTGRES_DB: ${DIRECTUS_DB_NAME:-directus}
+      POSTGRES_USER: ${DIRECTUS_DB_USER:-directus}
+      POSTGRES_PASSWORD: ${DIRECTUS_DB_PASSWORD:-directus}
+    volumes:
+      - directus-db-data:/var/lib/postgresql/data

 networks:
  infra:
    external: true
+
+volumes:
+  directus-db-data:
--- a/docker-compose.yml.bak
+++ b/docker-compose.yml.bak
@@ -0,0 +1,81 @@
+services:
+  app:
+    image: registry.infra.mintel.me/mintel/klz-cables.com:latest
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - .env
+    labels:
+      - "traefik.enable=true"
+      # HTTP ⇒ HTTPS redirect
+      - "traefik.http.routers.klz-cables-web.rule=(Host(`klz-cables.com`) || Host(`www.klz-cables.com`) || Host(`staging.klz-cables.com`)) && !PathPrefix(`/.well-known/acme-challenge/`)"
+      - "traefik.http.routers.klz-cables-web.entrypoints=web"
+      - "traefik.http.routers.klz-cables-web.middlewares=redirect-https"
+      # HTTPS router
+      - "traefik.http.routers.klz-cables.rule=Host(`klz-cables.com`) || Host(`www.klz-cables.com`) || Host(`staging.klz-cables.com`)"
+      - "traefik.http.routers.klz-cables.entrypoints=websecure"
+      - "traefik.http.routers.klz-cables.tls.certresolver=le"
+      - "traefik.http.routers.klz-cables.tls=true"
+      - "traefik.http.routers.klz-cables.service=klz-cables"
+      - "traefik.http.services.klz-cables.loadbalancer.server.port=3000"
+      - "traefik.http.services.klz-cables.loadbalancer.server.scheme=http"
+      # Forwarded Headers
+      - "traefik.http.middlewares.klz-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.klz-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
+      # Middlewares
+      - "traefik.http.routers.klz-cables.middlewares=klz-forward,compress"
+
+  cms:
+    build:
+      context: ./cms
+      dockerfile: Dockerfile
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - .env
+    environment:
+      DATABASE_CLIENT: postgres
+      DATABASE_HOST: cms-db
+      DATABASE_PORT: 5432
+      DATABASE_NAME: ${STRAPI_DATABASE_NAME:-strapi}
+      DATABASE_USERNAME: ${STRAPI_DATABASE_USERNAME:-strapi}
+      DATABASE_PASSWORD: ${STRAPI_DATABASE_PASSWORD:-strapi}
+      NODE_ENV: ${NODE_ENV:-development}
+      STRAPI_URL: ${STRAPI_URL:-https://cms.klz-cables.com}
+    volumes:
+      - ./cms/config:/opt/app/config
+      - ./cms/src:/opt/app/src
+      - ./cms/package.json:/opt/app/package.json
+      - ./cms/package-lock.json:/opt/app/package-lock.json
+      - ./cms/public/uploads:/opt/app/public/uploads
+      - ./cms/dist:/opt/app/dist
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.klz-cms.rule=Host(`cms.klz-cables.com`) || Host(`cms-staging.klz-cables.com`)"
+      - "traefik.http.routers.klz-cms.entrypoints=websecure"
+      - "traefik.http.routers.klz-cms.tls.certresolver=le"
+      - "traefik.http.routers.klz-cms.tls=true"
+      - "traefik.http.services.klz-cms.loadbalancer.server.port=1337"
+
+  cms-db:
+    image: postgres:16-alpine
+    restart: always
+    networks:
+      - infra
+    env_file:
+      - .env
+    environment:
+      POSTGRES_DB: ${STRAPI_DATABASE_NAME:-strapi}
+      POSTGRES_USER: ${STRAPI_DATABASE_USERNAME:-strapi}
+      POSTGRES_PASSWORD: ${STRAPI_DATABASE_PASSWORD:-strapi}
+    volumes:
+      - cms-db-data:/var/lib/postgresql/data
+
+networks:
+  infra:
+    external: true
+
+volumes:
+  cms-db-data:
--- a/docs/DEPLOYMENT.md
+++ b/docs/DEPLOYMENT.md
@@ -70,6 +70,15 @@ These are loaded from the `.env` file at runtime and are only available on the s
 | `MAIL_RECIPIENTS` | ❌ No | Comma-separated list of recipient emails |
 | `REDIS_URL` | ❌ No | Redis connection URL (e.g., `redis://redis:6379/2`) |
 | `REDIS_KEY_PREFIX` | ❌ No | Redis key prefix (default: `klz:`) |
+| `STRAPI_DATABASE_NAME` | ✅ Yes | Strapi database name |
+| `STRAPI_DATABASE_USERNAME` | ✅ Yes | Strapi database username |
+| `STRAPI_DATABASE_PASSWORD` | ✅ Yes | Strapi database password |
+| `STRAPI_URL` | ✅ Yes | URL of the Strapi CMS |
+| `APP_KEYS` | ✅ Yes | Strapi application keys (comma-separated) |
+| `API_TOKEN_SALT` | ✅ Yes | Strapi API token salt |
+| `ADMIN_JWT_SECRET` | ✅ Yes | Strapi admin JWT secret |
+| `TRANSFER_TOKEN_SALT` | ✅ Yes | Strapi transfer token salt |
+| `JWT_SECRET` | ✅ Yes | Strapi JWT secret |

