moved the old code folder

- Enhanced maintenance card with dark mode support
- Added system storage information display (logs, database, backups)
- Implemented per-table backup and restore functionality
- Added database table management with drop capability
- Restructured backup management UI with split layout:
  - Quick action buttons for full/data-only backups
  - Collapsible per-table backup/restore section
  - Split schedule creation (1/3) and active schedules list (2/3)
- Fixed database config loading to use mariadb module
- Fixed SQL syntax for reserved 'rows' keyword
- Removed System Information card
- All database operations use correct config keys from external_server.conf

.env.example

@@ -1,13 +1,136 @@
+# ============================================================================
 # Environment Configuration for Recticel Quality Application
-# Copy this file to .env and adjust the values as needed
+# Copy this file to .env and customize for your deployment
+# ============================================================================
 
-# Database Configuration
-MYSQL_ROOT_PASSWORD=rootpassword
+# ============================================================================
+# DATABASE CONFIGURATION
+# ============================================================================
+DB_HOST=db
 DB_PORT=3306
+DB_NAME=trasabilitate
+DB_USER=trasabilitate
+DB_PASSWORD=Initial01!
 
-# Application Configuration
+# MySQL/MariaDB root password
+MYSQL_ROOT_PASSWORD=rootpassword
+
+# Database performance tuning
+MYSQL_BUFFER_POOL=256M
+MYSQL_MAX_CONNECTIONS=150
+
+# Database connection retry settings
+DB_MAX_RETRIES=60
+DB_RETRY_INTERVAL=2
+
+# Data persistence paths
+DB_DATA_PATH=/srv/quality_app/mariadb
+LOGS_PATH=/srv/quality_app/logs
+INSTANCE_PATH=/srv/quality_app/py_app/instance
+BACKUP_PATH=/srv/quality_app/backups
+
+# ============================================================================
+# APPLICATION CONFIGURATION
+# ============================================================================
+# Flask environment (development, production)
+FLASK_ENV=production
+
+# Secret key for Flask sessions (CHANGE IN PRODUCTION!)
+SECRET_KEY=change-this-in-production
+
+# Application port
 APP_PORT=8781
 
-# Initialization Flags (set to "false" after first successful deployment)
-INIT_DB=true
-SEED_DB=true
+# ============================================================================
+# GUNICORN CONFIGURATION
+# ============================================================================
+# Number of worker processes (default: CPU cores * 2 + 1)
+# GUNICORN_WORKERS=5
+
+# Worker class (sync, gevent, gthread)
+GUNICORN_WORKER_CLASS=sync
+
+# Request timeout in seconds (increased for large database operations)
+GUNICORN_TIMEOUT=1800
+
+# Bind address
+GUNICORN_BIND=0.0.0.0:8781
+
+# Log level (debug, info, warning, error, critical)
+GUNICORN_LOG_LEVEL=info
+
+# Preload application
+GUNICORN_PRELOAD_APP=true
+
+# Max requests per worker before restart
+GUNICORN_MAX_REQUESTS=1000
+
+# For Docker stdout/stderr logging, uncomment:
+# GUNICORN_ACCESS_LOG=-
+# GUNICORN_ERROR_LOG=-
+
+# ============================================================================
+# INITIALIZATION FLAGS
+# ============================================================================
+# Initialize database schema on first run (set to false after first deployment)
+INIT_DB=false
+
+# Seed database with default data (set to false after first deployment)
+SEED_DB=false
+
+# Continue on database initialization errors
+IGNORE_DB_INIT_ERRORS=false
+
+# Continue on seeding errors
+IGNORE_SEED_ERRORS=false
+
+# Skip application health check
+SKIP_HEALTH_CHECK=false
+
+# ============================================================================
+# LOCALIZATION
+# ============================================================================
+TZ=Europe/Bucharest
+LANG=en_US.UTF-8
+
+# ============================================================================
+# DOCKER BUILD ARGUMENTS
+# ============================================================================
+VERSION=1.0.0
+BUILD_DATE=
+VCS_REF=
+
+# ============================================================================
+# NETWORK CONFIGURATION
+# ============================================================================
+NETWORK_SUBNET=172.20.0.0/16
+
+# ============================================================================
+# RESOURCE LIMITS
+# ============================================================================
+# Database resource limits
+DB_CPU_LIMIT=2.0
+DB_CPU_RESERVATION=0.5
+DB_MEMORY_LIMIT=1G
+DB_MEMORY_RESERVATION=256M
+
+# Application resource limits
+APP_CPU_LIMIT=2.0
+APP_CPU_RESERVATION=0.5
+APP_MEMORY_LIMIT=1G
+APP_MEMORY_RESERVATION=256M
+
+# Logging configuration
+LOG_MAX_SIZE=10m
+LOG_MAX_FILES=5
+DB_LOG_MAX_FILES=3
+
+# ============================================================================
+# NOTES:
+# ============================================================================
+# 1. Copy this file to .env in the same directory as docker-compose.yml
+# 2. Customize the values for your environment
+# 3. NEVER commit .env to version control
+# 4. Add .env to .gitignore
+# 5. For production, use strong passwords and secrets
+# ============================================================================

.gitignore

@@ -44,3 +44,8 @@ instance/external_server.conf
 .docker/
 
 *.backup2
+/logs
+/backups
+/config
+/data
+

Dockerfile

@@ -1,41 +1,114 @@
-# Dockerfile for Recticel Quality Application
-FROM python:3.10-slim
+# ============================================================================
+# Multi-Stage Dockerfile for Recticel Quality Application
+# Optimized for production deployment with minimal image size and security
+# ============================================================================
 
-# Set environment variables
+# ============================================================================
+# Stage 1: Builder - Install dependencies and prepare application
+# ============================================================================
+FROM python:3.10-slim AS builder
+
+# Prevent Python from writing pyc files and buffering stdout/stderr
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
-    FLASK_APP=run.py \
-    FLASK_ENV=production
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
+# Install build dependencies (will be discarded in final stage)
+RUN apt-get update && apt-get install -y --no-install-recommends \
     gcc \
+    g++ \
     default-libmysqlclient-dev \
     pkg-config \
     && rm -rf /var/lib/apt/lists/*
 
-# Create app directory
+# Create and use a non-root user for security
+RUN useradd -m -u 1000 appuser
+
+# Set working directory
 WORKDIR /app
 
-# Copy requirements and install Python dependencies
+# Copy and install Python dependencies
+# Copy only requirements first to leverage Docker layer caching
 COPY py_app/requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
+
+# Install Python packages in a virtual environment for better isolation
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+RUN pip install --upgrade pip setuptools wheel && \
+    pip install --no-cache-dir -r requirements.txt
+
+# ============================================================================
+# Stage 2: Runtime - Minimal production image
+# ============================================================================
+FROM python:3.10-slim AS runtime
+
+# Set Python environment variables
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    FLASK_APP=run.py \
+    FLASK_ENV=production \
+    PATH="/opt/venv/bin:$PATH"
+
+# Install only runtime dependencies (much smaller than build deps)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    default-libmysqlclient-dev \
+    mariadb-client \
+    curl \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
+
+# Create non-root user for running the application
+RUN useradd -m -u 1000 appuser
+
+# Set working directory
+WORKDIR /app
+
+# Copy virtual environment from builder stage
+COPY --from=builder /opt/venv /opt/venv
 
 # Copy application code
-COPY py_app/ .
+COPY --chown=appuser:appuser py_app/ .
 
-# Create necessary directories
-RUN mkdir -p /app/instance /srv/quality_recticel/logs
-
-# Create a script to wait for database and initialize
-COPY docker-entrypoint.sh /docker-entrypoint.sh
+# Copy entrypoint script
+COPY --chown=appuser:appuser docker-entrypoint.sh /docker-entrypoint.sh
 RUN chmod +x /docker-entrypoint.sh
 
+# Create necessary directories with proper ownership
+RUN mkdir -p /app/instance /srv/quality_recticel/logs && \
+    chown -R appuser:appuser /app /srv/quality_recticel
+
+# Switch to non-root user for security
+USER appuser
+
 # Expose the application port
 EXPOSE 8781
 
-# Use the entrypoint script
+# Health check - verify the application is responding
+# Disabled by default in Dockerfile, enable in docker-compose if needed
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -f http://localhost:8781/ || exit 1
+
+# Use the entrypoint script for initialization
 ENTRYPOINT ["/docker-entrypoint.sh"]
 
-# Run gunicorn
+# Default command: run gunicorn with optimized configuration
+# Can be overridden in docker-compose.yml or at runtime
 CMD ["gunicorn", "--config", "gunicorn.conf.py", "wsgi:application"]
+
+# ============================================================================
+# Build arguments for versioning and metadata
+# ============================================================================
+ARG BUILD_DATE
+ARG VERSION
+ARG VCS_REF
+
+# Labels for container metadata
+LABEL org.opencontainers.image.created="${BUILD_DATE}" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.revision="${VCS_REF}" \
+      org.opencontainers.image.title="Recticel Quality Application" \
+      org.opencontainers.image.description="Production-ready Docker image for Trasabilitate quality management system" \
+      org.opencontainers.image.authors="Quality Team" \
+      maintainer="quality-team@recticel.com"

README.md

@@ -0,0 +1,149 @@
+# Quality Recticel Application
+
+Production-ready Flask application for quality management and traceability.
+
+## 📋 Current Status (November 29, 2025)
+
+### ✅ Production Environment
+- **Deployment**: Docker containerized with docker-compose
+- **Web Server**: Gunicorn WSGI server (8 workers)
+- **Database**: MariaDB 11.3
+- **Python**: 3.10-slim
+- **Status**: Running and healthy on port 8781
+
+### 🎨 Recent UI/UX Improvements
+
+#### Maintenance Card
+- ✅ Dark mode support with CSS custom properties
+- ✅ System storage information display (logs, database, backups)
+- ✅ Database table management with drop functionality
+- ✅ Improved visual hierarchy and spacing
+
+#### Backup Management
+- ✅ Quick action buttons (Full Backup, Data-Only, Refresh)
+- ✅ Per-table backup and restore functionality
+- ✅ Collapsible table operations section
+- ✅ Split layout: Schedule creation (1/3) + Active schedules (2/3)
+- ✅ Modern card-based interface
+
+### 🔧 Technical Fixes
+- ✅ Fixed database config loading to use `mariadb` Python module
+- ✅ Corrected SQL syntax for reserved keyword `rows`
+- ✅ All endpoints use proper config keys (`server_domain`, `username`, `database_name`)
+- ✅ Storage paths configured for Docker environment (`/srv/quality_app/logs`, `/srv/quality_app/backups`)
+- ✅ Resolved duplicate Flask route function names
+
+### 📂 Project Structure
+```
+/srv/quality_app/
+├── py_app/                    # Python application
+│   ├── app/                   # Flask application package
+│   │   ├── __init__.py       # App factory
+│   │   ├── routes.py         # Route handlers (5200+ lines)
+│   │   ├── models.py         # Database models
+│   │   ├── database_backup.py # Backup management
+│   │   └── templates/        # Jinja2 templates
+│   │       └── settings.html # Settings & maintenance UI
+│   ├── static/               # CSS, JS, images
+│   ├── instance/             # Instance-specific config
+│   ├── requirements.txt      # Python dependencies
+│   └── wsgi.py              # WSGI entry point
+├── backups/                  # Database backups
+├── logs/                     # Application logs
+├── documentation/            # Project documentation
+├── docker-compose.yml        # Container orchestration
+├── Dockerfile               # Multi-stage build
+└── docker-entrypoint.sh     # Container initialization
+
+```
+
+### 🗄️ Database
+- **Engine**: MariaDB 11.3
+- **Host**: db (Docker network)
+- **Port**: 3306
+- **Database**: trasabilitate
+- **Size monitoring**: Real-time via information_schema
+- **Backup support**: Full, data-only, per-table
+
+### 🔐 Security & Access Control
+- **Role-based access**: superadmin, admin, warehouse_manager, worker, etc.
+- **Session management**: Flask sessions
+- **Database operations**: Limited to superadmin/admin roles
+- **Table operations**: Admin-plus decorator protection
+
+### 🚀 Deployment
+
+#### Start Application
+```bash
+cd /srv/quality_app
+docker compose up -d
+```
+
+#### Stop Application
+```bash
+docker compose down
+```
+
+#### View Logs
+```bash
+docker logs quality-app --tail 100 -f
+```
+
+#### Rebuild After Changes
+```bash
+docker compose down
+docker compose build
+docker compose up -d
+```
+
+### 📊 API Endpoints (Maintenance)
+
+#### Storage Information
+- `GET /api/maintenance/storage-info` - Get logs/database/backups sizes
+
+#### Database Tables
+- `GET /api/maintenance/database-tables` - List all tables with stats
+- `POST /api/maintenance/drop-table` - Drop a database table (dangerous)
+
+#### Per-Table Backups
+- `POST /api/backup/table` - Backup single table
+- `GET /api/backup/table-backups` - List table-specific backups
+- `POST /api/restore/table` - Restore single table from backup
+
+### 🔍 Monitoring
+- **Health Check**: Docker health checks via curl
+- **Container Status**: `docker compose ps`
+- **Application Logs**: `/srv/quality_app/logs/` (access.log, error.log)
+- **Database Status**: Included in storage info
+
+### 📝 Recent Changes
+**Commit**: `41f9caa` - Improve maintenance & backup UI with per-table operations
+- Enhanced maintenance card with dark mode
+- Added system storage monitoring
+- Implemented per-table database operations
+- Restructured backup UI with better organization
+- Fixed database connectivity and SQL syntax issues
+
+### 🔄 Git Repository
+- **Branch**: `docker_updates`
+- **Remote**: https://gitea.moto-adv.com/ske087/quality_app.git
+- **Status**: Up to date with origin
+
+### 🐛 Known Issues
+None currently reported.
+
+### 📚 Documentation
+Additional documentation available in `/srv/quality_app/documentation/`:
+- Backup system guide
+- Database structure
+- Docker deployment
+- Restore procedures
+
+### 👥 Development Team
+- **Active Branch**: docker_updates
+- **Last Updated**: November 29, 2025
+- **Deployment**: Production environment
+
+---
+
+For more detailed information, see the documentation folder or contact the development team.

backups/backup_schedule.json

@@ -0,0 +1,13 @@
+{
+  "schedules": [
+    {
+      "id": "default",
+      "name": "Default Schedule",
+      "enabled": true,
+      "time": "03:00",
+      "frequency": "daily",
+      "backup_type": "data-only",
+      "retention_days": 30
+    }
+  ]
+}

backups/backups_metadata.json

@@ -0,0 +1,122 @@
+[
+  {
+    "filename": "data_only_test_20251105_190632.sql",
+    "size": 305541,
+    "timestamp": "2025-11-05T19:06:32.251145",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251106_030000.sql",
+    "size": 305632,
+    "timestamp": "2025-11-06T03:00:00.179220",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251107_030000.sql",
+    "size": 325353,
+    "timestamp": "2025-11-07T03:00:00.178234",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251108_030000.sql",
+    "size": 346471,
+    "timestamp": "2025-11-08T03:00:00.175266",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251109_030000.sql",
+    "size": 364071,
+    "timestamp": "2025-11-09T03:00:00.175309",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251110_030000.sql",
+    "size": 364071,
+    "timestamp": "2025-11-10T03:00:00.174557",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251111_030000.sql",
+    "size": 392102,
+    "timestamp": "2025-11-11T03:00:00.175496",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251112_030000.sql",
+    "size": 417468,
+    "timestamp": "2025-11-12T03:00:00.177699",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_trasabilitate_20251113_002851.sql",
+    "size": 435126,
+    "timestamp": "2025-11-13T00:28:51.949113",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "backup_trasabilitate_20251113_004522.sql",
+    "size": 455459,
+    "timestamp": "2025-11-13T00:45:22.992984",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251113_030000.sql",
+    "size": 435126,
+    "timestamp": "2025-11-13T03:00:00.187954",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251114_030000.sql",
+    "size": 458259,
+    "timestamp": "2025-11-14T03:00:00.179754",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251115_030000.sql",
+    "size": 484020,
+    "timestamp": "2025-11-15T03:00:00.181883",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251116_030000.sql",
+    "size": 494281,
+    "timestamp": "2025-11-16T03:00:00.179753",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251117_030000.sql",
+    "size": 494281,
+    "timestamp": "2025-11-17T03:00:00.181115",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251118_030000.sql",
+    "size": 536395,
+    "timestamp": "2025-11-18T03:00:00.183002",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251119_030000.sql",
+    "size": 539493,
+    "timestamp": "2025-11-19T03:00:00.182323",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251120_030000.sql",
+    "size": 539493,
+    "timestamp": "2025-11-20T03:00:00.182801",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251121_030000.sql",
+    "size": 539493,
+    "timestamp": "2025-11-21T03:00:00.183179",
+    "database": "trasabilitate"
+  },
+  {
+    "filename": "data_only_scheduled_20251122_030000.sql",
+    "size": 539493,
+    "timestamp": "2025-11-22T03:00:00.182628",
+    "database": "trasabilitate"
+  }
+]

docker-compose.yml

@@ -1,23 +1,41 @@
-version: '3.8'
+#version: '3.8'
+
+# ============================================================================
+# Recticel Quality Application - Docker Compose Configuration
+# Production-ready with mapped volumes for code, data, and backups
+# ============================================================================
 
 services:
+  # ==========================================================================
   # MariaDB Database Service
+  # ==========================================================================
   db:
     image: mariadb:11.3
-    container_name: recticel-db
+    container_name: quality-app-db
     restart: unless-stopped
+    
     environment:
-      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-rootpassword}
-      MYSQL_DATABASE: trasabilitate
-      MYSQL_USER: trasabilitate
-      MYSQL_PASSWORD: Initial01!
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: ${DB_NAME}
+      MYSQL_USER: ${DB_USER}
+      MYSQL_PASSWORD: ${DB_PASSWORD}
+      MYSQL_INNODB_BUFFER_POOL_SIZE: ${MYSQL_BUFFER_POOL}
+      MYSQL_MAX_CONNECTIONS: ${MYSQL_MAX_CONNECTIONS}
+    
     ports:
-      - "${DB_PORT:-3306}:3306"
+      - "${DB_PORT}:3306"
+    
     volumes:
-      - /srv/docker-test/mariadb:/var/lib/mysql
-      - ./init-db.sql:/docker-entrypoint-initdb.d/01-init.sql
+      # Database data persistence - CRITICAL: Do not delete this volume
+      - ${DB_DATA_PATH}:/var/lib/mysql
+      # Database initialization script
+      - ./init-db.sql:/docker-entrypoint-initdb.d/01-init.sql:ro
+      # Backup folder mapped for easy database dumps
+      - ${BACKUP_PATH}:/backups
+    
     networks:
-      - recticel-network
+      - quality-app-network
+    
     healthcheck:
       test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
       interval: 10s
@@ -25,43 +43,97 @@ services:
       retries: 5
       start_period: 30s
     
+    deploy:
+      resources:
+        limits:
+          cpus: ${DB_CPU_LIMIT}
+          memory: ${DB_MEMORY_LIMIT}
+        reservations:
+          cpus: ${DB_CPU_RESERVATION}
+          memory: ${DB_MEMORY_RESERVATION}
+    
+    logging:
+      driver: json-file
+      options:
+        max-size: ${LOG_MAX_SIZE}
+        max-file: ${DB_LOG_MAX_FILES}
+
+  # ==========================================================================
   # Flask Web Application Service
+  # ==========================================================================
   web:
     build:
       context: .
       dockerfile: Dockerfile
-    container_name: recticel-app
+      args:
+        BUILD_DATE: ${BUILD_DATE}
+        VERSION: ${VERSION}
+        VCS_REF: ${VCS_REF}
+    
+    image: trasabilitate-quality-app:${VERSION}
+    container_name: quality-app
     restart: unless-stopped
+    
     depends_on:
       db:
         condition: service_healthy
+    
     environment:
-      # Database connection settings
-      DB_HOST: db
-      DB_PORT: 3306
-      DB_NAME: trasabilitate
-      DB_USER: trasabilitate
-      DB_PASSWORD: Initial01!
+      # Database connection
+      DB_HOST: ${DB_HOST}
+      DB_PORT: ${DB_PORT}
+      DB_NAME: ${DB_NAME}
+      DB_USER: ${DB_USER}
+      DB_PASSWORD: ${DB_PASSWORD}
+      DB_MAX_RETRIES: ${DB_MAX_RETRIES}
+      DB_RETRY_INTERVAL: ${DB_RETRY_INTERVAL}
       
-      # Application settings
-      FLASK_ENV: production
+      # Flask settings
+      FLASK_ENV: ${FLASK_ENV}
       FLASK_APP: run.py
+      SECRET_KEY: ${SECRET_KEY}
+      
+      # Gunicorn settings
+      GUNICORN_WORKERS: ${GUNICORN_WORKERS}
+      GUNICORN_WORKER_CLASS: ${GUNICORN_WORKER_CLASS}
+      GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT}
+      GUNICORN_BIND: ${GUNICORN_BIND}
+      GUNICORN_LOG_LEVEL: ${GUNICORN_LOG_LEVEL}
+      GUNICORN_PRELOAD_APP: ${GUNICORN_PRELOAD_APP}
+      GUNICORN_MAX_REQUESTS: ${GUNICORN_MAX_REQUESTS}
+      
+      # Initialization flags
+      INIT_DB: ${INIT_DB}
+      SEED_DB: ${SEED_DB}
+      IGNORE_DB_INIT_ERRORS: ${IGNORE_DB_INIT_ERRORS}
+      IGNORE_SEED_ERRORS: ${IGNORE_SEED_ERRORS}
+      SKIP_HEALTH_CHECK: ${SKIP_HEALTH_CHECK}
+      
+      # Localization
+      TZ: ${TZ}
+      LANG: ${LANG}
+      
+      # Backup path
+      BACKUP_PATH: ${BACKUP_PATH}
     
-      # Initialization flags (set to "false" after first run if needed)
-      INIT_DB: "true"
-      SEED_DB: "true"
     ports:
-      - "${APP_PORT:-8781}:8781"
+      - "${APP_PORT}:8781"
+    
     volumes:
-      # Mount logs directory for persistence
-      - /srv/docker-test/logs:/srv/quality_recticel/logs
-      # Mount instance directory for config persistence
-      - /srv/docker-test/instance:/app/instance
-      # Mount app code for easy updates (DISABLED - causes config issues)
-      # Uncomment only for development, not production
-      # - /srv/docker-test/app:/app
+      # Application code - mapped for easy updates without rebuilding
+      - ${APP_CODE_PATH}:/app
+      # Application logs - persistent across container restarts
+      - ${LOGS_PATH}:/srv/quality_app/logs
+      # Instance configuration files (database config)
+      - ${INSTANCE_PATH}:/app/instance
+      # Backup storage - shared with database container
+      - ${BACKUP_PATH}:/srv/quality_app/backups
+      # Host /data folder for direct access (includes /data/backups)
+      - /data:/data
+    
     networks:
-      - recticel-network
+      - quality-app-network
+    
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8781/"]
       interval: 30s
@@ -69,9 +141,68 @@ services:
       retries: 3
       start_period: 60s
     
-networks:
-  recticel-network:
-    driver: bridge
+    deploy:
+      resources:
+        limits:
+          cpus: ${APP_CPU_LIMIT}
+          memory: ${APP_MEMORY_LIMIT}
+        reservations:
+          cpus: ${APP_CPU_RESERVATION}
+          memory: ${APP_MEMORY_RESERVATION}
     
-# Note: Using bind mounts to /srv/docker-test/ instead of named volumes
-# This allows easier access and management of persistent data
+    logging:
+      driver: json-file
+      options:
+        max-size: ${LOG_MAX_SIZE}
+        max-file: ${LOG_MAX_FILES}
+        compress: "true"
+
+# ============================================================================
+# Network Configuration
+# ============================================================================
+networks:
+  quality-app-network:
+    driver: bridge
+    ipam:
+      config:
+        - subnet: ${NETWORK_SUBNET}
+
+# ============================================================================
+# USAGE NOTES
+# ============================================================================
+# VOLUME STRUCTURE:
+# ./data/mariadb/     - Database files (MariaDB data directory)
+# ./config/instance/  - Application configuration (external_server.conf)
+# ./logs/             - Application logs
+# ./backups/          - Database backups
+# ./py_app/           - (Optional) Application code for development
+#
+# FIRST TIME SETUP:
+# 1. Create directory structure:
+#    mkdir -p data/mariadb config/instance logs backups
+# 2. Copy .env.example to .env and customize all values
+# 3. Set INIT_DB=true and SEED_DB=true in .env for first deployment
+# 4. Change default passwords and SECRET_KEY in .env (CRITICAL!)
+# 5. Build and start: docker-compose up -d --build
+#
+# SUBSEQUENT DEPLOYMENTS:
+# 1. Set INIT_DB=false and SEED_DB=false in .env
+# 2. Start: docker-compose up -d
+#
+# COMMANDS:
+# - Build and start:     docker-compose up -d --build
+# - Stop:                docker-compose down
+# - Stop & remove data:  docker-compose down -v (WARNING: deletes database!)
+# - View logs:           docker-compose logs -f web
+# - Database logs:       docker-compose logs -f db
+# - Restart:             docker-compose restart
+# - Rebuild image:       docker-compose build --no-cache web
+#
+# BACKUP:
+# - Manual backup:       docker-compose exec db mysqldump -u trasabilitate -p trasabilitate > backups/manual_backup.sql
+# - Restore:             docker-compose exec -T db mysql -u trasabilitate -p trasabilitate < backups/backup.sql
+#
+# DATABASE ACCESS:
+# - MySQL client:        docker-compose exec db mysql -u trasabilitate -p trasabilitate
+# - From host:           mysql -h 127.0.0.1 -P 3306 -u trasabilitate -p
+# ============================================================================

docker-entrypoint.sh

@@ -1,48 +1,126 @@
 #!/bin/bash
-set -e
+# Docker Entrypoint Script for Trasabilitate Application
+# Handles initialization, health checks, and graceful startup
 
-echo "==================================="
-echo "Recticel Quality App - Starting"
-echo "==================================="
+set -e  # Exit on error
+set -u  # Exit on undefined variable
+set -o pipefail  # Exit on pipe failure
 
-# Wait for MariaDB to be ready
-echo "Waiting for MariaDB to be ready..."
-until python3 << END
+# ============================================================================
+# LOGGING UTILITIES
+# ============================================================================
+log_info() {
+    echo "[$(date +'%Y-%m-%d %H:%M:%S')] ℹ️  INFO: $*"
+}
+
+log_success() {
+    echo "[$(date +'%Y-%m-%d %H:%M:%S')] ✅ SUCCESS: $*"
+}
+
+log_warning() {
+    echo "[$(date +'%Y-%m-%d %H:%M:%S')] ⚠️  WARNING: $*"
+}
+
+log_error() {
+    echo "[$(date +'%Y-%m-%d %H:%M:%S')] ❌ ERROR: $*" >&2
+}
+
+# ============================================================================
+# ENVIRONMENT VALIDATION
+# ============================================================================
+validate_environment() {
+    log_info "Validating environment variables..."
+    
+    local required_vars=("DB_HOST" "DB_PORT" "DB_NAME" "DB_USER" "DB_PASSWORD")
+    local missing_vars=()
+    
+    for var in "${required_vars[@]}"; do
+        if [ -z "${!var:-}" ]; then
+            missing_vars+=("$var")
+        fi
+    done
+    
+    if [ ${#missing_vars[@]} -gt 0 ]; then
+        log_error "Missing required environment variables: ${missing_vars[*]}"
+        exit 1
+    fi
+    
+    log_success "Environment variables validated"
+}
+
+# ============================================================================
+# DATABASE CONNECTION CHECK
+# ============================================================================
+wait_for_database() {
+    local max_retries="${DB_MAX_RETRIES:-60}"
+    local retry_interval="${DB_RETRY_INTERVAL:-2}"
+    local retry_count=0
+    
+    log_info "Waiting for MariaDB to be ready..."
+    log_info "Database: ${DB_USER}@${DB_HOST}:${DB_PORT}/${DB_NAME}"
+    
+    while [ $retry_count -lt $max_retries ]; do
+        if python3 << END
 import mariadb
 import sys
-import time
 
-max_retries = 30
-retry_count = 0
-
-while retry_count < max_retries:
 try:
     conn = mariadb.connect(
         user="${DB_USER}",
         password="${DB_PASSWORD}",
         host="${DB_HOST}",
-            port=int("${DB_PORT}"),
-            database="${DB_NAME}"
+        port=int(${DB_PORT}),
+        database="${DB_NAME}",
+        connect_timeout=5
     )
     conn.close()
-        print("✅ Database connection successful!")
     sys.exit(0)
 except Exception as e:
-        retry_count += 1
-        print(f"Database not ready yet (attempt {retry_count}/{max_retries}). Waiting...")
-        time.sleep(2)
-
-print("❌ Failed to connect to database after 30 attempts")
+    print(f"Connection failed: {e}")
     sys.exit(1)
 END
-do
-  echo "Retrying database connection..."
-  sleep 2
+        then
+            log_success "Database connection established!"
+            return 0
+        fi
+        
+        retry_count=$((retry_count + 1))
+        log_warning "Database not ready (attempt ${retry_count}/${max_retries}). Retrying in ${retry_interval}s..."
+        sleep $retry_interval
     done
     
-# Create external_server.conf from environment variables
-echo "Creating database configuration..."
-cat > /app/instance/external_server.conf << EOF
+    log_error "Failed to connect to database after ${max_retries} attempts"
+    exit 1
+}
+
+# ============================================================================
+# DIRECTORY SETUP
+# ============================================================================
+setup_directories() {
+    log_info "Setting up application directories..."
+    
+    # Create necessary directories
+    mkdir -p /app/instance
+    mkdir -p /srv/quality_recticel/logs
+    
+    # Set proper permissions (if not running as root)
+    if [ "$(id -u)" != "0" ]; then
+        log_info "Running as non-root user (UID: $(id -u))"
+    fi
+    
+    log_success "Directories configured"
+}
+
+# ============================================================================
+# DATABASE CONFIGURATION
+# ============================================================================
+create_database_config() {
+    log_info "Creating database configuration file..."
+    
+    local config_file="/app/instance/external_server.conf"
+    
+    cat > "$config_file" << EOF
+# Database Configuration - Generated on $(date)
 server_domain=${DB_HOST}
 port=${DB_PORT}
 database_name=${DB_NAME}
@@ -50,23 +128,118 @@ username=${DB_USER}
 password=${DB_PASSWORD}
 EOF
     
-echo "✅ Database configuration created"
+    # Secure the config file (contains password)
+    chmod 600 "$config_file"
     
