# Admin Guide (Backoffice)

Open `https://your-domain.com/admin/` and log in. All content management
happens here; visitors never see this area.

## Front page

*Front page* edits the landing page: your name/title, the introduction text
(line breaks are kept), and the full-page hero image. Uploading a new hero
image replaces the old one. Images are stored in full resolution, unmodified.

## Showreel

*Showreel* manages the portfolio shown at `/showreel.php` — each image fills
the whole screen, in the order listed. Upload images (a few at a time — these
go through the webhost, which may have upload size limits), reorder them with
the arrow buttons, remove them with ✕. Showreel images are stored locally on
the webhost.

## Galleries

*Galleries* is for delivering whole events to clients.

**Create** a gallery with a title, and optionally:

- **Password** — visitors must enter it before seeing the gallery. You can
  set, change, or remove it later.
- **Expiry date** — after this day the gallery link shows "not available".
  Nothing is deleted; clearing the date brings it back.

Each gallery gets an unguessable link like
`/gallery.php?g=wedding-mueller-x7Kf3q` — copy the *Share link* from the
gallery editor and send it to your client.

**Upload images** by dropping them onto the upload area in the gallery editor.
Files travel directly from your browser to the S3 storage in **full
resolution, byte-for-byte unmodified** — the webhost never touches them, so
there is no server upload limit. Keep the browser tab open until every file
shows *done*; failed files offer a *retry* link. A small preview thumbnail is
generated by your browser for the gallery grid; files the browser cannot
decode (e.g. RAW) are uploaded anyway, just without a preview.

**Delete** an image (✕ on its thumbnail) or a whole gallery — this also
removes the files from S3 permanently.

## Settings

Change the admin password here (minimum 8 characters). The change takes
effect immediately. The username and the S3 settings can only be changed by
editing the files in `config/` on the server.

After 5 failed login attempts the login is locked for 15 minutes.

## Good to know

- Visitors load gallery photos straight from Hetzner S3 through signed URLs
  that expire after ~1 hour; reloading the page issues fresh ones. Nobody can
  use a shared image URL indefinitely, and expired galleries really do go dark.
- All content lives in flat files: `data/` (JSON) and `media/`
  (showreel/hero images). Backing up = copying those two folders plus
  `config/`.