 ## Local Development

--- a/gatekeeper/Dockerfile
+++ b/gatekeeper/Dockerfile
@@ -0,0 +1,7 @@
+FROM node:20-alpine
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --omit=dev
+COPY . .
+EXPOSE 3000
+CMD ["node", "index.js"]
--- a/gatekeeper/index.js
+++ b/gatekeeper/index.js
@@ -0,0 +1,60 @@
+const express = require('express');
+const cookieParser = require('cookie-parser');
+const path = require('path');
+
+const app = express();
+const PORT = process.env.PORT || 3000;
+const GATEKEEPER_PASSWORD = process.env.GATEKEEPER_PASSWORD || 'klz2026';
+const AUTH_COOKIE_NAME = 'klz_gatekeeper_session';
+
+app.set('view engine', 'ejs');
+app.set('views', path.join(__dirname, 'views'));
+app.use(express.urlencoded({ extended: true }));
+app.use(cookieParser());
+app.use(express.static(path.join(__dirname, 'public')));
+
+// ForwardAuth check endpoint
+app.get('/verify', (req, res) => {
+    const session = req.cookies[AUTH_COOKIE_NAME];
+
+    if (session === GATEKEEPER_PASSWORD) {
+        return res.status(200).send('OK');
+    }
+
+    // Traefik will use this to redirect if requested
+    const originalUrl = req.headers['x-forwarded-uri'] || '/';
+    const host = req.headers['x-forwarded-host'] || '';
+    const proto = req.headers['x-forwarded-proto'] || 'https';
+
+    // Redirect to login
+    res.redirect(`${proto}://${host}/gatekeeper/login?redirect=${encodeURIComponent(originalUrl)}`);
+});
+
+// Login page
+app.get('/gatekeeper/login', (req, res) => {
+    res.render('login', {
+        error: req.query.error ? 'Invalid password' : null,
+        redirect: req.query.redirect || '/'
+    });
+});
+
+// Handle login
+app.post('/gatekeeper/login', (req, res) => {
+    const { password, redirect } = req.body;
+
+    if (password === GATEKEEPER_PASSWORD) {
+        res.cookie(AUTH_COOKIE_NAME, GATEKEEPER_PASSWORD, {
+            httpOnly: true,
+            secure: true,
+            path: '/',
+            maxAge: 30 * 24 * 60 * 60 * 1000 // 30 days
+        });
+        return res.redirect(redirect || '/');
+    }
+
+    res.redirect(`/gatekeeper/login?error=1&redirect=${encodeURIComponent(redirect || '/')}`);
+});
+
+app.listen(PORT, () => {
+    console.log(`Gatekeeper listening on port ${PORT}`);
+});
--- a/gatekeeper/package-lock.json
+++ b/gatekeeper/package-lock.json
@@ -0,0 +1,922 @@
+{
+    "name": "klz-gatekeeper",
+    "version": "1.0.0",
+    "lockfileVersion": 3,
+    "requires": true,
+    "packages": {
+        "": {
+            "name": "klz-gatekeeper",
+            "version": "1.0.0",
+            "dependencies": {
+                "cookie-parser": "^1.4.6",
+                "ejs": "^3.1.9",
+                "express": "^4.18.2"
+            }
+        },
+        "node_modules/accepts": {
+            "version": "1.3.8",
+            "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+            "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+            "license": "MIT",
+            "dependencies": {
+                "mime-types": "~2.1.34",
+                "negotiator": "0.6.3"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/array-flatten": {
+            "version": "1.1.1",
+            "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+            "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+            "license": "MIT"
+        },
+        "node_modules/async": {
+            "version": "3.2.6",
+            "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
+            "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+            "license": "MIT"
+        },
+        "node_modules/balanced-match": {
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
+            "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+            "license": "MIT"
+        },
+        "node_modules/body-parser": {
+            "version": "1.20.4",
+            "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz",
+            "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==",
+            "license": "MIT",
+            "dependencies": {
+                "bytes": "~3.1.2",
+                "content-type": "~1.0.5",
+                "debug": "2.6.9",
+                "depd": "2.0.0",
+                "destroy": "~1.2.0",
+                "http-errors": "~2.0.1",
+                "iconv-lite": "~0.4.24",
+                "on-finished": "~2.4.1",
+                "qs": "~6.14.0",
+                "raw-body": "~2.5.3",
+                "type-is": "~1.6.18",
+                "unpipe": "~1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.8",
+                "npm": "1.2.8000 || >= 1.4.16"
+            }
+        },
+        "node_modules/brace-expansion": {
+            "version": "2.0.2",
+            "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+            "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+            "license": "MIT",
+            "dependencies": {
+                "balanced-match": "^1.0.0"
+            }
+        },
+        "node_modules/bytes": {
+            "version": "3.1.2",
+            "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+            "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/call-bind-apply-helpers": {
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+            "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+            "license": "MIT",
+            "dependencies": {
+                "es-errors": "^1.3.0",
+                "function-bind": "^1.1.2"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/call-bound": {
+            "version": "1.0.4",
+            "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+            "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bind-apply-helpers": "^1.0.2",
+                "get-intrinsic": "^1.3.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/content-disposition": {
+            "version": "0.5.4",
+            "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+            "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+            "license": "MIT",
+            "dependencies": {
+                "safe-buffer": "5.2.1"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/content-type": {
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+            "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/cookie": {
+            "version": "0.7.2",
+            "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+            "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/cookie-parser": {
+            "version": "1.4.7",
+            "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.7.tgz",
+            "integrity": "sha512-nGUvgXnotP3BsjiLX2ypbQnWoGUPIIfHQNZkkC668ntrzGWEZVW70HDEB1qnNGMicPje6EttlIgzo51YSwNQGw==",
+            "license": "MIT",
+            "dependencies": {
+                "cookie": "0.7.2",
+                "cookie-signature": "1.0.6"
+            },
+            "engines": {
+                "node": ">= 0.8.0"
+            }
+        },
+        "node_modules/cookie-signature": {
+            "version": "1.0.6",
+            "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
+            "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
+            "license": "MIT"
+        },
+        "node_modules/debug": {
+            "version": "2.6.9",
+            "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+            "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+            "license": "MIT",
+            "dependencies": {
+                "ms": "2.0.0"
+            }
+        },
+        "node_modules/depd": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+            "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/destroy": {
+            "version": "1.2.0",
+            "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+            "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8",
+                "npm": "1.2.8000 || >= 1.4.16"
+            }
+        },
+        "node_modules/dunder-proto": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+            "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bind-apply-helpers": "^1.0.1",
+                "es-errors": "^1.3.0",
+                "gopd": "^1.2.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/ee-first": {
+            "version": "1.1.1",
+            "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+            "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+            "license": "MIT"
+        },
+        "node_modules/ejs": {
+            "version": "3.1.10",
+            "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
+            "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "jake": "^10.8.5"
+            },
+            "bin": {
+                "ejs": "bin/cli.js"
+            },
+            "engines": {
+                "node": ">=0.10.0"
+            }
+        },
+        "node_modules/encodeurl": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+            "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/es-define-property": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+            "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/es-errors": {
+            "version": "1.3.0",
+            "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+            "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/es-object-atoms": {
+            "version": "1.1.1",
+            "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+            "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+            "license": "MIT",
+            "dependencies": {
+                "es-errors": "^1.3.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/escape-html": {
+            "version": "1.0.3",
+            "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+            "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+            "license": "MIT"
+        },
+        "node_modules/etag": {
+            "version": "1.8.1",
+            "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+            "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/express": {
+            "version": "4.22.1",
+            "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz",
+            "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==",
+            "license": "MIT",
+            "dependencies": {
+                "accepts": "~1.3.8",
+                "array-flatten": "1.1.1",
+                "body-parser": "~1.20.3",
+                "content-disposition": "~0.5.4",
+                "content-type": "~1.0.4",
+                "cookie": "~0.7.1",
+                "cookie-signature": "~1.0.6",
+                "debug": "2.6.9",
+                "depd": "2.0.0",
+                "encodeurl": "~2.0.0",
+                "escape-html": "~1.0.3",
+                "etag": "~1.8.1",
+                "finalhandler": "~1.3.1",
+                "fresh": "~0.5.2",
+                "http-errors": "~2.0.0",
+                "merge-descriptors": "1.0.3",
+                "methods": "~1.1.2",
+                "on-finished": "~2.4.1",
+                "parseurl": "~1.3.3",
+                "path-to-regexp": "~0.1.12",
+                "proxy-addr": "~2.0.7",
+                "qs": "~6.14.0",
+                "range-parser": "~1.2.1",
+                "safe-buffer": "5.2.1",
+                "send": "~0.19.0",
+                "serve-static": "~1.16.2",
+                "setprototypeof": "1.2.0",
+                "statuses": "~2.0.1",
+                "type-is": "~1.6.18",
+                "utils-merge": "1.0.1",
+                "vary": "~1.1.2"
+            },
+            "engines": {
+                "node": ">= 0.10.0"
+            },
+            "funding": {
+                "type": "opencollective",
+                "url": "https://opencollective.com/express"
+            }
+        },
+        "node_modules/filelist": {
+            "version": "1.0.4",
+            "resolved": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz",
+            "integrity": "sha512-w1cEuf3S+DrLCQL7ET6kz+gmlJdbq9J7yXCSjK/OZCPA+qEN1WyF4ZAf0YYJa4/shHJra2t/d/r8SV4Ji+x+8Q==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "minimatch": "^5.0.1"
+            }
+        },
+        "node_modules/finalhandler": {
+            "version": "1.3.2",
+            "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+            "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+            "license": "MIT",
+            "dependencies": {
+                "debug": "2.6.9",
+                "encodeurl": "~2.0.0",
+                "escape-html": "~1.0.3",
+                "on-finished": "~2.4.1",
+                "parseurl": "~1.3.3",
+                "statuses": "~2.0.2",
+                "unpipe": "~1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/forwarded": {
+            "version": "0.2.0",
+            "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+            "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/fresh": {
+            "version": "0.5.2",
+            "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+            "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/function-bind": {
+            "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+            "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+            "license": "MIT",
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/get-intrinsic": {
+            "version": "1.3.0",
+            "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+            "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bind-apply-helpers": "^1.0.2",
+                "es-define-property": "^1.0.1",
+                "es-errors": "^1.3.0",
+                "es-object-atoms": "^1.1.1",
+                "function-bind": "^1.1.2",
+                "get-proto": "^1.0.1",
+                "gopd": "^1.2.0",
+                "has-symbols": "^1.1.0",
+                "hasown": "^2.0.2",
+                "math-intrinsics": "^1.1.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/get-proto": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+            "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+            "license": "MIT",
+            "dependencies": {
+                "dunder-proto": "^1.0.1",
+                "es-object-atoms": "^1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/gopd": {
+            "version": "1.2.0",
+            "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+            "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/has-symbols": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+            "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/hasown": {
+            "version": "2.0.2",
+            "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
+            "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+            "license": "MIT",
+            "dependencies": {
+                "function-bind": "^1.1.2"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/http-errors": {
+            "version": "2.0.1",
+            "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+            "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+            "license": "MIT",
+            "dependencies": {
+                "depd": "~2.0.0",
+                "inherits": "~2.0.4",
+                "setprototypeof": "~1.2.0",
+                "statuses": "~2.0.2",
+                "toidentifier": "~1.0.1"
+            },
+            "engines": {
+                "node": ">= 0.8"
+            },
+            "funding": {
+                "type": "opencollective",
+                "url": "https://opencollective.com/express"
+            }
+        },
+        "node_modules/iconv-lite": {
+            "version": "0.4.24",
+            "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+            "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+            "license": "MIT",
+            "dependencies": {
+                "safer-buffer": ">= 2.1.2 < 3"
+            },
+            "engines": {
+                "node": ">=0.10.0"
+            }
+        },
+        "node_modules/inherits": {
+            "version": "2.0.4",
+            "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+            "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+            "license": "ISC"
+        },
+        "node_modules/ipaddr.js": {
+            "version": "1.9.1",
+            "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+            "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.10"
+            }
+        },
+        "node_modules/jake": {
+            "version": "10.9.4",
+            "resolved": "https://registry.npmjs.org/jake/-/jake-10.9.4.tgz",
+            "integrity": "sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "async": "^3.2.6",
+                "filelist": "^1.0.4",
+                "picocolors": "^1.1.1"
+            },
+            "bin": {
+                "jake": "bin/cli.js"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/math-intrinsics": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+            "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
+        "node_modules/media-typer": {
+            "version": "0.3.0",
+            "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+            "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/merge-descriptors": {
+            "version": "1.0.3",
+            "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+            "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+            "license": "MIT",
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
+        "node_modules/methods": {
+            "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+            "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/mime": {
+            "version": "1.6.0",
+            "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+            "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+            "license": "MIT",
+            "bin": {
+                "mime": "cli.js"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
+        "node_modules/mime-db": {
+            "version": "1.52.0",
+            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+            "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/mime-types": {
+            "version": "2.1.35",
+            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+            "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+            "license": "MIT",
+            "dependencies": {
+                "mime-db": "1.52.0"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/minimatch": {
+            "version": "5.1.6",
+            "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.6.tgz",
+            "integrity": "sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g==",
+            "license": "ISC",
+            "dependencies": {
+                "brace-expansion": "^2.0.1"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/ms": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+            "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+            "license": "MIT"
+        },
+        "node_modules/negotiator": {
+            "version": "0.6.3",
+            "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+            "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/object-inspect": {
+            "version": "1.13.4",
+            "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+            "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/on-finished": {
+            "version": "2.4.1",
+            "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+            "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+            "license": "MIT",
+            "dependencies": {
+                "ee-first": "1.1.1"
+            },
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/parseurl": {
+            "version": "1.3.3",
+            "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+            "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/path-to-regexp": {
+            "version": "0.1.12",
+            "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+            "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
+            "license": "MIT"
+        },
+        "node_modules/picocolors": {
+            "version": "1.1.1",
+            "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+            "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+            "license": "ISC"
+        },
+        "node_modules/proxy-addr": {
+            "version": "2.0.7",
+            "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+            "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+            "license": "MIT",
+            "dependencies": {
+                "forwarded": "0.2.0",
+                "ipaddr.js": "1.9.1"
+            },
+            "engines": {
+                "node": ">= 0.10"
+            }
+        },
+        "node_modules/qs": {
+            "version": "6.14.1",
+            "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+            "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
+            "license": "BSD-3-Clause",
+            "dependencies": {
+                "side-channel": "^1.1.0"
+            },
+            "engines": {
+                "node": ">=0.6"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/range-parser": {
+            "version": "1.2.1",
+            "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+            "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/raw-body": {
+            "version": "2.5.3",
+            "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+            "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+            "license": "MIT",
+            "dependencies": {
+                "bytes": "~3.1.2",
+                "http-errors": "~2.0.1",
+                "iconv-lite": "~0.4.24",
+                "unpipe": "~1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/safe-buffer": {
+            "version": "5.2.1",
+            "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+            "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/feross"
+                },
+                {
+                    "type": "patreon",
+                    "url": "https://www.patreon.com/feross"
+                },
+                {
+                    "type": "consulting",
+                    "url": "https://feross.org/support"
+                }
+            ],
+            "license": "MIT"
+        },
+        "node_modules/safer-buffer": {
+            "version": "2.1.2",
+            "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+            "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+            "license": "MIT"
+        },
+        "node_modules/send": {
+            "version": "0.19.2",
+            "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+            "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+            "license": "MIT",
+            "dependencies": {
+                "debug": "2.6.9",
+                "depd": "2.0.0",
+                "destroy": "1.2.0",
+                "encodeurl": "~2.0.0",
+                "escape-html": "~1.0.3",
+                "etag": "~1.8.1",
+                "fresh": "~0.5.2",
+                "http-errors": "~2.0.1",
+                "mime": "1.6.0",
+                "ms": "2.1.3",
+                "on-finished": "~2.4.1",
+                "range-parser": "~1.2.1",
+                "statuses": "~2.0.2"
+            },
+            "engines": {
+                "node": ">= 0.8.0"
+            }
+        },
+        "node_modules/send/node_modules/ms": {
+            "version": "2.1.3",
+            "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+            "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+            "license": "MIT"
+        },
+        "node_modules/serve-static": {
+            "version": "1.16.3",
+            "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+            "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+            "license": "MIT",
+            "dependencies": {
+                "encodeurl": "~2.0.0",
+                "escape-html": "~1.0.3",
+                "parseurl": "~1.3.3",
+                "send": "~0.19.1"
+            },
+            "engines": {
+                "node": ">= 0.8.0"
+            }
+        },
+        "node_modules/setprototypeof": {
+            "version": "1.2.0",
+            "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+            "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+            "license": "ISC"
+        },
+        "node_modules/side-channel": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+            "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+            "license": "MIT",
+            "dependencies": {
+                "es-errors": "^1.3.0",
+                "object-inspect": "^1.13.3",
+                "side-channel-list": "^1.0.0",
+                "side-channel-map": "^1.0.1",
+                "side-channel-weakmap": "^1.0.2"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/side-channel-list": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+            "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+            "license": "MIT",
+            "dependencies": {
+                "es-errors": "^1.3.0",
+                "object-inspect": "^1.13.3"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/side-channel-map": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+            "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bound": "^1.0.2",
+                "es-errors": "^1.3.0",
+                "get-intrinsic": "^1.2.5",
+                "object-inspect": "^1.13.3"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/side-channel-weakmap": {
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+            "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+            "license": "MIT",
+            "dependencies": {
+                "call-bound": "^1.0.2",
+                "es-errors": "^1.3.0",
+                "get-intrinsic": "^1.2.5",
+                "object-inspect": "^1.13.3",
+                "side-channel-map": "^1.0.1"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
+            }
+        },
+        "node_modules/statuses": {
+            "version": "2.0.2",
+            "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+            "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/toidentifier": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+            "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=0.6"
+            }
+        },
+        "node_modules/type-is": {
+            "version": "1.6.18",
+            "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+            "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+            "license": "MIT",
+            "dependencies": {
+                "media-typer": "0.3.0",
+                "mime-types": "~2.1.24"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/unpipe": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+            "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        },
+        "node_modules/utils-merge": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+            "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.4.0"
+            }
+        },
+        "node_modules/vary": {
+            "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+            "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.8"
+            }
+        }
+    }
+}
--- a/gatekeeper/package.json
+++ b/gatekeeper/package.json
@@ -0,0 +1,11 @@
+{
+    "name": "klz-gatekeeper",
+    "version": "1.0.0",
+    "description": "Simple branded gatekeeper for Traefik ForwardAuth",
+    "main": "index.js",
+    "dependencies": {
+        "cookie-parser": "^1.4.6",
+        "ejs": "^3.1.9",
+        "express": "^4.18.2"
+    }
+}
--- a/gatekeeper/views/login.ejs
+++ b/gatekeeper/views/login.ejs
@@ -0,0 +1,97 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>KLZ Cables | Access Control</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;700;900&display=swap" rel="stylesheet">
+    <style>
+        body {
+            font-family: 'Inter', sans-serif;
+            background-color: #001a4d;
+            color: white;
+            overflow: hidden;
+        }
+        .bg-grid {
+            background-image: 
+                linear-gradient(to right, rgba(255,255,255,0.05) 1px, transparent 1px),
+                linear-gradient(to bottom, rgba(255,255,255,0.05) 1px, transparent 1px);
+            background-size: 40px 40px;
+        }
+        .accent-glow {
+            box-shadow: 0 0 20px rgba(130, 237, 32, 0.4);
+        }
+        .scribble-animation {
+            stroke-dasharray: 1000;
+            stroke-dashoffset: 1000;
+            animation: draw 2s ease-out forwards;
+        }
+        @keyframes draw {
+            to { stroke-dashoffset: 0; }
+        }
+    </style>
+</head>
+<body class="min-h-screen flex items-center justify-center relative">
+    <!-- Background Elements -->
+    <div class="absolute inset-0 bg-grid pointer-events-none"></div>
+    <div class="absolute top-0 right-0 w-96 h-96 bg-[#82ed20]/5 blur-[120px] rounded-full -translate-y-1/2 translate-x-1/2"></div>
+    <div class="absolute bottom-0 left-0 w-96 h-96 bg-[#82ed20]/5 blur-[120px] rounded-full translate-y-1/2 -translate-x-1/2"></div>
+
+    <div class="relative z-10 w-full max-w-md px-6">
+        <!-- Logo -->
+        <div class="flex justify-center mb-12">
+            <svg class="h-16 w-auto" viewBox="0 0 100 100" fill="none" xmlns="http://www.w3.org/2000/svg">
+                <rect width="100" height="100" rx="20" fill="#001a4d" />
+                <path d="M30 30L70 70" stroke="#82ed20" stroke-width="8" stroke-linecap="round" />
+                <path d="M70 30L30 70" stroke="#82ed20" stroke-width="8" stroke-linecap="round" />
+            </svg>
+        </div>
+
+        <div class="bg-white/5 backdrop-blur-xl border border-white/10 p-10 rounded-[40px] shadow-2xl">
+            <h1 class="text-3xl font-black mb-2 tracking-tighter uppercase italic">
+                KLZ <span class="text-[#82ed20]">Gatekeeper</span>
+            </h1>
+            <p class="text-white/60 text-sm mb-8">This environment is strictly protected.</p>
+
+            <% if (error) { %>
+                <div class="bg-red-500/20 border border-red-500/50 text-red-200 p-4 rounded-2xl mb-6 text-sm flex items-center gap-3">
+                    <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" /></svg>
+                    <%= error %>
+                </div>
+            <% } %>
+
+            <form action="/gatekeeper/login" method="POST" class="space-y-6">
+                <input type="hidden" name="redirect" value="<%= redirect %>">
+                
+                <div>
+                    <label class="block text-[10px] font-black uppercase tracking-[0.2em] text-white/40 mb-2 ml-4">Access Password</label>
+                    <input 
+                        type="password" 
+                        name="password" 
+                        required 
+                        autofocus
+                        class="w-full bg-white/5 border border-white/10 rounded-2xl px-6 py-4 focus:outline-none focus:border-[#82ed20]/50 transition-all text-lg tracking-widest text-center"
+                        placeholder="••••••••"
+                    >
+                </div>
+
+                <button 
+                    type="submit" 
+                    class="w-full bg-[#82ed20] text-[#001a4d] font-black uppercase tracking-[0.2em] py-5 rounded-2xl hover:bg-[#82ed20]/90 transition-all accent-glow active:scale-[0.98]"
+                >
+                    Enter Workspace &rarr;
+                </button>
+            </form>
+        </div>
+
+        <div class="mt-8 text-center">
+            <p class="text-[10px] font-bold text-white/20 uppercase tracking-[0.4em]">
+                &copy; 2026 KLZ Vertriebs GmbH
+            </p>
+        </div>
+    </div>
+</body>
+</html>
--- a/lib/config.ts
+++ b/lib/config.ts
@@ -57,6 +57,13 @@ function createConfig() {
      from: env.MAIL_FROM,
      recipients: env.MAIL_RECIPIENTS,
    },
+    directus: {
+      url: env.DIRECTUS_URL,
+      adminEmail: env.DIRECTUS_ADMIN_EMAIL,
+      password: env.DIRECTUS_ADMIN_PASSWORD,
+      token: env.DIRECTUS_API_TOKEN,
+      proxyPath: '/cms',
+    },
  } as const;
 }