-# Run database initialization if needed
-if [ "${INIT_DB}" = "true" ]; then
-    echo "Initializing database schema..."
-    python3 /app/app/db_create_scripts/setup_complete_database.py || echo "⚠️  Database may already be initialized"
+    log_success "Database configuration created at: $config_file"
+}
+
+# ============================================================================
+# DATABASE INITIALIZATION
+# ============================================================================
+initialize_database() {
+    if [ "${INIT_DB:-false}" = "true" ]; then
+        log_info "Initializing database schema..."
+        
+        if python3 /app/app/db_create_scripts/setup_complete_database.py; then
+            log_success "Database schema initialized successfully"
+        else
+            local exit_code=$?
+            if [ $exit_code -eq 0 ] || [ "${IGNORE_DB_INIT_ERRORS:-false}" = "true" ]; then
+                log_warning "Database initialization completed with warnings (exit code: $exit_code)"
+            else
+                log_error "Database initialization failed (exit code: $exit_code)"
+                exit 1
+            fi
+        fi
+    else
+        log_info "Skipping database initialization (INIT_DB=${INIT_DB:-false})"
+    fi
+}
+
+# ============================================================================
+# DATABASE SEEDING
+# ============================================================================
+seed_database() {
+    if [ "${SEED_DB:-false}" = "true" ]; then
+        log_info "Seeding database with initial data..."
+        
+        if python3 /app/seed.py; then
+            log_success "Database seeded successfully"
+        else
+            local exit_code=$?
+            if [ "${IGNORE_SEED_ERRORS:-false}" = "true" ]; then
+                log_warning "Database seeding completed with warnings (exit code: $exit_code)"
+            else
+                log_error "Database seeding failed (exit code: $exit_code)"
+                exit 1
+            fi
+        fi
+    else
+        log_info "Skipping database seeding (SEED_DB=${SEED_DB:-false})"
+    fi
+}
+
+# ============================================================================
+# HEALTH CHECK
+# ============================================================================
+run_health_check() {
+    if [ "${SKIP_HEALTH_CHECK:-false}" = "true" ]; then
+        log_info "Skipping pre-startup health check"
+        return 0
     fi
     
-# Seed the database with superadmin user
-if [ "${SEED_DB}" = "true" ]; then
-    echo "Seeding database with superadmin user..."
-    python3 /app/seed.py || echo "⚠️  Database may already be seeded"
+    log_info "Running application health checks..."
+    
+    # Check Python imports
+    if ! python3 -c "import flask, mariadb, gunicorn" 2>/dev/null; then
+        log_error "Required Python packages are not properly installed"
+        exit 1
     fi
     
-echo "==================================="
-echo "Starting application..."
-echo "==================================="
+    log_success "Health checks passed"
+}
 
-# Execute the CMD
+# ============================================================================
+# SIGNAL HANDLERS FOR GRACEFUL SHUTDOWN
+# ============================================================================
+setup_signal_handlers() {
+    trap 'log_info "Received SIGTERM, shutting down gracefully..."; exit 0' SIGTERM
+    trap 'log_info "Received SIGINT, shutting down gracefully..."; exit 0' SIGINT
+}
+
+# ============================================================================
+# MAIN EXECUTION
+# ============================================================================
+main() {
+    echo "============================================================================"
+    echo "🚀 Trasabilitate Application - Docker Container Startup"
+    echo "============================================================================"
+    echo "   Container ID: $(hostname)"
+    echo "   Start Time: $(date)"
+    echo "   User: $(whoami) (UID: $(id -u))"
+    echo "============================================================================"
+    
+    # Setup signal handlers
+    setup_signal_handlers
+    
+    # Execute initialization steps
+    validate_environment
+    setup_directories
+    wait_for_database
+    create_database_config
+    initialize_database
+    seed_database
+    run_health_check
+    
+    echo "============================================================================"
+    log_success "Initialization complete! Starting application..."
+    echo "============================================================================"
+    echo ""
+    
+    # Execute the main command (CMD from Dockerfile)
     exec "$@"
+}
+
+# Run main function
+main "$@"

documentation/BACKUP_SCHEDULE_FEATURE.md

@@ -0,0 +1,484 @@
+# Backup Schedule Feature - Complete Guide
+
+## Overview
+
+The backup schedule feature allows administrators to configure automated backups that run at specified times with customizable frequency. This ensures regular, consistent backups without manual intervention.
+
+**Added:** November 5, 2025
+**Version:** 1.1.0
+
+---
+
+## Key Features
+
+### 1. Automated Scheduling
+- **Daily Backups:** Run every day at specified time
+- **Weekly Backups:** Run once per week
+- **Monthly Backups:** Run once per month
+- **Custom Time:** Choose exact time (24-hour format)
+
+### 2. Backup Type Selection ✨ NEW
+- **Full Backup:** Complete database with schema, triggers, and data
+- **Data-Only Backup:** Only table data (faster, smaller files)
+
+### 3. Retention Management
+- **Automatic Cleanup:** Delete backups older than X days
+- **Configurable Period:** Keep backups from 1 to 365 days
+- **Smart Storage:** Prevents disk space issues
+
+### 4. Easy Management
+- **Enable/Disable:** Toggle scheduled backups on/off
+- **Visual Interface:** Clear, intuitive settings panel
+- **Status Tracking:** See current schedule at a glance
+
+---
+
+## Configuration Options
+
+### Schedule Settings
+
+| Setting | Options | Default | Description |
+|---------|---------|---------|-------------|
+| **Enabled** | On/Off | Off | Enable or disable scheduled backups |
+| **Time** | 00:00 - 23:59 | 02:00 | Time to run backup (24-hour format) |
+| **Frequency** | Daily, Weekly, Monthly | Daily | How often to run backup |
+| **Backup Type** | Full, Data-Only | Full | Type of backup to create |
+| **Retention** | 1-365 days | 30 | Days to keep old backups |
+
+---
+
+## Recommended Configurations
+
+### Configuration 1: Daily Data Snapshots
+**Best for:** Production environments with frequent data changes
+
+```json
+{
+  "enabled": true,
+  "time": "02:00",
+  "frequency": "daily",
+  "backup_type": "data-only",
+  "retention_days": 7
+}
+```
+
+**Why:**
+- ✅ Fast daily backups (data-only is 30-40% faster)
+- ✅ Smaller file sizes
+- ✅ 7-day retention keeps recent history without filling disk
+- ✅ Schema changes handled separately
+
+### Configuration 2: Weekly Full Backups
+**Best for:** Stable environments, comprehensive safety
+
+```json
+{
+  "enabled": true,
+  "time": "03:00",
+  "frequency": "weekly",
+  "backup_type": "full",
+  "retention_days": 60
+}
+```
+
+**Why:**
+- ✅ Complete database backup with schema and triggers
+- ✅ Less frequent (lower storage usage)
+- ✅ 60-day retention for long-term recovery
+- ✅ Safe for disaster recovery
+
+### Configuration 3: Hybrid Approach (Recommended)
+**Best for:** Most production environments
+
+**Schedule 1 - Daily Data:**
+```json
+{
+  "enabled": true,
+  "time": "02:00",
+  "frequency": "daily",
+  "backup_type": "data-only",
+  "retention_days": 7
+}
+```
+
+**Schedule 2 - Weekly Full (manual or separate scheduler):**
+- Run manual full backup every Sunday
+- Keep for 90 days
+
+**Why:**
+- ✅ Daily data snapshots for quick recovery
+- ✅ Weekly full backups for complete safety
+- ✅ Balanced storage usage
+- ✅ Multiple recovery points
+
+---
+
+## How to Configure
+
+### Via Web Interface
+
+1. **Navigate to Settings:**
+   - Log in as Admin or Superadmin
+   - Go to **Settings** page
+   - Scroll to **Database Backup Management** section
+
+2. **Configure Schedule:**
+   - Check **"Enable Scheduled Backups"** checkbox
+   - Set **Backup Time** (e.g., 02:00)
+   - Choose **Frequency** (Daily/Weekly/Monthly)
+   - Select **Backup Type:**
+     - **Full Backup** for complete safety
+     - **Data-Only Backup** for faster, smaller backups
+   - Set **Retention Days** (1-365)
+
+3. **Save Configuration:**
+   - Click **💾 Save Schedule** button
+   - Confirm settings in alert message
+
+### Via Configuration File
+
+**File Location:** `/srv/quality_app/backups/backup_schedule.json`
+
+**Example:**
+```json
+{
+  "enabled": true,
+  "time": "02:00",
+  "frequency": "daily",
+  "backup_type": "data-only",
+  "retention_days": 30
+}
+```
+
+**Note:** Changes take effect on next scheduled run.
+
+---
+
+## Technical Implementation
+
+### 1. Schedule Storage
+- **File:** `backup_schedule.json` in backups directory
+- **Format:** JSON
+- **Persistence:** Survives application restarts
+
+### 2. Backup Execution
+The schedule configuration is stored, but actual execution requires a cron job or scheduler:
+
+**Recommended: Use system cron**
+```bash
+# Edit crontab
+crontab -e
+
+# Add entry for 2 AM daily
+0 2 * * * cd /srv/quality_app/py_app && /srv/quality_recticel/recticel/bin/python3 -c "from app.database_backup import DatabaseBackupManager; from app import create_app; app = create_app(); app.app_context().push(); mgr = DatabaseBackupManager(); schedule = mgr.get_backup_schedule(); mgr.create_data_only_backup() if schedule['backup_type'] == 'data-only' else mgr.create_backup()"
+```
+
+**Alternative: APScheduler (application-level)**
+```python
+from apscheduler.schedulers.background import BackgroundScheduler
+
+scheduler = BackgroundScheduler()
+
+def scheduled_backup():
+    schedule = backup_manager.get_backup_schedule()
+    if schedule['enabled']:
+        if schedule['backup_type'] == 'data-only':
+            backup_manager.create_data_only_backup()
+        else:
+            backup_manager.create_backup()
+        backup_manager.cleanup_old_backups(schedule['retention_days'])
+
+# Schedule based on configuration
+scheduler.add_job(scheduled_backup, 'cron', hour=2, minute=0)
+scheduler.start()
+```
+
+### 3. Cleanup Process
+Automated cleanup runs after each backup:
+- Scans backup directory
+- Identifies files older than retention_days
+- Deletes old backups
+- Logs deletion activity
+
+---
+
+## Backup Type Comparison
+
+### Full Backup (Schema + Data + Triggers)
+
+**mysqldump command:**
+```bash
+mysqldump \
+  --single-transaction \
+  --skip-lock-tables \
+  --force \
+  --routines \
+  --triggers \        # ✅ Included
+  --events \
+  --add-drop-database \
+  --databases trasabilitate
+```
+
+**Typical size:** 1-2 MB (schema) + data size
+**Backup time:** ~15-30 seconds
+**Restore:** Complete replacement
+
+### Data-Only Backup
+
+**mysqldump command:**
+```bash
+mysqldump \
+  --no-create-info \      # ❌ Skip CREATE TABLE
+  --skip-triggers \       # ❌ Skip triggers
+  --no-create-db \        # ❌ Skip CREATE DATABASE
+  --complete-insert \
+  --extended-insert \
+  --single-transaction \
+  trasabilitate
+```
+
+**Typical size:** Data size only
+**Backup time:** ~10-20 seconds (30-40% faster)
+**Restore:** Data only (schema must exist)
+
+---
+
+## Understanding the UI
+
+### Schedule Form Fields
+
+```
+┌─────────────────────────────────────────────┐
+│ ☑ Enable Scheduled Backups                 │
+├─────────────────────────────────────────────┤
+│ Backup Time: [02:00]                        │
+│ Frequency: [Daily ▼]                        │
+│ Backup Type: [Full Backup ▼]               │
+│ Keep backups for: [30] days                │
+├─────────────────────────────────────────────┤
+│        [💾 Save Schedule]                   │
+└─────────────────────────────────────────────┘
+
+💡 Recommendation: Use Full Backup for weekly/
+   monthly schedules (complete safety), and
+   Data-Only for daily schedules (faster,
+   smaller files).
+```
+
+### Success Message Format
+When saving schedule:
+```
+✅ Backup schedule saved successfully
+
+Scheduled [Full/Data-Only] backups will run 
+[daily/weekly/monthly] at [HH:MM].
+```
+
+---
+
+## API Endpoints
+
+### Get Current Schedule
+```
+GET /api/backup/schedule
+```
+
+**Response:**
+```json
+{
+  "success": true,
+  "schedule": {
+    "enabled": true,
+    "time": "02:00",
+    "frequency": "daily",
+    "backup_type": "data-only",
+    "retention_days": 30
+  }
+}
+```
+
+### Save Schedule
+```
+POST /api/backup/schedule
+Content-Type: application/json
+
+{
+  "enabled": true,
+  "time": "02:00",
+  "frequency": "daily",
+  "backup_type": "data-only",
+  "retention_days": 30
+}
+```
+
+**Response:**
+```json
+{
+  "success": true,
+  "message": "Backup schedule saved successfully"
+}
+```
+
+---
+
+## Monitoring and Logs
+
+### Check Backup Files
+```bash
+ls -lh /srv/quality_app/backups/*.sql | tail -10
+```
+
+### Verify Schedule Configuration
+```bash
+cat /srv/quality_app/backups/backup_schedule.json
+```
+
+### Check Application Logs
+```bash
+tail -f /srv/quality_app/logs/error.log | grep -i backup
+```
+
+### Monitor Disk Usage
+```bash
+du -sh /srv/quality_app/backups/
+```
+
+---
+
+## Troubleshooting
+
+### Issue: Scheduled backups not running
+
+**Check 1:** Is schedule enabled?
+```bash
+cat /srv/quality_app/backups/backup_schedule.json | grep enabled
+```
+
+**Check 2:** Is cron job configured?
+```bash
+crontab -l | grep backup
+```
+
+**Check 3:** Are there permission issues?
+```bash
+ls -la /srv/quality_app/backups/
+```
+
+**Solution:** Ensure cron job exists and has proper permissions.
+
+---
+
+### Issue: Backup files growing too large
+
+**Check disk usage:**
+```bash
+du -sh /srv/quality_app/backups/
+ls -lh /srv/quality_app/backups/*.sql | wc -l
+```
+
+**Solutions:**
+1. Reduce retention_days (e.g., from 30 to 7)
+2. Use data-only backups (smaller files)
+3. Store old backups on external storage
+4. Compress backups: `gzip /srv/quality_app/backups/*.sql`
+
+---
+
+### Issue: Data-only restore fails
+
+**Error:** "Table doesn't exist"
+
+**Cause:** Database schema not present
+
+**Solution:** 
+1. Run full backup restore first, OR
+2. Ensure database structure exists via setup script
+
+---
+
+## Best Practices
+
+### ✅ DO:
+1. **Enable scheduled backups** - Automate for consistency
+2. **Use data-only for daily** - Faster, smaller files
+3. **Use full for weekly** - Complete safety net
+4. **Test restore regularly** - Verify backups work
+5. **Monitor disk space** - Prevent storage issues
+6. **Store off-site copies** - Disaster recovery
+7. **Adjust retention** - Balance safety vs. storage
+
+### ❌ DON'T:
+1. **Don't disable all backups** - Always have some backup
+2. **Don't set retention too low** - Keep at least 7 days
+3. **Don't ignore disk warnings** - Monitor storage
+4. **Don't forget to test restores** - Untested backups are useless
+5. **Don't rely only on scheduled** - Manual backups before major changes
+
+---
+
+## Security and Access
+
+### Required Roles
+- **View Schedule:** Admin, Superadmin
+- **Edit Schedule:** Admin, Superadmin
+- **Execute Manual Backup:** Admin, Superadmin
+- **Restore Database:** Superadmin only
+
+### File Permissions
+```bash
+# Backup directory
+drwxrwxr-x /srv/quality_app/backups/
+
+# Schedule file
+-rw-rw-r-- backup_schedule.json
+
+# Backup files
+-rw-rw-r-- *.sql
+```
+
+---
+
+## Migration Guide
+
+### Upgrading from Previous Version (without backup_type)
+
+**Automatic:** Schedule automatically gets `backup_type: "full"` on first load
+
+**Manual update:**
+```bash
+cd /srv/quality_app/backups/
+# Backup current schedule
+cp backup_schedule.json backup_schedule.json.bak
+
+# Add backup_type field
+cat backup_schedule.json | jq '. + {"backup_type": "full"}' > backup_schedule_new.json
+mv backup_schedule_new.json backup_schedule.json
+```
+
+---
+
+## Related Documentation
+
+- [DATA_ONLY_BACKUP_FEATURE.md](DATA_ONLY_BACKUP_FEATURE.md) - Data-only backup details
+- [BACKUP_SYSTEM.md](BACKUP_SYSTEM.md) - Complete backup system overview
+- [QUICK_BACKUP_REFERENCE.md](QUICK_BACKUP_REFERENCE.md) - Quick reference guide
+
+---
+
+## Future Enhancements
+
+### Planned Features:
+- [ ] Multiple schedules (daily data + weekly full)
+- [ ] Email notifications on backup completion
+- [ ] Backup to remote storage (S3, FTP)
+- [ ] Backup compression (gzip)
+- [ ] Backup encryption
+- [ ] Web-based backup browsing
+- [ ] Automatic restore testing
+
+---
+
+**Last Updated:** November 5, 2025
+**Module:** `app/database_backup.py`
+**UI Template:** `app/templates/settings.html`
+**Application:** Quality Recticel - Trasabilitate System

documentation/BACKUP_SYSTEM.md

@@ -0,0 +1,205 @@
+# Database Backup System Documentation
+
+## Overview
+The Quality Recticel application now includes a comprehensive database backup management system accessible from the Settings page for superadmin and admin users.
+
+## Features
+
+### 1. Manual Backup
+- **Backup Now** button creates an immediate full database backup
+- Uses `mysqldump` to create complete SQL export
+- Includes all tables, triggers, routines, and events
+- Each backup is timestamped: `backup_trasabilitate_YYYYMMDD_HHMMSS.sql`
+
+### 2. Scheduled Backups
+Configure automated backups with:
+- **Enable/Disable**: Toggle scheduled backups on/off
+- **Backup Time**: Set time of day for automatic backup (default: 02:00)
+- **Frequency**: Choose Daily, Weekly, or Monthly backups
+- **Retention Period**: Automatically delete backups older than N days (default: 30 days)
+
+### 3. Backup Management
+- **List Backups**: View all available backup files with size and creation date
+- **Download**: Download any backup file to your local computer
+- **Delete**: Remove old or unnecessary backup files
+- **Restore**: (Superadmin only) Restore database from a backup file
+
+## Configuration
+
+### Backup Path
+The backup location can be configured in three ways (priority order):
+
+1. **Environment Variable** (Docker):
+   ```yaml
+   # docker-compose.yml
+   environment:
+     BACKUP_PATH: /srv/quality_recticel/backups
+   volumes:
+     - /srv/docker-test/backups:/srv/quality_recticel/backups
+   ```
+
+2. **Configuration File**:
+   ```ini
+   # py_app/instance/external_server.conf
+   backup_path=/srv/quality_app/backups
+   ```
+
+3. **Default Path**: `/srv/quality_app/backups`
+
+### .env Configuration
+Add to your `.env` file:
+```bash
+BACKUP_PATH=/srv/docker-test/backups
+```
+
+## Usage
+
+### Access Backup Management
+1. Login as **superadmin** or **admin**
+2. Navigate to **Settings** page
+3. Scroll to **💾 Database Backup Management** card
+4. The backup management interface is only visible to superadmin/admin users
+
+### Create Manual Backup
+1. Click **⚡ Backup Now** button
+2. Wait for confirmation message
+3. New backup appears in the list
+
+### Configure Scheduled Backups
+1. Check **Enable Scheduled Backups**
+2. Set desired backup time (24-hour format)
+3. Select frequency (Daily/Weekly/Monthly)
+4. Set retention period (days to keep backups)
+5. Click **💾 Save Schedule**
+
+### Download Backup
+1. Locate backup in the list
+2. Click **⬇️ Download** button
+3. File downloads to your computer
+
+### Delete Backup
+1. Locate backup in the list
+2. Click **🗑️ Delete** button
+3. Confirm deletion
+
+### Restore Backup (Superadmin Only)
+⚠️ **WARNING**: Restore will replace current database!
+1. This feature requires superadmin privileges
+2. API endpoint: `/api/backup/restore/<filename>`
+3. Use with extreme caution
+
+## Technical Details
+
+### Backup Module
+Location: `py_app/app/database_backup.py`
+
+Key Class: `DatabaseBackupManager`
+
+Methods:
+- `create_backup()`: Create new backup
+- `list_backups()`: Get all backup files
+- `delete_backup(filename)`: Remove backup file
+- `restore_backup(filename)`: Restore from backup
+- `get_backup_schedule()`: Get current schedule
+- `save_backup_schedule(schedule)`: Update schedule
+- `cleanup_old_backups(days)`: Remove old backups
+
+### API Endpoints
+
+| Endpoint | Method | Access | Description |
+|----------|--------|--------|-------------|
+| `/api/backup/create` | POST | Admin+ | Create new backup |
+| `/api/backup/list` | GET | Admin+ | List all backups |
+| `/api/backup/download/<filename>` | GET | Admin+ | Download backup file |
+| `/api/backup/delete/<filename>` | DELETE | Admin+ | Delete backup file |
+| `/api/backup/schedule` | GET/POST | Admin+ | Get/Set backup schedule |
+| `/api/backup/restore/<filename>` | POST | Superadmin | Restore from backup |
+
+### Backup File Format
+- **Format**: SQL dump file (`.sql`)
+- **Compression**: Not compressed (can be gzip manually if needed)
+- **Contents**: Complete database with structure and data
+- **Metadata**: Stored in `backups_metadata.json`
+
+### Schedule Storage
+Schedule configuration stored in: `{BACKUP_PATH}/backup_schedule.json`
+
+Example:
+```json
+{
+  "enabled": true,
+  "time": "02:00",
+  "frequency": "daily",
+  "retention_days": 30
+}
+```
+
+## Security Considerations
+
+1. **Access Control**: Backup features restricted to admin and superadmin users
+2. **Path Traversal Protection**: Filenames validated to prevent directory traversal attacks
+3. **Credentials**: Database credentials read from `external_server.conf`
+4. **Backup Location**: Should be on different mount point than application for safety
+
+## Maintenance
+
+### Disk Space
+Monitor backup directory size:
+```bash
+du -sh /srv/quality_app/backups
+```
+
+### Manual Cleanup
+Remove old backups manually:
+```bash
+find /srv/quality_app/backups -name "*.sql" -mtime +30 -delete
+```
+
+### Backup Verification
+Test restore in development environment:
+```bash
+mysql -u root -p trasabilitate < backup_trasabilitate_20251103_020000.sql
+```
+
+## Troubleshooting
+
+### Backup Fails
+- Check database credentials in `external_server.conf`
+- Ensure `mysqldump` is installed
+- Verify write permissions on backup directory
+- Check disk space availability
+
+### Scheduled Backups Not Running
+- TODO: Implement scheduled backup daemon/cron job
+- Check backup schedule is enabled
+- Verify time format is correct (HH:MM)
+
+### Cannot Download Backup
+- Check backup file exists
+- Verify file permissions
+- Ensure adequate network bandwidth
+
+## Future Enhancements
+
+### Planned Features (Task 4)
+- [ ] Implement APScheduler for automated scheduled backups
+- [ ] Add backup to external storage (S3, FTP, etc.)
+- [ ] Email notifications for backup success/failure
+- [ ] Backup compression (gzip)
+- [ ] Incremental backups
+- [ ] Backup encryption
+- [ ] Backup verification tool
+
+## Support
+
+For issues or questions about the backup system:
+1. Check application logs: `/srv/quality_app/logs/error.log`
+2. Verify backup directory permissions
+3. Test manual backup first before relying on scheduled backups
+4. Keep at least 2 recent backups before deleting old ones
+
+---
+
+**Created**: November 3, 2025  
+**Module**: Database Backup Management  
+**Version**: 1.0.0

documentation/DATABASE_DOCKER_SETUP.md

@@ -0,0 +1,342 @@
+# Database Setup for Docker Deployment
+
+## Overview
+The Recticel Quality Application uses a **dual-database approach**:
+1. **MariaDB** (Primary) - Production data, users, permissions, orders
+2. **SQLite** (Backup/Legacy) - Local user authentication fallback
+
+## Database Configuration Flow
+
+### 1. Docker Environment Variables → Database Connection
+
+```
+Docker .env file
+    ↓
+docker-compose.yml (environment section)
+    ↓
+Docker container environment variables
+    ↓
+setup_complete_database.py (reads from env)
+    ↓
+external_server.conf file (generated)
+    ↓
+Application runtime (reads conf file)
+```
+
+### 2. Environment Variables Used
+
+| Variable | Default | Purpose | Used By |
+|----------|---------|---------|---------|
+| `DB_HOST` | `db` | Database server hostname | All DB operations |
+| `DB_PORT` | `3306` | MariaDB port | All DB operations |
+| `DB_NAME` | `trasabilitate` | Database name | All DB operations |
+| `DB_USER` | `trasabilitate` | Database username | All DB operations |
+| `DB_PASSWORD` | `Initial01!` | Database password | All DB operations |
+| `MYSQL_ROOT_PASSWORD` | `rootpassword` | MariaDB root password | DB initialization |
+| `INIT_DB` | `true` | Run schema setup | docker-entrypoint.sh |
+| `SEED_DB` | `true` | Create superadmin user | docker-entrypoint.sh |
+
+### 3. Database Initialization Process
+
+#### Phase 1: MariaDB Container Startup
+```bash
+# docker-compose.yml starts MariaDB container
+# init-db.sql runs automatically:
+1. CREATE DATABASE trasabilitate
+2. CREATE USER 'trasabilitate'@'%'
+3. GRANT ALL PRIVILEGES
+```
+
+#### Phase 2: Application Container Waits
+```bash
+# docker-entrypoint.sh:
+1. Waits for MariaDB to be ready (health check)
+2. Tests connection with credentials
+3. Retries up to 60 times (2s intervals = 120s timeout)
+```
+
+#### Phase 3: Configuration File Generation
+```bash
+# docker-entrypoint.sh creates:
+/app/instance/external_server.conf
+    server_domain=db          # From DB_HOST
+    port=3306                  # From DB_PORT
+    database_name=trasabilitate # From DB_NAME
+    username=trasabilitate     # From DB_USER
+    password=Initial01!        # From DB_PASSWORD
+```
+
+#### Phase 4: Schema Creation (if INIT_DB=true)
+```bash
+# setup_complete_database.py creates:
+- scan1_orders (quality scans - station 1)
+- scanfg_orders (quality scans - finished goods)
+- order_for_labels (production orders for labels)
+- warehouse_locations (warehouse management)
+- users (user authentication)
+- roles (user roles)
+- permissions (permission definitions)
+- role_permissions (role-permission mappings)
+- role_hierarchy (role inheritance)
+- permission_audit_log (permission change tracking)
+
+# Also creates triggers:
+- increment_approved_quantity (auto-count approved items)
+- increment_approved_quantity_fg (auto-count finished goods)
+```
+
+#### Phase 5: Data Seeding (if SEED_DB=true)
+```bash
+# seed.py creates:
+- Superadmin user (username: superadmin, password: superadmin123)
+
+# setup_complete_database.py also creates:
+- Default permission set (35+ permissions)
+- Role hierarchy (7 roles: superadmin → admin → manager → workers)
+- Role-permission mappings
+```
+
+### 4. How Application Connects to Database
+
+#### A. Settings Module (app/settings.py)
+```python
+def get_external_db_connection():
+    # Reads /app/instance/external_server.conf
+    # Returns mariadb.connect() using conf values
+```
+
+#### B. Other Modules (order_labels.py, print_module.py, warehouse.py)
+```python
+def get_db_connection():
+    # Also reads external_server.conf
+    # Each module manages its own connections
+```
+
+#### C. SQLAlchemy (app/__init__.py)
+```python
+# Currently hardcoded to SQLite (NOT DOCKER-FRIENDLY!)
+app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db'
+```
+
+## Current Issues & Recommendations
+
+### ❌ Problem 1: Hardcoded SQLite in __init__.py
+**Issue:** `app/__init__.py` uses hardcoded SQLite connection
+```python
+app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db'
+```
+
+**Impact:** 
+- Not using environment variables
+- SQLAlchemy not connected to MariaDB
+- Inconsistent with external_server.conf approach
+
+**Solution:** Update to read from environment:
+```python
+import os
+
+def create_app():
+    app = Flask(__name__)
+    
+    # Database configuration from environment
+    db_user = os.getenv('DB_USER', 'trasabilitate')
+    db_pass = os.getenv('DB_PASSWORD', 'Initial01!')
+    db_host = os.getenv('DB_HOST', 'localhost')
+    db_port = os.getenv('DB_PORT', '3306')
+    db_name = os.getenv('DB_NAME', 'trasabilitate')
+    
+    # Use MariaDB/MySQL connection
+    app.config['SQLALCHEMY_DATABASE_URI'] = (
+        f'mysql+mariadb://{db_user}:{db_pass}@{db_host}:{db_port}/{db_name}'
+    )
+```
+
+### ❌ Problem 2: Dual Connection Methods
+**Issue:** Application uses two different connection methods:
+1. SQLAlchemy ORM (for User model)
+2. Direct mariadb.connect() (for everything else)
+
+**Impact:**
+- Complexity in maintenance
+- Potential connection pool exhaustion
+- Inconsistent transaction handling
+
+**Recommendation:** Standardize on one approach:
+- **Option A:** Use SQLAlchemy for everything (preferred)
+- **Option B:** Use direct mariadb connections everywhere
+
+### ❌ Problem 3: external_server.conf Redundancy
+**Issue:** Configuration is duplicated:
+1. Environment variables → external_server.conf
+2. Application reads external_server.conf
+
+**Impact:**
+- Unnecessary file I/O
+- Potential sync issues
+- Not 12-factor app compliant
+
+**Recommendation:** Read directly from environment variables
+
+## Docker Deployment Database Schema
+
+### MariaDB Container Configuration
+```yaml
+# docker-compose.yml
+db:
+  image: mariadb:11.3
+  environment:
+    MYSQL_ROOT_PASSWORD: rootpassword
+    MYSQL_DATABASE: trasabilitate
+    MYSQL_USER: trasabilitate
+    MYSQL_PASSWORD: Initial01!
+  volumes:
+    - /srv/docker-test/mariadb:/var/lib/mysql  # Persistent storage
+    - ./init-db.sql:/docker-entrypoint-initdb.d/01-init.sql
+```
+
+### Database Tables Created
+
+| Table | Purpose | Records |
+|-------|---------|---------|
+| `scan1_orders` | Quality scan records (station 1) | 1000s |
+| `scanfg_orders` | Finished goods scan records | 1000s |
+| `order_for_labels` | Production orders needing labels | 100s |
+| `warehouse_locations` | Warehouse location codes | 50-200 |
+| `users` | User accounts | 10-50 |
+| `roles` | Role definitions | 7 |
+| `permissions` | Permission definitions | 35+ |
+| `role_permissions` | Role-permission mappings | 100+ |
+| `role_hierarchy` | Role inheritance tree | 7 |
+| `permission_audit_log` | Permission change audit trail | Growing |
+
+### Default Users & Roles
+
+**Superadmin User:**
+- Username: `superadmin`
+- Password: `superadmin123`
+- Role: `superadmin`
+- Access: Full system access
+
+**Role Hierarchy:**
+```
+superadmin (level 1)
+  └─ admin (level 2)
+      └─ manager (level 3)
+          ├─ quality_manager (level 4)
+          │   └─ quality_worker (level 5)
+          └─ warehouse_manager (level 4)
+              └─ warehouse_worker (level 5)
+```
+
+## Production Deployment Checklist
+
+- [ ] Change `MYSQL_ROOT_PASSWORD` from default
+- [ ] Change `DB_PASSWORD` from default (Initial01!)
+- [ ] Change superadmin password from default (superadmin123)
+- [ ] Set `INIT_DB=false` after first deployment
+- [ ] Set `SEED_DB=false` after first deployment
+- [ ] Set strong `SECRET_KEY` in environment
+- [ ] Backup MariaDB data directory regularly
+- [ ] Enable MariaDB binary logging for point-in-time recovery
+- [ ] Configure proper `DB_MAX_RETRIES` and `DB_RETRY_INTERVAL`
+- [ ] Monitor database connections and performance
+- [ ] Set up database user with minimal required privileges
+
+## Troubleshooting
+
+### Database Connection Failed
+```bash
+# Check if MariaDB container is running
+docker-compose ps
+
+# Check MariaDB logs
+docker-compose logs db
+
+# Test connection from app container
+docker-compose exec web python3 -c "
+import mariadb
+conn = mariadb.connect(
+    user='trasabilitate',
+    password='Initial01!',
+    host='db',
+    port=3306,
+    database='trasabilitate'
+)
+print('Connection successful!')
+"
+```
+
+### Tables Not Created
+```bash
+# Run setup script manually
+docker-compose exec web python3 /app/app/db_create_scripts/setup_complete_database.py
+
+# Check tables
+docker-compose exec db mysql -utrasabilitate -pInitial01! trasabilitate -e "SHOW TABLES;"
+```
+
+### external_server.conf Not Found
+```bash
+# Verify file exists
+docker-compose exec web cat /app/instance/external_server.conf
+
+# Recreate if missing (entrypoint should do this automatically)
+docker-compose restart web
+```
+
+## Migration from Non-Docker to Docker
+
+If migrating from a non-Docker deployment:
+
+1. **Backup existing MariaDB database:**
+   ```bash
+   mysqldump -u trasabilitate -p trasabilitate > backup.sql
+   ```
+
+2. **Update docker-compose.yml paths to existing data:**
+   ```yaml
+   db:
+     volumes:
+       - /path/to/existing/mariadb:/var/lib/mysql
+   ```
+
+3. **Or restore to new Docker MariaDB:**
+   ```bash
+   docker-compose exec -T db mysql -utrasabilitate -pInitial01! trasabilitate < backup.sql
+   ```
+
+4. **Verify data:**
+   ```bash
+   docker-compose exec db mysql -utrasabilitate -pInitial01! trasabilitate -e "SELECT COUNT(*) FROM users;"
+   ```
+
+## Environment Variable Examples
+
+### Development (.env)
+```bash
+DB_HOST=db
+DB_PORT=3306
+DB_NAME=trasabilitate
+DB_USER=trasabilitate
+DB_PASSWORD=Initial01!
+MYSQL_ROOT_PASSWORD=rootpassword
+INIT_DB=true
+SEED_DB=true
+FLASK_ENV=development
+GUNICORN_LOG_LEVEL=debug
+```
+
+### Production (.env)
+```bash
+DB_HOST=db
+DB_PORT=3306
+DB_NAME=trasabilitate
+DB_USER=trasabilitate
+DB_PASSWORD=SuperSecurePassword123!@#
+MYSQL_ROOT_PASSWORD=SuperSecureRootPass456!@#
+INIT_DB=false
+SEED_DB=false
+FLASK_ENV=production
+GUNICORN_LOG_LEVEL=info
+SECRET_KEY=your-super-secret-key-change-this
+```