@@ -86,6 +93,7 @@ export const config = {
  get cache() { return getConfig().cache; },
  get logging() { return getConfig().logging; },
  get mail() { return getConfig().mail; },
+  get directus() { return getConfig().directus; },
 };

 /**
@@ -124,5 +132,11 @@ export function getMaskedConfig() {
      from: c.mail.from,
      recipients: c.mail.recipients,
    },
+    directus: {
+      url: c.directus.url,
+      adminEmail: mask(c.directus.adminEmail),
+      password: mask(c.directus.password),
+      token: mask(c.directus.token),
+    },
  };
 }
--- a/lib/directus.ts
+++ b/lib/directus.ts
@@ -0,0 +1,108 @@
+import { createDirectus, rest, authentication, readItems } from '@directus/sdk';
+import { config } from './config';
+
+const { url, adminEmail, password, token, proxyPath } = config.directus;
+
+const client = createDirectus(url)
+    .with(rest())
+    .with(authentication());
+
+export async function ensureAuthenticated() {
+    if (token) {
+        client.setToken(token);
+        return;
+    }
+    if (adminEmail && password) {
+        try {
+            await client.login(adminEmail, password);
+        } catch (e) {
+            console.error("Failed to authenticate with Directus:", e);
+        }
+    }
+}
+
+/**
+ * Maps the new translation-based schema back to the application's Product interface
+ */
+function mapDirectusProduct(item: any, locale: string): any {
+    const langCode = locale === 'en' ? 'en-US' : 'de-DE';
+    const translation = item.translations?.find((t: any) => t.languages_code === langCode) || item.translations?.[0] || {};
+
+    return {
+        id: item.id,
+        sku: item.sku,
+        title: translation.name || '',
+        description: translation.description || '',
+        content: translation.content || '',
+        technicalData: {
+            technicalItems: translation.technical_items || [],
+            voltageTables: translation.voltage_tables || []
+        },
+        locale: locale,
+        // Use proxy URL for assets to avoid CORS and handle internal/external issues
+        data_sheet_url: item.data_sheet ? `${proxyPath}/assets/${item.data_sheet}` : null,
+        categories: (item.categories_link || []).map((c: any) => c.categories_id?.translations?.[0]?.name).filter(Boolean)
+    };
+}
+
+export async function getProducts(locale: string = 'de') {
+    await ensureAuthenticated();
+    try {
+        const items = await client.request(readItems('products', {
+            fields: [
+                '*',
+                'translations.*',
+                'categories_link.categories_id.translations.name'
+            ]
+        }));
+        return items.map(item => mapDirectusProduct(item, locale));
+    } catch (error) {
+        console.error('Error fetching products:', error);
+        return [];
+    }
+}
+
+export async function getProductBySlug(slug: string, locale: string = 'de') {
+    await ensureAuthenticated();
+    const langCode = locale === 'en' ? 'en-US' : 'de-DE';
+    try {
+        const items = await client.request(readItems('products', {
+            filter: {
+                translations: {
+                    slug: { _eq: slug },
+                    languages_code: { _eq: langCode }
+                }
+            },
+            fields: [
+                '*',
+                'translations.*',
+                'categories_link.categories_id.translations.name'
+            ],
+            limit: 1
+        }));
+
+        if (!items || items.length === 0) return null;
+        return mapDirectusProduct(items[0], locale);
+    } catch (error) {
+        console.error(`Error fetching product ${slug}:`, error);
+        return null;
+    }
+}
+
+export async function checkHealth() {
+    try {
+        await ensureAuthenticated();
+        // Try to fetch something very simple that should exist if initialized
+        await client.request(readItems('directus_collections', { limit: 1 }));
+        return { status: 'ok', message: 'Directus is reachable and responding.' };
+    } catch (error: any) {
+        console.error('Directus health check failed:', error);
+        return {
+            status: 'error',
+            message: error.message || 'Unknown error',
+            code: error.code || 'UNKNOWN'
+        };
+    }
+}
+
+export default client;
--- a/lib/env.ts
+++ b/lib/env.ts
@@ -11,17 +11,17 @@ const preprocessEmptyString = (val: unknown) => (val === '' ? undefined : val);
 export const envSchema = z.object({
  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
  NEXT_PUBLIC_BASE_URL: z.preprocess(preprocessEmptyString, z.string().url()),
-  
+
  // Analytics
  NEXT_PUBLIC_UMAMI_WEBSITE_ID: z.preprocess(preprocessEmptyString, z.string().optional()),
  NEXT_PUBLIC_UMAMI_SCRIPT_URL: z.preprocess(preprocessEmptyString, z.string().url().default('https://analytics.infra.mintel.me/script.js')),
-  
+
  // Error Tracking
  SENTRY_DSN: z.preprocess(preprocessEmptyString, z.string().optional()),
-  
+
  // Logging
  LOG_LEVEL: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
-  
+
  // Mail
  MAIL_HOST: z.preprocess(preprocessEmptyString, z.string().optional()),
  MAIL_PORT: z.preprocess(preprocessEmptyString, z.coerce.number().default(587)),
@@ -32,6 +32,12 @@ export const envSchema = z.object({
    (val) => (typeof val === 'string' ? val.split(',').filter(Boolean) : val),
    z.array(z.string()).default([])
  ),
+
+  // Directus
+  DIRECTUS_URL: z.preprocess(preprocessEmptyString, z.string().url().default('http://localhost:8055')),
+  DIRECTUS_ADMIN_EMAIL: z.preprocess(preprocessEmptyString, z.string().optional()),
+  DIRECTUS_ADMIN_PASSWORD: z.preprocess(preprocessEmptyString, z.string().optional()),
+  DIRECTUS_API_TOKEN: z.preprocess(preprocessEmptyString, z.string().optional()),
 });

 export type Env = z.infer<typeof envSchema>;
@@ -54,5 +60,9 @@ export function getRawEnv() {
    MAIL_PASSWORD: process.env.MAIL_PASSWORD,
    MAIL_FROM: process.env.MAIL_FROM,
    MAIL_RECIPIENTS: process.env.MAIL_RECIPIENTS,
+    DIRECTUS_URL: process.env.DIRECTUS_URL,
+    DIRECTUS_ADMIN_EMAIL: process.env.DIRECTUS_ADMIN_EMAIL,
+    DIRECTUS_ADMIN_PASSWORD: process.env.DIRECTUS_ADMIN_PASSWORD,
+    DIRECTUS_API_TOKEN: process.env.DIRECTUS_API_TOKEN,
  };
 }
--- a/lib/og-helper.tsx
+++ b/lib/og-helper.tsx
@@ -0,0 +1,42 @@
+import { readFileSync } from 'fs';
+import { join } from 'path';
+
+/**
+ * Loads the Inter fonts for use in Satori (Next.js OG Image generation).
+ * Since we are using runtime = 'nodejs', we can read them from the filesystem.
+ */
+export async function getOgFonts() {
+    const boldFontPath = join(process.cwd(), 'public/fonts/Inter-Bold.ttf');
+    const regularFontPath = join(process.cwd(), 'public/fonts/Inter-Regular.ttf');
+
+    try {
+        const boldFont = readFileSync(boldFontPath);
+        const regularFont = readFileSync(regularFontPath);
+
+        return [
+            {
+                name: 'Inter',
+                data: boldFont,
+                weight: 700 as const,
+                style: 'normal' as const,
+            },
+            {
+                name: 'Inter',
+                data: regularFont,
+                weight: 400 as const,
+                style: 'normal' as const,
+            },
+        ];
+    } catch (error) {
+        console.error('Failed to load OG fonts from filesystem, falling back to system fonts:', error);
+        return [];
+    }
+}
+
+/**
+ * Common configuration for OG images
+ */
+export const OG_IMAGE_SIZE = {
+    width: 1200,
+    height: 630,
+};
--- a/lib/pdf-datasheet.tsx
+++ b/lib/pdf-datasheet.tsx
@@ -305,7 +305,6 @@ const getLabels = (locale: 'en' | 'de') => {
 export const PDFDatasheet: React.FC<PDFDatasheetProps> = ({
  product,
  locale,
-  logoUrl = '/media/logo.svg',
 }) => {
  const labels = getLabels(locale);

@@ -338,8 +337,12 @@ export const PDFDatasheet: React.FC<PDFDatasheetProps> = ({
            </View>
            <View style={styles.productImageCol}>
              {product.featuredImage ? (
-                <Image src={product.featuredImage} style={styles.heroImage} />
+                <Image
+                  src={product.featuredImage}
+                  style={styles.heroImage}
+                />
              ) : (
+
                <Text style={styles.noImage}>{labels.noImage}</Text>
              )}
            </View>
@@ -370,7 +373,7 @@ export const PDFDatasheet: React.FC<PDFDatasheetProps> = ({
                    style={[
                      styles.specsTableRow,
                      index === product.attributes.length - 1 &&
-                        styles.specsTableRowLast,
+                      styles.specsTableRowLast,
                    ]}
                  >
                    <View style={styles.specsTableLabelCell}>
--- a/lib/strapi.ts
+++ b/lib/strapi.ts
@@ -0,0 +1,85 @@
+import axios from 'axios';
+
+const STRAPI_URL = process.env.STRAPI_URL || 'http://localhost:1337';
+const STRAPI_TOKEN = process.env.STRAPI_API_TOKEN;
+
+const strapi = axios.create({
+  baseURL: `${STRAPI_URL}/api`,
+  headers: {
+    Authorization: `Bearer ${STRAPI_TOKEN}`,
+  },
+});
+
+export interface StrapiResponse<T> {
+  data: {
+    id: number;
+    attributes: T;
+  }[];
+  meta: {
+    pagination: {
+      page: number;
+      pageSize: number;
+      pageCount: number;
+      total: number;
+    };
+  };
+}
+
+export interface Product {
+  title: string;
+  sku: string;
+  description: string;
+  application: string;
+  content: string;
+  technicalData: any;
+  locale: string;
+  images?: {
+    data: {
+      attributes: {
+        url: string;
+        alternativeText: string;
+      };
+    }[];
+  };
+}
+
+export async function getProducts(locale: string = 'de') {
+  try {
+    const response = await strapi.get<StrapiResponse<Product>>('/products', {
+      params: {
+        locale,
+        populate: '*',
+      },
+    });
+    return response.data.data.map(item => ({
+      id: item.id,
+      ...item.attributes,
+    }));
+  } catch (error) {
+    console.error('Error fetching products from Strapi:', error);
+    return [];
+  }
+}
+
+export async function getProductBySku(sku: string, locale: string = 'de') {
+  try {
+    const response = await strapi.get<StrapiResponse<Product>>('/products', {
+      params: {
+        filters: { sku: { $eq: sku } },
+        locale,
+        populate: '*',
+      },
+    });
+    if (response.data.data.length === 0) return null;
+    const item = response.data.data[0];
+    return {
+      id: item.id,
+      ...item.attributes,
+    };
+  } catch (error) {
+    console.error(`Error fetching product ${sku} from Strapi:`, error);
+    return null;
+  }
+}
+
+export default strapi;
--- a/next.config.mjs
+++ b/next.config.mjs
@@ -1,8 +1,8 @@
 import createNextIntlPlugin from 'next-intl/plugin';
 import { withSentryConfig } from '@sentry/nextjs';
-  
+
 const withNextIntl = createNextIntlPlugin();
-  
+
 /** @type {import('next').NextConfig} */
 const nextConfig = {
  output: 'standalone',
@@ -327,6 +327,8 @@ const nextConfig = {
      ? new URL(process.env.SENTRY_DSN).origin
      : 'https://errors.infra.mintel.me';