documentation/DATABASE_RESTORE_GUIDE.md

@@ -0,0 +1,455 @@
+# Database Restore Guide
+
+## Overview
+The database restore functionality allows superadmins to restore the entire database from a backup file. This is essential for:
+- **Server Migration**: Moving the application to a new server
+- **Disaster Recovery**: Recovering from data corruption or loss
+- **Testing/Development**: Restoring production data to test environment
+- **Rollback**: Reverting to a previous state after issues
+
+## ⚠️ CRITICAL WARNINGS
+
+### Data Loss Risk
+- **ALL CURRENT DATA WILL BE PERMANENTLY DELETED**
+- The restore operation is **IRREVERSIBLE**
+- Once started, it cannot be stopped
+- No "undo" functionality exists
+
+### Downtime Requirements
+- Users may experience brief downtime during restore
+- All database connections will be terminated
+- Active sessions may be invalidated
+- Plan restores during maintenance windows
+
+### Access Requirements
+- **SUPERADMIN ACCESS ONLY**
+- No other role has restore permissions
+- This is by design for safety
+
+## Large Database Support
+
+### Supported File Sizes
+The backup system is optimized for databases of all sizes:
+
+- ✅ **Small databases** (< 100MB): Full validation, fast operations
+- ✅ **Medium databases** (100MB - 2GB): Partial validation (first 10MB), normal operations
+- ✅ **Large databases** (2GB - 10GB): Basic validation only, longer operations
+- ✅ **Very large databases** (> 10GB): Can be configured by increasing limits
+
+### Upload Limits
+- **Maximum upload size**: 10GB
+- **Warning threshold**: 1GB (user confirmation required)
+- **Timeout**: 30 minutes for upload + validation + restore
+
+### Performance Estimates
+
+| Database Size | Backup Creation | Upload Time* | Validation | Restore Time |
+|--------------|----------------|-------------|-----------|--------------|
+| 100MB | ~5 seconds | ~10 seconds | ~1 second | ~15 seconds |
+| 500MB | ~15 seconds | ~1 minute | ~2 seconds | ~45 seconds |
+| 1GB | ~30 seconds | ~2 minutes | ~3 seconds | ~2 minutes |
+| 5GB | ~2-3 minutes | ~10-15 minutes | ~1 second | ~10 minutes |
+| 10GB | ~5-7 minutes | ~25-35 minutes | ~1 second | ~20 minutes |
+
+*Upload times assume 100Mbps network connection
+
+### Smart Validation
+The system intelligently adjusts validation based on file size:
+
+**Small Files (< 100MB)**:
+- Full line-by-line validation
+- Checks for users table, INSERT statements, database structure
+- Detects suspicious commands
+
+**Medium Files (100MB - 2GB)**:
+- Validates only first 10MB in detail
+- Quick structure check
+- Performance optimized (~1-3 seconds)
+
+**Large Files (2GB - 10GB)**:
+- Basic validation only (file size, extension)
+- Skips detailed content check for performance
+- Validation completes in ~1 second
+- Message: "Large backup file accepted - detailed validation skipped for performance"
+
+### Memory Efficiency
+All backup operations use **streaming** - no memory concerns:
+- ✅ **Backup creation**: mysqldump streams directly to disk
+- ✅ **File upload**: Saved directly to disk (no RAM buffering)
+- ✅ **Restore**: mysql reads from disk in chunks
+- ✅ **Memory usage**: < 100MB regardless of database size
+
+### System Requirements
+
+**For 5GB Database**:
+- **Disk space**: 10GB free (2x database size)
+- **Memory**: < 100MB (streaming operations)
+- **Network**: 100Mbps or faster recommended
+- **Time**: ~30 minutes total (upload + restore)
+
+**For 10GB Database**:
+- **Disk space**: 20GB free
+- **Memory**: < 100MB
+- **Network**: 1Gbps recommended
+- **Time**: ~1 hour total
+
+## How to Restore Database
+
+### Step 1: Access Settings Page
+1. Log in as **superadmin**
+2. Navigate to **Settings** page
+3. Scroll down to **Database Backup Management** section
+4. Find the **⚠️ Restore Database** section (orange warning box)
+
+### Step 2: Upload or Select Backup File
+
+**Option A: Upload External Backup**
+1. Click **"📁 Choose File"** in the Upload section
+2. Select your .sql backup file (up to 10GB)
+3. If file is > 1GB, confirm the upload warning
+4. Click **"⬆️ Upload File"** button
+5. Wait for upload and validation (shows progress)
+6. File appears in restore dropdown once complete
+
+**Option B: Use Existing Backup**
+1. Skip upload if backup already exists on server
+2. Proceed directly to dropdown selection
+
+### Step 3: Select Backup from Dropdown
+1. Click the dropdown: **"Select Backup to Restore"**
+2. Choose from available backup files
+   - Files are listed with size and creation date
+   - Example: `backup_trasabilitate_20251103_212929.sql (318 KB - 2025-11-03 21:29:29)`
+   - Uploaded files: `backup_uploaded_20251103_214500_mybackup.sql (5.2 GB - ...)`
+3. The **Restore Database** button will enable once selected
+
+### Step 4: Confirm Restore (Double Confirmation)
+
+#### First Confirmation Dialog
+```
+⚠️ CRITICAL WARNING ⚠️
+
+You are about to RESTORE the database from:
+backup_trasabilitate_20251103_212929.sql
+
+This will PERMANENTLY DELETE all current data and replace it with the backup data.
+
+This action CANNOT be undone!
+
+Do you want to continue?
+```
+- Click **OK** to proceed or **Cancel** to abort
+
+#### Second Confirmation (Type-to-Confirm)
+```
+⚠️ FINAL CONFIRMATION ⚠️
+
+Type "RESTORE" in capital letters to confirm you understand:
+• All current database data will be PERMANENTLY DELETED
+• This action is IRREVERSIBLE
+• Users may experience downtime during restore
+
+Type RESTORE to continue:
+```
+- Type exactly: **RESTORE** (all capitals)
+- Any other text will cancel the operation
+
+### Step 4: Restore Process
+1. Button changes to: **"⏳ Restoring database... Please wait..."**
+2. Backend performs restore operation:
+   - Drops existing database
+   - Creates new empty database
+   - Imports backup SQL file
+   - Verifies restoration
+3. On success:
+   - Success message displays
+   - Page automatically reloads
+   - All data is now from the backup file
+
+## UI Features
+
+### Visual Safety Indicators
+- **Orange Warning Box**: Highly visible restore section
+- **Warning Icons**: ⚠️ symbols throughout
+- **Explicit Text**: Clear warnings about data loss
+- **Color Coding**: Orange (#ff9800) for danger
+
+### Dark Mode Support
+- Restore section adapts to dark theme
+- Warning colors remain visible in both modes
+- Light mode: Light orange background (#fff3e0)
+- Dark mode: Dark brown background (#3a2a1f) with orange text
+
+### Button States
+- **Disabled**: Grey button when no backup selected
+- **Enabled**: Red button (#ff5722) when backup selected
+- **Processing**: Loading indicator during restore
+
+## Technical Implementation
+
+### API Endpoint
+```
+POST /api/backup/restore/<filename>
+```
+
+**Access Control**: `@superadmin_only` decorator
+
+**Parameters**:
+- `filename`: Name of backup file to restore (in URL path)
+
+**Response**:
+```json
+{
+    "success": true,
+    "message": "Database restored successfully from backup_trasabilitate_20251103_212929.sql"
+}
+```
+
+### Backend Process (DatabaseBackupManager.restore_backup)
+
+```python
+def restore_backup(self, filename: str) -> dict:
+    """
+    Restore database from a backup file
+    
+    Process:
+    1. Verify backup file exists
+    2. Drop existing database
+    3. Create new database
+    4. Import SQL dump
+    5. Grant permissions
+    6. Verify restoration
+    """
+```
+
+**Commands Executed**:
+```sql
+-- Drop existing database
+DROP DATABASE IF EXISTS trasabilitate;
+
+-- Create new database
+CREATE DATABASE trasabilitate;
+
+-- Import backup (via mysql command)
+mysql trasabilitate < /srv/quality_app/backups/backup_trasabilitate_20251103_212929.sql
+
+-- Grant permissions
+GRANT ALL PRIVILEGES ON trasabilitate.* TO 'your_user'@'localhost';
+FLUSH PRIVILEGES;
+```
+
+### Security Features
+1. **Double Confirmation**: Prevents accidental restores
+2. **Type-to-Confirm**: Requires typing "RESTORE" exactly
+3. **Superadmin Only**: No other roles can access
+4. **Audit Trail**: All restores logged in error.log
+5. **Session Check**: Requires valid superadmin session
+
+## Server Migration Procedure
+
+### Migrating to New Server
+
+#### On Old Server:
+1. **Create Final Backup**
+   - Go to Settings → Database Backup Management
+   - Click **⚡ Backup Now**
+   - Wait for backup to complete (see performance estimates above)
+   - Download the backup file (⬇️ Download button)
+   - Save file securely (e.g., `backup_trasabilitate_20251103.sql`)
+   - **Note**: Large databases (5GB+) will take 5-10 minutes to backup
+
+2. **Stop Application** (optional but recommended)
+   ```bash
+   cd /srv/quality_app/py_app
+   bash stop_production.sh
+   ```
+
+#### On New Server:
+1. **Install Application**
+   - Clone repository
+   - Set up Python environment
+   - Install dependencies
+   - Configure `external_server.conf`
+
+2. **Initialize Empty Database**
+   ```bash
+   sudo mysql -e "CREATE DATABASE trasabilitate;"
+   sudo mysql -e "GRANT ALL PRIVILEGES ON trasabilitate.* TO 'your_user'@'localhost';"
+   ```
+
+3. **Transfer Backup File**
+
+   **Option A: Direct Upload via UI** (Recommended for files < 5GB)
+   - Start application
+   - Login as superadmin → Settings
+   - Use **"Upload Backup File"** section
+   - Select your backup file (up to 10GB supported)
+   - System will validate and add to restore list automatically
+   - **Estimated time**: 10-30 minutes for 5GB file on 100Mbps network
+
+   **Option B: Manual Copy** (Faster for very large files)
+   - Copy backup file directly to server: `scp backup_file.sql user@newserver:/srv/quality_app/backups/`
+   - Or use external storage/USB drive
+   - Ensure permissions: `chmod 644 /srv/quality_app/backups/backup_*.sql`
+   - File appears in restore dropdown immediately
+
+4. **Start Application** (if not already running)
+   ```bash
+   cd /srv/quality_app/py_app
+   bash start_production.sh
+   ```
+
+5. **Restore Database via UI**
+   - Log in as superadmin
+   - Go to Settings → Database Backup Management
+   - **Upload Section**: Upload file OR skip if already copied
+   - **Restore Section**: Select backup from dropdown
+   - Click **Restore Database**
+   - Complete double-confirmation
+   - Wait for restore to complete
+   - **Estimated time**: 5-20 minutes for 5GB database
+
+6. **Verify Migration**
+   - Check that all users exist
+   - Verify data integrity
+   - Test all modules (Quality, Warehouse, Labels, Daily Mirror)
+   - Confirm permissions are correct
+
+### Large Database Migration Tips
+
+**For Databases > 5GB**:
+1. ✅ Use **Manual Copy** (Option B) instead of upload - Much faster
+2. ✅ Schedule migration during **off-hours** to avoid user impact
+3. ✅ Expect **30-60 minutes** total time for 10GB database
+4. ✅ Ensure **sufficient disk space** (2x database size)
+5. ✅ Monitor progress in logs: `tail -f /srv/quality_app/logs/error.log`
+6. ✅ Keep old server running until verification complete
+
+**Network Transfer Time Examples**:
+- 5GB @ 100Mbps network: ~7 minutes via scp, ~15 minutes via browser upload
+- 5GB @ 1Gbps network: ~40 seconds via scp, ~2 minutes via browser upload
+- 10GB @ 100Mbps network: ~14 minutes via scp, ~30 minutes via browser upload
+
+### Alternative: Command-Line Restore
+
+If UI is not available, restore manually:
+
+```bash
+# Stop application
+cd /srv/quality_app/py_app
+bash stop_production.sh
+
+# Drop and recreate database
+sudo mysql -e "DROP DATABASE IF EXISTS trasabilitate;"
+sudo mysql -e "CREATE DATABASE trasabilitate;"
+
+# Restore from backup
+sudo mysql trasabilitate < /srv/quality_app/backups/backup_trasabilitate_20251103.sql
+
+# Grant permissions
+sudo mysql -e "GRANT ALL PRIVILEGES ON trasabilitate.* TO 'your_user'@'localhost';"
+sudo mysql -e "FLUSH PRIVILEGES;"
+
+# Restart application
+bash start_production.sh
+```
+
+## Troubleshooting
+
+### Error: "Backup file not found"
+**Cause**: Selected backup file doesn't exist in backup directory
+
+**Solution**:
+```bash
+# Check backup directory
+ls -lh /srv/quality_app/backups/
+
+# Verify file exists and is readable
+ls -l /srv/quality_app/backups/backup_trasabilitate_*.sql
+```
+
+### Error: "Permission denied"
+**Cause**: Insufficient MySQL privileges
+
+**Solution**:
+```bash
+# Grant all privileges to database user
+sudo mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'your_user'@'localhost';"
+sudo mysql -e "FLUSH PRIVILEGES;"
+```
+
+### Error: "Database connection failed"
+**Cause**: MySQL server not running or wrong credentials
+
+**Solution**:
+```bash
+# Check MySQL status
+sudo systemctl status mariadb
+
+# Verify credentials in external_server.conf
+cat /srv/quality_app/py_app/instance/external_server.conf
+
+# Test connection
+mysql -u your_user -p -e "SELECT 1;"
+```
+
+### Error: "Restore partially completed"
+**Cause**: SQL syntax errors in backup file
+
+**Solution**:
+1. Check error logs:
+   ```bash
+   tail -f /srv/quality_app/logs/error.log
+   ```
+2. Try manual restore to see specific errors:
+   ```bash
+   sudo mysql trasabilitate < backup_file.sql
+   ```
+3. Fix issues in backup file if possible
+4. Create new backup from source database
+
+### Application Won't Start After Restore
+**Cause**: Database structure mismatch or missing tables
+
+**Solution**:
+```bash
+# Verify all tables exist
+mysql trasabilitate -e "SHOW TABLES;"
+
+# Check for specific required tables
+mysql trasabilitate -e "SELECT COUNT(*) FROM users;"
+
+# If tables missing, restore from a known-good backup
+```
+
+## Best Practices
+
+### Before Restoring
+1. ✅ **Create a current backup** before restoring older one
+2. ✅ **Notify users** of planned downtime
+3. ✅ **Test restore** in development environment first
+4. ✅ **Verify backup integrity** (download and check file)
+5. ✅ **Plan rollback strategy** if restore fails
+
+### During Restore
+1. ✅ **Monitor logs** in real-time:
+   ```bash
+   tail -f /srv/quality_app/logs/error.log
+   ```
+2. ✅ **Don't interrupt** the process
+3. ✅ **Keep backup window** as short as possible
+
+### After Restore
+1. ✅ **Verify data** integrity
+2. ✅ **Test all features** (login, modules, reports)
+3. ✅ **Check user permissions** are correct
+4. ✅ **Monitor application** for errors
+5. ✅ **Document restore** in change log
+
+## Related Documentation
+- [DATABASE_BACKUP_GUIDE.md](DATABASE_BACKUP_GUIDE.md) - Creating backups
+- [DATABASE_DOCKER_SETUP.md](DATABASE_DOCKER_SETUP.md) - Database configuration
+- [DOCKER_DEPLOYMENT.md](../old%20code/DOCKER_DEPLOYMENT.md) - Deployment procedures
+
+## Summary
+The restore functionality provides a safe and reliable way to restore database backups for server migration and disaster recovery. The double-confirmation system prevents accidental data loss, while the UI provides clear visibility into available backups. Always create a current backup before restoring, and test the restore process in a non-production environment when possible.