+    const directusUrl = process.env.DIRECTUS_URL || 'https://cms.klz-cables.com';
+
    return [
      {
        source: '/stats/:path*',
@@ -336,6 +338,10 @@ const nextConfig = {
        source: '/errors/:path*',
        destination: `${glitchtipUrl}/:path*`,
      },
+      {
+        source: '/cms/:path*',
+        destination: `${directusUrl}/:path*`,
+      },
    ];
  },
 };
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,6 +8,7 @@
      "name": "klz-cables-nextjs",
      "version": "1.0.0",
      "dependencies": {
+        "@directus/sdk": "^18.0.3",
        "@react-email/components": "^1.0.6",
        "@react-pdf/renderer": "^4.3.2",
        "@sentry/nextjs": "^8.55.0",
@@ -1360,6 +1361,18 @@
        "node": ">=18"
      }
    },
+    "node_modules/@directus/sdk": {
+      "version": "18.0.3",
+      "resolved": "https://registry.npmjs.org/@directus/sdk/-/sdk-18.0.3.tgz",
+      "integrity": "sha512-PnEDRDqr2x/DG3HZ3qxU7nFp2nW6zqJqswjii57NhriXgTz4TBUI8NmSdzQvnyHuTL9J0nedYfQGfW4v8odS1A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/directus/directus?sponsor=1"
+      }
+    },
    "node_modules/@emnapi/core": {
      "version": "1.7.1",
      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.7.1.tgz",
--- a/package.json
+++ b/package.json
@@ -1,5 +1,6 @@
 {
  "dependencies": {
+    "@directus/sdk": "^18.0.3",
    "@react-email/components": "^1.0.6",
    "@react-pdf/renderer": "^4.3.2",
    "@sentry/nextjs": "^8.55.0",
@@ -57,15 +58,23 @@
  "name": "klz-cables-nextjs",
  "private": true,
  "scripts": {
-    "dev": "next dev",
+    "dev": "docker network create infra 2>/dev/null || true && echo '\\n🚀 Development Environment Starting...\\n\\n📱 App:      http://klz.localhost\\n🗄️  CMS:      http://cms.klz.localhost/admin\\n🚦 Traefik:  http://localhost:8080\\n\\n(Press Ctrl+C to stop)\\n' && docker-compose down --remove-orphans && docker-compose up",
+    "dev:local": "next dev",
    "build": "next build",
    "start": "next start",
    "lint": "next lint",
    "typecheck": "tsc --noEmit",
    "test": "vitest run --passWithNoTests",
    "test:og": "vitest run tests/og-image.test.ts",
+    "bootstrap:cms": "DIRECTUS_URL=http://localhost:8055 npx tsx --env-file=.env scripts/setup-directus-branding.ts",
    "pdf:datasheets": "tsx ./scripts/generate-pdf-datasheets.ts",
-    "pdf:datasheets:legacy": "tsx ./scripts/generate-pdf-datasheets-pdf-lib.ts"
+    "pdf:datasheets:legacy": "tsx ./scripts/generate-pdf-datasheets-pdf-lib.ts",
+    "directus:push:staging": "./scripts/sync-directus.sh push staging",
+    "directus:pull:staging": "./scripts/sync-directus.sh pull staging",
+    "directus:push:testing": "./scripts/sync-directus.sh push testing",
+    "directus:pull:testing": "./scripts/sync-directus.sh pull testing",
+    "directus:push:prod": "./scripts/sync-directus.sh push production",
+    "directus:pull:prod": "./scripts/sync-directus.sh pull production"
  },
  "version": "1.0.0"
-}
+}
--- a/public/fonts/Inter-Bold.ttf
+++ b/public/fonts/Inter-Bold.ttf
--- a/public/fonts/Inter-Regular.ttf
+++ b/public/fonts/Inter-Regular.ttf
--- a/scripts/cleanup-directus.ts
+++ b/scripts/cleanup-directus.ts
@@ -0,0 +1,19 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import { readCollections, deleteCollection } from '@directus/sdk';
+
+async function cleanup() {
+    await ensureAuthenticated();
+    const collections = await (client as any).request(readCollections());
+    for (const c of collections) {
+        if (!c.collection.startsWith('directus_')) {
+            console.log(`Deleting ${c.collection}...`);
+            try {
+                await (client as any).request(deleteCollection(c.collection));
+            } catch (e) {
+                console.error(`Failed to delete ${c.collection}`);
+            }
+        }
+    }
+}
+
+cleanup().catch(console.error);
--- a/scripts/fix-schema.ts
+++ b/scripts/fix-schema.ts
@@ -0,0 +1,99 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import {
+    createCollection,
+    createField,
+    createItem,
+    readCollections,
+    deleteCollection
+} from '@directus/sdk';
+
+async function fixSchema() {
+    console.log('🚑 EXTERNAL RESCUE: Fixing Schema & Data...');
+    await ensureAuthenticated();
+
+    // 1. Reset Products Collection to be 100% Standard
+    console.log('🗑️  Clearing broken collections...');
+    try { await client.request(deleteCollection('products')); } catch (e) { }
+    try { await client.request(deleteCollection('products_translations')); } catch (e) { }
+
+    // 2. Create Products (Simple, Standard ID)
+    console.log('🏗️  Rebuilding Products Schema...');
+    await client.request(createCollection({
+        collection: 'products',
+        schema: {}, // Let Directus decide defaults
+        meta: {
+            display_template: '{{sku}}',
+            archive_field: 'status',
+            archive_value: 'archived',
+            unarchive_value: 'published'
+        },
+        fields: [
+            {
+                field: 'id',
+                type: 'integer',
+                schema: { is_primary_key: true, has_auto_increment: true },
+                meta: { hidden: true }
+            },
+            {
+                field: 'status',
+                type: 'string',
+                schema: { default_value: 'published' },
+                meta: { width: 'full', options: { choices: [{ text: 'Published', value: 'published' }] } }
+            },
+            {
+                field: 'sku',
+                type: 'string',
+                meta: { interface: 'input', width: 'half' }
+            }
+        ]
+    } as any));
+
+    // 3. Create Translation Relation Safely
+    console.log('🌍 Rebuilding Translations...');
+    await client.request(createCollection({
+        collection: 'products_translations',
+        schema: {},
+        fields: [
+            {
+                field: 'id',
+                type: 'integer',
+                schema: { is_primary_key: true, has_auto_increment: true },
+                meta: { hidden: true }
+            },
+            { field: 'products_id', type: 'integer' },
+            { field: 'languages_code', type: 'string' },
+            { field: 'name', type: 'string', meta: { interface: 'input', width: 'full' } },
+            { field: 'description', type: 'text', meta: { interface: 'input-multiline' } },
+            { field: 'technical_items', type: 'json', meta: { interface: 'input-code-json' } }
+        ]
+    } as any));
+
+    // 4. Manually Insert ONE Product to Verify
+    console.log('📦 Injecting Test Product...');
+    try {
+        // We do this in two steps to be absolutely sure permissions don't block us
+        // Step A: Create User-Facing Product
+        const product = await client.request(createItem('products', {
+            sku: 'H1Z2Z2-K-TEST',
+            status: 'published'
+        }));
+
+        // Step B: Add Translation
+        await client.request(createItem('products_translations', {
+            products_id: product.id,
+            languages_code: 'de-DE',
+            name: 'H1Z2Z2-K Test Cable',
+            description: 'This is a verified imported product.',
+            technical_items: [{ label: 'Test', value: '100%' }]
+        }));
+
+        console.log(`✅ SUCCESS! Product Created with ID: ${product.id}`);
+        console.log(`verify at: ${process.env.DIRECTUS_URL}/admin/content/products/${product.id}`);
+
+    } catch (e: any) {
+        console.error('❌ Failed to create product:', e);
+        if (e.errors) console.error(JSON.stringify(e.errors, null, 2));
+    }
+}
+
+fixSchema().catch(console.error);
--- a/scripts/migrate-data.ts
+++ b/scripts/migrate-data.ts
@@ -0,0 +1,175 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import {
+    createCollection,
+    createField,
+    createRelation,
+    uploadFiles,
+    createItem,
+    updateSettings,
+    readFolders,
+    createFolder
+} from '@directus/sdk';
+import fs from 'fs';
+import path from 'path';
+import matter from 'gray-matter';
+import { fileURLToPath } from 'url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+async function run() {
+    console.log('🚀 CLEAN SLATE MIGRATION 🚀');
+    await ensureAuthenticated();
+
+    // 1. Folders
+    console.log('📂 Creating Folders...');
+    const folders: any = {};
+    const folderNames = ['Products', 'Blog', 'Pages', 'Technical'];
+    for (const name of folderNames) {
+        try {
+            const res = await client.request(createFolder({ name }));
+            folders[name] = res.id;
+        } catch (e) {
+            const existing = await client.request(readFolders({ filter: { name: { _eq: name } } }));
+            folders[name] = existing[0].id;
+        }
+    }
+
+    // 2. Assets
+    const assetMap: Record<string, string> = {};
+    const uploadDir = async (dir: string, folderId: string) => {
+        if (!fs.existsSync(dir)) return;
+        const files = fs.readdirSync(dir, { withFileTypes: true });
+        for (const file of files) {
+            const fullPath = path.join(dir, file.name);
+            if (file.isDirectory()) {
+                await uploadDir(fullPath, folderId);
+            } else {
+                const relPath = '/' + path.relative(path.join(process.cwd(), 'public'), fullPath).split(path.sep).join('/');
+                try {
+                    const form = new FormData();
+                    form.append('folder', folderId);
+                    form.append('file', new Blob([fs.readFileSync(fullPath)]), file.name);
+                    const res = await client.request(uploadFiles(form));
+                    assetMap[relPath] = res.id;
+                    console.log(`✅ Asset: ${relPath}`);
+                } catch (e) { }
+            }
+        }
+    };
+    await uploadDir(path.join(process.cwd(), 'public/uploads'), folders.Products);
+
+    // 3. Collections (Minimalist)
+    const collections = [
+        'categories', 'products', 'posts', 'pages', 'globals',
+        'categories_translations', 'products_translations', 'posts_translations', 'pages_translations', 'globals_translations',
+        'categories_link'
+    ];
+
+    console.log('🏗️  Creating Collections...');
+    for (const name of collections) {
+        try {
+            const isSingleton = name === 'globals';
+            await client.request(createCollection({
+                collection: name,
+                schema: {},
+                meta: { singleton: isSingleton }
+            } as any));
+
+            // Add ID field
+            await client.request(createField(name, {
+                field: 'id',
+                type: 'integer',
+                meta: { hidden: true },
+                schema: { is_primary_key: true, has_auto_increment: name !== 'globals' }
+            }));
+            console.log(`✅ Collection: ${name}`);
+        } catch (e: any) {
+            console.log(`ℹ️ Collection ${name} exists or error: ${e.message}`);
+        }
+    }
+
+    // 4. Fields & Relations
+    console.log('🔧 Configuring Schema...');
+    const safeAdd = async (col: string, f: any) => { try { await client.request(createField(col, f)); } catch (e) { } };
+
+    // Products
+    await safeAdd('products', { field: 'sku', type: 'string' });
+    await safeAdd('products', { field: 'image', type: 'uuid', meta: { interface: 'file' } });
+
+    // Translations Generic
+    for (const col of ['categories', 'products', 'posts', 'pages', 'globals']) {
+        const transTable = `${col}_translations`;
+        await safeAdd(transTable, { field: `${col}_id`, type: 'integer' });
+        await safeAdd(transTable, { field: 'languages_code', type: 'string' });
+
+        // Link to Parent
+        try {
+            await client.request(createRelation({
+                collection: transTable,
+                field: `${col}_id`,
+                related_collection: col,
+                meta: { one_field: 'translations' }
+            }));
+        } catch (e) { }
+    }
+
+    // Specific Fields
+    await safeAdd('products_translations', { field: 'name', type: 'string' });
+    await safeAdd('products_translations', { field: 'slug', type: 'string' });
+    await safeAdd('products_translations', { field: 'description', type: 'text' });
+    await safeAdd('products_translations', { field: 'content', type: 'text', meta: { interface: 'input-rich-text-html' } });
+    await safeAdd('products_translations', { field: 'technical_items', type: 'json' });
+    await safeAdd('products_translations', { field: 'voltage_tables', type: 'json' });
+
+    await safeAdd('categories_translations', { field: 'name', type: 'string' });
+    await safeAdd('posts_translations', { field: 'title', type: 'string' });
+    await safeAdd('posts_translations', { field: 'slug', type: 'string' });
+    await safeAdd('posts_translations', { field: 'content', type: 'text' });
+
+    await safeAdd('globals', { field: 'company_name', type: 'string' });
+    await safeAdd('globals_translations', { field: 'tagline', type: 'string' });
+
+    // M2M Link
+    await safeAdd('categories_link', { field: 'products_id', type: 'integer' });
+    await safeAdd('categories_link', { field: 'categories_id', type: 'integer' });
+    try {
+        await client.request(createRelation({ collection: 'categories_link', field: 'products_id', related_collection: 'products', meta: { one_field: 'categories_link' } }));
+        await client.request(createRelation({ collection: 'categories_link', field: 'categories_id', related_collection: 'categories' }));
+    } catch (e) { }
+
+    // 5. Data Import
+    console.log('📥 Importing Data...');
+    const deDir = path.join(process.cwd(), 'data/products/de');
+    const files = fs.readdirSync(deDir).filter(f => f.endsWith('.mdx'));
+
+    for (const file of files) {
+        const doc = matter(fs.readFileSync(path.join(deDir, file), 'utf8'));
+        const enPath = path.join(process.cwd(), `data/products/en/${file}`);
+        const enDoc = fs.existsSync(enPath) ? matter(fs.readFileSync(enPath, 'utf8')) : doc;
+
+        const clean = (c: string) => c.replace(/<ProductTabs.*?>|<\/ProductTabs>|<ProductTechnicalData.*?\/>/gs, '').trim();
+        const extract = (c: string) => {
+            const m = c.match(/technicalData=\{<ProductTechnicalData data=\{(.*?)\}\s*\/>\}/s);
+            try { return m ? JSON.parse(m[1]) : {}; } catch (e) { return {}; }
+        };
+
+        try {
+            await client.request(createItem('products', {
+                sku: doc.data.sku,
+                image: assetMap[doc.data.images?.[0]] || null,
+                translations: [
+                    { languages_code: 'de-DE', name: doc.data.title, slug: file.replace('.mdx', ''), description: doc.data.description, content: clean(doc.content), technical_items: extract(doc.content).technicalItems, voltage_tables: extract(doc.content).voltageTables },
+                    { languages_code: 'en-US', name: enDoc.data.title, slug: file.replace('.mdx', ''), description: enDoc.data.description, content: clean(enDoc.content), technical_items: extract(enDoc.content).technicalItems, voltage_tables: extract(enDoc.content).voltageTables }
+                ]
+            }));
+            console.log(`✅ Product: ${doc.data.sku}`);
+        } catch (e: any) {
+            console.error(`❌ Product ${file}: ${e.message}`);
+        }
+    }
+
+    console.log('✨ DONE!');
+}
+
+run().catch(console.error);
--- a/scripts/migrate-to-strapi.ts
+++ b/scripts/migrate-to-strapi.ts
@@ -0,0 +1,64 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import matter from 'gray-matter';
+import axios from 'axios';
+
+const STRAPI_URL = process.env.STRAPI_URL || 'http://localhost:1337';
+const STRAPI_TOKEN = process.env.STRAPI_ADMIN_TOKEN; // You'll need to generate this
+
+async function migrateProducts() {
+  const productsDir = path.join(process.cwd(), 'data/products');
+  const locales = ['de', 'en'];
+
+  for (const locale of locales) {
+    const localeDir = path.join(productsDir, locale);
+    if (!fs.existsSync(localeDir)) continue;
+
+    const files = fs.readdirSync(localeDir).filter(f => f.endsWith('.mdx'));
+
+    for (const file of files) {
+      const filePath = path.join(localeDir, file);
+      const fileContent = fs.readFileSync(filePath, 'utf8');
+      const { data, content } = matter(fileContent);
+
+      console.log(`Migrating ${data.title} (${locale})...`);
+
+      try {
+        // 1. Check if product exists (by SKU)
+        const existing = await axios.get(`${STRAPI_URL}/api/products?filters[sku][$eq]=${data.sku}&locale=${locale}`, {
+          headers: { Authorization: `Bearer ${STRAPI_TOKEN}` }
+        });
+
+        const productData = {
+          title: data.title,
+          sku: data.sku,
+          description: data.description,
+          application: data.application,
+          content: content,
+          technicalData: data.technicalData || {}, // This might need adjustment based on how it's stored in MDX
+          locale: locale,
+        };
+
+        if (existing.data.data.length > 0) {
+          // Update
+          const id = existing.data.data[0].id;
+          await axios.put(`${STRAPI_URL}/api/products/${id}`, { data: productData }, {
+            headers: { Authorization: `Bearer ${STRAPI_TOKEN}` }
+          });
+          console.log(`Updated ${data.title}`);
+        } else {
+          // Create
+          await axios.post(`${STRAPI_URL}/api/products`, { data: productData }, {
+            headers: { Authorization: `Bearer ${STRAPI_TOKEN}` }
+          });
+          console.log(`Created ${data.title}`);
+        }
+      } catch (error) {
+        console.error(`Error migrating ${data.title}:`, error.response?.data || error.message);
+      }
+    }
+  }
+}
+
+// Note: This script requires a running Strapi instance and an admin token.
+// migrateProducts();
--- a/scripts/optimize-directus.ts
+++ b/scripts/optimize-directus.ts
@@ -0,0 +1,63 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import {
+    updateSettings,
+    updateCollection,
+    createItem,
+    updateItem
+} from '@directus/sdk';
+import fs from 'fs';
+import path from 'path';
+
+async function optimize() {
+    await ensureAuthenticated();
+
+    console.log('🎨 Fixing Branding...');
+    await client.request(updateSettings({
+        project_name: 'KLZ Cables',
+        public_note: '<div style="text-align: center;"><h1>Sustainable Energy.</h1><p>Industrial Reliability.</p></div>',
+        custom_css: 'body { font-family: Inter, sans-serif !important; } .public-view .v-card { border-radius: 20px !important; }'
+    }));
+
+    console.log('🔧 Fixing List Displays...');
+    const collections = ['products', 'categories', 'posts', 'pages'];
+    for (const collection of collections) {
+        try {
+            await (client as any).request(updateCollection(collection, {
+                meta: { display_template: '{{translations.name || translations.title}}' }
+            }));
+        } catch (e) {
+            console.error(`Failed to update ${collection}:`, e);
+        }
+    }
+
+    console.log('🏛️  Force-Syncing Globals...');
+    const de = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'messages/de.json'), 'utf8'));
+    const en = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'messages/en.json'), 'utf8'));
+
+    const payload = {
+        id: 1,
+        company_name: 'KLZ Cables GmbH',
+        email: 'info@klz-cables.com',
+        phone: '+49 711 1234567',
+        address: de.Contact.info.address,
+        opening_hours: `${de.Contact.hours.weekdays}: ${de.Contact.hours.weekdaysTime}`,
+        translations: [
+            { languages_code: 'en-US', tagline: en.Footer.tagline },
+            { languages_code: 'de-DE', tagline: de.Footer.tagline }
+        ]
+    };
+
+    try {
+        await client.request(createItem('globals', payload));
+    } catch (e) {
+        try {
+            await client.request(updateItem('globals', 1, payload));
+        } catch (err) {
+            console.error('Globals still failing:', (err as any).message);
+        }
+    }
+
+    console.log('✅ Optimization complete.');
+}
+
+optimize().catch(console.error);
--- a/scripts/revert-and-clean.ts
+++ b/scripts/revert-and-clean.ts
@@ -0,0 +1,208 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import {
+    deleteCollection,
+    deleteFile,
+    readFiles,
+    updateSettings,
+    uploadFiles
+} from '@directus/sdk';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+// Helper for ESM __dirname
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+async function revertAndRestoreBranding() {
+    console.log('🚨 REVERTING EVERYTHING - RESTORING BRANDING ONLY 🚨');
+    await ensureAuthenticated();
+
+    // 1. DELETE ALL COLLECTIONS
+    const collectionsToDelete = [
+        'categories_link',
+        'categories_translations', 'categories',
+        'products_translations', 'products',
+        'posts_translations', 'posts',
+        'pages_translations', 'pages',
+        'globals_translations', 'globals'
+    ];
+
+    console.log('🗑️  Deleting custom collections...');
+    for (const col of collectionsToDelete) {
+        try {
+            await client.request(deleteCollection(col));
+            console.log(`✅ Deleted collection: ${col}`);
+        } catch (e: any) {
+            console.log(`ℹ️ Collection ${col} not found or already deleted.`);
+        }
+    }
+
+    // 2. DELETE ALL FILES
+    console.log('🗑️  Deleting ALL files...');
+    try {
+        const files = await client.request(readFiles({ limit: -1 }));
+        if (files && files.length > 0) {
+            const ids = files.map(f => f.id);
+            await client.request(deleteFile(ids)); // Batch delete if supported by SDK version, else loop
+            console.log(`✅ Deleted ${ids.length} files.`);
+        } else {
+            console.log('ℹ️ No files to delete.');
+        }
+    } catch (e: any) {
+        // Fallback to loop if batch fails
+        try {
+            const files = await client.request(readFiles({ limit: -1 }));
+            for (const f of files) {
+                await client.request(deleteFile(f.id));
+            }
+            console.log(`✅ Deleted files individually.`);
+        } catch (err) { }
+    }
+
+
+    // 3. RESTORE BRANDING (Exact copy of setup-directus-branding.ts logic)
+    console.log('🎨 Restoring Premium Branding...');
+    try {
+        const getMimeType = (filePath: string) => {
+            const ext = path.extname(filePath).toLowerCase();
+            switch (ext) {
+                case '.svg': return 'image/svg+xml';
+                case '.png': return 'image/png';
+                case '.jpg':
+                case '.jpeg': return 'image/jpeg';
+                case '.ico': return 'image/x-icon';
+                default: return 'application/octet-stream';
+            }
+        };
+
+        const uploadAsset = async (filePath: string, title: string) => {
+            if (!fs.existsSync(filePath)) {
+                console.warn(`⚠️ File not found: ${filePath}`);
+                return null;
+            }
+            const mimeType = getMimeType(filePath);
+            const form = new FormData();
+            const fileBuffer = fs.readFileSync(filePath);
+            const blob = new Blob([fileBuffer], { type: mimeType });
+            form.append('file', blob, path.basename(filePath));
+            form.append('title', title);
+            const res = await client.request(uploadFiles(form));
+            return res.id;
+        };
+
+        const logoWhiteId = await uploadAsset(path.resolve(__dirname, '../public/logo-white.svg'), 'Logo White');
+        const logoBlueId = await uploadAsset(path.resolve(__dirname, '../public/logo-blue.svg'), 'Logo Blue');
+        const faviconId = await uploadAsset(path.resolve(__dirname, '../public/favicon.ico'), 'Favicon');
+
+        // Smoother Background SVG
+        const bgSvgPath = path.resolve(__dirname, '../public/login-bg.svg');
+        fs.writeFileSync(bgSvgPath, `<svg width="1920" height="1080" viewBox="0 0 1920 1080" fill="none" xmlns="http://www.w3.org/2000/svg">
+<rect width="1920" height="1080" fill="#001a4d"/>
+<ellipse cx="960" cy="540" rx="800" ry="600" fill="url(#paint0_radial_premium)"/>
+<defs>
+<radialGradient id="paint0_radial_premium" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(960 540) rotate(90) scale(600 800)">
+<stop stop-color="#003d82" stop-opacity="0.8"/>
+<stop offset="1" stop-color="#001a4d" stop-opacity="0"/>
+</radialGradient>
+</defs>
+</svg>`);
+        const backgroundId = await uploadAsset(bgSvgPath, 'Login Bg');
+        if (fs.existsSync(bgSvgPath)) fs.unlinkSync(bgSvgPath);
+
+        // Update Settings
+        const COLOR_PRIMARY = '#001a4d';
+        const COLOR_ACCENT = '#82ed20';
+        const COLOR_SECONDARY = '#003d82';
+
+        const cssInjection = `
+        <style>
+            @import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap');
+            
+            body, .v-app { 
+                font-family: 'Inter', sans-serif !important; 
+                -webkit-font-smoothing: antialiased;
+            }
+            
+            .public-view .v-card { 
+                background: rgba(255, 255, 255, 0.95) !important;
+                backdrop-filter: blur(20px);
+                border: 1px solid rgba(255, 255, 255, 0.3) !important;
+                border-radius: 32px !important; 
+                box-shadow: 0 50px 100px -20px rgba(0, 0, 0, 0.4) !important;
+                padding: 40px !important;
+            }
+
+            .public-view .v-button {
+                border-radius: 9999px !important;
+                height: 56px !important;
+                font-weight: 600 !important;
+                letter-spacing: -0.01em !important;
+                transition: all 0.4s cubic-bezier(0.16, 1, 0.3, 1) !important;
+            }
+
+            .public-view .v-button:hover {
+                transform: translateY(-2px);
+                box-shadow: 0 15px 30px rgba(130, 237, 32, 0.2) !important;
+            }
+
+            .public-view .v-input {
+                --v-input-border-radius: 12px !important;
+                --v-input-background-color: #f8f9fa !important;
+            }
+        </style>
+        <div style="font-family: 'Inter', sans-serif; text-align: center; margin-top: 24px;">
+            <p style="color: rgba(255,255,255,0.7); font-size: 14px; margin-bottom: 4px; font-weight: 500;">KLZ INFRASTRUCTURE ENGINE</p>
+            <h1 style="color: #ffffff; font-size: 18px; font-weight: 700; margin: 0;">Sustainable Energy. <span style="color: #82ed20;">Industrial Reliability.</span></h1>
+        </div>
+        `;
+
+        await client.request(updateSettings({
+            project_name: 'KLZ Cables',
+            project_url: 'https://klz-cables.com',
+            project_color: COLOR_ACCENT,
+            project_descriptor: 'Sustainable Energy Infrastructure',
+            project_owner: 'KLZ Cables',
+            project_logo: logoWhiteId as any,
+            public_foreground: logoWhiteId as any,
+            public_background: backgroundId as any,
+            public_note: cssInjection,
+            public_favicon: faviconId as any,
+            theme_light_overrides: {
+                "primary": COLOR_ACCENT,
+                "secondary": COLOR_SECONDARY,
+                "background": "#f1f3f7",
+                "backgroundNormal": "#ffffff",
+                "backgroundAccent": "#eef2ff",
+                "navigationBackground": COLOR_PRIMARY,
+                "navigationForeground": "#ffffff",
+                "navigationBackgroundHover": "rgba(255,255,255,0.05)",
+                "navigationForegroundHover": "#ffffff",
+                "navigationBackgroundActive": "rgba(130, 237, 32, 0.15)",