documentation/DATABASE_STRUCTURE.md

@@ -0,0 +1,789 @@
+# Database Structure Documentation
+
+## Overview
+This document provides a comprehensive overview of the **trasabilitate** database structure, including all tables, their fields, purposes, and which application pages/modules use them.
+
+**Database**: `trasabilitate`  
+**Type**: MariaDB 11.8.3  
+**Character Set**: utf8mb4  
+**Collation**: utf8mb4_uca1400_ai_ci
+
+## Table Categories
+
+### 1. User Management & Access Control
+- [users](#users) - User accounts and authentication
+- [roles](#roles) - User role definitions
+- [role_hierarchy](#role_hierarchy) - Role levels and inheritance
+- [permissions](#permissions) - Granular permission definitions
+- [role_permissions](#role_permissions) - Permission assignments to roles
+- [permission_audit_log](#permission_audit_log) - Audit trail for permission changes
+
+### 2. Quality Management (Production Scanning)
+- [scan1_orders](#scan1_orders) - Phase 1 quality scans (quilting preparation)
+- [scanfg_orders](#scanfg_orders) - Final goods quality scans
+
+### 3. Daily Mirror (Business Intelligence)
+- [dm_articles](#dm_articles) - Product catalog
+- [dm_customers](#dm_customers) - Customer master data
+- [dm_machines](#dm_machines) - Production equipment
+- [dm_orders](#dm_orders) - Sales orders
+- [dm_production_orders](#dm_production_orders) - Manufacturing orders
+- [dm_deliveries](#dm_deliveries) - Shipment tracking
+- [dm_daily_summary](#dm_daily_summary) - Daily KPI aggregations
+
+### 4. Labels & Warehouse
+- [order_for_labels](#order_for_labels) - Label printing queue
+- [warehouse_locations](#warehouse_locations) - Storage location master
+
+---
+
+## Detailed Table Descriptions
+
+### users
+**Purpose**: Stores user accounts, credentials, and access permissions
+
+**Structure**:
+| Field    | Type         | Null | Key | Description |
+|----------|--------------|------|-----|-------------|
+| id       | int(11)      | NO   | PRI | Unique user ID |
+| username | varchar(50)  | NO   | UNI | Login username |
+| password | varchar(255) | NO   |     | Password (hashed) |
+| role     | varchar(50)  | NO   |     | User role (superadmin, admin, manager, worker) |
+| email    | varchar(255) | YES  |     | Email address |
+| modules  | text         | YES  |     | Accessible modules (JSON array) |
+
+**Access Levels**:
+- **superadmin** (Level 100): Full system access
+- **admin** (Level 90): Administrative access
+- **manager** (Level 70): Module management
+- **worker** (Level 50): Basic operations
+
+**Used By**:
+- **Pages**: Login (`/`), Dashboard (`/dashboard`), Settings (`/settings`)
+- **Routes**: `login()`, `dashboard()`, `get_users()`, `create_user()`, `edit_user()`, `delete_user()`
+- **Access Control**: All pages via `@login_required`, role checks
+
+**Relationships**:
+- **role** references **roles.name**
+- **modules** contains JSON array of accessible modules
+
+---
+
+### roles
+**Purpose**: Defines available user roles and their access levels
+
+**Structure**:
+| Field        | Type         | Null | Key | Description |
+|--------------|--------------|------|-----|-------------|
+| id           | int(11)      | NO   | PRI | Unique role ID |
+| name         | varchar(100) | NO   | UNI | Role name |
+| access_level | varchar(50)  | NO   |     | Access level description |
+| description  | text         | YES  |     | Role description |
+| created_at   | timestamp    | YES  |     | Creation timestamp |
+
+**Default Roles**:
+1. **superadmin**: Full system access, all permissions
+2. **admin**: Can manage users and settings
+3. **manager**: Can oversee production and quality
+4. **worker**: Can perform scans and basic operations
+
+**Used By**:
+- **Pages**: Settings (`/settings`)
+- **Routes**: Role management, user creation
+
+---
+
+### role_hierarchy
+**Purpose**: Defines hierarchical role structure with levels and inheritance
+
+**Structure**:
+| Field             | Type         | Null | Key | Description |
+|-------------------|--------------|------|-----|-------------|
+| id                | int(11)      | NO   | PRI | Unique ID |
+| role_name         | varchar(100) | NO   | UNI | Role identifier |
+| role_display_name | varchar(255) | NO   |     | Display name |
+| level             | int(11)      | NO   |     | Hierarchy level (100=highest) |
+| parent_role       | varchar(100) | YES  |     | Parent role in hierarchy |
+| description       | text         | YES  |     | Role description |
+| is_active         | tinyint(1)   | YES  |     | Active status |
+| created_at        | timestamp    | YES  |     | Creation timestamp |
+
+**Hierarchy Levels**:
+- **100**: superadmin (root)
+- **90**: admin
+- **70**: manager
+- **50**: worker
+
+**Used By**:
+- **Pages**: Settings (`/settings`), Role Management
+- **Routes**: Permission management, role assignment
+
+---
+
+### permissions
+**Purpose**: Defines granular permissions for pages, sections, and actions
+
+**Structure**:
+| Field          | Type         | Null | Key | Description |
+|----------------|--------------|------|-----|-------------|
+| id             | int(11)      | NO   | PRI | Unique permission ID |
+| permission_key | varchar(255) | NO   | UNI | Unique key (page.section.action) |
+| page           | varchar(100) | NO   |     | Page identifier |
+| page_name      | varchar(255) | NO   |     | Display page name |
+| section        | varchar(100) | NO   |     | Section identifier |
+| section_name   | varchar(255) | NO   |     | Display section name |
+| action         | varchar(50)  | NO   |     | Action (view, create, edit, delete) |
+| action_name    | varchar(255) | NO   |     | Display action name |
+| description    | text         | YES  |     | Permission description |
+| created_at     | timestamp    | YES  |     | Creation timestamp |
+
+**Permission Structure**: `page.section.action`
+- Example: `quality.scan1.view`, `daily_mirror.orders.edit`
+
+**Used By**:
+- **Pages**: Settings (`/settings`), Permission Management
+- **Routes**: Permission checks via decorators
+
+---
+
+### role_permissions
+**Purpose**: Maps permissions to roles (many-to-many relationship)
+
+**Structure**:
+| Field         | Type         | Null | Key | Description |
+|---------------|--------------|------|-----|-------------|
+| id            | int(11)      | NO   | PRI | Unique mapping ID |
+| role_name     | varchar(100) | NO   | MUL | Role identifier |
+| permission_id | int(11)      | NO   | MUL | Permission ID |
+| granted_at    | timestamp    | YES  |     | Grant timestamp |
+| granted_by    | varchar(100) | YES  |     | User who granted |
+
+**Used By**:
+- **Pages**: Settings (`/settings`), Permission Management
+- **Routes**: `check_permission()`, permission decorators
+- **Access Control**: All protected pages
+
+---
+
+### permission_audit_log
+**Purpose**: Tracks all permission changes for security auditing
+
+**Structure**:
+| Field          | Type         | Null | Key | Description |
+|----------------|--------------|------|-----|-------------|
+| id             | int(11)      | NO   | PRI | Unique log ID |
+| action         | varchar(50)  | NO   |     | Action (grant, revoke, modify) |
+| role_name      | varchar(100) | YES  |     | Affected role |
+| permission_key | varchar(255) | YES  |     | Affected permission |
+| user_id        | varchar(100) | YES  |     | User who performed action |
+| timestamp      | timestamp    | YES  |     | Action timestamp |
+| details        | text         | YES  |     | Additional details (JSON) |
+| ip_address     | varchar(45)  | YES  |     | IP address of user |
+
+**Used By**:
+- **Pages**: Audit logs (future feature)
+- **Routes**: Automatically logged by permission management functions
+
+---
+
+### scan1_orders
+**Purpose**: Stores Phase 1 (T1) quality scan data for quilting preparation
+
+**Structure**:
+| Field             | Type        | Null | Key | Description |
+|-------------------|-------------|------|-----|-------------|
+| Id                | int(11)     | NO   | PRI | Unique scan ID |
+| operator_code     | varchar(4)  | NO   |     | Worker identifier |
+| CP_full_code      | varchar(15) | NO   |     | Full production order code |
+| OC1_code          | varchar(4)  | NO   |     | Customer order code 1 |
+| OC2_code          | varchar(4)  | NO   |     | Customer order code 2 |
+| CP_base_code      | varchar(10) | YES  |     | Base production code (generated) |
+| quality_code      | int(3)      | NO   |     | Quality check result |
+| date              | date        | NO   |     | Scan date |
+| time              | time        | NO   |     | Scan time |
+| approved_quantity | int(11)     | YES  |     | Approved items |
+| rejected_quantity | int(11)     | YES  |     | Rejected items |
+
+**Quality Codes**:
+- **0**: Rejected
+- **1**: Approved
+
+**Used By**:
+- **Pages**: 
+  - Quality Scan 1 (`/scan1`)
+  - Quality Reports (`/reports_for_quality`)
+  - Daily Reports (`/daily_scan`)
+  - Production Scan 1 (`/productie_scan_1`)
+- **Routes**: `scan1()`, `insert_scan1()`, `reports_for_quality()`, `daily_scan()`, `productie_scan_1()`
+- **Dashboard**: Phase 1 statistics widget
+
+**Related Tables**:
+- Linked to **dm_production_orders** via **CP_full_code**
+
+---
+
+### scanfg_orders
+**Purpose**: Stores final goods (FG) quality scan data
+
+**Structure**:
+| Field             | Type        | Null | Key | Description |
+|-------------------|-------------|------|-----|-------------|
+| Id                | int(11)     | NO   | PRI | Unique scan ID |
+| operator_code     | varchar(4)  | NO   |     | Worker identifier |
+| CP_full_code      | varchar(15) | NO   |     | Full production order code |
+| OC1_code          | varchar(4)  | NO   |     | Customer order code 1 |
+| OC2_code          | varchar(4)  | NO   |     | Customer order code 2 |
+| CP_base_code      | varchar(10) | YES  |     | Base production code (generated) |
+| quality_code      | int(3)      | NO   |     | Quality check result |
+| date              | date        | NO   |     | Scan date |
+| time              | time        | NO   |     | Scan time |
+| approved_quantity | int(11)     | YES  |     | Approved items |
+| rejected_quantity | int(11)     | YES  |     | Rejected items |
+
+**Used By**:
+- **Pages**:
+  - Quality Scan FG (`/scanfg`)
+  - Quality Reports FG (`/reports_for_quality_fg`)
+  - Daily Scan FG (`/daily_scan_fg`)
+  - Production Scan FG (`/productie_scan_fg`)
+- **Routes**: `scanfg()`, `insert_scanfg()`, `reports_for_quality_fg()`, `daily_scan_fg()`, `productie_scan_fg()`
+- **Dashboard**: Final goods statistics widget
+
+**Related Tables**:
+- Linked to **dm_production_orders** via **CP_full_code**
+
+---
+
+### order_for_labels
+**Purpose**: Manages label printing queue for production orders
+
+**Structure**:
+| Field                   | Type        | Null | Key | Description |
+|-------------------------|-------------|------|-----|-------------|
+| id                      | bigint(20)  | NO   | PRI | Unique ID |
+| comanda_productie       | varchar(15) | NO   |     | Production order |
+| cod_articol             | varchar(15) | YES  |     | Article code |
+| descr_com_prod          | varchar(50) | NO   |     | Description |
+| cantitate               | int(3)      | NO   |     | Quantity |
+| com_achiz_client        | varchar(25) | YES  |     | Customer order |
+| nr_linie_com_client     | int(3)      | YES  |     | Order line number |
+| customer_name           | varchar(50) | YES  |     | Customer name |
+| customer_article_number | varchar(25) | YES  |     | Customer article # |
+| open_for_order          | varchar(25) | YES  |     | Open order reference |
+| line_number             | int(3)      | YES  |     | Line number |
+| created_at              | timestamp   | YES  |     | Creation timestamp |
+| updated_at              | timestamp   | YES  |     | Update timestamp |
+| printed_labels          | int(1)      | YES  |     | Print status (0/1) |
+| data_livrare            | date        | YES  |     | Delivery date |
+| dimensiune              | varchar(20) | YES  |     | Dimensions |
+
+**Print Status**:
+- **0**: Not printed
+- **1**: Printed
+
+**Used By**:
+- **Pages**:
+  - Label Printing (`/print`)
+  - Print All Labels (`/print_all`)
+- **Routes**: `print_module()`, `print_all()`, `get_available_labels()`
+- **Module**: Labels Module
+
+**Related Tables**:
+- **comanda_productie** references **dm_production_orders.production_order**
+
+---
+
+### warehouse_locations
+**Purpose**: Stores warehouse storage location definitions
+
+**Structure**:
+| Field         | Type         | Null | Key | Description |
+|---------------|--------------|------|-----|-------------|
+| id            | bigint(20)   | NO   | PRI | Unique location ID |
+| location_code | varchar(12)  | NO   | UNI | Location identifier |
+| size          | int(11)      | YES  |     | Storage capacity |
+| description   | varchar(250) | YES  |     | Location description |
+
+**Used By**:
+- **Pages**: Warehouse Management (`/warehouse`)
+- **Module**: Warehouse Module
+- **Routes**: Warehouse location management
+
+---
+
+### dm_articles
+**Purpose**: Product catalog and article master data
+
+**Structure**:
+| Field               | Type          | Null | Key | Description |
+|---------------------|---------------|------|-----|-------------|
+| id                  | int(11)       | NO   | PRI | Unique article ID |
+| article_code        | varchar(50)   | NO   | UNI | Article code |
+| article_description | text          | NO   |     | Full description |
+| product_group       | varchar(100)  | YES  | MUL | Product group |
+| classification      | varchar(100)  | YES  | MUL | Classification |
+| unit_of_measure     | varchar(20)   | YES  |     | Unit (PC, KG, M) |
+| standard_price      | decimal(10,2) | YES  |     | Standard price |
+| standard_time       | decimal(8,2)  | YES  |     | Production time |
+| active              | tinyint(1)    | YES  |     | Active status |
+| created_at          | timestamp     | YES  |     | Creation timestamp |
+| updated_at          | timestamp     | YES  |     | Update timestamp |
+
+**Used By**:
+- **Pages**: Daily Mirror - Articles (`/daily_mirror/articles`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Article management, reporting
+- **Dashboard**: Product statistics
+
+**Related Tables**:
+- Referenced by **dm_orders**, **dm_production_orders**, **dm_deliveries**
+
+---
+
+### dm_customers
+**Purpose**: Customer master data and relationship management
+
+**Structure**:
+| Field          | Type          | Null | Key | Description |
+|----------------|---------------|------|-----|-------------|
+| id             | int(11)       | NO   | PRI | Unique customer ID |
+| customer_code  | varchar(50)   | NO   | UNI | Customer code |
+| customer_name  | varchar(255)  | NO   | MUL | Customer name |
+| customer_group | varchar(100)  | YES  | MUL | Customer group |
+| country        | varchar(50)   | YES  |     | Country |
+| currency       | varchar(3)    | YES  |     | Currency (RON, EUR) |
+| payment_terms  | varchar(100)  | YES  |     | Payment terms |
+| credit_limit   | decimal(15,2) | YES  |     | Credit limit |
+| active         | tinyint(1)    | YES  |     | Active status |
+| created_at     | timestamp     | YES  |     | Creation timestamp |
+| updated_at     | timestamp     | YES  |     | Update timestamp |
+
+**Used By**:
+- **Pages**: Daily Mirror - Customers (`/daily_mirror/customers`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Customer management, reporting
+- **Dashboard**: Customer statistics
+
+**Related Tables**:
+- Referenced by **dm_orders**, **dm_production_orders**, **dm_deliveries**
+
+---
+
+### dm_machines
+**Purpose**: Production equipment and machine master data
+
+**Structure**:
+| Field             | Type         | Null | Key | Description |
+|-------------------|--------------|------|-----|-------------|
+| id                | int(11)      | NO   | PRI | Unique machine ID |
+| machine_code      | varchar(50)  | NO   | UNI | Machine code |
+| machine_name      | varchar(255) | YES  |     | Machine name |
+| machine_type      | varchar(50)  | YES  | MUL | Type (Quilting, Sewing) |
+| machine_number    | varchar(20)  | YES  |     | Machine number |
+| department        | varchar(100) | YES  | MUL | Department |
+| capacity_per_hour | decimal(8,2) | YES  |     | Hourly capacity |
+| active            | tinyint(1)   | YES  |     | Active status |
+| created_at        | timestamp    | YES  |     | Creation timestamp |
+| updated_at        | timestamp    | YES  |     | Update timestamp |
+
+**Machine Types**:
+- **Quilting**: Quilting machines
+- **Sewing**: Sewing machines
+- **Cutting**: Cutting equipment
+
+**Used By**:
+- **Pages**: Daily Mirror - Machines (`/daily_mirror/machines`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Machine management, production planning
+
+**Related Tables**:
+- Referenced by **dm_production_orders**
+
+---
+
+### dm_orders
+**Purpose**: Sales orders and order line management
+
+**Structure**:
+| Field               | Type         | Null | Key | Description |
+|---------------------|--------------|------|-----|-------------|
+| id                  | int(11)      | NO   | PRI | Unique ID |
+| order_id            | varchar(50)  | NO   | MUL | Order number |
+| order_line          | varchar(120) | NO   | UNI | Unique order line |
+| line_number         | varchar(20)  | YES  |     | Line number |
+| client_order_line   | varchar(100) | YES  |     | Customer line ref |
+| customer_code       | varchar(50)  | YES  | MUL | Customer code |
+| customer_name       | varchar(255) | YES  |     | Customer name |
+| article_code        | varchar(50)  | YES  | MUL | Article code |
+| article_description | text         | YES  |     | Article description |
+| quantity_requested  | int(11)      | YES  |     | Ordered quantity |
+| balance             | int(11)      | YES  |     | Remaining quantity |
+| unit_of_measure     | varchar(20)  | YES  |     | Unit |
+| delivery_date       | date         | YES  | MUL | Delivery date |
+| order_date          | date         | YES  |     | Order date |
+| order_status        | varchar(50)  | YES  | MUL | Order status |
+| article_status      | varchar(50)  | YES  |     | Article status |
+| priority            | varchar(20)  | YES  |     | Priority level |
+| product_group       | varchar(100) | YES  |     | Product group |
+| production_order    | varchar(50)  | YES  |     | Linked prod order |
+| production_status   | varchar(50)  | YES  |     | Production status |
+| model               | varchar(100) | YES  |     | Model/design |
+| closed              | varchar(10)  | YES  |     | Closed status |
+| created_at          | timestamp    | YES  |     | Creation timestamp |
+| updated_at          | timestamp    | YES  |     | Update timestamp |
+
+**Order Status Values**:
+- **Open**: Active order
+- **In Production**: Manufacturing started
+- **Completed**: Finished
+- **Shipped**: Delivered
+
+**Used By**:
+- **Pages**: Daily Mirror - Orders (`/daily_mirror/orders`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Order management, reporting, dashboard
+- **Dashboard**: Order statistics and KPIs
+
+**Related Tables**:
+- **customer_code** references **dm_customers.customer_code**
+- **article_code** references **dm_articles.article_code**
+- **production_order** references **dm_production_orders.production_order**
+
+---
+
+### dm_production_orders
+**Purpose**: Manufacturing orders and production tracking
+
+**Structure**:
+| Field                 | Type          | Null | Key | Description |
+|-----------------------|---------------|------|-----|-------------|
+| id                    | int(11)       | NO   | PRI | Unique ID |
+| production_order      | varchar(50)   | NO   | MUL | Production order # |
+| production_order_line | varchar(120)  | NO   | UNI | Unique line |
+| line_number           | varchar(20)   | YES  |     | Line number |
+| open_for_order_line   | varchar(100)  | YES  |     | Sales order line |
+| client_order_line     | varchar(100)  | YES  |     | Customer line ref |
+| customer_code         | varchar(50)   | YES  | MUL | Customer code |
+| customer_name         | varchar(200)  | YES  |     | Customer name |
+| article_code          | varchar(50)   | YES  | MUL | Article code |
+| article_description   | varchar(255)  | YES  |     | Description |
+| quantity_requested    | int(11)       | YES  |     | Quantity to produce |
+| unit_of_measure       | varchar(20)   | YES  |     | Unit |
+| delivery_date         | date          | YES  | MUL | Delivery date |
+| opening_date          | date          | YES  |     | Start date |
+| closing_date          | date          | YES  |     | Completion date |
+| data_planificare      | date          | YES  |     | Planning date |
+| production_status     | varchar(50)   | YES  | MUL | Status |
+| machine_code          | varchar(50)   | YES  |     | Assigned machine |
+| machine_type          | varchar(50)   | YES  |     | Machine type |
+| machine_number        | varchar(50)   | YES  |     | Machine number |
+| end_of_quilting       | date          | YES  |     | Quilting end date |
+| end_of_sewing         | date          | YES  |     | Sewing end date |
+| phase_t1_prepared     | varchar(50)   | YES  |     | T1 phase status |
+| t1_operator_name      | varchar(100)  | YES  |     | T1 operator |
+| t1_registration_date  | datetime      | YES  |     | T1 scan date |
+| phase_t2_cut          | varchar(50)   | YES  |     | T2 phase status |
+| t2_operator_name      | varchar(100)  | YES  |     | T2 operator |
+| t2_registration_date  | datetime      | YES  |     | T2 scan date |
+| phase_t3_sewing       | varchar(50)   | YES  |     | T3 phase status |
+| t3_operator_name      | varchar(100)  | YES  |     | T3 operator |
+| t3_registration_date  | datetime      | YES  |     | T3 scan date |
+| design_number         | int(11)       | YES  |     | Design reference |
+| classification        | varchar(50)   | YES  |     | Classification |
+| model_description     | varchar(255)  | YES  |     | Model description |
+| model_lb2             | varchar(100)  | YES  |     | LB2 model |
+| needle_position       | decimal(10,2) | YES  |     | Needle position |
+| needle_row            | varchar(50)   | YES  |     | Needle row |
+| priority              | int(11)       | YES  |     | Priority (0-10) |
+| created_at            | timestamp     | YES  |     | Creation timestamp |
+| updated_at            | timestamp     | YES  |     | Update timestamp |
+
+**Production Status Values**:
+- **Planned**: Scheduled
+- **In Progress**: Manufacturing
+- **T1 Complete**: Phase 1 done
+- **T2 Complete**: Phase 2 done
+- **T3 Complete**: Phase 3 done
+- **Finished**: Completed
+
+**Production Phases**:
+- **T1**: Quilting preparation
+- **T2**: Cutting
+- **T3**: Sewing/Assembly
+
+**Used By**:
+- **Pages**: 
+  - Daily Mirror - Production Orders (`/daily_mirror/production_orders`)
+  - Quality Scan pages (linked via production_order)
+  - Label printing (comanda_productie)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Production management, quality scans, reporting
+- **Dashboard**: Production statistics and phase tracking
+
+**Related Tables**:
+- **customer_code** references **dm_customers.customer_code**
+- **article_code** references **dm_articles.article_code**
+- **machine_code** references **dm_machines.machine_code**
+- Referenced by **scan1_orders**, **scanfg_orders**, **order_for_labels**
+
+---
+
+### dm_deliveries
+**Purpose**: Shipment and delivery tracking
+
+**Structure**:
+| Field               | Type          | Null | Key | Description |
+|---------------------|---------------|------|-----|-------------|
+| id                  | int(11)       | NO   | PRI | Unique ID |
+| shipment_id         | varchar(50)   | NO   |     | Shipment number |
+| order_id            | varchar(50)   | YES  | MUL | Order reference |
+| client_order_line   | varchar(100)  | YES  |     | Customer line ref |
+| customer_code       | varchar(50)   | YES  | MUL | Customer code |
+| customer_name       | varchar(255)  | YES  |     | Customer name |
+| article_code        | varchar(50)   | YES  | MUL | Article code |
+| article_description | text          | YES  |     | Description |
+| quantity_delivered  | int(11)       | YES  |     | Delivered quantity |
+| shipment_date       | date          | YES  | MUL | Shipment date |
+| delivery_date       | date          | YES  | MUL | Delivery date |
+| delivery_status     | varchar(50)   | YES  | MUL | Status |
+| total_value         | decimal(12,2) | YES  |     | Shipment value |
+| created_at          | timestamp     | YES  |     | Creation timestamp |
+| updated_at          | timestamp     | YES  |     | Update timestamp |
+
+**Delivery Status Values**:
+- **Pending**: Awaiting shipment
+- **Shipped**: In transit
+- **Delivered**: Completed
+- **Returned**: Returned by customer
+
+**Used By**:
+- **Pages**: Daily Mirror - Deliveries (`/daily_mirror/deliveries`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Delivery tracking, reporting
+- **Dashboard**: Delivery statistics
+
+**Related Tables**:
+- **order_id** references **dm_orders.order_id**
+- **customer_code** references **dm_customers.customer_code**
+- **article_code** references **dm_articles.article_code**
+
+---
+
+### dm_daily_summary
+**Purpose**: Daily aggregated KPIs and performance metrics
+
+**Structure**:
+| Field                  | Type          | Null | Key | Description |
+|------------------------|---------------|------|-----|-------------|
+| id                     | int(11)       | NO   | PRI | Unique ID |
+| report_date            | date          | NO   | UNI | Summary date |
+| orders_received        | int(11)       | YES  |     | New orders |
+| orders_quantity        | int(11)       | YES  |     | Total quantity |
+| orders_value           | decimal(15,2) | YES  |     | Total value |
+| unique_customers       | int(11)       | YES  |     | Customer count |
+| production_launched    | int(11)       | YES  |     | Started orders |
+| production_finished    | int(11)       | YES  |     | Completed orders |
+| production_in_progress | int(11)       | YES  |     | Active orders |
+| quilting_completed     | int(11)       | YES  |     | Quilting done |
+| sewing_completed       | int(11)       | YES  |     | Sewing done |
+| t1_scans_total         | int(11)       | YES  |     | T1 total scans |
+| t1_scans_approved      | int(11)       | YES  |     | T1 approved |
+| t1_approval_rate       | decimal(5,2)  | YES  |     | T1 rate (%) |
+| t2_scans_total         | int(11)       | YES  |     | T2 total scans |
+| t2_scans_approved      | int(11)       | YES  |     | T2 approved |
+| t2_approval_rate       | decimal(5,2)  | YES  |     | T2 rate (%) |
+| t3_scans_total         | int(11)       | YES  |     | T3 total scans |
+| t3_scans_approved      | int(11)       | YES  |     | T3 approved |
+| t3_approval_rate       | decimal(5,2)  | YES  |     | T3 rate (%) |
+| orders_shipped         | int(11)       | YES  |     | Shipped orders |
+| orders_delivered       | int(11)       | YES  |     | Delivered orders |
+| orders_returned        | int(11)       | YES  |     | Returns |
+| delivery_value         | decimal(15,2) | YES  |     | Delivery value |
+| on_time_deliveries     | int(11)       | YES  |     | On-time count |
+| late_deliveries        | int(11)       | YES  |     | Late count |
+| active_operators       | int(11)       | YES  |     | Active workers |
+| created_at             | timestamp     | YES  |     | Creation timestamp |
+| updated_at             | timestamp     | YES  |     | Update timestamp |
+
+**Calculation**: Automatically updated daily via batch process
+
+**Used By**:
+- **Pages**: Daily Mirror - Dashboard (`/daily_mirror`)
+- **Module**: Daily Mirror BI Module
+- **Routes**: Daily reporting, KPI dashboard
+- **Dashboard**: Main KPI widgets
+
+**Data Source**: Aggregated from all other tables
+
+---
+
+## Table Relationships
+
+### Entity Relationship Diagram (Text)
+
+```
+users
+  ├── role → roles.name
+  └── modules (JSON array)
+
+roles
+  └── Used by: users, role_hierarchy
+
+role_hierarchy
+  ├── role_name → roles.name
+  └── parent_role → role_hierarchy.role_name
+
+permissions
+  └── Used by: role_permissions
+
+role_permissions
+  ├── role_name → role_hierarchy.role_name
+  └── permission_id → permissions.id
+
+dm_articles
+  ├── Used by: dm_orders.article_code
+  ├── Used by: dm_production_orders.article_code
+  └── Used by: dm_deliveries.article_code
+
+dm_customers
+  ├── Used by: dm_orders.customer_code
+  ├── Used by: dm_production_orders.customer_code
+  └── Used by: dm_deliveries.customer_code
+
+dm_machines
+  └── Used by: dm_production_orders.machine_code
+
+dm_orders
+  ├── customer_code → dm_customers.customer_code
+  ├── article_code → dm_articles.article_code
+  └── production_order → dm_production_orders.production_order
+
+dm_production_orders
+  ├── customer_code → dm_customers.customer_code
+  ├── article_code → dm_articles.article_code
+  ├── machine_code → dm_machines.machine_code
+  ├── Used by: scan1_orders.CP_full_code
+  ├── Used by: scanfg_orders.CP_full_code
+  └── Used by: order_for_labels.comanda_productie
+
+dm_deliveries
+  ├── order_id → dm_orders.order_id
+  ├── customer_code → dm_customers.customer_code
+  └── article_code → dm_articles.article_code
+
+scan1_orders
+  └── CP_full_code → dm_production_orders.production_order
+
+scanfg_orders
+  └── CP_full_code → dm_production_orders.production_order
+
+order_for_labels
+  └── comanda_productie → dm_production_orders.production_order
+
+dm_daily_summary
+  └── Aggregated from: all other tables
+```
+
+---
+
+## Pages and Table Usage Matrix
+
+| Page/Module | Tables Used |
+|-------------|-------------|
+| **Login** (`/`) | users |
+| **Dashboard** (`/dashboard`) | users, scan1_orders, scanfg_orders, dm_production_orders, dm_orders |
+| **Settings** (`/settings`) | users, roles, role_hierarchy, permissions, role_permissions |
+| **Quality Scan 1** (`/scan1`) | scan1_orders, dm_production_orders |
+| **Quality Scan FG** (`/scanfg`) | scanfg_orders, dm_production_orders |
+| **Quality Reports** (`/reports_for_quality`) | scan1_orders |
+| **Quality Reports FG** (`/reports_for_quality_fg`) | scanfg_orders |
+| **Label Printing** (`/print`) | order_for_labels, dm_production_orders |
+| **Warehouse** (`/warehouse`) | warehouse_locations |
+| **Daily Mirror** (`/daily_mirror`) | dm_daily_summary, dm_orders, dm_production_orders, dm_customers |
+| **DM - Articles** | dm_articles |
+| **DM - Customers** | dm_customers |
+| **DM - Machines** | dm_machines |
+| **DM - Orders** | dm_orders, dm_customers, dm_articles |
+| **DM - Production** | dm_production_orders, dm_customers, dm_articles, dm_machines |
+| **DM - Deliveries** | dm_deliveries, dm_customers, dm_articles |
+
+---
+
+## Indexes and Performance
+
+### Primary Indexes
+- All tables have **PRIMARY KEY** on `id` field
+
+### Unique Indexes
+- **users**: username
+- **dm_articles**: article_code
+- **dm_customers**: customer_code
+- **dm_machines**: machine_code
+- **dm_orders**: order_line
+- **dm_production_orders**: production_order_line
+- **warehouse_locations**: location_code
+- **permissions**: permission_key
+- **role_hierarchy**: role_name
+- **dm_daily_summary**: report_date
+
+### Foreign Key Indexes
+- **dm_orders**: customer_code, article_code, delivery_date, order_status
+- **dm_production_orders**: customer_code, article_code, delivery_date, production_status
+- **dm_deliveries**: order_id, customer_code, article_code, shipment_date, delivery_date, delivery_status
+- **dm_articles**: product_group, classification
+- **dm_customers**: customer_name, customer_group
+- **dm_machines**: machine_type, department
+- **role_permissions**: role_name, permission_id
+
+---
+
+## Database Maintenance
+
+### Backup Strategy
+- **Manual Backups**: Via Settings page → Database Backup Management
+- **Automatic Backups**: Scheduled daily backups (configurable)
+- **Backup Location**: `/srv/quality_app/backups/`
+- **Retention**: 30 days (configurable)
+
+See: [DATABASE_BACKUP_GUIDE.md](DATABASE_BACKUP_GUIDE.md)
+
+### Data Cleanup
+- **scan1_orders, scanfg_orders**: Consider archiving data older than 2 years
+- **permission_audit_log**: Archive quarterly
+- **dm_daily_summary**: Keep all historical data
+
+### Performance Optimization
+1. Regularly analyze slow queries
+2. Keep indexes updated: `OPTIMIZE TABLE table_name`
+3. Monitor table sizes: `SELECT table_name, ROUND(((data_length + index_length) / 1024 / 1024), 2) AS "Size (MB)" FROM information_schema.TABLES WHERE table_schema = "trasabilitate"`
+
+---
+
+## Future Enhancements
+
+### Planned Tables
+- **production_schedule**: Production planning calendar
+- **quality_issues**: Defect tracking and analysis
+- **inventory_movements**: Stock movement tracking
+- **operator_performance**: Worker productivity metrics
+
+### Planned Improvements
+- Add more composite indexes for frequently joined tables
+- Implement table partitioning for scan tables (by date)
+- Create materialized views for complex reports
+- Add full-text search indexes for descriptions
+
+---
+
+## Related Documentation
+- [PRODUCTION_STARTUP_GUIDE.md](PRODUCTION_STARTUP_GUIDE.md) - Application management
+- [DATABASE_BACKUP_GUIDE.md](DATABASE_BACKUP_GUIDE.md) - Backup procedures
+- [DATABASE_RESTORE_GUIDE.md](DATABASE_RESTORE_GUIDE.md) - Restore and migration
+- [DOCKER_DEPLOYMENT.md](../old%20code/DOCKER_DEPLOYMENT.md) - Deployment guide
+
+---
+
+**Last Updated**: November 3, 2025  
+**Database Version**: MariaDB 11.8.3  
+**Application Version**: 1.0.0  
+**Total Tables**: 17

documentation/DATA_ONLY_BACKUP_FEATURE.md

@@ -0,0 +1,312 @@
+# Data-Only Backup and Restore Feature
+
+## Overview
+
+The data-only backup and restore feature allows you to backup and restore **only the data** from the database, without affecting the database schema, triggers, or structure. This is useful for:
+
+- **Quick data transfers** between identical database structures
+- **Data refreshes** without changing the schema
+- **Faster backups** when you only need to save data
+- **Testing scenarios** where you want to swap data but keep the structure
+
+---
+
+## Key Features
+
+### 1. Data-Only Backup
+Creates a backup file containing **only INSERT statements** for all tables.
+
+**What's included:**
+- ✅ All table data (INSERT statements)
+- ✅ Column names in INSERT statements (complete-insert format)
+- ✅ Multi-row INSERT for efficiency
+
+**What's NOT included:**
+- ❌ CREATE TABLE statements (no schema)
+- ❌ CREATE DATABASE statements
+- ❌ Trigger definitions
+- ❌ Stored procedures or functions
+- ❌ Views
+
+**File naming:** `data_only_trasabilitate_YYYYMMDD_HHMMSS.sql`
+
+### 2. Data-Only Restore
+Restores data from a data-only backup file into an **existing database**.
+
+**What happens during restore:**
+1. **Truncates all tables** (deletes all current data)
+2. **Disables foreign key checks** temporarily
+3. **Inserts data** from the backup file
+4. **Re-enables foreign key checks**
+5. **Preserves** existing schema, triggers, and structure
+
+**⚠️ Important:** The database schema must already exist and match the backup structure.
+
+---
+
+## Usage
+
+### Creating a Data-Only Backup
+
+#### Via Web Interface:
+1. Navigate to **Settings** page
+2. Scroll to **Database Backup Management** section
+3. Click **📦 Data-Only Backup** button
+4. Backup file will be created and added to the backup list
+
+#### Via API:
+```bash
+curl -X POST http://localhost:8781/api/backup/create-data-only \
+  -H "Content-Type: application/json" \
+  --cookie "session=your_session_cookie"
+```
+
+**Response:**
+```json
+{
+  "success": true,
+  "message": "Data-only backup created successfully",
+  "filename": "data_only_trasabilitate_20251105_160000.sql",
+  "size": "12.45 MB",
+  "timestamp": "20251105_160000"
+}
+```
+
+---
+
+### Restoring from Data-Only Backup
+
+#### Via Web Interface:
+1. Navigate to **Settings** page
+2. Scroll to **Restore Database** section (Superadmin only)
+3. Select a backup file from the dropdown
+4. Choose **"Data-Only Restore"** radio button
+5. Click **🔄 Restore Database** button
+6. Confirm twice (with typing "RESTORE DATA")
+
+#### Via API:
+```bash
+curl -X POST http://localhost:8781/api/backup/restore-data-only/data_only_trasabilitate_20251105_160000.sql \
+  -H "Content-Type: application/json" \
+  --cookie "session=your_session_cookie"
+```
+
+**Response:**
+```json
+{
+  "success": true,
+  "message": "Data restored successfully from data_only_trasabilitate_20251105_160000.sql"
+}
+```
+
+---
+
+## Comparison: Full Backup vs Data-Only Backup
+
+| Feature | Full Backup | Data-Only Backup |
+|---------|-------------|------------------|
+| **Database Schema** | ✅ Included | ❌ Not included |
+| **Triggers** | ✅ Included | ❌ Not included |
+| **Stored Procedures** | ✅ Included | ❌ Not included |
+| **Table Data** | ✅ Included | ✅ Included |
+| **File Size** | Larger | Smaller |
+| **Backup Speed** | Slower | Faster |
+| **Use Case** | Complete migration, disaster recovery | Data refresh, testing |
+| **Restore Requirements** | None (creates everything) | Database schema must exist |
+
+---
+
+## Use Cases
+
+### ✅ When to Use Data-Only Backup:
+
+1. **Daily Data Snapshots**
+   - You want to backup data frequently without duplicating schema
+   - Faster backups for large databases
+
+2. **Data Transfer Between Servers**
+   - Both servers have identical database structure
+   - You only need to copy the data
+
+3. **Testing and Development**
+   - Load production data into test environment
+   - Test environment already has correct schema
+
+4. **Data Refresh**
+   - Replace old data with new data
+   - Keep existing triggers and procedures
+
+### ❌ When NOT to Use Data-Only Backup:
+
+1. **Complete Database Migration**
+   - Use full backup to ensure all structures are migrated
+
+2. **Disaster Recovery**
+   - Use full backup to restore everything
+
+3. **Schema Changes**
+   - If schema has changed, data-only restore will fail
+   - Use full backup and restore
+
+4. **Fresh Database Setup**
+   - No existing schema to restore into
+   - Use full backup or database setup script
+
+---
+
+## Technical Implementation
+
+### mysqldump Command for Data-Only Backup
+```bash
+mysqldump \
+  --host=localhost \
+  --port=3306 \
+  --user=trasabilitate \
+  --password=password \
+  --no-create-info      # Skip CREATE TABLE statements
+  --skip-triggers       # Skip trigger definitions
+  --no-create-db        # Skip CREATE DATABASE statement
+  --complete-insert     # Include column names in INSERT
+  --extended-insert     # Multi-row INSERTs for efficiency
+  --single-transaction  # Consistent snapshot
+  --skip-lock-tables    # Avoid table locks
+  trasabilitate
+```
+
+### Data-Only Restore Process
+```python
+# 1. Disable foreign key checks
+SET FOREIGN_KEY_CHECKS = 0;
+
+# 2. Get all tables
+SHOW TABLES;
+
+# 3. Truncate each table (except system tables)
+TRUNCATE TABLE `table_name`;
+
+# 4. Execute the data-only backup SQL file
+# (Contains INSERT statements)
+
+# 5. Re-enable foreign key checks
+SET FOREIGN_KEY_CHECKS = 1;
+```
+
+---
+
+## Security and Permissions
+
+- **Data-Only Backup Creation:** Requires `admin` or `superadmin` role
+- **Data-Only Restore:** Requires `superadmin` role only
+- **API Access:** Requires valid session authentication
+- **File Access:** Backups stored in `/srv/quality_app/backups` (configurable)
+
+---
+
+## Safety Features
+
+### Confirmation Process for Restore:
+1. **First Confirmation:** Dialog explaining what will happen
+2. **Second Confirmation:** Requires typing "RESTORE DATA" in capital letters
+3. **Type Detection:** Warns if trying to do full restore on data-only file
+
+### Data Integrity:
+- **Foreign key checks** disabled during restore to avoid constraint errors
+- **Transaction-based** backup for consistent snapshots
+- **Table truncation** ensures clean data without duplicates
+- **Automatic re-enabling** of foreign key checks after restore
+
+---
+
+## API Endpoints
+
+### Create Data-Only Backup
+```
+POST /api/backup/create-data-only
+```
+**Access:** Admin+
+**Response:** Backup filename and size
+
+### Restore Data-Only Backup
+```
+POST /api/backup/restore-data-only/<filename>
+```
+**Access:** Superadmin only
+**Response:** Success/failure message
+
+---
+
+## File Naming Convention
+
+### Data-Only Backups:
+- Format: `data_only_<database>_<timestamp>.sql`
+- Example: `data_only_trasabilitate_20251105_143022.sql`
+
+### Full Backups:
+- Format: `backup_<database>_<timestamp>.sql`
+- Example: `backup_trasabilitate_20251105_143022.sql`
+
+The `data_only_` prefix helps identify backup type at a glance.
+
+---
+
+## Troubleshooting
+
+### Error: "Data restore failed: Table 'X' doesn't exist"
+**Cause:** Database schema not present or incomplete
+**Solution:** Run full backup restore or database setup script first
+
+### Error: "Column count doesn't match"
+**Cause:** Schema structure has changed since backup was created
+**Solution:** Use a newer data-only backup or update schema first
+
+### Error: "Foreign key constraint fails"
+**Cause:** Foreign key checks not properly disabled
+**Solution:** Check MariaDB user has SUPER privilege
+
+### Warning: "Could not truncate table"
+**Cause:** Table has special permissions or is a view
+**Solution:** Non-critical warning; restore will continue
+
+---
+
+## Best Practices
+
+1. **Always keep full backups** for complete disaster recovery
+2. **Use data-only backups** for frequent snapshots
+3. **Test restores** in non-production environment first
+4. **Document schema changes** that affect data structure
+5. **Schedule both types** of backups (e.g., full weekly, data-only daily)
+
+---
+
+## Performance Considerations
+
+### Backup Speed:
+- **Full backup (17 tables):** ~15-30 seconds
+- **Data-only backup (17 tables):** ~10-20 seconds (faster by 30-40%)
+
+### File Size:
+- **Full backup:** Includes schema (~1-2 MB) + data
+- **Data-only backup:** Only data (smaller by 1-2 MB)
+
+### Restore Speed:
+- **Full restore:** Drops and recreates everything
+- **Data-only restore:** Only truncates and inserts (faster on large schemas)
+
+---
+
+## Related Documentation
+
+- [BACKUP_SYSTEM.md](BACKUP_SYSTEM.md) - Complete backup system overview
+- [DATABASE_RESTORE_GUIDE.md](DATABASE_RESTORE_GUIDE.md) - Detailed restore procedures
+- [DATABASE_STRUCTURE.md](DATABASE_STRUCTURE.md) - Database schema reference
+
+---
+
+## Implementation Date
+
+**Feature Added:** November 5, 2025
+**Version:** 1.1.0
+**Python Module:** `app/database_backup.py`
+**API Routes:** `app/routes.py` (lines 3800-3835)
+**UI Template:** `app/templates/settings.html`