+                "navigationForegroundActive": COLOR_ACCENT,
+                "moduleBarBackground": "#000d26",
+                "moduleBarForeground": "#ffffff",
+                "moduleBarForegroundActive": COLOR_ACCENT,
+                "borderRadius": "16px",
+                "borderWidth": "1px",
+                "borderColor": "#e2e8f0",
+                "formFieldHeight": "48px"
+            } as any,
+            theme_dark_overrides: {
+                "primary": COLOR_ACCENT,
+                "background": "#0a0a0a",
+                "navigationBackground": "#000000",
+                "moduleBarBackground": COLOR_PRIMARY,
+                "borderRadius": "16px",
+                "formFieldHeight": "48px"
+            } as any
+        }));
+
+        console.log('✨ System Cleaned & Branding Restored Successfully');
+
+    } catch (error: any) {
+        console.error('❌ Error restoring branding:', JSON.stringify(error, null, 2));
+    }
+}
+
+revertAndRestoreBranding().catch(console.error);
--- a/scripts/setup-directus-branding.ts
+++ b/scripts/setup-directus-branding.ts
@@ -0,0 +1,181 @@
+import client, { ensureAuthenticated } from '../lib/directus';
+import { updateSettings, uploadFiles } from '@directus/sdk';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+// Helper for ESM __dirname
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+async function setupBranding() {
+    console.log('🎨 Refining Directus Branding for Premium Website Look...');
+
+    // 1. Authenticate
+    await ensureAuthenticated();
+
+    try {
+        // 2. Upload Assets (MIME FIXED)
+        console.log('📤 Re-uploading assets for clean IDs...');
+
+        const getMimeType = (filePath: string) => {
+            const ext = path.extname(filePath).toLowerCase();
+            switch (ext) {
+                case '.svg': return 'image/svg+xml';
+                case '.png': return 'image/png';
+                case '.jpg':
+                case '.jpeg': return 'image/jpeg';
+                case '.ico': return 'image/x-icon';
+                default: return 'application/octet-stream';
+            }
+        };
+
+        const uploadAsset = async (filePath: string, title: string) => {
+            if (!fs.existsSync(filePath)) {
+                console.warn(`⚠️ File not found: ${filePath}`);
+                return null;
+            }
+            const mimeType = getMimeType(filePath);
+            const form = new FormData();
+            const fileBuffer = fs.readFileSync(filePath);
+            const blob = new Blob([fileBuffer], { type: mimeType });
+            form.append('file', blob, path.basename(filePath));
+            form.append('title', title);
+            const res = await client.request(uploadFiles(form));
+            return res.id;
+        };
+
+        const logoWhiteId = await uploadAsset(path.resolve(__dirname, '../public/logo-white.svg'), 'Logo White');
+        const logoBlueId = await uploadAsset(path.resolve(__dirname, '../public/logo-blue.svg'), 'Logo Blue');
+        const faviconId = await uploadAsset(path.resolve(__dirname, '../public/favicon.ico'), 'Favicon');
+
+        // Smoother Background SVG
+        const bgSvgPath = path.resolve(__dirname, '../public/login-bg.svg');
+        fs.writeFileSync(bgSvgPath, `<svg width="1920" height="1080" viewBox="0 0 1920 1080" fill="none" xmlns="http://www.w3.org/2000/svg">
+<rect width="1920" height="1080" fill="#001a4d"/>
+<ellipse cx="960" cy="540" rx="800" ry="600" fill="url(#paint0_radial_premium)"/>
+<defs>
+<radialGradient id="paint0_radial_premium" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(960 540) rotate(90) scale(600 800)">
+<stop stop-color="#003d82" stop-opacity="0.8"/>
+<stop offset="1" stop-color="#001a4d" stop-opacity="0"/>
+</radialGradient>
+</defs>
+</svg>`);
+        const backgroundId = await uploadAsset(bgSvgPath, 'Login Bg');
+        if (fs.existsSync(bgSvgPath)) fs.unlinkSync(bgSvgPath);
+
+        // 3. Update Settings with "Premium Web" Theme
+        console.log('⚙️  Updating Directus settings...');
+
+        const COLOR_PRIMARY = '#001a4d'; // Deep Blue
+        const COLOR_ACCENT = '#82ed20'; // Sustainability Green
+        const COLOR_SECONDARY = '#003d82';
+
+        const cssInjection = `
+        <style>
+            @import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap');
+            
+            /* Global Login Styles */
+            body, .v-app { 
+                font-family: 'Inter', sans-serif !important; 
+                -webkit-font-smoothing: antialiased;
+            }
+            
+            /* Glassmorphism Effect for Login Card */
+            .public-view .v-card { 
+                background: rgba(255, 255, 255, 0.95) !important;
+                backdrop-filter: blur(20px);
+                border: 1px solid rgba(255, 255, 255, 0.3) !important;
+                border-radius: 32px !important; 
+                box-shadow: 0 50px 100px -20px rgba(0, 0, 0, 0.4) !important;
+                padding: 40px !important;
+            }
+
+            .public-view .v-button {
+                border-radius: full !important;
+                height: 56px !important;
+                font-weight: 600 !important;
+                letter-spacing: -0.01em !important;
+                transition: all 0.4s cubic-bezier(0.16, 1, 0.3, 1) !important;
+            }
+
+            .public-view .v-button:hover {
+                transform: translateY(-2px);
+                box-shadow: 0 15px 30px rgba(130, 237, 32, 0.2) !important;
+            }
+
+            .public-view .v-input {
+                --v-input-border-radius: 12px !important;
+                --v-input-background-color: #f8f9fa !important;
+            }
+        </style>
+        <div style="font-family: 'Inter', sans-serif; text-align: center; margin-top: 24px;">
+            <p style="color: rgba(255,255,255,0.7); font-size: 14px; margin-bottom: 4px; font-weight: 500;">KLZ INFRASTRUCTURE ENGINE</p>
+            <h1 style="color: #ffffff; font-size: 18px; font-weight: 700; margin: 0;">Sustainable Energy. <span style="color: #82ed20;">Industrial Reliability.</span></h1>
+        </div>
+        `;
+
+        await client.request(updateSettings({
+            project_name: 'KLZ Cables',
+            project_url: 'https://klz-cables.com',
+            project_color: COLOR_ACCENT,
+            project_descriptor: 'Sustainable Energy Infrastructure',
+            project_owner: 'KLZ Cables',
+
+            // FIXED: Use WHITE logo for the Blue Sidebar
+            project_logo: logoWhiteId as any,
+
+            public_foreground: logoWhiteId as any,
+            public_background: backgroundId as any,
+            public_note: cssInjection,
+            public_favicon: faviconId as any,
+
+            // DEEP PREMIUM THEME
+            theme_light_overrides: {
+                // Brands
+                "primary": COLOR_ACCENT, // Buttons/Actions are GREEN like the website
+                "secondary": COLOR_SECONDARY,
+
+                // Content Area
+                "background": "#f1f3f7",
+                "backgroundNormal": "#ffffff",
+                "backgroundAccent": "#eef2ff",
+
+                // Sidebar Branding
+                "navigationBackground": COLOR_PRIMARY,
+                "navigationForeground": "#ffffff",
+                "navigationBackgroundHover": "rgba(255,255,255,0.05)",
+                "navigationForegroundHover": "#ffffff",
+                "navigationBackgroundActive": "rgba(130, 237, 32, 0.15)", // Subtle Green highlight
+                "navigationForegroundActive": COLOR_ACCENT, // Active item is GREEN
+
+                // Module Bar (Thin far left)
+                "moduleBarBackground": "#000d26",
+                "moduleBarForeground": "#ffffff",
+                "moduleBarForegroundActive": COLOR_ACCENT,
+
+                // UI Standards
+                "borderRadius": "16px", // Larger radius for modern feel
+                "borderWidth": "1px",
+                "borderColor": "#e2e8f0",
+                "formFieldHeight": "48px" // Touch-target height
+            } as any,
+
+            theme_dark_overrides: {
+                "primary": COLOR_ACCENT,
+                "background": "#0a0a0a",
+                "navigationBackground": "#000000",
+                "moduleBarBackground": COLOR_PRIMARY,
+                "borderRadius": "16px",
+                "formFieldHeight": "48px"
+            } as any
+        }));
+
+        console.log('✨ Premium Theme applied successfully!');
+
+    } catch (error: any) {
+        console.error('❌ Error:', JSON.stringify(error, null, 2));
+    }
+}
+
+setupBranding();
--- a/scripts/strapi-sync.sh
+++ b/scripts/strapi-sync.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+
+# Script to sync Strapi data between environments
+# Usage: ./scripts/strapi-sync.sh [export|import] [filename]
+
+COMMAND=$1
+FILENAME=$2
+
+if [ -z "$COMMAND" ]; then
+  echo "Usage: $0 [export|import] [filename]"
+  exit 1
+fi
+
+if [ "$COMMAND" == "export" ]; then
+  if [ -z "$FILENAME" ]; then
+    FILENAME="strapi-export-$(date +%Y%m%d%H%M%S).tar.gz"
+  fi
+  echo "Exporting Strapi data to $FILENAME..."
+  docker-compose exec cms npm run strapi export -- --no-encrypt -f "$FILENAME"
+  docker cp $(docker-compose ps -q cms):/opt/app/$FILENAME .
+  echo "Export complete: $FILENAME"
+fi
+
+if [ "$COMMAND" == "import" ]; then
+  if [ -z "$FILENAME" ]; then
+    echo "Please specify a filename to import"
+    exit 1
+  fi
+  echo "Importing Strapi data from $FILENAME..."
+  docker cp $FILENAME $(docker-compose ps -q cms):/opt/app/$FILENAME
+  docker-compose exec cms npm run strapi import -- -f "$FILENAME" --force
+  echo "Import complete"
+fi
--- a/scripts/sync-directus.sh
+++ b/scripts/sync-directus.sh
@@ -0,0 +1,120 @@
+#!/bin/bash
+
+# Configuration
+REMOTE_HOST="root@alpha.mintel.me"
+REMOTE_DIR="/home/deploy/sites/klz-cables.com"
+
+# DB Details (matching docker-compose defaults)
+DB_USER="directus"
+DB_NAME="directus"
+
+ACTION=$1
+ENV=$2
+
+# Help
+if [ -z "$ACTION" ] || [ -z "$ENV" ]; then
+    echo "Usage: ./scripts/sync-directus.sh [push|pull] [testing|staging|production]"
+    echo ""
+    echo "Commands:"
+    echo "  push   Sync LOCAL data -> REMOTE"
+    echo "  pull   Sync REMOTE data -> LOCAL"
+    echo ""
+    echo "Environments:"
+    echo "  testing, staging, production"
+    exit 1
+fi
+
+# Map Environment to Project Name
+case $ENV in
+  testing)
+    PROJECT_NAME="klz-cables-testing"
+    ENV_FILE=".env.testing"
+    ;;
+  staging)
+    PROJECT_NAME="klz-cables-staging"
+    ENV_FILE=".env.staging"
+    ;;
+  production)
+    PROJECT_NAME="klz-cables-prod"
+    ENV_FILE=".env.prod"
+    ;;
+  *)
+    echo "❌ Invalid environment: $ENV. Use testing, staging, or production."
+    exit 1
+    ;;
+esac
+
+# Detect local container
+echo "🔍 Detecting local database..."
+# Use a more robust way to find the container if multiple projects exist locally
+LOCAL_DB_CONTAINER=$(docker compose ps -q directus-db)
+if [ -z "$LOCAL_DB_CONTAINER" ]; then
+    echo "❌ Local directus-db container not found. Is it running? (npm run dev)"
+    exit 1
+fi
+
+if [ "$ACTION" == "push" ]; then
+    echo "🚀 Pushing Local Data to $ENV ($PROJECT_NAME)..."
+    
+    # 1. DB Dump
+    echo "📦 Dumping local database..."
+    docker exec "$LOCAL_DB_CONTAINER" pg_dump -U "$DB_USER" --clean --if-exists --no-owner --no-privileges "$DB_NAME" > dump.sql
+    
+    # 2. Upload Dump
+    echo "📤 Uploading dump to remote server..."
+    scp dump.sql "$REMOTE_HOST:$REMOTE_DIR/dump.sql"
+    
+    # 3. Restore on Remote
+    echo "🔄 Restoring dump on $ENV..."
+    REMOTE_DB_CONTAINER=$(ssh "$REMOTE_HOST" "cd $REMOTE_DIR && docker compose -p $PROJECT_NAME ps -q directus-db")
+    if [ -z "$REMOTE_DB_CONTAINER" ]; then
+        echo "❌ Remote $ENV-db container not found!"
+        exit 1
+    fi
+    ssh "$REMOTE_HOST" "docker exec -i $REMOTE_DB_CONTAINER psql -U $DB_USER $DB_NAME < $REMOTE_DIR/dump.sql"
+    
+    # 4. Sync Uploads
+    echo "📁 Syncing uploads (Local -> $ENV)..."
+    # Note: If environments share the same directory, this might overwrite others' files if not careful.
+    # But since they share the same host directory currently, rsync will update the shared folder.
+    rsync -avz --progress ./directus/uploads/ "$REMOTE_HOST:$REMOTE_DIR/directus/uploads/"
+    
+    # Clean up
+    rm dump.sql
+    ssh "$REMOTE_HOST" "rm $REMOTE_DIR/dump.sql"
+    
+    echo "✨ Push to $ENV complete!"
+
+elif [ "$ACTION" == "pull" ]; then
+    echo "📥 Pulling $ENV Data to Local..."
+    
+    # 1. DB Dump on Remote
+    echo "📦 Dumping remote database ($ENV)..."
+    REMOTE_DB_CONTAINER=$(ssh "$REMOTE_HOST" "cd $REMOTE_DIR && docker compose -p $PROJECT_NAME ps -q directus-db")
+    if [ -z "$REMOTE_DB_CONTAINER" ]; then
+        echo "❌ Remote $ENV-db container not found!"
+        exit 1
+    fi
+    ssh "$REMOTE_HOST" "docker exec $REMOTE_DB_CONTAINER pg_dump -U $DB_USER --clean --if-exists --no-owner --no-privileges $DB_NAME > $REMOTE_DIR/dump.sql"
+    
+    # 2. Download Dump
+    echo "📥 Downloading dump..."
+    scp "$REMOTE_HOST:$REMOTE_DIR/dump.sql" dump.sql
+    
+    # 3. Restore Locally
+    echo "🔄 Restoring dump locally..."
+    docker exec -i "$LOCAL_DB_CONTAINER" psql -U "$DB_USER" "$DB_NAME" < dump.sql
+    
+    # 4. Sync Uploads
+    echo "📁 Syncing uploads ($ENV -> Local)..."
+    rsync -avz --progress "$REMOTE_HOST:$REMOTE_DIR/directus/uploads/" ./directus/uploads/
+    
+    # Clean up
+    rm dump.sql
+    ssh "$REMOTE_HOST" "rm $REMOTE_DIR/dump.sql"
+    
+    echo "✨ Pull to Local complete!"
+else
+    echo "Invalid action: $ACTION. Use push or pull."
+    exit 1
+fi
--- a/tests/og-image.test.ts
+++ b/tests/og-image.test.ts
@@ -1,52 +1,74 @@
-import { describe, it, expect } from 'vitest';
+import { describe, it, expect, beforeAll } from 'vitest';

-const BASE_URL = process.env.TEST_URL || 'http://localhost:3000';
+const BASE_URL = process.env.TEST_URL || process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';

 describe('OG Image Generation', () => {
  const locales = ['de', 'en'];
-  const productSlugs = ['nay2y']; // Based on data/products/de/nay2y.mdx
+  const productSlugs = ['nay2y'];

+  let isServerUp = false;
+
+  beforeAll(async () => {
+    try {
+      const response = await fetch(`${BASE_URL}/health`).catch(() => null);
+      if (response && response.ok) {
+        const text = await response.text();
+        if (text.includes('OK')) {
+          isServerUp = true;
+          return;
+        }
+      }
+      console.log(`\n⚠️  KLZ Application not detected at ${BASE_URL}. Skipping integration tests.\n`);
+    } catch (e) {
+      isServerUp = false;
+    }
+  });
  async function verifyImageResponse(response: Response) {
-    expect(response.status).toBe(200);
-    expect(response.headers.get('content-type')).toContain('image/png');
-    
+    expect(response.status, `Failed to fetch OG image: ${response.url}`).toBe(200);
+    const contentType = response.headers.get('content-type');
+    expect(contentType, `Incorrect content type: ${contentType}`).toContain('image/png');
+
    const buffer = await response.arrayBuffer();
    const bytes = new Uint8Array(buffer);
-    
+
    // Check for PNG signature: 89 50 4E 47 0D 0A 1A 0A
    expect(bytes[0]).toBe(0x89);
    expect(bytes[1]).toBe(0x50);
    expect(bytes[2]).toBe(0x4E);
    expect(bytes[3]).toBe(0x47);
-    
+
    // Check that the image is not empty and has a reasonable size
-    // A 1200x630 OG image should be at least 4KB
-    expect(bytes.length).toBeGreaterThan(4000);
+    expect(bytes.length, `Image size too small: ${bytes.length} bytes`).toBeGreaterThan(4000);
  }

  locales.forEach((locale) => {
-    it(`should generate main OG image for ${locale}`, async () => {
+    it(`should generate main OG image for ${locale}`, async ({ skip }) => {
+      if (!isServerUp) skip();
      const url = `${BASE_URL}/${locale}/opengraph-image`;
      const response = await fetch(url);
      await verifyImageResponse(response);
    }, 30000);

-    it(`should generate product OG image for ${locale} with slug ${productSlugs[0]}`, async () => {
+    it(`should generate product OG image for ${locale} with slug ${productSlugs[0]}`, async ({ skip }) => {
+      if (!isServerUp) skip();
      const url = `${BASE_URL}/${locale}/api/og/product?slug=${productSlugs[0]}`;
      const response = await fetch(url);
      await verifyImageResponse(response);
    }, 30000);

-    it(`should return 400 for product OG image without slug in ${locale}`, async () => {
+    it(`should return 400 for product OG image without slug in ${locale}`, async ({ skip }) => {
+      if (!isServerUp) skip();
      const url = `${BASE_URL}/${locale}/api/og/product`;
      const response = await fetch(url);
      expect(response.status).toBe(400);
    }, 30000);
  });

-  it('should generate blog OG image', async () => {
+  it('should generate blog OG image', async ({ skip }) => {
+    if (!isServerUp) skip();
    const url = `${BASE_URL}/de/blog/opengraph-image`;
    const response = await fetch(url);
    await verifyImageResponse(response);
  }, 30000);
 });
+
--- a/tsconfig.tsbuildinfo
+++ b/tsconfig.tsbuildinfo
Author	SHA1	Message	Date
Marc Mintel	950ef9d463	refactor: Replace custom `X-Auth-Redirect` header with standard HTTP redirect for unauthorized access. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 20s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m25s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 2m47s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 30s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 16:52:57 +01:00
Marc Mintel	fcb3169d04	feat: Implement a gatekeeper service for access control and add CMS health monitoring with a connectivity notice. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m24s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Failing after 3m8s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been skipped Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 16:27:52 +01:00
Marc Mintel	9e87720494	chore: update `.env.example` with current environment variable examples. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 20s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m24s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 2m58s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 29s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 15:16:46 +01:00
Marc Mintel	6a403f47a0	feat: Add script and package.json commands to synchronize Directus data and uploads between local and staging environments. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 20s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m23s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 5m32s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Failing after 8s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 14:55:38 +01:00
Marc Mintel	2d8df53e36	refactor: Replace hardcoded Traefik service names with a dynamic project name variable. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m25s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 2m52s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 29s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 14:26:44 +01:00
Marc Mintel	6f49dbc56c	ci: Update Gitea deploy workflow configuration. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 20s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m24s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 2m55s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 30s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 1s Details	2026-02-01 14:17:09 +01:00
Marc Mintel	ad2a477636	perf: Add Docker build cache mounts for `npm ci` and `npm run build` commands. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m24s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 5m48s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Failing after 12s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 3s Details	2026-02-01 14:00:44 +01:00
Marc Mintel	77a1067820	build: include .next/cache in Docker build context. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m22s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 5m42s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 44s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 13:43:42 +01:00
Marc Mintel	ea3076b4ec	fix: Remove quotes from environment variables in Traefik host rules within docker-compose.yml. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m28s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been cancelled Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Has been cancelled Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Has been cancelled Details	2026-02-01 13:38:35 +01:00
Marc Mintel	17fe0d7107	fix: Update Traefik host rules in docker-compose.yml to use properly quoted environment variables. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 2m32s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 4m26s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 49s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 1s Details	2026-02-01 13:26:25 +01:00
Marc Mintel	38b512973b	ci: update Gitea deploy workflow configuration. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m17s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 4m52s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Has been cancelled Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been cancelled Details	2026-02-01 13:18:06 +01:00
Marc Mintel	4f73838c21	ci: update Gitea deploy workflow configuration. Some checks failed Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Has been cancelled Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Has been cancelled Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been cancelled Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Has been cancelled Details Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Has been cancelled Details	2026-02-01 13:15:34 +01:00
Marc Mintel	2f8ce42409	refactor: Remove automatic CMS bootstrapping and wait commands from the dev script. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m17s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 3m28s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 43s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 1s Details	2026-02-01 13:04:11 +01:00
Marc Mintel	cf7af73b72	feat: Automate Directus CMS bootstrapping in the dev script and update gitignore rules. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 20s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m15s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 3m32s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Failing after 1m0s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 12:47:46 +01:00
Marc Mintel	d526bfe56f	chore: Remove various unused uploaded files from Directus.	2026-02-01 12:47:30 +01:00
Marc Mintel	4cb7d438a0	feat: make Directus CMS URL configurable via environment variable with a default. All checks were successful Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m17s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Successful in 3m42s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Successful in 56s Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 11:17:24 +01:00
Marc Mintel	03e597442b	feat: Centralize OG image font loading and sizing, simplify product page OG generation, and refine template styling. Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 21s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Successful in 1m36s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Failing after 1m31s Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been skipped Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 3s Details	2026-02-01 11:05:37 +01:00
Marc Mintel	5f9ee7d976	chore: resolve merge conflict in deploy workflow and sync docker-compose Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 24s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Failing after 1m16s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Has been skipped Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been skipped Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 2s Details	2026-02-01 02:18:25 +01:00
Marc Mintel	a4ea42a043	directus	2026-02-01 02:10:24 +01:00
Marc Mintel	ee04d2422c	directus	2026-02-01 02:02:03 +01:00
Marc Mintel	26fc34299e	directus	2026-02-01 00:58:54 +01:00
Marc Mintel	6d13611a16	directus	2026-02-01 00:55:33 +01:00
Marc Mintel	4a9246be5e	directus	2026-01-31 23:52:51 +01:00
Marc Mintel	2ed038174d	directus	2026-01-31 23:32:01 +01:00
Marc Mintel	c1304403a1	ci cd Some checks failed Build & Deploy KLZ Cables / 🔍 Prepare Environment (push) Successful in 22s Details Build & Deploy KLZ Cables / 🧪 Quality Assurance (push) Failing after 1m34s Details Build & Deploy KLZ Cables / 🏗️ Build & Push (push) Has been skipped Details Build & Deploy KLZ Cables / 🚀 Deploy (push) Has been skipped Details Build & Deploy KLZ Cables / 🔔 Notifications (push) Successful in 1s Details	2026-01-31 22:32:32 +01:00
Marc Mintel	06bbed8c21	strapi	2026-01-31 10:11:45 +01:00
Marc Mintel	f5a879fa60	Merge branch 'main' into feature/strapi	2026-01-30 22:10:16 +01:00
Marc Mintel	be9f9cf483	strapi	2026-01-29 19:47:55 +01:00