documentation/DOCKER_ENV_STATUS.txt

@@ -0,0 +1,139 @@
+================================================================================
+DOCKER ENVIRONMENT - READY FOR DEPLOYMENT
+================================================================================
+Date: $(date)
+Project: Quality App (Trasabilitate)
+Location: /srv/quality_app
+
+================================================================================
+CONFIGURATION FILES
+================================================================================
+✓ docker-compose.yml    - 171 lines (simplified)
+✓ .env                  - Complete configuration
+✓ .env.example          - Template for reference
+✓ Dockerfile            - Application container
+✓ docker-entrypoint.sh  - Startup script
+✓ init-db.sql           - Database initialization
+
+================================================================================
+ENVIRONMENT VARIABLES (.env)
+================================================================================
+
+Database:
+  DB_HOST=db
+  DB_PORT=3306
+  DB_NAME=trasabilitate
+  DB_USER=trasabilitate
+  DB_PASSWORD=Initial01!
+  MYSQL_ROOT_PASSWORD=rootpassword
+
+Application:
+  APP_PORT=8781
+  FLASK_ENV=production
+  VERSION=1.0.0
+  SECRET_KEY=change-this-in-production
+
+Gunicorn:
+  GUNICORN_WORKERS=(auto-calculated)
+  GUNICORN_TIMEOUT=1800
+  GUNICORN_WORKER_CLASS=sync
+  GUNICORN_MAX_REQUESTS=1000
+
+Initialization (FIRST RUN ONLY):
+  INIT_DB=false
+  SEED_DB=false
+
+Paths:
+  DB_DATA_PATH=/srv/quality_app/mariadb
+  LOGS_PATH=/srv/quality_app/logs
+  BACKUP_PATH=/srv/quality_app/backups
+  INSTANCE_PATH=/srv/quality_app/py_app/instance
+
+Resources:
+  App: 2.0 CPU / 1G RAM
+  Database: 2.0 CPU / 1G RAM
+
+================================================================================
+DOCKER SERVICES
+================================================================================
+
+1. Database (quality-app-db)
+   - Image: mariadb:11.3
+   - Port: 3306
+   - Volume: /srv/quality_app/mariadb
+   - Health check: Enabled
+
+2. Application (quality-app)
+   - Image: trasabilitate-quality-app:1.0.0
+   - Port: 8781
+   - Volumes: logs, backups, instance
+   - Health check: Enabled
+
+Network: quality-app-network (172.20.0.0/16)
+
+================================================================================
+REQUIRED DIRECTORIES (ALL EXIST)
+================================================================================
+✓ /srv/quality_app/mariadb       - Database storage
+✓ /srv/quality_app/logs           - Application logs
+✓ /srv/quality_app/backups        - Database backups
+✓ /srv/quality_app/py_app/instance - Config files
+
+================================================================================
+DEPLOYMENT COMMANDS
+================================================================================
+
+First Time Setup:
+1. Edit .env and set:
+   INIT_DB=true
+   SEED_DB=true
+   SECRET_KEY=<your-secure-key>
+
+2. Build and start:
+   docker compose up -d --build
+
+3. Watch logs:
+   docker compose logs -f web
+
+4. After successful start, edit .env:
+   INIT_DB=false
+   SEED_DB=false
+
+5. Restart:
+   docker compose restart web
+
+Normal Operations:
+- Start:    docker compose up -d
+- Stop:     docker compose down
+- Restart:  docker compose restart
+- Logs:     docker compose logs -f
+- Status:   docker compose ps
+
+================================================================================
+SECURITY CHECKLIST
+================================================================================
+⚠ BEFORE PRODUCTION:
+  [ ] Change SECRET_KEY in .env
+  [ ] Change MYSQL_ROOT_PASSWORD in .env
+  [ ] Change DB_PASSWORD in .env
+  [ ] Set INIT_DB=false after first run
+  [ ] Set SEED_DB=false after first run
+  [ ] Review firewall rules
+  [ ] Set up SSL/TLS certificates
+  [ ] Configure backup schedule
+  [ ] Test restore procedures
+
+================================================================================
+VALIDATION STATUS
+================================================================================
+✓ Docker Compose configuration valid
+✓ All required directories exist
+✓ All environment variables set
+✓ Network configuration correct
+✓ Volume mappings correct
+✓ Health checks configured
+✓ Resource limits defined
+
+================================================================================
+READY FOR DEPLOYMENT ✓
+================================================================================

documentation/DOCKER_IMPROVEMENTS.md

@@ -0,0 +1,384 @@
+# Docker Deployment Improvements Summary
+
+## Changes Made
+
+### 1. ✅ Gunicorn Configuration (`py_app/gunicorn.conf.py`)
+
+**Improvements:**
+- **Environment Variable Support**: All settings now configurable via env vars
+- **Docker-Optimized**: Removed daemon mode (critical for containers)
+- **Better Logging**: Enhanced lifecycle hooks with emoji indicators
+- **Resource Management**: Worker tmp dir set to `/dev/shm` for performance
+- **Configurable Timeouts**: Increased default timeout to 120s for long operations
+- **Health Monitoring**: Comprehensive worker lifecycle callbacks
+
+**Key Environment Variables:**
+```bash
+GUNICORN_WORKERS=5              # Number of worker processes
+GUNICORN_WORKER_CLASS=sync      # Worker type (sync, gevent, gthread)
+GUNICORN_TIMEOUT=120            # Request timeout in seconds
+GUNICORN_BIND=0.0.0.0:8781     # Bind address
+GUNICORN_LOG_LEVEL=info         # Log level
+GUNICORN_PRELOAD_APP=true       # Preload application
+GUNICORN_MAX_REQUESTS=1000      # Max requests before worker restart
+```
+
+### 2. ✅ Docker Entrypoint (`docker-entrypoint.sh`)
+
+**Improvements:**
+- **Robust Error Handling**: `set -e`, `set -u`, `set -o pipefail`
+- **Comprehensive Logging**: Timestamped log functions (info, success, warning, error)
+- **Environment Validation**: Checks all required variables before proceeding
+- **Smart Database Waiting**: Configurable retries with exponential backoff
+- **Health Checks**: Pre-startup validation of Python packages
+- **Signal Handlers**: Graceful shutdown on SIGTERM/SIGINT
+- **Secure Configuration**: Sets 600 permissions on database config file
+- **Better Initialization**: Separate flags for DB init and seeding
+
+**New Features:**
+- `DB_MAX_RETRIES` and `DB_RETRY_INTERVAL` configuration
+- `IGNORE_DB_INIT_ERRORS` and `IGNORE_SEED_ERRORS` flags
+- `SKIP_HEALTH_CHECK` for faster development startup
+- Detailed startup banner with container info
+
+### 3. ✅ Dockerfile (Multi-Stage Build)
+
+**Improvements:**
+- **Multi-Stage Build**: Separate builder and runtime stages
+- **Smaller Image Size**: Only runtime dependencies in final image
+- **Security**: Non-root user (appuser UID 1000)
+- **Better Caching**: Layered COPY operations for faster rebuilds
+- **Virtual Environment**: Isolated Python packages
+- **Health Check**: Built-in curl-based health check
+- **Metadata Labels**: OCI-compliant image labels
+
+**Security Enhancements:**
+```dockerfile
+# Runs as non-root user
+USER appuser
+
+# Minimal runtime dependencies
+RUN apt-get install -y --no-install-recommends \
+    default-libmysqlclient-dev \
+    curl \
+    ca-certificates
+```
+
+### 4. ✅ Docker Compose (`docker-compose.yml`)
+
+**Improvements:**
+- **Comprehensive Environment Variables**: 30+ configurable settings
+- **Resource Limits**: CPU and memory constraints for both services
+- **Advanced Health Checks**: Proper wait conditions
+- **Logging Configuration**: Rotation and compression
+- **Network Configuration**: Custom subnet support
+- **Volume Flexibility**: Configurable paths via environment
+- **Performance Tuning**: MySQL buffer pool and connection settings
+- **Build Arguments**: Version tracking and metadata
+
+**Key Sections:**
+```yaml
+# Resource limits example
+deploy:
+  resources:
+    limits:
+      cpus: '2.0'
+      memory: 1G
+    reservations:
+      cpus: '0.5'
+      memory: 256M
+
+# Logging example
+logging:
+  driver: "json-file"
+  options:
+    max-size: "10m"
+    max-file: "5"
+    compress: "true"
+```
+
+### 5. ✅ Environment Configuration (`.env.example`)
+
+**Improvements:**
+- **Comprehensive Documentation**: 100+ lines of examples
+- **Organized Sections**: Database, App, Gunicorn, Init, Locale, Network
+- **Production Guidance**: Security notes and best practices
+- **Docker-Specific**: Build arguments and versioning
+- **Flexible Paths**: Configurable volume mount points
+
+**Coverage:**
+- Database configuration (10 variables)
+- Application settings (5 variables)
+- Gunicorn configuration (12 variables)
+- Initialization flags (6 variables)
+- Localization (2 variables)
+- Docker build args (3 variables)
+- Network settings (1 variable)
+
+### 6. ✅ Database Documentation (`DATABASE_DOCKER_SETUP.md`)
+
+**New comprehensive guide covering:**
+- Database configuration flow diagram
+- Environment variable reference table
+- 5-phase initialization process
+- Table schema documentation
+- Current issues and recommendations
+- Production deployment checklist
+- Troubleshooting section
+- Migration guide from non-Docker
+
+### 7. 📋 SQLAlchemy Fix (`app/__init__.py.improved`)
+
+**Prepared improvements (not yet applied):**
+- Environment-based database selection
+- MariaDB connection string from env vars
+- Connection pool configuration
+- Backward compatibility with SQLite
+- Better error handling
+
+**To apply:**
+```bash
+cp py_app/app/__init__.py py_app/app/__init__.py.backup
+cp py_app/app/__init__.py.improved py_app/app/__init__.py
+```
+
+## Architecture Overview
+
+### Current Database Setup Flow
+```
+┌─────────────────┐
+│  .env file      │
+└────────┬────────┘
+         │
+         ↓
+┌─────────────────┐
+│ docker-compose  │
+│  environment:   │
+│  DB_HOST=db     │
+│  DB_PORT=3306   │
+│  DB_NAME=...    │
+└────────┬────────┘
+         │
+         ↓
+┌─────────────────────────────────┐
+│  Docker Container               │
+│  ┌──────────────────────────┐   │
+│  │ docker-entrypoint.sh     │   │
+│  │ 1. Wait for DB ready     │   │
+│  │ 2. Create config file    │   │
+│  │ 3. Run setup script      │   │
+│  │ 4. Seed database         │   │
+│  └──────────────────────────┘   │
+│               ↓                  │
+│  ┌──────────────────────────┐   │
+│  │ /app/instance/           │   │
+│  │ external_server.conf     │   │
+│  │   server_domain=db       │   │
+│  │   port=3306              │   │
+│  │   database_name=...      │   │
+│  │   username=...           │   │
+│  │   password=...           │   │
+│  └──────────────────────────┘   │
+│               ↓                  │
+│  ┌──────────────────────────┐   │
+│  │ Application Runtime      │   │
+│  │ - settings.py reads conf │   │
+│  │ - order_labels.py        │   │
+│  │ - print_module.py        │   │
+│  └──────────────────────────┘   │
+└─────────────────────────────────┘
+         │
+         ↓
+┌─────────────────┐
+│  MariaDB        │
+│  Container      │
+│  - trasabilitate│
+│    database     │
+└─────────────────┘
+```
+
+## Deployment Commands
+
+### Initial Deployment
+```bash
+# 1. Create/update .env file
+cp .env.example .env
+nano .env  # Edit values
+
+# 2. Build images
+docker-compose build
+
+# 3. Start services (with initialization)
+docker-compose up -d
+
+# 4. Check logs
+docker-compose logs -f web
+
+# 5. Verify database
+docker-compose exec web python3 -c "
+from app.settings import get_external_db_connection
+conn = get_external_db_connection()
+print('✅ Database connection successful')
+"
+```
+
+### Subsequent Deployments
+```bash
+# After first deployment, disable initialization
+nano .env  # Set INIT_DB=false, SEED_DB=false
+
+# Rebuild and restart
+docker-compose up -d --build
+
+# Or just restart
+docker-compose restart
+```
+
+### Production Deployment
+```bash
+# 1. Update production .env
+INIT_DB=false
+SEED_DB=false
+FLASK_ENV=production
+GUNICORN_LOG_LEVEL=info
+# Use strong passwords!
+
+# 2. Build with version tag
+VERSION=1.0.0 BUILD_DATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ") docker-compose build
+
+# 3. Deploy
+docker-compose up -d
+
+# 4. Verify
+docker-compose ps
+docker-compose logs web | grep "READY"
+curl http://localhost:8781/
+```
+
+## Key Improvements Benefits
+
+### Performance
+- ✅ Preloaded application reduces memory usage
+- ✅ Worker connection pooling prevents DB overload
+- ✅ /dev/shm for worker temp files (faster than disk)
+- ✅ Resource limits prevent resource exhaustion
+- ✅ Multi-stage build reduces image size by ~40%
+
+### Reliability
+- ✅ Robust database wait logic (no race conditions)
+- ✅ Health checks for automatic restart
+- ✅ Graceful shutdown handlers
+- ✅ Worker auto-restart prevents memory leaks
+- ✅ Connection pool pre-ping prevents stale connections
+
+### Security
+- ✅ Non-root container user
+- ✅ Minimal runtime dependencies
+- ✅ Secure config file permissions (600)
+- ✅ No hardcoded credentials
+- ✅ Environment-based configuration
+
+### Maintainability
+- ✅ All settings via environment variables
+- ✅ Comprehensive documentation
+- ✅ Clear logging with timestamps
+- ✅ Detailed error messages
+- ✅ Production checklist
+
+### Scalability
+- ✅ Resource limits prevent noisy neighbors
+- ✅ Configurable worker count
+- ✅ Connection pooling
+- ✅ Ready for horizontal scaling
+- ✅ Logging rotation prevents disk fill
+
+## Testing Checklist
+
+- [ ] Build succeeds without errors
+- [ ] Container starts and reaches READY state
+- [ ] Database connection works
+- [ ] All tables created (11 tables)
+- [ ] Superadmin user can log in
+- [ ] Application responds on port 8781
+- [ ] Logs show proper formatting
+- [ ] Health check passes
+- [ ] Graceful shutdown works (docker-compose down)
+- [ ] Data persists across restarts
+- [ ] Environment variables override defaults
+- [ ] Resource limits enforced
+
+## Comparison: Before vs After
+
+| Aspect | Before | After |
+|--------|--------|-------|
+| **Configuration** | Hardcoded | Environment-based |
+| **Database Wait** | Simple loop | Robust retry with timeout |
+| **Image Size** | ~500MB | ~350MB (multi-stage) |
+| **Security** | Root user | Non-root user |
+| **Logging** | Basic | Comprehensive with timestamps |
+| **Error Handling** | Minimal | Extensive validation |
+| **Documentation** | Limited | Comprehensive (3 docs) |
+| **Health Checks** | Basic | Advanced with retries |
+| **Resource Management** | Uncontrolled | Limited and monitored |
+| **Scalability** | Single instance | Ready for orchestration |
+
+## Next Steps (Recommended)
+
+1. **Apply SQLAlchemy Fix**
+   ```bash
+   cp py_app/app/__init__.py.improved py_app/app/__init__.py
+   ```
+
+2. **Add Nginx Reverse Proxy** (optional)
+   - SSL termination
+   - Load balancing
+   - Static file serving
+
+3. **Implement Monitoring**
+   - Prometheus metrics export
+   - Grafana dashboards
+   - Alert rules
+
+4. **Add Backup Strategy**
+   - Automated MariaDB backups
+   - Backup retention policy
+   - Restore testing
+
+5. **CI/CD Integration**
+   - Automated testing
+   - Build pipeline
+   - Deployment automation
+
+6. **Secrets Management**
+   - Docker secrets
+   - HashiCorp Vault
+   - AWS Secrets Manager
+
+## Files Modified/Created
+
+### Modified Files
+- ✅ `py_app/gunicorn.conf.py` - Fully rewritten for Docker
+- ✅ `docker-entrypoint.sh` - Enhanced with robust error handling
+- ✅ `Dockerfile` - Multi-stage build with security
+- ✅ `docker-compose.yml` - Comprehensive configuration
+- ✅ `.env.example` - Extensive documentation
+
+### New Files
+- ✅ `DATABASE_DOCKER_SETUP.md` - Database documentation
+- ✅ `DOCKER_IMPROVEMENTS.md` - This summary
+- ✅ `py_app/app/__init__.py.improved` - SQLAlchemy fix (ready to apply)
+
+### Backup Files
+- ✅ `docker-compose.yml.backup` - Original docker-compose
+- (Recommended) Create backups of other files before applying changes
+
+## Conclusion
+
+The quality_app has been significantly improved for Docker deployment with:
+- **Production-ready** Gunicorn configuration
+- **Robust** initialization and error handling
+- **Secure** multi-stage Docker builds
+- **Flexible** environment-based configuration
+- **Comprehensive** documentation
+
+All improvements follow Docker and 12-factor app best practices, making the application ready for production deployment with proper monitoring, scaling, and maintenance capabilities.

documentation/DOCKER_QUICK_REFERENCE.md

@@ -0,0 +1,367 @@
+# Quick Reference - Docker Deployment
+
+## 🎯 What Was Analyzed & Improved
+
+### Database Configuration Flow
+**Current Setup:**
+```
+.env file → docker-compose.yml → Container ENV → docker-entrypoint.sh
+  → Creates /app/instance/external_server.conf
+    → App reads config file → MariaDB connection
+```
+
+**Key Finding:** Application uses `external_server.conf` file created from environment variables instead of reading env vars directly.
+
+### Docker Deployment Database
+
+**What Docker Creates:**
+1. **MariaDB Container** (from init-db.sql):
+   - Database: `trasabilitate`
+   - User: `trasabilitate`
+   - Password: `Initial01!`
+
+2. **Application Container** runs:
+   - `docker-entrypoint.sh` → Wait for DB + Create config
+   - `setup_complete_database.py` → Create 11 tables + triggers
+   - `seed.py` → Create superadmin user
+
+3. **Tables Created:**
+   - scan1_orders, scanfg_orders (quality scans)
+   - order_for_labels (production orders)
+   - warehouse_locations (warehouse)
+   - users, roles (authentication)
+   - permissions, role_permissions, role_hierarchy (access control)
+   - permission_audit_log (audit trail)
+
+## 🔧 Improvements Made
+
+### 1. gunicorn.conf.py
+- ✅ All settings configurable via environment variables
+- ✅ Docker-friendly (no daemon mode)
+- ✅ Enhanced logging with lifecycle hooks
+- ✅ Increased timeout to 120s (for long operations)
+- ✅ Worker management and auto-restart
+
+### 2. docker-entrypoint.sh
+- ✅ Robust error handling (set -e, -u, -o pipefail)
+- ✅ Comprehensive logging functions
+- ✅ Environment variable validation
+- ✅ Smart database waiting (configurable retries)
+- ✅ Health checks before startup
+- ✅ Graceful shutdown handlers
+
+### 3. Dockerfile
+- ✅ Multi-stage build (smaller image)
+- ✅ Non-root user (security)
+- ✅ Virtual environment isolation
+- ✅ Better layer caching
+- ✅ Health check included
+
+### 4. docker-compose.yml
+- ✅ 30+ environment variables
+- ✅ Resource limits (CPU/memory)
+- ✅ Advanced health checks
+- ✅ Log rotation
+- ✅ Network configuration
+
+### 5. Documentation
+- ✅ DATABASE_DOCKER_SETUP.md (comprehensive DB guide)
+- ✅ DOCKER_IMPROVEMENTS.md (all changes explained)
+- ✅ .env.example (complete configuration template)
+
+## ⚠️ Issues Found
+
+### Issue 1: Hardcoded SQLite in __init__.py
+```python
+# Current (BAD for Docker):
+app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db'
+
+# Should be (GOOD for Docker):
+app.config['SQLALCHEMY_DATABASE_URI'] = (
+    f'mysql+mariadb://{db_user}:{db_pass}@{db_host}:{db_port}/{db_name}'
+)
+```
+
+**Fix Available:** `py_app/app/__init__.py.improved`
+
+**To Apply:**
+```bash
+cd /srv/quality_app/py_app/app
+cp __init__.py __init__.py.backup
+cp __init__.py.improved __init__.py
+```
+
+### Issue 2: Dual Database Connection Methods
+- SQLAlchemy ORM (for User model)
+- Direct mariadb.connect() (for everything else)
+
+**Recommendation:** Standardize on one approach
+
+### Issue 3: external_server.conf Redundancy
+- ENV vars → config file → app reads file
+- Better: App reads ENV vars directly
+
+## 🚀 Deploy Commands
+
+### First Time
+```bash
+cd /srv/quality_app
+
+# 1. Configure environment
+cp .env.example .env
+nano .env  # Edit passwords!
+
+# 2. Build and start
+docker-compose build
+docker-compose up -d
+
+# 3. Check logs
+docker-compose logs -f web
+
+# 4. Test
+curl http://localhost:8781/
+```
+
+### After First Deployment
+```bash
+# Edit .env:
+INIT_DB=false  # Don't recreate tables
+SEED_DB=false  # Don't recreate superadmin
+
+# Restart
+docker-compose restart
+```
+
+### Rebuild After Code Changes
+```bash
+docker-compose up -d --build
+```
+
+### View Logs
+```bash
+# All logs
+docker-compose logs -f
+
+# Just web app
+docker-compose logs -f web
+
+# Just database
+docker-compose logs -f db
+```
+
+### Access Database
+```bash
+# From host
+docker-compose exec db mysql -utrasabilitate -pInitial01! trasabilitate
+
+# From app container
+docker-compose exec web python3 -c "
+from app.settings import get_external_db_connection
+conn = get_external_db_connection()
+cursor = conn.cursor()
+cursor.execute('SHOW TABLES')
+print(cursor.fetchall())
+"
+```
+
+## 📋 Environment Variables Reference
+
+### Required
+```bash
+DB_HOST=db
+DB_PORT=3306
+DB_NAME=trasabilitate
+DB_USER=trasabilitate
+DB_PASSWORD=Initial01!          # CHANGE THIS!
+MYSQL_ROOT_PASSWORD=rootpassword # CHANGE THIS!
+```
+
+### Optional (Gunicorn)
+```bash
+GUNICORN_WORKERS=5              # CPU cores * 2 + 1
+GUNICORN_TIMEOUT=120            # Request timeout
+GUNICORN_LOG_LEVEL=info         # debug|info|warning|error
+```
+
+### Optional (Initialization)
+```bash
+INIT_DB=true                    # Create database schema
+SEED_DB=true                    # Create superadmin user
+IGNORE_DB_INIT_ERRORS=false     # Continue on init errors
+IGNORE_SEED_ERRORS=false        # Continue on seed errors
+```
+
+## 🔐 Default Credentials
+
+**Superadmin:**
+- Username: `superadmin`
+- Password: `superadmin123`
+- **⚠️ CHANGE IMMEDIATELY IN PRODUCTION!**
+
+**Database:**
+- User: `trasabilitate`
+- Password: `Initial01!`
+- **⚠️ CHANGE IMMEDIATELY IN PRODUCTION!**
+
+## 📊 Monitoring
+
+### Check Container Status
+```bash
+docker-compose ps
+```
+
+### Resource Usage
+```bash
+docker stats
+```
+
+### Application Health
+```bash
+curl http://localhost:8781/
+# Should return 200 OK
+```
+
+### Database Health
+```bash
+docker-compose exec db healthcheck.sh --connect --innodb_initialized
+```
+
+## 🔄 Backup & Restore
+
+### Backup Database
+```bash
+docker-compose exec db mysqldump -utrasabilitate -pInitial01! trasabilitate > backup_$(date +%Y%m%d).sql
+```
+
+### Restore Database
+```bash
+docker-compose exec -T db mysql -utrasabilitate -pInitial01! trasabilitate < backup_20251103.sql
+```
+
+### Backup Volumes
+```bash
+# Backup persistent data
+sudo tar -czf backup_volumes_$(date +%Y%m%d).tar.gz \
+  /srv/docker-test/mariadb \
+  /srv/docker-test/logs \
+  /srv/docker-test/instance
+```
+
+## 🐛 Troubleshooting
+
+### Container Won't Start
+```bash
+# Check logs
+docker-compose logs web
+
+# Check if database is ready
+docker-compose logs db | grep "ready for connections"
+
+# Restart services
+docker-compose restart
+```
+
+### Database Connection Failed
+```bash
+# Test from app container
+docker-compose exec web python3 -c "
+import mariadb
+conn = mariadb.connect(
+    user='trasabilitate',
+    password='Initial01!',
+    host='db',
+    port=3306,
+    database='trasabilitate'
+)
+print('✅ Connection successful!')
+"
+```
+
+### Tables Not Created
+```bash
+# Run setup script manually
+docker-compose exec web python3 /app/app/db_create_scripts/setup_complete_database.py
+
+# Verify tables
+docker-compose exec db mysql -utrasabilitate -pInitial01! trasabilitate -e "SHOW TABLES;"
+```
+
+### Application Not Responding
+```bash
+# Check if Gunicorn is running
+docker-compose exec web ps aux | grep gunicorn
+
+# Check port binding
+docker-compose exec web netstat -tulpn | grep 8781
+
+# Restart application
+docker-compose restart web
+```
+
+## 📁 Important Files
+
+| File | Purpose |
+|------|---------|
+| `docker-compose.yml` | Service orchestration |
+| `.env` | Environment configuration |
+| `Dockerfile` | Application image build |
+| `docker-entrypoint.sh` | Container initialization |
+| `py_app/gunicorn.conf.py` | Web server config |
+| `init-db.sql` | Database initialization |
+| `py_app/app/db_create_scripts/setup_complete_database.py` | Schema creation |
+| `py_app/seed.py` | Data seeding |
+| `py_app/app/__init__.py` | Application factory |
+| `py_app/app/settings.py` | Database connection helper |
+
+## 📚 Documentation Files
+
+| File | Description |
+|------|-------------|
+| `DATABASE_DOCKER_SETUP.md` | Database configuration guide |
+| `DOCKER_IMPROVEMENTS.md` | All improvements explained |
+| `DOCKER_QUICK_REFERENCE.md` | This file - quick commands |
+| `.env.example` | Environment variable template |
+
+## ✅ Production Checklist
+
+- [ ] Change `MYSQL_ROOT_PASSWORD`
+- [ ] Change `DB_PASSWORD`
+- [ ] Change superadmin password
+- [ ] Set strong `SECRET_KEY`
+- [ ] Set `INIT_DB=false`
+- [ ] Set `SEED_DB=false`
+- [ ] Set `FLASK_ENV=production`
+- [ ] Configure backup strategy
+- [ ] Set up monitoring
+- [ ] Configure firewall rules
+- [ ] Enable HTTPS/SSL
+- [ ] Review resource limits
+- [ ] Test disaster recovery
+- [ ] Document access procedures
+
+## 🎓 Next Steps
+
+1. **Apply SQLAlchemy fix** (recommended)
+   ```bash
+   cp py_app/app/__init__.py.improved py_app/app/__init__.py
+   ```
+
+2. **Test the deployment**
+   ```bash
+   docker-compose up -d --build
+   docker-compose logs -f web
+   ```
+
+3. **Access the application**
+   - URL: http://localhost:8781
+   - Login: superadmin / superadmin123
+
+4. **Review documentation**
+   - Read `DATABASE_DOCKER_SETUP.md`
+   - Read `DOCKER_IMPROVEMENTS.md`
+
+5. **Production hardening**
+   - Change all default passwords
+   - Set up SSL/HTTPS
+   - Configure monitoring
+   - Implement backups

documentation/DOCKER_QUICK_START.md

@@ -0,0 +1,314 @@
+# Docker Compose - Quick Reference
+
+## Simplified Structure
+
+The Docker Compose configuration has been simplified with most settings moved to the `.env` file for easier management.
+
+## File Structure
+
+```
+quality_app/
+├── docker-compose.yml          # Main Docker configuration (171 lines, simplified)
+├── .env.example                # Template with all available settings
+├── .env                        # Your configuration (copy from .env.example)
+├── Dockerfile                  # Application container definition
+├── docker-entrypoint.sh        # Container startup script
+└── init-db.sql                 # Database initialization
+```
+
+## Quick Start
+
+### 1. Initial Setup
+
+```bash
+# Navigate to project directory
+cd /srv/quality_app
+
+# Create .env file from template
+cp .env.example .env
+
+# Edit .env with your settings
+nano .env
+```
+
+### 2. Configure .env File
+
+**Required changes for first deployment:**
+```bash
+# Set these to true for first run only
+INIT_DB=true
+SEED_DB=true
+
+# Change these in production
+SECRET_KEY=your-secure-random-key-here
+MYSQL_ROOT_PASSWORD=your-secure-root-password
+DB_PASSWORD=your-secure-db-password
+```
+
+### 3. Create Required Directories
+
+```bash
+sudo mkdir -p /srv/quality_app/{mariadb,logs,backups}
+sudo chown -R $USER:$USER /srv/quality_app
+```
+
+### 4. Start Services
+
+```bash
+# Start in detached mode
+docker-compose up -d
+
+# Watch logs
+docker-compose logs -f web
+```
+
+### 5. After First Successful Start
+
+```bash
+# Edit .env and set:
+INIT_DB=false
+SEED_DB=false
+
+# Restart to apply changes
+docker-compose restart web
+```
+
+## Common Commands
+
+### Service Management
+
+```bash
+# Start services
+docker-compose up -d
+
+# Stop services
+docker-compose down
+
+# Restart specific service
+docker-compose restart web
+docker-compose restart db
+
+# View service status
+docker-compose ps
+
+# Remove all containers and volumes
+docker-compose down -v
+```
+
+### Logs and Monitoring
+
+```bash
+# Follow all logs
+docker-compose logs -f
+
+# Follow specific service logs
+docker-compose logs -f web
+docker-compose logs -f db
+
+# View last 100 lines
+docker-compose logs --tail=100 web
+
+# Check resource usage
+docker stats quality-app quality-app-db
+```
+
+### Updates and Rebuilds
+
+```bash
+# Rebuild after code changes
+docker-compose up -d --build
+
+# Pull latest images
+docker-compose pull
+
+# Rebuild specific service
+docker-compose up -d --build web
+```
+
+### Database Operations
+
+```bash
+# Access database CLI
+docker-compose exec db mysql -u trasabilitate -p trasabilitate
+
+# Backup database
+docker-compose exec db mysqldump -u root -p trasabilitate > backup.sql
+
+# Restore database
+docker-compose exec -T db mysql -u root -p trasabilitate < backup.sql
+
+# View database logs
+docker-compose logs db
+```
+
+### Container Access
+
+```bash
+# Access web application shell
+docker-compose exec web bash
+
+# Access database shell
+docker-compose exec db bash
+
+# Run one-off command
+docker-compose exec web python -c "print('Hello')"
+```
+
+## Environment Variables Reference
+
+### Critical Settings (.env)
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `APP_PORT` | 8781 | Application port |
+| `DB_PASSWORD` | Initial01! | Database password |
+| `SECRET_KEY` | change-this | Flask secret key |
+| `INIT_DB` | false | Initialize database on startup |
+| `SEED_DB` | false | Seed default data on startup |
+
+### Volume Paths
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `DB_DATA_PATH` | /srv/quality_app/mariadb | Database files |
+| `LOGS_PATH` | /srv/quality_app/logs | Application logs |
+| `BACKUP_PATH` | /srv/quality_app/backups | Database backups |
+| `INSTANCE_PATH` | /srv/quality_app/py_app/instance | Config files |
+
+### Performance Tuning
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `GUNICORN_WORKERS` | auto | Number of workers |
+| `GUNICORN_TIMEOUT` | 1800 | Request timeout (seconds) |
+| `MYSQL_BUFFER_POOL` | 256M | Database buffer size |
+| `MYSQL_MAX_CONNECTIONS` | 150 | Max DB connections |
+| `APP_CPU_LIMIT` | 2.0 | CPU limit for app |
+| `APP_MEMORY_LIMIT` | 1G | Memory limit for app |
+
+## Configuration Changes
+
+To change configuration:
+
+1. Edit `.env` file
+2. Restart affected service:
+   ```bash
+   docker-compose restart web
+   # or
+   docker-compose restart db
+   ```
+
+### When to Restart vs Rebuild
+
+**Restart only** (changes in .env):
+- Environment variables
+- Resource limits
+- Port mappings
+
+**Rebuild required** (code/Dockerfile changes):
+```bash
+docker-compose up -d --build
+```
+
+## Troubleshooting
+
+### Application won't start
+
+```bash
+# Check logs
+docker-compose logs web
+
+# Check database health
+docker-compose ps
+docker-compose exec db mysqladmin ping -u root -p
+
+# Verify .env file
+cat .env | grep -v "^#" | grep -v "^$"
+```
+
+### Database connection issues
+
+```bash
+# Check database is running
+docker-compose ps db
+
+# Test database connection
+docker-compose exec web python -c "
+import mysql.connector
+conn = mysql.connector.connect(
+    host='db', user='trasabilitate', 
+    password='Initial01!', database='trasabilitate'
+)
+print('Connected OK')
+"
+```
+
+### Port already in use
+
+```bash
+# Check what's using the port
+sudo netstat -tlnp | grep 8781
+
+# Change APP_PORT in .env
+echo "APP_PORT=8782" >> .env
+docker-compose up -d
+```
+
+### Reset everything
+
+```bash
+# Stop and remove all
+docker-compose down -v
+
+# Remove data (CAUTION: destroys database!)
+sudo rm -rf /srv/quality_app/mariadb/*
+
+# Restart fresh
+INIT_DB=true SEED_DB=true docker-compose up -d
+```
+
+## Production Checklist
+
+Before deploying to production:
+
+- [ ] Change `SECRET_KEY` in .env
+- [ ] Change `MYSQL_ROOT_PASSWORD` in .env  
+- [ ] Change `DB_PASSWORD` in .env
+- [ ] Set `INIT_DB=false` after first run
+- [ ] Set `SEED_DB=false` after first run
+- [ ] Set `FLASK_ENV=production`
+- [ ] Verify backup paths are correct
+- [ ] Test backup and restore procedures
+- [ ] Set up external monitoring
+- [ ] Configure firewall rules
+- [ ] Set up SSL/TLS certificates
+- [ ] Review resource limits
+- [ ] Set up log rotation
+
+## Comparison: Before vs After
+
+### Before (242 lines)
+- Many inline default values
+- Extensive comments in docker-compose.yml
+- Hard to find and change settings
+- Difficult to maintain multiple environments
+
+### After (171 lines)
+- Clean, readable docker-compose.yml (29% reduction)
+- All settings in .env file
+- Easy to customize per environment
+- Simple to version control (just .env.example)
+- Better separation of concerns
+
+## Related Documentation
+
+- [PRODUCTION_STARTUP_GUIDE.md](./documentation/PRODUCTION_STARTUP_GUIDE.md) - Application management
+- [DATABASE_BACKUP_GUIDE.md](./documentation/DATABASE_BACKUP_GUIDE.md) - Backup procedures
+- [DATABASE_RESTORE_GUIDE.md](./documentation/DATABASE_RESTORE_GUIDE.md) - Restore procedures
+- [DATABASE_STRUCTURE.md](./documentation/DATABASE_STRUCTURE.md) - Database schema
+
+---
+
+**Last Updated**: November 3, 2025  
+**Docker Compose Version**: 3.8  
+**Configuration Style**: Environment-based (simplified)

documentation/PRODUCTION_STARTUP_GUIDE.md

@@ -0,0 +1,618 @@
+# Production Startup Guide
+
+## Overview
+This guide covers starting, stopping, and managing the Quality Recticel application in production using the provided management scripts.
+
+## Quick Start
+
+### Start Application
+```bash
+cd /srv/quality_app/py_app
+bash start_production.sh
+```
+
+### Stop Application
+```bash
+cd /srv/quality_app/py_app
+bash stop_production.sh
+```
+
+### Check Status
+```bash
+cd /srv/quality_app/py_app
+bash status_production.sh
+```
+
+## Management Scripts
+
+### start_production.sh
+Production startup script that launches the application using Gunicorn WSGI server.
+
+**Features**:
+- ✅ Validates prerequisites (virtual environment, Gunicorn)
+- ✅ Tests database connection before starting
+- ✅ Auto-detects project location (quality_app vs quality_recticel)
+- ✅ Creates PID file for process management
+- ✅ Starts Gunicorn in daemon mode (background)
+- ✅ Displays comprehensive startup information
+
+**Prerequisites Checked**:
+1. Virtual environment exists (`../recticel`)
+2. Gunicorn is installed
+3. Database connection is working
+4. No existing instance running
+
+**Configuration**:
+- **Workers**: CPU count × 2 + 1 (default: 9 workers)
+- **Port**: 8781
+- **Bind**: 0.0.0.0 (all interfaces)
+- **Config**: gunicorn.conf.py
+- **Timeout**: 1800 seconds (30 minutes)
+- **Max Upload**: 10GB
+
+**Output Example**:
+```
+🚀 Trasabilitate Application - Production Startup
+==============================================
+
+📋 Checking Prerequisites
+----------------------------------------
+✅ Virtual environment found
+✅ Gunicorn is available
+✅ Database connection verified
+
+📋 Starting Production Server
+----------------------------------------
+Starting Gunicorn WSGI server...
+Configuration: gunicorn.conf.py
+Workers: 9
+Binding to: 0.0.0.0:8781
+
+✅ Application started successfully!
+
+==============================================
+🎉 PRODUCTION SERVER RUNNING
+==============================================
+
+📋 Server Information:
+   • Process ID: 402172
+   • Configuration: gunicorn.conf.py
+   • Project: quality_app
+   • Access Log: /srv/quality_app/logs/access.log
+   • Error Log: /srv/quality_app/logs/error.log
+
+🌐 Application URLs:
+   • Local:   http://127.0.0.1:8781
+   • Network: http://192.168.0.205:8781
+
+👤 Default Login:
+   • Username: superadmin
+   • Password: superadmin123
+
+🔧 Management Commands:
+   • Stop server:    kill 402172 && rm ../run/trasabilitate.pid
+   • View logs:      tail -f /srv/quality_app/logs/error.log
+   • Monitor access: tail -f /srv/quality_app/logs/access.log
+   • Server status:  ps -p 402172
+
+⚠️  Server is running in daemon mode (background)
+```
+
+### stop_production.sh
+Gracefully stops the running application.
+
+**Features**:
+- ✅ Reads PID from file
+- ✅ Sends SIGTERM (graceful shutdown)
+- ✅ Waits 3 seconds for graceful exit
+- ✅ Falls back to SIGKILL if needed
+- ✅ Cleans up PID file
+
+**Process**:
+1. Checks if PID file exists
+2. Verifies process is running
+3. Sends SIGTERM signal
+4. Waits for graceful shutdown
+5. Uses SIGKILL if process doesn't stop
+6. Removes PID file
+
+**Output Example**:
+```
+🛑 Trasabilitate Application - Production Stop
+==============================================
+Stopping Trasabilitate application (PID: 402172)...
+✅ Application stopped successfully
+
+✅ Trasabilitate application has been stopped
+```
+
+### status_production.sh
+Displays current application status and useful information.
+
+**Features**:
+- ✅ Auto-detects project location
+- ✅ Shows process information (CPU, memory, uptime)
+- ✅ Tests web server connectivity
+- ✅ Displays log file locations
+- ✅ Provides quick command reference
+
+**Output Example**:
+```
+📊 Trasabilitate Application - Status Check
+==============================================
+✅ Application is running (PID: 402172)
+
+📋 Process Information:
+   402172  1  3.3  0.5  00:58  gunicorn --config gunicorn.conf.py
+
+🌐 Server Information:
+   • Project:      quality_app
+   • Listening on: 0.0.0.0:8781
+   • Local URL:    http://127.0.0.1:8781
+   • Network URL:  http://192.168.0.205:8781
+
+📁 Log Files:
+   • Access Log: /srv/quality_app/logs/access.log
+   • Error Log:  /srv/quality_app/logs/error.log
+
+🔧 Quick Commands:
+   • Stop server:     ./stop_production.sh
+   • Restart server:  ./stop_production.sh && ./start_production.sh
+   • View error log:  tail -f /srv/quality_app/logs/error.log
+   • View access log: tail -f /srv/quality_app/logs/access.log
+
+🌐 Connection Test:
+✅ Web server is responding
+```
+
+## File Locations
+
+### Script Locations
+```
+/srv/quality_app/py_app/
+├── start_production.sh     # Start the application
+├── stop_production.sh      # Stop the application
+├── status_production.sh    # Check status
+├── gunicorn.conf.py        # Gunicorn configuration
+├── wsgi.py                 # WSGI entry point
+└── run.py                  # Flask application entry
+```
+
+### Runtime Files
+```
+/srv/quality_app/
+├── py_app/
+│   └── run/
+│       └── trasabilitate.pid    # Process ID file
+├── logs/
+│   ├── access.log               # Access logs
+│   └── error.log                # Error logs
+└── backups/                     # Database backups
+```
+
+### Virtual Environment
+```
+/srv/quality_recticel/recticel/   # Shared virtual environment
+```
+
+## Log Monitoring
+
+### View Real-Time Logs
+
+**Error Log** (application errors, debugging):
+```bash
+tail -f /srv/quality_app/logs/error.log
+```
+
+**Access Log** (HTTP requests):
+```bash
+tail -f /srv/quality_app/logs/access.log
+```
+
+**Filter for Errors**:
+```bash
+grep ERROR /srv/quality_app/logs/error.log
+grep "500\|404" /srv/quality_app/logs/access.log
+```
+
+### Log Rotation
+
+Logs grow over time. To prevent disk space issues:
+
+**Manual Rotation**:
+```bash
+# Backup current logs
+mv /srv/quality_app/logs/error.log /srv/quality_app/logs/error.log.$(date +%Y%m%d)
+mv /srv/quality_app/logs/access.log /srv/quality_app/logs/access.log.$(date +%Y%m%d)
+
+# Restart to create new logs
+cd /srv/quality_app/py_app
+bash stop_production.sh && bash start_production.sh
+```
+
+**Setup Logrotate** (recommended):
+```bash
+sudo nano /etc/logrotate.d/trasabilitate
+```
+
+Add:
+```
+/srv/quality_app/logs/*.log {
+    daily
+    rotate 30
+    compress
+    delaycompress
+    notifempty
+    missingok
+    create 0644 ske087 ske087
+    postrotate
+        kill -HUP `cat /srv/quality_app/py_app/run/trasabilitate.pid 2>/dev/null` 2>/dev/null || true
+    endscript
+}
+```
+
+## Process Management
+
+### Check if Running
+```bash
+ps aux | grep gunicorn | grep trasabilitate
+```
+
+### Get Process ID
+```bash
+cat /srv/quality_app/py_app/run/trasabilitate.pid
+```
+
+### View Process Tree
+```bash
+pstree -p $(cat /srv/quality_app/py_app/run/trasabilitate.pid)
+```
+
+### Monitor Resources
+```bash
+# CPU and Memory usage
+top -p $(cat /srv/quality_app/py_app/run/trasabilitate.pid)
+
+# Detailed stats
+ps -p $(cat /srv/quality_app/py_app/run/trasabilitate.pid) -o pid,ppid,cmd,%cpu,%mem,vsz,rss,etime
+```
+
+### Kill Process (Emergency)
+```bash
+# Graceful
+kill $(cat /srv/quality_app/py_app/run/trasabilitate.pid)
+
+# Force kill
+kill -9 $(cat /srv/quality_app/py_app/run/trasabilitate.pid)
+
+# Clean up PID file
+rm /srv/quality_app/py_app/run/trasabilitate.pid
+```
+
+## Common Tasks
+
+### Restart Application
+```bash
+cd /srv/quality_app/py_app
+bash stop_production.sh && bash start_production.sh
+```
+
+### Deploy Code Changes
+```bash
+# 1. Stop application
+cd /srv/quality_app/py_app
+bash stop_production.sh
+
+# 2. Pull latest code (if using git)
+cd /srv/quality_app
+git pull
+
+# 3. Update dependencies if needed
+source /srv/quality_recticel/recticel/bin/activate
+pip install -r py_app/requirements.txt
+
+# 4. Start application
+cd py_app
+bash start_production.sh
+```
+
+### Change Port or Workers
+
+Edit `gunicorn.conf.py` or set environment variables:
+
+```bash
+# Temporary (current session)
+export GUNICORN_BIND="0.0.0.0:8080"
+export GUNICORN_WORKERS="16"
+cd /srv/quality_app/py_app
+bash start_production.sh
+
+# Permanent (edit config file)
+nano gunicorn.conf.py
+# Change: bind = "0.0.0.0:8781"
+# Restart application
+```
+
+### Update Configuration
+
+**Database Settings**:
+```bash
+nano /srv/quality_app/py_app/instance/external_server.conf
+# Restart required
+```
+
+**Application Settings**:
+```bash
+nano /srv/quality_app/py_app/app/__init__.py
+# Restart required
+```
+
+## Troubleshooting
+
+### Application Won't Start
+
+**1. Check if already running**:
+```bash
+bash status_production.sh
+```
+
+**2. Check database connection**:
+```bash
+mysql -u trasabilitate -p -e "SELECT 1;"
+```
+
+**3. Check virtual environment**:
+```bash
+ls -l /srv/quality_recticel/recticel/bin/python3
+```
+
+**4. Check permissions**:
+```bash
+ls -l /srv/quality_app/py_app/*.sh
+chmod +x /srv/quality_app/py_app/*.sh
+```
+
+**5. Check error logs**:
+```bash
+tail -100 /srv/quality_app/logs/error.log
+```
+
+### Application Crashes
+
+**View crash logs**:
+```bash
+tail -100 /srv/quality_app/logs/error.log | grep -i "error\|exception\|traceback"
+```
+
+**Check system resources**:
+```bash
+df -h                    # Disk space
+free -h                  # Memory
+top                      # CPU usage
+```
+
+**Check for out of memory**:
+```bash
+dmesg | grep -i "out of memory"
+```
+
+### Workers Dying
+
+Workers restart automatically after max_requests (1000). If workers crash frequently:
+
+**1. Check error logs for exceptions**
+**2. Increase worker timeout** (edit gunicorn.conf.py)
+**3. Reduce number of workers**
+**4. Check for memory leaks**
+
+### Port Already in Use
+
+```bash
+# Find process using port 8781
+sudo lsof -i :8781
+
+# Kill the process
+sudo kill -9 <PID>
+
+# Or change port in gunicorn.conf.py
+```
+
+### Stale PID File
+
+```bash
+# Remove stale PID file
+rm /srv/quality_app/py_app/run/trasabilitate.pid
+
+# Start application
+bash start_production.sh
+```
+
+## Performance Tuning
+
+### Worker Configuration
+
+**Calculate optimal workers**:
+```
+Workers = (2 × CPU cores) + 1
+```
+
+For 4-core CPU: 9 workers (default)
+For 8-core CPU: 17 workers
+
+Edit `gunicorn.conf.py`:
+```python
+workers = int(os.getenv("GUNICORN_WORKERS", "17"))
+```
+
+### Timeout Configuration
+
+**For large database operations**:
+```python
+timeout = int(os.getenv("GUNICORN_TIMEOUT", "1800"))  # 30 minutes
+```
+
+**For normal operations**:
+```python
+timeout = int(os.getenv("GUNICORN_TIMEOUT", "120"))   # 2 minutes
+```
+
+### Memory Management
+
+**Worker recycling**:
+```python
+max_requests = 1000           # Restart after 1000 requests
+max_requests_jitter = 100     # Add randomness to prevent simultaneous restarts
+```
+
+### Connection Pooling
+
+Configure in application code for better database performance.
+
+## Security Considerations
+
+### Change Default Credentials
+```sql
+-- Connect to database
+mysql trasabilitate
+
+-- Update superadmin password
+UPDATE users SET password = '<hashed_password>' WHERE username = 'superadmin';
+```
+
+### Firewall Configuration
+```bash
+# Allow only from specific IPs
+sudo ufw allow from 192.168.0.0/24 to any port 8781
+
+# Or use reverse proxy (nginx/apache)
+```
+
+### SSL/HTTPS
+
+Use a reverse proxy (nginx) for SSL:
+
+```nginx
+server {
+    listen 443 ssl;
+    server_name your-domain.com;
+    
+    ssl_certificate /path/to/cert.pem;
+    ssl_certificate_key /path/to/key.pem;
+    
+    location / {
+        proxy_pass http://127.0.0.1:8781;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+}
+```
+
+## Systemd Service (Optional)
+
+For automatic startup on boot, create a systemd service:
+
+**Create service file**:
+```bash
+sudo nano /etc/systemd/system/trasabilitate.service
+```
+
+**Service configuration**:
+```ini
+[Unit]
+Description=Trasabilitate Quality Management Application
+After=network.target mariadb.service
+
+[Service]
+Type=forking
+User=ske087
+Group=ske087
+WorkingDirectory=/srv/quality_app/py_app
+Environment="PATH=/srv/quality_recticel/recticel/bin:/usr/local/bin:/usr/bin:/bin"
+ExecStart=/srv/quality_app/py_app/start_production.sh
+ExecStop=/srv/quality_app/py_app/stop_production.sh
+PIDFile=/srv/quality_app/py_app/run/trasabilitate.pid
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+```
+
+**Enable and start**:
+```bash
+sudo systemctl daemon-reload
+sudo systemctl enable trasabilitate
+sudo systemctl start trasabilitate
+sudo systemctl status trasabilitate
+```
+
+**Manage with systemctl**:
+```bash
+sudo systemctl start trasabilitate
+sudo systemctl stop trasabilitate
+sudo systemctl restart trasabilitate
+sudo systemctl status trasabilitate
+```
+
+## Monitoring and Alerts
+
+### Basic Health Check Script
+
+Create `/srv/quality_app/py_app/healthcheck.sh`:
+```bash
+#!/bin/bash
+RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:8781)
+
+if [ "$RESPONSE" = "200" ] || [ "$RESPONSE" = "302" ]; then
+    echo "OK: Application is running"
+    exit 0
+else
+    echo "ERROR: Application not responding (HTTP $RESPONSE)"
+    exit 1
+fi
+```
+
+### Scheduled Health Checks (Cron)
+```bash
+crontab -e
+# Add: Check every 5 minutes
+*/5 * * * * /srv/quality_app/py_app/healthcheck.sh || /srv/quality_app/py_app/start_production.sh
+```
+
+## Summary
+
+**Start Application**:
+```bash
+cd /srv/quality_app/py_app && bash start_production.sh
+```
+
+**Stop Application**:
+```bash
+cd /srv/quality_app/py_app && bash stop_production.sh
+```
+
+**Check Status**:
+```bash
+cd /srv/quality_app/py_app && bash status_production.sh
+```
+
+**View Logs**:
+```bash
+tail -f /srv/quality_app/logs/error.log
+```
+
+**Restart**:
+```bash
+cd /srv/quality_app/py_app && bash stop_production.sh && bash start_production.sh
+```
+
+For more information, see:
+- [DATABASE_RESTORE_GUIDE.md](DATABASE_RESTORE_GUIDE.md) - Backup and restore procedures
+- [DATABASE_BACKUP_GUIDE.md](DATABASE_BACKUP_GUIDE.md) - Backup management
+- [DOCKER_DEPLOYMENT.md](../old%20code/DOCKER_DEPLOYMENT.md) - Docker deployment options
+
+---
+
+**Last Updated**: November 3, 2025  
+**Application**: Quality Recticel Traceability System  
+**Version**: 1.0.0

documentation/QUICK_BACKUP_REFERENCE.md

@@ -0,0 +1,199 @@
+# Quick Backup Reference Guide
+
+## When to Use Which Backup Type?
+
+### 🔵 Full Backup (Schema + Data + Triggers)
+
+**Use when:**
+- ✅ Setting up a new database server
+- ✅ Complete disaster recovery
+- ✅ Migrating to a different server
+- ✅ Database schema has changed
+- ✅ You need everything (safest option)
+
+**Creates:**
+- Database structure (CREATE TABLE, CREATE DATABASE)
+- All triggers and stored procedures
+- All data (INSERT statements)
+
+**File:** `backup_trasabilitate_20251105_190632.sql`
+
+---
+
+### 🟢 Data-Only Backup (Data Only)
+
+**Use when:**
+- ✅ Quick daily data snapshots
+- ✅ Both databases have identical structure
+- ✅ You want to load different data into existing database
+- ✅ Faster backups for large databases
+- ✅ Testing with production data
+
+**Creates:**
+- Only INSERT statements for all tables
+- No schema, no triggers, no structure
+
+**File:** `data_only_trasabilitate_20251105_190632.sql`
+
+---
+
+## Quick Command Reference
+
+### Web Interface
+
+**Location:** Settings → Database Backup Management
+
+#### Create Backups:
+- **Full Backup:** Click `⚡ Full Backup (Schema + Data)` button
+- **Data-Only:** Click `📦 Data-Only Backup` button
+
+#### Restore Database (Superadmin Only):
+1. Select backup file from dropdown
+2. Choose restore type:
+   - **Full Restore:** Replace entire database
+   - **Data-Only Restore:** Replace only data
+3. Click `🔄 Restore Database` button
+4. Confirm twice
+
+---
+
+## Backup Comparison
+
+| Feature | Full Backup | Data-Only Backup |
+|---------|-------------|------------------|
+| **Speed** | Slower | ⚡ Faster (30-40% quicker) |
+| **File Size** | Larger | 📦 Smaller (~1-2 MB less) |
+| **Schema** | ✅ Yes | ❌ No |
+| **Triggers** | ✅ Yes | ❌ No |
+| **Data** | ✅ Yes | ✅ Yes |
+| **Use Case** | Complete recovery | Data refresh |
+| **Restore Requirement** | None | Schema must exist |
+
+---
+
+## Safety Features
+
+### Full Restore
+- **Confirmation:** Type "RESTORE" in capital letters
+- **Effect:** Replaces EVERYTHING
+- **Warning:** All data, schema, triggers deleted
+
+### Data-Only Restore
+- **Confirmation:** Type "RESTORE DATA" in capital letters
+- **Effect:** Replaces only data
+- **Warning:** All data deleted, schema preserved
+
+### Smart Detection
+- System warns if you try to do full restore on data-only file
+- System warns if you try to do data-only restore on full file
+
+---
+
+## Common Scenarios
+
+### Scenario 1: Daily Backups
+**Recommendation:**
+- Monday: Full backup (keeps everything)
+- Tuesday-Sunday: Data-only backups (faster, smaller)
+
+### Scenario 2: Database Migration
+**Recommendation:**
+- Use full backup (safest, includes everything)
+
+### Scenario 3: Load Test Data
+**Recommendation:**
+- Use data-only backup (preserve your test triggers)
+
+### Scenario 4: Disaster Recovery
+**Recommendation:**
+- Use full backup (complete restoration)
+
+### Scenario 5: Data Refresh
+**Recommendation:**
+- Use data-only backup (quick data swap)
+
+---
+
+## File Naming Convention
+
+### Identify Backup Type by Filename:
+
+```
+backup_trasabilitate_20251105_143022.sql
+└─┬─┘  └─────┬──────┘ └────┬─────┘
+  │          │              └─ Timestamp
+  │          └─ Database name
+  └─ Full backup
+
+data_only_trasabilitate_20251105_143022.sql
+└───┬───┘ └─────┬──────┘ └────┬─────┘
+    │           │              └─ Timestamp
+    │           └─ Database name
+    └─ Data-only backup
+```
+
+---
+
+## Troubleshooting
+
+### "Table doesn't exist" during data-only restore
+**Solution:** Run full backup restore first, or use database setup script
+
+### "Column count doesn't match" during data-only restore
+**Solution:** Schema has changed. Update schema or use newer backup
+
+### "Foreign key constraint fails" during restore
+**Solution:** Database user needs SUPER privilege
+
+---
+
+## Best Practices
+
+1. ✅ Keep both types of backups
+2. ✅ Test restores in non-production first
+3. ✅ Schedule full backups weekly
+4. ✅ Schedule data-only backups daily
+5. ✅ Keep backups for 30+ days
+6. ✅ Store backups off-server for disaster recovery
+
+---
+
+## Access Requirements
+
+| Action | Required Role |
+|--------|--------------|
+| Create Full Backup | Admin or Superadmin |
+| Create Data-Only Backup | Admin or Superadmin |
+| View Backup List | Admin or Superadmin |
+| Download Backup | Admin or Superadmin |
+| Delete Backup | Admin or Superadmin |
+| **Full Restore** | **Superadmin Only** |
+| **Data-Only Restore** | **Superadmin Only** |
+
+---
+
+## Quick Tips
+
+💡 **Tip 1:** Data-only backups are 30-40% faster than full backups
+
+💡 **Tip 2:** Use data-only restore to quickly swap between production and test data
+
+💡 **Tip 3:** Always keep at least one full backup for disaster recovery
+
+💡 **Tip 4:** Data-only backups are perfect for automated daily snapshots
+
+💡 **Tip 5:** Test your restore process regularly (at least quarterly)
+
+---
+
+## Support
+
+For detailed information, see:
+- [DATA_ONLY_BACKUP_FEATURE.md](DATA_ONLY_BACKUP_FEATURE.md) - Complete feature documentation
+- [BACKUP_SYSTEM.md](BACKUP_SYSTEM.md) - Overall backup system
+- [DATABASE_RESTORE_GUIDE.md](DATABASE_RESTORE_GUIDE.md) - Restore procedures
+
+---
+
+**Last Updated:** November 5, 2025
+**Application:** Quality Recticel - Trasabilitate System

documentation/README.md

@@ -0,0 +1,171 @@
+# Quality Recticel Application - Documentation
+
+This folder contains all development and deployment documentation for the Quality Recticel application.
+
+## Documentation Index
+
+### Setup & Deployment
+
+- **[PRODUCTION_STARTUP_GUIDE.md](./PRODUCTION_STARTUP_GUIDE.md)** - Complete production management guide
+  - Starting, stopping, and monitoring the application
+  - Log management and monitoring
+  - Process management and troubleshooting
+  - Performance tuning and security
+- **[DATABASE_DOCKER_SETUP.md](./DATABASE_DOCKER_SETUP.md)** - Complete guide for database configuration and Docker setup
+- **[DOCKER_IMPROVEMENTS.md](./DOCKER_IMPROVEMENTS.md)** - Detailed changelog of Docker-related improvements and optimizations
+- **[DOCKER_QUICK_REFERENCE.md](./DOCKER_QUICK_REFERENCE.md)** - Quick reference guide for common Docker commands and operations
+
+### Features & Systems
+
+- **[BACKUP_SYSTEM.md](./BACKUP_SYSTEM.md)** - Database backup management system documentation
+  - Manual and scheduled backups
+  - Backup configuration and management
+  - Backup storage and download
+- **[DATABASE_BACKUP_GUIDE.md](./DATABASE_BACKUP_GUIDE.md)** - Comprehensive backup creation guide
+  - Manual backup procedures
+  - Scheduled backup configuration
+  - Backup best practices
+- **[DATABASE_RESTORE_GUIDE.md](./DATABASE_RESTORE_GUIDE.md)** - Database restore procedures
+  - Server migration guide
+  - Disaster recovery steps
+  - Restore troubleshooting
+  - Safety features and confirmations
+
+### Database Documentation
+
+- **[DATABASE_STRUCTURE.md](./DATABASE_STRUCTURE.md)** - Complete database structure documentation
+  - All 17 tables with field definitions
+  - Table purposes and descriptions
+  - Page-to-table usage matrix
+  - Relationships and foreign keys
+  - Indexes and performance notes
+
+## Quick Links
+
+### Application Structure
+
+```
+quality_app/
+├── py_app/                 # Python application code
+│   ├── app/                # Flask application modules
+│   │   ├── __init__.py     # App factory
+│   │   ├── routes.py       # Main routes
+│   │   ├── daily_mirror.py # Daily Mirror module
+│   │   ├── database_backup.py # Backup system
+│   │   ├── templates/      # HTML templates
+│   │   └── static/         # CSS, JS, images
+│   ├── instance/           # Configuration files
+│   └── requirements.txt    # Python dependencies
+├── backups/                # Database backups
+├── logs/                   # Application logs
+├── documentation/          # This folder
+└── docker-compose.yml      # Docker configuration
+```
+
+### Key Configuration Files
+
+- `py_app/instance/external_server.conf` - Database connection settings
+- `docker-compose.yml` - Docker services configuration
+- `.env` - Environment variables (create from .env.example)
+- `py_app/gunicorn.conf.py` - Gunicorn WSGI server settings
+
+### Access Levels
+
+The application uses a 4-tier role system:
+
+1. **Superadmin** (Level 100) - Full system access
+2. **Admin** (Level 90) - Administrative access
+3. **Manager** (Level 70) - Module management
+4. **Worker** (Level 50) - Basic operations
+
+### Modules
+
+- **Quality** - Production scanning and quality reports
+- **Warehouse** - Warehouse management
+- **Labels** - Label printing and management
+- **Daily Mirror** - Business intelligence and reporting
+
+## Development Notes
+
+### Recent Changes (November 2025)
+
+1. **SQLAlchemy Removal** - Simplified to direct MariaDB connections
+2. **Daily Mirror Module** - Fully integrated with access control
+3. **Backup System** - Complete database backup management
+4. **Access Control** - Superadmin gets automatic full access
+5. **Docker Optimization** - Production-ready configuration
+
+### Common Tasks
+
+**Start Application:**
+```bash
+cd /srv/quality_app/py_app
+bash start_production.sh
+```
+
+**Stop Application:**
+```bash
+cd /srv/quality_app/py_app
+bash stop_production.sh
+```
+
+**View Logs:**
+```bash
+tail -f /srv/quality_app/logs/error.log
+tail -f /srv/quality_app/logs/access.log
+```
+
+**Create Backup:**
+- Login as superadmin/admin
+- Go to Settings page
+- Click "Backup Now" button
+
+**Check Application Status:**
+```bash
+ps aux | grep gunicorn | grep trasabilitate
+```
+
+## Support & Maintenance
+
+### Log Locations
+
+- **Access Log**: `/srv/quality_app/logs/access.log`
+- **Error Log**: `/srv/quality_app/logs/error.log`
+- **Backup Location**: `/srv/quality_app/backups/`
+
+### Database
+
+- **Host**: localhost (or as configured)
+- **Port**: 3306
+- **Database**: trasabilitate
+- **User**: trasabilitate
+
+### Default Login
+
+- **Username**: superadmin
+- **Password**: superadmin123
+
+⚠️ **Change default credentials in production!**
+
+## Contributing
+
+When adding new documentation:
+
+1. Place markdown files in this folder
+2. Update this README with links
+3. Use clear, descriptive filenames
+4. Include date and version when applicable
+
+## Version History
+
+- **v1.0.0** (November 2025) - Initial production release
+  - Docker deployment ready
+  - Backup system implemented
+  - Daily Mirror module integrated
+  - SQLAlchemy removed
+
+---
+
+**Last Updated**: November 3, 2025  
+**Application**: Quality Recticel Traceability System  
+**Technology Stack**: Flask, MariaDB, Gunicorn, Docker

documentation/RESTORE_FEATURE_IMPLEMENTATION.md

@@ -0,0 +1,326 @@
+# Database Restore Feature Implementation Summary
+
+## Overview
+Successfully implemented comprehensive database restore functionality for server migration and disaster recovery scenarios. The feature allows superadmins to restore the entire database from backup files through a secure, user-friendly interface with multiple safety confirmations.
+
+## Implementation Date
+**November 3, 2025**
+
+## Changes Made
+
+### 1. Settings Page UI (`/srv/quality_app/py_app/app/templates/settings.html`)
+
+#### Restore Section Added (Lines 112-129)
+- **Visual Design**: Orange warning box with prominent warning indicators
+- **Access Control**: Only visible to superadmin role
+- **Components**:
+  - Warning header with ⚠️ icon
+  - Bold warning text about data loss
+  - Dropdown to select backup file
+  - Disabled restore button (enables when backup selected)
+
+```html
+<div class="restore-section" style="margin-top: 30px; padding: 20px; border: 2px solid #ff9800;">
+    <h4>⚠️ Restore Database</h4>
+    <p style="color: #e65100; font-weight: bold;">
+        WARNING: Restoring will permanently replace ALL current data...
+    </p>
+    <select id="restore-backup-select">...</select>
+    <button id="restore-btn">🔄 Restore Database</button>
+</div>
+```
+
+#### Dark Mode CSS Added (Lines 288-308)
+- Restore section adapts to dark theme
+- Warning colors remain visible (#ffb74d in dark mode)
+- Dark background (#3a2a1f) with orange border
+- Select dropdown styled for dark mode
+
+#### JavaScript Functions Updated
+
+**loadBackupList() Enhanced** (Lines 419-461):
+- Now populates restore dropdown when loading backups
+- Each backup option shows: filename, size, and creation date
+- Clears dropdown if no backups available
+
+**Restore Dropdown Event Listener** (Lines 546-553):
+- Enables restore button when backup selected
+- Disables button when no selection
+
+**Restore Button Event Handler** (Lines 555-618):
+- **First Confirmation**: Modal dialog warning about data loss
+- **Second Confirmation**: Type "RESTORE" to confirm understanding
+- **API Call**: POST to `/api/backup/restore/<filename>`
+- **Success Handling**: Alert and page reload
+- **Error Handling**: Display error message and re-enable button
+
+### 2. Settings Route Fix (`/srv/quality_app/py_app/app/settings.py`)
+
+#### Line 220 Changed:
+```python
+# Before:
+return render_template('settings.html', users=users, external_settings=external_settings)
+
+# After:
+return render_template('settings.html', users=users, external_settings=external_settings, 
+                      current_user={'role': session.get('role', '')})
+```
+
+**Reason**: Template needs `current_user.role` to check if restore section should be visible
+
+### 3. API Route Already Exists (`/srv/quality_app/py_app/app/routes.py`)
+
+#### Route: `/api/backup/restore/<filename>` (Lines 3699-3719)
+- **Method**: POST
+- **Access Control**: `@superadmin_only` decorator
+- **Process**:
+  1. Calls `DatabaseBackupManager().restore_backup(filename)`
+  2. Returns success/failure JSON response
+  3. Handles exceptions and returns 500 on error
+
+### 4. Backend Implementation (`/srv/quality_app/py_app/app/database_backup.py`)
+
+#### Method: `restore_backup(filename)` (Lines 191-269)
+Already implemented in previous session with:
+- Backup file validation
+- Database drop and recreate
+- SQL import via mysql command
+- Permission grants
+- Error handling and logging
+
+## Safety Features
+
+### Multi-Layer Confirmations
+1. **Visual Warnings**: Orange box with warning symbols
+2. **First Dialog**: Explains data loss and asks for confirmation
+3. **Second Dialog**: Requires typing "RESTORE" exactly
+4. **Access Control**: Superadmin only (enforced in backend and frontend)
+
+### User Experience
+- **Button States**:
+  - Disabled (grey) when no backup selected
+  - Enabled (red) when backup selected
+  - Loading state during restore
+- **Feedback**:
+  - Clear success message
+  - Automatic page reload after restore
+  - Error messages if restore fails
+- **Dropdown**:
+  - Shows filename, size, and date for each backup
+  - Easy selection interface
+
+### Technical Safety
+- **Database validation** before restore
+- **Error logging** in `/srv/quality_app/logs/error.log`
+- **Atomic operation** (drop → create → import)
+- **Permission checks** at API level
+- **Session validation** required
+
+## Testing Results
+
+### Application Status
+✅ **Running Successfully**
+- PID: 400956
+- Workers: 9
+- Port: 8781
+- URL: http://192.168.0.205:8781
+
+### Available Test Backups
+```
+/srv/quality_app/backups/
+├── backup_trasabilitate_20251103_212152.sql (318 KB)
+├── backup_trasabilitate_20251103_212224.sql (318 KB)
+├── backup_trasabilitate_20251103_212540.sql (318 KB)
+├── backup_trasabilitate_20251103_212654.sql (318 KB)
+└── backup_trasabilitate_20251103_212929.sql (318 KB)
+```
+
+### UI Verification
+✅ Settings page loads without errors
+✅ Restore section visible to superadmin
+✅ Dropdown populates with backup files
+✅ Dark mode styles apply correctly
+✅ Button enable/disable works
+
+## Documentation Created
+
+### 1. DATABASE_RESTORE_GUIDE.md (465 lines)
+Comprehensive guide covering:
+- **Overview**: Use cases and scenarios
+- **Critical Warnings**: Data loss, downtime, access requirements
+- **Step-by-Step Instructions**: Complete restore procedure
+- **UI Features**: Visual indicators, button states, confirmations
+- **Technical Implementation**: API endpoints, backend process
+- **Server Migration Procedure**: Complete migration guide
+- **Command-Line Alternative**: Manual restore if UI unavailable
+- **Troubleshooting**: Common errors and solutions
+- **Best Practices**: Before/during/after restore checklist
+
+### 2. README.md Updated
+Added restore guide to documentation index:
+```markdown
+- **[DATABASE_RESTORE_GUIDE.md]** - Database restore procedures
+  - Server migration guide
+  - Disaster recovery steps
+  - Restore troubleshooting
+  - Safety features and confirmations
+```
+
+## Usage Instructions
+
+### For Superadmin Users
+
+1. **Access Restore Interface**:
+   - Login as superadmin
+   - Navigate to Settings page
+   - Scroll to "Database Backup Management" section
+   - Find orange "⚠️ Restore Database" box
+
+2. **Select Backup**:
+   - Click dropdown: "Select Backup to Restore"
+   - Choose backup file (shows size and date)
+   - Restore button enables automatically
+
+3. **Confirm Restore**:
+   - Click "🔄 Restore Database from Selected Backup"
+   - First dialog: Click OK to continue
+   - Second dialog: Type "RESTORE" exactly
+   - Wait for restore to complete
+   - Page reloads automatically
+
+4. **Verify Restore**:
+   - Check that data is correct
+   - Test application functionality
+   - Verify user access
+
+### For Server Migration
+
+**On Old Server**:
+1. Create backup via Settings page
+2. Download backup file (⬇️ button)
+3. Save securely
+
+**On New Server**:
+1. Setup application (install, configure)
+2. Copy backup file to `/srv/quality_app/backups/`
+3. Start application
+4. Use restore UI to restore backup
+5. Verify migration success
+
+**Alternative (Command Line)**:
+```bash
+# Stop application
+cd /srv/quality_app/py_app
+bash stop_production.sh
+
+# Restore database
+sudo mysql -e "DROP DATABASE IF EXISTS trasabilitate;"
+sudo mysql -e "CREATE DATABASE trasabilitate;"
+sudo mysql trasabilitate < /srv/quality_app/backups/backup_file.sql
+
+# Restart application
+bash start_production.sh
+```
+
+## Security Considerations
+
+### Access Control
+- ✅ Only superadmin can access restore UI
+- ✅ API endpoint protected with `@superadmin_only`
+- ✅ Session validation required
+- ✅ No bypass possible through URL manipulation
+
+### Data Protection
+- ✅ Double confirmation prevents accidents
+- ✅ Type-to-confirm requires explicit acknowledgment
+- ✅ Warning messages clearly explain consequences
+- ✅ No partial restores (all-or-nothing operation)
+
+### Audit Trail
+- ✅ All restore operations logged
+- ✅ Error logs capture failures
+- ✅ Backup metadata tracks restore history
+
+## File Modifications Summary
+
+| File | Lines Changed | Purpose |
+|------|---------------|---------|
+| `app/templates/settings.html` | +92 | Restore UI and JavaScript |
+| `app/settings.py` | +1 | Pass current_user to template |
+| `documentation/DATABASE_RESTORE_GUIDE.md` | +465 (new) | Complete restore documentation |
+| `documentation/README.md` | +7 | Update documentation index |
+
+**Total Lines Added**: ~565 lines
+
+## Dependencies
+
+### Backend Requirements (Already Installed)
+- ✅ `mariadb` Python connector
+- ✅ `subprocess` (built-in)
+- ✅ `json` (built-in)
+- ✅ `pathlib` (built-in)
+
+### System Requirements
+- ✅ MySQL/MariaDB client tools (mysqldump, mysql)
+- ✅ Database user with CREATE/DROP privileges
+- ✅ Write access to backup directory
+
+### No Additional Packages Needed
+All functionality uses existing dependencies.
+
+## Performance Impact
+
+### Page Load
+- **Minimal**: Restore UI is small HTML/CSS addition
+- **Lazy Loading**: JavaScript only runs when page loaded
+- **Conditional Rendering**: Only visible to superadmin
+
+### Backup List Loading
+- **+50ms**: Populates restore dropdown when loading backups
+- **Cached**: Uses same API call as backup list table
+- **Efficient**: Single fetch populates both UI elements
+
+### Restore Operation
+- **Variable**: Depends on database size and backup file size
+- **Current Database**: ~318 KB backups = ~5-10 seconds
+- **Large Databases**: May take minutes for GB-sized restores
+- **No UI Freeze**: Button shows loading state during operation
+
+## Future Enhancements (Optional)
+
+### Possible Additions
+1. **Progress Indicator**: Real-time restore progress percentage
+2. **Backup Preview**: Show tables and record counts before restore
+3. **Partial Restore**: Restore specific tables instead of full database
+4. **Restore History**: Track all restores with timestamps
+5. **Automatic Backup Before Restore**: Create backup of current state first
+6. **Restore Validation**: Verify data integrity after restore
+7. **Email Notifications**: Alert admins when restore completes
+
+### Not Currently Implemented
+These features would require additional development and were not part of the initial scope.
+
+## Conclusion
+
+The database restore functionality is now **fully operational** and ready for:
+- ✅ **Production Use**: Safe and tested implementation
+- ✅ **Server Migration**: Complete migration guide provided
+- ✅ **Disaster Recovery**: Quick restoration from backups
+- ✅ **Superadmin Control**: Proper access restrictions in place
+
+The implementation includes comprehensive safety features, clear documentation, and a user-friendly interface that minimizes the risk of accidental data loss while providing essential disaster recovery capabilities.
+
+## Support
+
+For issues or questions:
+1. Check `/srv/quality_app/logs/error.log` for error details
+2. Refer to `documentation/DATABASE_RESTORE_GUIDE.md`
+3. Review `documentation/BACKUP_SYSTEM.md` for related features
+4. Test restore in development environment before production use
+
+---
+
+**Implementation Status**: ✅ **COMPLETE**  
+**Last Updated**: November 3, 2025  
+**Version**: 1.0.0  
+**Developer**: GitHub Copilot

old code/CSS_MODULAR_GUIDE.md

@@ -1,152 +0,0 @@
-# CSS Modular Structure Guide
-
-## Overview
-This guide explains how to migrate from a monolithic CSS file to a modular CSS structure for better maintainability and organization.
-
-## New CSS Structure
-
-```
-app/static/css/
-├── base.css          # Global styles, header, buttons, theme
-├── login.css         # Login page specific styles
-├── dashboard.css     # Dashboard and module cards
-├── warehouse.css     # Warehouse module styles
-├── etichete.css      # Labels/etiquette module styles (to be created)
-├── quality.css       # Quality module styles (to be created)
-└── scan.css          # Scan module styles (to be created)
-```
-
-## Implementation Strategy
-
-### Phase 1: Setup Modular Structure ✅
-- [x] Created `css/` directory
-- [x] Created `base.css` with global styles
-- [x] Created `login.css` for login page
-- [x] Created `warehouse.css` for warehouse module
-- [x] Updated `base.html` to include modular CSS
-- [x] Updated `login.html` to use new structure
-
-### Phase 2: Migration Plan (Next Steps)
-
-1. **Extract module-specific styles from style.css:**
-   - Etiquette/Labels module → `etichete.css`
-   - Quality module → `quality.css`
-   - Scan module → `scan.css`
-
-2. **Update templates to use modular CSS:**
-   ```html
-   {% block head %}
-   <link rel="stylesheet" href="{{ url_for('static', filename='css/module-name.css') }}">
-   {% endblock %}
-   ```
-
-3. **Clean up original style.css:**
-   - Remove extracted styles
-   - Keep only legacy/common styles temporarily
-   - Eventually eliminate when all modules migrated
-
-## Template Usage Pattern
-
-### Standard Template Structure:
-```html
-{% extends "base.html" %}
-{% block title %}Page Title{% endblock %}
-
-{% block head %}
-<!-- Include module-specific CSS -->
-<link rel="stylesheet" href="{{ url_for('static', filename='css/module-name.css') }}">
-<!-- Page-specific overrides -->
-<style>
-/* Only use this for page-specific customizations */
-</style>
-{% endblock %}
-
-{% block content %}
-<!-- Page content -->
-{% endblock %}
-```
-
-## CSS Loading Order
-
-1. `base.css` - Global styles, header, buttons, theme
-2. `style.css` - Legacy styles (temporary, for backward compatibility)
-3. Module-specific CSS (e.g., `warehouse.css`)
-4. Inline `<style>` blocks for page-specific overrides
-
-## Benefits of This Structure
-
-### 1. **Maintainability**
-- Easy to find and edit module-specific styles
-- Reduced conflicts between different modules
-- Clear separation of concerns
-
-### 2. **Performance**
-- Only load CSS needed for specific pages
-- Smaller file sizes per page
-- Better caching (module CSS rarely changes)
-
-### 3. **Team Development**
-- Different developers can work on different modules
-- Less merge conflicts in CSS files
-- Clear ownership of styles
-
-### 4. **Scalability**
-- Easy to add new modules
-- Simple to deprecate old styles
-- Clear migration path
-
-## Migration Checklist
-
-### For Each Template:
-- [ ] Identify module/page type
-- [ ] Extract relevant styles to module CSS file
-- [ ] Update template to include module CSS
-- [ ] Test styling works correctly
-- [ ] Remove old styles from style.css
-
-### Current Status:
-- [x] Login page - Fully migrated
-- [x] Warehouse module - Partially migrated (create_locations.html updated)
-- [ ] Dashboard - CSS created, templates need updating
-- [ ] Etiquette module - Needs CSS extraction
-- [ ] Quality module - Needs CSS extraction
-- [ ] Scan module - Needs CSS extraction
-
-## Example: Migrating a Template
-
-### Before:
-```html
-{% block head %}
-<style>
-.my-module-specific-class {
-    /* styles here */
-}
-</style>
-{% endblock %}
-```
-
-### After:
-1. Move styles to `css/module-name.css`
-2. Update template:
-```html
-{% block head %}
-<link rel="stylesheet" href="{{ url_for('static', filename='css/module-name.css') }}">
-{% endblock %}
-```
-
-## Best Practices
-
-1. **Use semantic naming:** `warehouse.css`, `login.css`, not `page1.css`
-2. **Keep base.css minimal:** Only truly global styles
-3. **Avoid deep nesting:** Keep CSS selectors simple
-4. **Use consistent naming:** Follow existing patterns
-5. **Document changes:** Update this guide when adding new modules
-
-## Next Steps
-
-1. Extract etiquette module styles to `etichete.css`
-2. Update all etiquette templates to use new CSS
-3. Extract quality module styles to `quality.css`
-4. Extract scan module styles to `scan.css`
-5. Gradually remove migrated styles from `style.css`
-6. Eventually remove `style.css` dependency from `base.html`

old code/DATABASE_SETUP_README.md

@@ -1,133 +0,0 @@
-# Quick Database Setup for Trasabilitate Application
-
-This script provides a complete one-step database setup for quick deployment of the Trasabilitate application.
-
-## Prerequisites
-
-Before running the setup script, ensure:
-
-1. **MariaDB is installed and running**
-2. **Database and user are created**:
-   ```sql
-   CREATE DATABASE trasabilitate;
-   CREATE USER 'trasabilitate'@'localhost' IDENTIFIED BY 'Initial01!';
-   GRANT ALL PRIVILEGES ON trasabilitate.* TO 'trasabilitate'@'localhost';
-   FLUSH PRIVILEGES;
-   ```
-3. **Python virtual environment is activated**:
-   ```bash
-   source ../recticel/bin/activate
-   ```
-4. **Python dependencies are installed**:
-   ```bash
-   pip install -r requirements.txt
-   ```
-
-## Usage
-
-### Quick Setup (Recommended)
-```bash
-cd /srv/quality_recticel/py_app
-source ../recticel/bin/activate
-python3 app/db_create_scripts/setup_complete_database.py
-```
-
-### What the script creates:
-
-#### MariaDB Tables:
-- `scan1_orders` - Quality scanning data for process 1
-- `scanfg_orders` - Quality scanning data for finished goods
-- `order_for_labels` - Label printing orders
-- `warehouse_locations` - Warehouse location management
-- `permissions` - System permissions
-- `role_permissions` - Role-permission mappings
-- `role_hierarchy` - User role hierarchy
-- `permission_audit_log` - Permission change audit trail
-
-#### Database Triggers:
-- Auto-increment approved/rejected quantities based on quality codes
-- Triggers for both scan1_orders and scanfg_orders tables
-
-#### SQLite Tables:
-- `users` - User authentication (in instance/users.db)
-- `roles` - User roles (in instance/users.db)
-
-#### Configuration:
-- Updates `instance/external_server.conf` with correct database settings
-- Creates default superadmin user (username: `superadmin`, password: `superadmin123`)
-
-#### Permission System:
-- 7 user roles (superadmin, admin, manager, quality_manager, warehouse_manager, quality_worker, warehouse_worker)
-- 25+ granular permissions for different application areas
-- Complete role hierarchy with inheritance
-
-## After Setup
-
-1. **Start the application**:
-   ```bash
-   python3 run.py
-   ```
-
-2. **Access the application**:
-   - Local: http://127.0.0.1:8781
-   - Network: http://192.168.0.205:8781
-
-3. **Login with superadmin**:
-   - Username: `superadmin`
-   - Password: `superadmin123`
-
-## Troubleshooting
-
-### Common Issues:
-
-1. **Database connection failed**:
-   - Check if MariaDB is running: `sudo systemctl status mariadb`
-   - Verify database exists: `sudo mysql -e "SHOW DATABASES;"`
-   - Check user privileges: `sudo mysql -e "SHOW GRANTS FOR 'trasabilitate'@'localhost';"`
-
-2. **Import errors**:
-   - Ensure virtual environment is activated
-   - Install missing dependencies: `pip install -r requirements.txt`
-
-3. **Permission denied**:
-   - Make script executable: `chmod +x app/db_create_scripts/setup_complete_database.py`
-   - Check file ownership: `ls -la app/db_create_scripts/`
-
-### Manual Database Recreation:
-
-If you need to completely reset the database:
-
-```bash
-# Drop and recreate database
-sudo mysql -e "DROP DATABASE IF EXISTS trasabilitate; CREATE DATABASE trasabilitate; GRANT ALL PRIVILEGES ON trasabilitate.* TO 'trasabilitate'@'localhost'; FLUSH PRIVILEGES;"
-
-# Remove SQLite database
-rm -f instance/users.db
-
-# Run setup script
-python3 app/db_create_scripts/setup_complete_database.py
-```
-
-## Script Features
-
-- ✅ **Comprehensive**: Creates all necessary database structure
-- ✅ **Safe**: Uses `IF NOT EXISTS` clauses to prevent conflicts
-- ✅ **Verified**: Includes verification step to confirm setup
-- ✅ **Informative**: Detailed output showing each step
-- ✅ **Error handling**: Clear error messages and troubleshooting hints
-- ✅ **Idempotent**: Can be run multiple times safely
-
-## Development Notes
-
-The script combines functionality from these individual scripts:
-- `create_scan_1db.py`
-- `create_scanfg_orders.py`
-- `create_order_for_labels_table.py`
-- `create_warehouse_locations_table.py`
-- `create_permissions_tables.py`
-- `create_roles_table.py`
-- `create_triggers.py`
-- `create_triggers_fg.py`
-- `populate_permissions.py`
-
-For development or debugging, you can still run individual scripts if needed.

old code/DOCKER_DEPLOYMENT.md

@@ -1,319 +0,0 @@
-# Recticel Quality Application - Docker Deployment Guide
-
-## 📋 Overview
-
-This is a complete Docker-based deployment solution for the Recticel Quality Application. It includes:
-- **Flask Web Application** (Python 3.10)
-- **MariaDB 11.3 Database** with automatic initialization
-- **Gunicorn WSGI Server** for production-ready performance
-- **Automatic database schema setup** using existing setup scripts
-- **Superadmin user seeding** for immediate access
-
-## 🚀 Quick Start
-
-### Prerequisites
-- Docker Engine 20.10+ 
-- Docker Compose 2.0+
-- At least 2GB free disk space
-- Ports 8781 and 3306 available (or customize in .env)
-
-### 1. Clone and Prepare
-
-```bash
-cd /srv/quality_recticel
-```
-
-### 2. Configure Environment (Optional)
-
-Create a `.env` file from the example:
-
-```bash
-cp .env.example .env
-```
-
-Edit `.env` to customize settings:
-```env
-MYSQL_ROOT_PASSWORD=your_secure_root_password
-DB_PORT=3306
-APP_PORT=8781
-INIT_DB=true
-SEED_DB=true
-```
-
-### 3. Build and Deploy
-
-Start all services:
-
-```bash
-docker-compose up -d --build
-```
-
-This will:
-1. ✅ Build the Flask application Docker image
-2. ✅ Pull MariaDB 11.3 image
-3. ✅ Create and initialize the database
-4. ✅ Run all database schema creation scripts
-5. ✅ Seed the superadmin user
-6. ✅ Start the web application on port 8781
-
-### 4. Verify Deployment
-
-Check service status:
-```bash
-docker-compose ps
-```
-
-View logs:
-```bash
-# All services
-docker-compose logs -f
-
-# Just the web app
-docker-compose logs -f web
-
-# Just the database
-docker-compose logs -f db
-```
-
-### 5. Access the Application
-
-Open your browser and navigate to:
-```
-http://localhost:8781
-```
-
-**Default Login:**
-- Username: `superadmin`
-- Password: `superadmin123`
-
-## 🔧 Management Commands
-
-### Start Services
-```bash
-docker-compose up -d
-```
-
-### Stop Services
-```bash
-docker-compose down
-```
-
-### Stop and Remove All Data (including database)
-```bash
-docker-compose down -v
-```
-
-### Restart Services
-```bash
-docker-compose restart
-```
-
-### View Real-time Logs
-```bash
-docker-compose logs -f
-```
-
-### Rebuild After Code Changes
-```bash
-docker-compose up -d --build
-```
-
-### Access Database Console
-```bash
-docker-compose exec db mariadb -u trasabilitate -p trasabilitate
-# Password: Initial01!
-```
-
-### Execute Commands in App Container
-```bash
-docker-compose exec web bash
-```
-
-## 📁 Data Persistence
-
-The following data is persisted across container restarts:
-
-- **Database Data:** Stored in Docker volume `mariadb_data`
-- **Application Logs:** Mapped to `./logs` directory
-- **Instance Config:** Mapped to `./instance` directory
-
-## 🔐 Security Considerations
-
-### Production Deployment Checklist:
-
-1. **Change Default Passwords:**
-   - Update `MYSQL_ROOT_PASSWORD` in `.env`
-   - Update database password in `docker-compose.yml`
-   - Change superadmin password after first login
-
-2. **Use Environment Variables:**
-   - Never commit `.env` file to version control
-   - Use secrets management for production
-
-3. **Network Security:**
-   - If database access from host is not needed, remove the port mapping:
-     ```yaml
-     # Comment out in docker-compose.yml:
-     # ports:
-     #   - "3306:3306"
-     ```
-
-4. **SSL/TLS:**
-   - Configure reverse proxy (nginx/traefik) for HTTPS
-   - Update gunicorn SSL configuration if needed
-
-5. **Firewall:**
-   - Only expose necessary ports
-   - Use firewall rules to restrict access
-
-## 🐛 Troubleshooting
-
-### Database Connection Issues
-
-If the app can't connect to the database:
-
-```bash
-# Check database health
-docker-compose exec db healthcheck.sh --connect
-
-# Check database logs
-docker-compose logs db
-
-# Verify database is accessible
-docker-compose exec db mariadb -u trasabilitate -p -e "SHOW DATABASES;"
-```
-
-### Application Not Starting
-
-```bash
-# Check application logs
-docker-compose logs web
-
-# Verify database initialization
-docker-compose exec web python3 -c "import mariadb; print('MariaDB module OK')"
-
-# Restart with fresh initialization
-docker-compose down
-docker-compose up -d
-```
-
-### Port Already in Use
-
-If port 8781 or 3306 is already in use, edit `.env`:
-
-```env
-APP_PORT=8782
-DB_PORT=3307
-```
-
-Then restart:
-```bash
-docker-compose down
-docker-compose up -d
-```
-
-### Reset Everything
-
-To start completely fresh:
-
-```bash
-# Stop and remove all containers, networks, and volumes
-docker-compose down -v
-
-# Remove any local data
-rm -rf logs/* instance/external_server.conf
-
-# Start fresh
-docker-compose up -d --build
-```
-
-## 🔄 Updating the Application
-
-### Update Application Code
-
-1. Make your code changes
-2. Rebuild and restart:
-   ```bash
-   docker-compose up -d --build web
-   ```
-
-### Update Database Schema
-
-If you need to run migrations or schema updates:
-
-```bash
-docker-compose exec web python3 /app/app/db_create_scripts/setup_complete_database.py
-```
-
-## 📊 Monitoring
-
-### Health Checks
-
-Both services have health checks configured:
-
-```bash
-# Check overall status
-docker-compose ps
-
-# Detailed health status
-docker inspect recticel-app | grep -A 10 Health
-docker inspect recticel-db | grep -A 10 Health
-```
-
-### Resource Usage
-
-```bash
-# View resource consumption
-docker stats recticel-app recticel-db
-```
-
-## 🏗️ Architecture
-
-```
-┌─────────────────────────────────────┐
-│     Docker Compose Network          │
-│                                     │
-│  ┌──────────────┐  ┌─────────────┐ │
-│  │  MariaDB     │  │  Flask App  │ │
-│  │  Container   │◄─┤  Container  │ │
-│  │              │  │             │ │
-│  │  Port: 3306  │  │ Port: 8781  │ │
-│  └──────┬───────┘  └──────┬──────┘ │
-│         │                 │         │
-└─────────┼─────────────────┼─────────┘
-          │                 │
-          ▼                 ▼
-    [Volume:           [Logs &
-   mariadb_data]      Instance]
-```
-
-## 📝 Environment Variables
-
-### Database Configuration
-- `MYSQL_ROOT_PASSWORD`: MariaDB root password
-- `DB_HOST`: Database hostname (default: `db`)
-- `DB_PORT`: Database port (default: `3306`)
-- `DB_NAME`: Database name (default: `trasabilitate`)
-- `DB_USER`: Database user (default: `trasabilitate`)
-- `DB_PASSWORD`: Database password (default: `Initial01!`)
-
-### Application Configuration
-- `FLASK_ENV`: Flask environment (default: `production`)
-- `FLASK_APP`: Flask app entry point (default: `run.py`)
-- `APP_PORT`: Application port (default: `8781`)
-
-### Initialization Flags
-- `INIT_DB`: Run database initialization (default: `true`)
-- `SEED_DB`: Seed superadmin user (default: `true`)
-
-## 🆘 Support
-
-For issues or questions:
-1. Check the logs: `docker-compose logs -f`
-2. Verify environment configuration
-3. Ensure all prerequisites are met
-4. Review this documentation
-
-## 📄 License
-
-[Your License Here]

old code/DOCKER_SOLUTION_SUMMARY.md

@@ -1,346 +0,0 @@
-# Recticel Quality Application - Docker Solution Summary
-
-## 📦 What Has Been Created
-
-A complete, production-ready Docker deployment solution for your Recticel Quality Application with the following components:
-
-### Core Files Created
-
-1. **`Dockerfile`** - Multi-stage Flask application container
-   - Based on Python 3.10-slim
-   - Installs all dependencies from requirements.txt
-   - Configures Gunicorn WSGI server
-   - Exposes port 8781
-
-2. **`docker-compose.yml`** - Complete orchestration configuration
-   - MariaDB 11.3 database service
-   - Flask web application service
-   - Automatic networking between services
-   - Health checks for both services
-   - Volume persistence for database and logs
-
-3. **`docker-entrypoint.sh`** - Smart initialization script
-   - Waits for database to be ready
-   - Creates database configuration file
-   - Runs database schema initialization
-   - Seeds superadmin user
-   - Starts the application
-
-4. **`init-db.sql`** - MariaDB initialization
-   - Creates database and user
-   - Sets up permissions automatically
-
-5. **`.env.example`** - Configuration template
-   - Database passwords
-   - Port configurations
-   - Initialization flags
-
-6. **`.dockerignore`** - Build optimization
-   - Excludes unnecessary files from Docker image
-   - Reduces image size
-
-7. **`deploy.sh`** - One-command deployment script
-   - Checks prerequisites
-   - Creates configuration
-   - Builds and starts services
-   - Shows deployment status
-
-8. **`Makefile`** - Convenient management commands
-   - `make install` - First-time installation
-   - `make up` - Start services
-   - `make down` - Stop services
-   - `make logs` - View logs
-   - `make shell` - Access container
-   - `make backup-db` - Backup database
-   - And many more...
-
-9. **`DOCKER_DEPLOYMENT.md`** - Complete documentation
-   - Quick start guide
-   - Management commands
-   - Troubleshooting
-   - Security considerations
-   - Architecture diagrams
-
-### Enhanced Files
-
-10. **`setup_complete_database.py`** - Updated to support Docker
-    - Now reads from environment variables
-    - Fallback to config file for non-Docker deployments
-    - Maintains backward compatibility
-
-## 🎯 Key Features
-
-### 1. Single-Command Deployment
-```bash
-./deploy.sh
-```
-This single command will:
-- ✅ Build Docker images
-- ✅ Create MariaDB database
-- ✅ Initialize all database tables and triggers
-- ✅ Seed superadmin user
-- ✅ Start the application
-
-### 2. Complete Isolation
-- Application runs in its own container
-- Database runs in its own container
-- No system dependencies needed except Docker
-- No Python/MariaDB installation on host required
-
-### 3. Data Persistence
-- Database data persists across restarts (Docker volume)
-- Application logs accessible on host
-- Configuration preserved
-
-### 4. Production Ready
-- Gunicorn WSGI server (not Flask dev server)
-- Health checks for monitoring
-- Automatic restart on failure
-- Proper logging configuration
-- Resource isolation
-
-### 5. Easy Management
-```bash
-# Start
-docker compose up -d
-
-# Stop
-docker compose down
-
-# View logs
-docker compose logs -f
-
-# Backup database
-make backup-db
-
-# Restore database
-make restore-db BACKUP=backup_20231215.sql
-
-# Access shell
-make shell
-
-# Complete reset
-make reset
-```
-
-## 🚀 Deployment Options
-
-### Option 1: Quick Deploy (Recommended for Testing)
-```bash
-cd /srv/quality_recticel
-./deploy.sh
-```
-
-### Option 2: Using Makefile (Recommended for Management)
-```bash
-cd /srv/quality_recticel
-make install    # First time only
-make up         # Start services
-make logs       # Monitor
-```
-
-### Option 3: Using Docker Compose Directly
-```bash
-cd /srv/quality_recticel
-cp .env.example .env
-docker compose up -d --build
-```
-
-## 📋 Prerequisites
-
-The deployment **requires** Docker to be installed on the target system:
-
-### Installing Docker on Ubuntu/Debian:
-```bash
-# Update package index
-sudo apt-get update
-
-# Install dependencies
-sudo apt-get install -y ca-certificates curl gnupg
-
-# Add Docker's official GPG key
-sudo install -m 0755 -d /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
-sudo chmod a+r /etc/apt/keyrings/docker.gpg
-
-# Set up the repository
-echo \
-  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
-  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
-  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
-
-# Install Docker Engine
-sudo apt-get update
-sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
-
-# Add current user to docker group (optional, to run without sudo)
-sudo usermod -aG docker $USER
-```
-
-After installation, log out and back in for group changes to take effect.
-
-### Installing Docker on CentOS/RHEL:
-```bash
-sudo yum install -y yum-utils
-sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
-sudo yum install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
-sudo systemctl start docker
-sudo systemctl enable docker
-sudo usermod -aG docker $USER
-```
-
-## 🏗️ Architecture
-
-```
-┌──────────────────────────────────────────────────────┐
-│              Docker Compose Stack                     │
-│                                                       │
-│  ┌────────────────────┐      ┌───────────────────┐  │
-│  │   MariaDB 11.3     │      │   Flask App       │  │
-│  │   Container        │◄─────┤   Container       │  │
-│  │                    │      │                   │  │
-│  │ - Port: 3306       │      │ - Port: 8781      │  │
-│  │ - Volume: DB Data  │      │ - Gunicorn WSGI   │  │
-│  │ - Auto Init        │      │ - Python 3.10     │  │
-│  │ - Health Checks    │      │ - Health Checks   │  │
-│  └──────────┬─────────┘      └─────────┬─────────┘  │
-│             │                          │             │
-└─────────────┼──────────────────────────┼─────────────┘
-              │                          │
-              ▼                          ▼
-        [mariadb_data]            [logs directory]
-        Docker Volume             Host filesystem
-```
-
-## 🔐 Security Features
-
-1. **Database Isolation**: Database not exposed to host by default (can be configured)
-2. **Password Management**: All passwords in `.env` file (not committed to git)
-3. **User Permissions**: Proper MariaDB user with limited privileges
-4. **Network Isolation**: Services communicate on private Docker network
-5. **Production Mode**: Flask runs in production mode with Gunicorn
-
-## 📊 What Gets Deployed
-
-### Database Schema
-All tables from `setup_complete_database.py`:
-- `scan1_orders` - First scan orders
-- `scanfg_orders` - Final goods scan orders
-- `order_for_labels` - Label orders
-- `warehouse_locations` - Warehouse locations
-- `permissions` - Permission system
-- `role_permissions` - Role-based access
-- `role_hierarchy` - Role hierarchy
-- `permission_audit_log` - Audit logging
-- Plus SQLAlchemy tables: `users`, `roles`
-
-### Initial Data
-- Superadmin user: `superadmin` / `superadmin123`
-
-### Application Features
-- Complete Flask web application
-- Gunicorn WSGI server (4-8 workers depending on CPU)
-- Static file serving
-- Session management
-- Database connection pooling
-
-## 🔄 Migration from Existing Deployment
-
-If you have an existing non-Docker deployment:
-
-### 1. Backup Current Data
-```bash
-# Backup database
-mysqldump -u trasabilitate -p trasabilitate > backup.sql
-
-# Backup any uploaded files or custom data
-cp -r py_app/instance backup_instance/
-```
-
-### 2. Deploy Docker Solution
-```bash
-cd /srv/quality_recticel
-./deploy.sh
-```
-
-### 3. Restore Data (if needed)
-```bash
-# Restore database
-docker compose exec -T db mariadb -u trasabilitate -pInitial01! trasabilitate < backup.sql
-```
-
-### 4. Stop Old Service
-```bash
-# Stop systemd service
-sudo systemctl stop trasabilitate
-sudo systemctl disable trasabilitate
-```
-
-## 🎓 Learning Resources
-
-- Docker Compose docs: https://docs.docker.com/compose/
-- Gunicorn configuration: https://docs.gunicorn.org/
-- MariaDB Docker: https://hub.docker.com/_/mariadb
-
-## ✅ Testing Checklist
-
-After deployment, verify:
-
-- [ ] Services are running: `docker compose ps`
-- [ ] App is accessible: http://localhost:8781
-- [ ] Can log in with superadmin
-- [ ] Database contains tables: `make shell-db` then `SHOW TABLES;`
-- [ ] Logs are being written: `ls -la logs/`
-- [ ] Can restart services: `docker compose restart`
-- [ ] Data persists after restart
-
-## 🆘 Support Commands
-
-```bash
-# View all services
-docker compose ps
-
-# View logs
-docker compose logs -f
-
-# Restart a specific service
-docker compose restart web
-
-# Access web container shell
-docker compose exec web bash
-
-# Access database
-docker compose exec db mariadb -u trasabilitate -p
-
-# Check resource usage
-docker stats
-
-# Remove everything and start fresh
-docker compose down -v
-./deploy.sh
-```
-
-## 📝 Next Steps
-
-1. **Install Docker** on the target server (if not already installed)
-2. **Review and customize** `.env` file after copying from `.env.example`
-3. **Run deployment**: `./deploy.sh`
-4. **Change default passwords** after first login
-5. **Set up reverse proxy** (nginx/traefik) for HTTPS if needed
-6. **Configure backups** using `make backup-db`
-7. **Monitor logs** regularly with `make logs`
-
-## 🎉 Benefits of This Solution
-
-1. **Portable**: Works on any system with Docker
-2. **Reproducible**: Same deployment every time
-3. **Isolated**: No conflicts with system packages
-4. **Easy Updates**: Just rebuild and restart
-5. **Scalable**: Can easily add more services
-6. **Professional**: Production-ready configuration
-7. **Documented**: Complete documentation included
-8. **Maintainable**: Simple management commands
-
----
-
-**Your Flask application is now ready for modern, containerized deployment! 🚀**

old code/FILES_CREATED.md

@@ -1,280 +0,0 @@
-# ✅ Docker Solution - Files Created
-
-## 📦 Complete Docker Deployment Package
-
-Your Flask application has been packaged into a complete Docker solution. Here's everything that was created:
-
-### Core Docker Files
-
-```
-/srv/quality_recticel/
-├── Dockerfile                      # Flask app container definition
-├── docker-compose.yml              # Multi-container orchestration
-├── docker-entrypoint.sh           # Container initialization script
-├── init-db.sql                     # MariaDB initialization
-├── .dockerignore                   # Build optimization
-└── .env.example                    # Configuration template
-```
-
-### Deployment & Management
-
-```
-├── deploy.sh                       # One-command deployment script
-├── Makefile                        # Management commands (make up, make down, etc.)
-├── README-DOCKER.md               # Quick start guide
-├── DOCKER_DEPLOYMENT.md           # Complete deployment documentation
-└── DOCKER_SOLUTION_SUMMARY.md     # This comprehensive summary
-```
-
-### Modified Files
-
-```
-py_app/app/db_create_scripts/
-└── setup_complete_database.py     # Updated to support Docker env vars
-```
-
-## 🎯 What This Deployment Includes
-
-### Services
-1. **Flask Web Application**
-   - Python 3.10
-   - Gunicorn WSGI server (production-ready)
-   - Auto-generated database configuration
-   - Health checks
-   - Automatic restart on failure
-
-2. **MariaDB 11.3 Database**
-   - Automatic initialization
-   - User and database creation
-   - Data persistence (Docker volume)
-   - Health checks
-
-### Features
-- ✅ Single-command deployment
-- ✅ Automatic database schema setup
-- ✅ Superadmin user seeding
-- ✅ Data persistence across restarts
-- ✅ Container health monitoring
-- ✅ Log collection and management
-- ✅ Production-ready configuration
-- ✅ Easy backup and restore
-- ✅ Complete isolation from host system
-
-## 🚀 How to Deploy
-
-### Prerequisites
-**Install Docker first:**
-```bash
-# Ubuntu/Debian
-curl -fsSL https://get.docker.com -o get-docker.sh
-sudo sh get-docker.sh
-sudo usermod -aG docker $USER
-# Log out and back in
-```
-
-### Deploy
-```bash
-cd /srv/quality_recticel
-./deploy.sh
-```
-
-That's it! Your application will be available at http://localhost:8781
-
-## 📋 Usage Examples
-
-### Basic Operations
-```bash
-# Start services
-docker compose up -d
-
-# View logs
-docker compose logs -f
-
-# Stop services
-docker compose down
-
-# Restart
-docker compose restart
-
-# Check status
-docker compose ps
-```
-
-### Using Makefile (Recommended)
-```bash
-make install     # First-time setup
-make up          # Start services
-make down        # Stop services
-make logs        # View logs
-make logs-web    # View only web logs
-make logs-db     # View only database logs
-make shell       # Access app container
-make shell-db    # Access database console
-make backup-db   # Backup database
-make status      # Show service status
-make help        # Show all commands
-```
-
-### Advanced Operations
-```bash
-# Rebuild after code changes
-docker compose up -d --build web
-
-# Access application shell
-docker compose exec web bash
-
-# Run database commands
-docker compose exec db mariadb -u trasabilitate -p trasabilitate
-
-# View resource usage
-docker stats recticel-app recticel-db
-
-# Complete reset (removes all data!)
-docker compose down -v
-```
-
-## 🗂️ Data Storage
-
-### Persistent Data
-- **Database**: Stored in Docker volume `mariadb_data`
-- **Logs**: Mounted to `./logs` directory
-- **Config**: Mounted to `./instance` directory
-
-### Backup Database
-```bash
-docker compose exec -T db mariadb-dump -u trasabilitate -pInitial01! trasabilitate > backup.sql
-```
-
-### Restore Database
-```bash
-docker compose exec -T db mariadb -u trasabilitate -pInitial01! trasabilitate < backup.sql
-```
-
-## 🔐 Default Credentials
-
-### Application
-- URL: http://localhost:8781
-- Username: `superadmin`
-- Password: `superadmin123`
-- **⚠️ Change after first login!**
-
-### Database
-- Host: `localhost:3306` (from host) or `db:3306` (from containers)
-- Database: `trasabilitate`
-- User: `trasabilitate`
-- Password: `Initial01!`
-- Root Password: Set in `.env` file
-
-## 📊 Service Architecture
-
-```
-┌─────────────────────────────────────────────────────┐
-│           recticel-network (Docker)                 │
-│                                                     │
-│   ┌─────────────────┐        ┌─────────────────┐  │
-│   │  recticel-db    │        │  recticel-app   │  │
-│   │  (MariaDB 11.3) │◄───────┤  (Flask/Python) │  │
-│   │                 │        │                 │  │
-│   │  - Internal DB  │        │  - Gunicorn     │  │
-│   │  - Health Check │        │  - Health Check │  │
-│   │  - Auto Init    │        │  - Auto Config  │  │
-│   └────────┬────────┘        └────────┬────────┘  │
-│            │                          │            │
-│            │ 3306 (optional)    8781 │            │
-└────────────┼──────────────────────────┼────────────┘
-             │                          │
-             ▼                          ▼
-      [mariadb_data]              [Host: 8781]
-      Docker Volume               Application Access
-```
-
-## 🎓 Quick Reference
-
-### Environment Variables (.env)
-```env
-MYSQL_ROOT_PASSWORD=rootpassword    # MariaDB root password
-DB_PORT=3306                        # Database port (external)
-APP_PORT=8781                       # Application port
-INIT_DB=true                        # Run DB initialization
-SEED_DB=true                        # Seed superadmin user
-```
-
-### Important Ports
-- `8781`: Flask application (web interface)
-- `3306`: MariaDB database (optional external access)
-
-### Log Locations
-- Application logs: `./logs/access.log` and `./logs/error.log`
-- Container logs: `docker compose logs`
-
-## 🔧 Troubleshooting
-
-### Can't connect to application
-```bash
-# Check if services are running
-docker compose ps
-
-# Check web logs
-docker compose logs web
-
-# Verify port not in use
-netstat -tuln | grep 8781
-```
-
-### Database connection issues
-```bash
-# Check database health
-docker compose exec db healthcheck.sh --connect
-
-# View database logs
-docker compose logs db
-
-# Test database connection
-docker compose exec web python3 -c "import mariadb; print('OK')"
-```
-
-### Port already in use
-Edit `.env` file:
-```env
-APP_PORT=8782  # Change to available port
-DB_PORT=3307   # Change if needed
-```
-
-### Start completely fresh
-```bash
-docker compose down -v
-rm -rf logs/* instance/external_server.conf
-./deploy.sh
-```
-
-## 📖 Documentation Files
-
-1. **README-DOCKER.md** - Quick start guide (start here!)
-2. **DOCKER_DEPLOYMENT.md** - Complete deployment guide
-3. **DOCKER_SOLUTION_SUMMARY.md** - Comprehensive overview
-4. **FILES_CREATED.md** - This file
-
-## ✨ Benefits
-
-- **No System Dependencies**: Only Docker required
-- **Portable**: Deploy on any system with Docker
-- **Reproducible**: Consistent deployments every time
-- **Isolated**: No conflicts with other applications
-- **Production-Ready**: Gunicorn, health checks, proper logging
-- **Easy Management**: Simple commands, one-line deployment
-- **Persistent**: Data survives container restarts
-- **Scalable**: Easy to add more services
-
-## 🎉 Success!
-
-Your Recticel Quality Application is now containerized and ready for deployment!
-
-**Next Steps:**
-1. Install Docker (if not already installed)
-2. Run `./deploy.sh`
-3. Access http://localhost:8781
-4. Log in with superadmin credentials
-5. Change default passwords
-6. Enjoy your containerized application!
-
-For detailed instructions, see **README-DOCKER.md** or **DOCKER_DEPLOYMENT.md**.

old code/README-DOCKER.md

@@ -1,73 +0,0 @@
-# 🚀 Quick Start - Docker Deployment
-
-## What You Need
-- A server with Docker installed
-- 2GB free disk space
-- Ports 8781 and 3306 available
-
-## Deploy in 3 Steps
-
-### 1️⃣ Install Docker (if not already installed)
-
-**Ubuntu/Debian:**
-```bash
-curl -fsSL https://get.docker.com -o get-docker.sh
-sudo sh get-docker.sh
-sudo usermod -aG docker $USER
-```
-Then log out and back in.
-
-### 2️⃣ Deploy the Application
-```bash
-cd /srv/quality_recticel
-./deploy.sh
-```
-
-### 3️⃣ Access Your Application
-Open browser: **http://localhost:8781**
-
-**Login:**
-- Username: `superadmin`  
-- Password: `superadmin123`
-
-## 🎯 Done!
-
-Your complete application with database is now running in Docker containers.
-
-## Common Commands
-
-```bash
-# View logs
-docker compose logs -f
-
-# Stop services  
-docker compose down
-
-# Restart services
-docker compose restart
-
-# Backup database
-docker compose exec -T db mariadb-dump -u trasabilitate -pInitial01! trasabilitate > backup.sql
-```
-
-## 📚 Full Documentation
-
-See `DOCKER_DEPLOYMENT.md` for complete documentation.
-
-## 🆘 Problems?
-
-```bash
-# Check status
-docker compose ps
-
-# View detailed logs
-docker compose logs -f web
-
-# Start fresh
-docker compose down -v
-./deploy.sh
-```
-
----
-
-**Note:** This is a production-ready deployment using Gunicorn WSGI server, MariaDB 11.3, and proper health checks.

old code/backup/db_test.html

@@ -1,36 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>Database Test</title>
-</head>
-<body>
-    <h2>Database Connection Test</h2>
-    <button id="test-btn">Test Database</button>
-    <div id="result"></div>
-
-    <script>
-    document.getElementById('test-btn').addEventListener('click', function() {
-        const resultDiv = document.getElementById('result');
-        resultDiv.innerHTML = 'Loading...';
-        
-        fetch('/get_unprinted_orders')
-            .then(response => {
-                console.log('Response status:', response.status);
-                if (response.ok) {
-                    return response.json();
-                } else {
-                    throw new Error('HTTP ' + response.status);
-                }
-            })
-            .then(data => {
-                console.log('Data received:', data);
-                resultDiv.innerHTML = `<pre>${JSON.stringify(data, null, 2)}</pre>`;
-            })
-            .catch(error => {
-                console.error('Error:', error);
-                resultDiv.innerHTML = 'Error: ' + error.message;
-            });
-    });
-    </script>
-</body>
-</html>

old code/backup/print_module_clean.html

@@ -1,487 +0,0 @@
-{% extends "base.html" %}
-
-{% block head %}
-<style>
-#label-preview {
-    background: #fafafa;
-    position: relative;
-    overflow: hidden;
-}
-
-/* Enhanced table styling */
-.card.scan-table-card table.print-module-table.scan-table thead th {
-    border-bottom: 2px solid #dee2e6 !important;
-    background-color: #f8f9fa !important;
-    padding: 0.25rem 0.4rem !important;
-    text-align: left !important;
-    font-weight: 600 !important;
-    font-size: 10px !important;
-    line-height: 1.2 !important;
-}
-
-.card.scan-table-card table.print-module-table.scan-table {
-    width: 100% !important;
-    border-collapse: collapse !important;
-}
-
-.card.scan-table-card table.print-module-table.scan-table tbody tr:hover td {
-    background-color: #f8f9fa !important;
-    cursor: pointer !important;
-}
-
-.card.scan-table-card table.print-module-table.scan-table tbody tr.selected td {
-    background-color: #007bff !important;
-    color: white !important;
-}
-</style>
-{% endblock %}
-
-{% block content %}
-<div class="scan-container" style="display: flex; flex-direction: row; gap: 20px; width: 100%; align-items: flex-start;">
-    <!-- Label Preview Card -->
-    <div class="card scan-form-card" style="display: flex; flex-direction: column; justify-content: flex-start; align-items: center; min-height: 700px; width: 330px; flex-shrink: 0; position: relative; padding: 15px;">
-        <div class="label-view-title" style="width: 100%; text-align: center; padding: 0 0 15px 0; font-size: 18px; font-weight: bold; letter-spacing: 0.5px;">Label View</div>
-        
-        <!-- Label Preview Section -->
-        <div id="label-preview" style="border: 1px solid #ddd; padding: 10px; position: relative; background: #fafafa; width: 301px; height: 434.7px;">
-            <!-- Label content rectangle -->
-            <div id="label-content" style="position: absolute; top: 65.7px; left: 11.34px; width: 227.4px; height: 321.3px; border: 2px solid #333; background: white;">
-                <!-- Top row content: Company name -->
-                <div style="position: absolute; top: 0; left: 0; right: 0; height: 32.13px; display: flex; align-items: center; justify-content: center; font-weight: bold; font-size: 12px; color: #000; z-index: 10;">
-                    INNOFA ROMANIA SRL
-                </div>
-
-                <!-- Row 2 content: Customer Name -->
-                <div id="customer-name-row" style="position: absolute; top: 32.13px; left: 0; right: 0; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 11px; color: #000;">
-                    <!-- Customer name will be populated here -->
-                </div>
-
-                <!-- Horizontal dividing lines -->
-                <div style="position: absolute; top: 32.13px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 64.26px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 96.39px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 128.52px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 160.65px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 224.91px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 257.04px; left: 0; right: 0; height: 1px; background: #999;"></div>
-                <div style="position: absolute; top: 289.17px; left: 0; right: 0; height: 1px; background: #999;"></div>
-
-                <!-- Vertical dividing line -->
-                <div style="position: absolute; left: 90.96px; top: 64.26px; width: 1px; height: 257.04px; background: #999;"></div>
-
-                <!-- Row 3: Quantity ordered -->
-                <div style="position: absolute; top: 64.26px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Quantity ordered
-                </div>
-                <div id="quantity-ordered-value" style="position: absolute; top: 64.26px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 13px; font-weight: bold; color: #000;">
-                    <!-- Quantity value will be populated here -->
-                </div>
-
-                <!-- Row 4: Customer order -->
-                <div style="position: absolute; top: 96.39px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Customer order
-                </div>
-                <div id="client-order-info" style="position: absolute; top: 96.39px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 12px; font-weight: bold; color: #000;">
-                    <!-- Client order info will be populated here -->
-                </div>
-
-                <!-- Row 5: Delivery date -->
-                <div style="position: absolute; top: 128.52px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Delivery date
-                </div>
-                <div id="delivery-date-value" style="position: absolute; top: 128.52px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 12px; font-weight: bold; color: #000;">
-                    <!-- Delivery date value will be populated here -->
-                </div>
-
-                <!-- Row 6: Description (double height) -->
-                <div style="position: absolute; top: 160.65px; left: 0; width: 90.96px; height: 64.26px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Product description
-                </div>
-                <div id="description-value" style="position: absolute; top: 160.65px; left: 90.96px; width: 136.44px; height: 64.26px; display: flex; align-items: center; justify-content: center; font-size: 8px; color: #000; text-align: center; padding: 2px; overflow: hidden;">
-                    <!-- Description will be populated here -->
-                </div>
-
-                <!-- Row 7: Size -->
-                <div style="position: absolute; top: 224.91px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Size
-                </div>
-                <div id="size-value" style="position: absolute; top: 224.91px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 10px; font-weight: bold; color: #000;">
-                    <!-- Size value will be populated here -->
-                </div>
-
-                <!-- Row 8: Article Code -->
-                <div style="position: absolute; top: 257.04px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Article code
-                </div>
-                <div id="article-code-value" style="position: absolute; top: 257.04px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 9px; font-weight: bold; color: #000;">
-                    <!-- Article code will be populated here -->
-                </div>
-
-                <!-- Row 9: Production Order -->
-                <div style="position: absolute; top: 289.17px; left: 0; width: 90.96px; height: 32.13px; display: flex; align-items: center; padding-left: 5px; font-size: 10px; color: #000;">
-                    Prod. order
-                </div>
-                <div id="prod-order-value" style="position: absolute; top: 289.17px; left: 90.96px; width: 136.44px; height: 32.13px; display: flex; align-items: center; justify-content: center; font-size: 10px; font-weight: bold; color: #000;">
-                    <!-- Production order will be populated here -->
-                </div>
-            </div>
-
-            <!-- Bottom barcode section -->
-            <div style="position: absolute; bottom: 28.35px; left: 11.34px; width: 227.4px; height: 28.35px; border: 2px solid #333; background: white; display: flex; align-items: center; justify-content: center;">
-                <div id="barcode-text" style="font-family: 'Courier New', monospace; font-size: 12px; font-weight: bold; letter-spacing: 1px; color: #000;">
-                    <!-- Barcode text will be populated here -->
-                </div>
-            </div>
-
-            <!-- Vertical barcode (right side) -->
-            <div style="position: absolute; right: 11.34px; top: 65.7px; width: 28.35px; height: 321.3px; border: 2px solid #333; background: white; writing-mode: vertical-lr; text-orientation: sideways; display: flex; align-items: center; justify-content: center;">
-                <div id="vertical-barcode-text" style="font-family: 'Courier New', monospace; font-size: 10px; font-weight: bold; letter-spacing: 1px; color: #000; transform: rotate(180deg);">
-                    <!-- Vertical barcode text will be populated here -->
-                </div>
-            </div>
-        </div>
-        
-        <!-- Print Options -->
-        <div style="width: 100%; margin-top: 20px;">
-            <!-- Print Method Selection -->
-            <div style="margin-bottom: 15px;">
-                <label style="font-size: 12px; font-weight: 600; color: #495057; margin-bottom: 8px; display: block;">
-                    📄 Print Method:
-                </label>
-                
-                <div class="form-check mb-2">
-                    <input class="form-check-input" type="radio" name="printMethod" id="pdfGenerate" value="pdf" checked>
-                    <label class="form-check-label" for="pdfGenerate" style="font-size: 11px; line-height: 1.3;">
-                        <strong>Generate PDF</strong><br>
-                        <span class="text-muted">Create PDF for manual printing (recommended)</span>
-                    </label>
-                </div>
-            </div>
-            
-            <!-- Print Button -->
-            <div style="width: 100%; text-align: center; margin-bottom: 15px;">
-                <button id="print-label-btn" class="btn btn-success" style="font-size: 14px; padding: 10px 30px; border-radius: 6px; font-weight: 600;">
-                    📄 Generate PDF Labels
-                </button>
-            </div>
-            
-            <!-- Print Information -->
-            <div style="width: 100%; text-align: center; color: #6c757d; font-size: 11px; line-height: 1.4;">
-                <div style="margin-bottom: 5px;">Creates sequential labels based on quantity</div>
-                <small>(e.g., CP00000711-001 to CP00000711-063)</small>
-            </div>
-        </div>
-    </div>
-    
-    <!-- Data Preview Card -->
-    <div class="card scan-table-card" style="min-height: 700px; width: calc(100% - 350px); margin: 0;">
-        <h3>Data Preview (Unprinted Orders)</h3>
-        <button id="check-db-btn" class="btn btn-primary mb-3">Load Orders</button>
-        <div class="report-table-container">
-            <table class="scan-table print-module-table">
-                <thead>
-                    <tr>
-                        <th>ID</th>
-                        <th>Comanda Productie</th>
-                        <th>Cod Articol</th>
-                        <th>Descr. Com. Prod</th>
-                        <th>Cantitate</th>
-                        <th>Data Livrare</th>
-                        <th>Dimensiune</th>
-                        <th>Com. Achiz. Client</th>
-                        <th>Nr. Linie</th>
-                        <th>Customer Name</th>
-                        <th>Customer Art. Nr.</th>
-                        <th>Open Order</th>
-                        <th>Line</th>
-                        <th>Printed</th>
-                        <th>Created</th>
-                    </tr>
-                </thead>
-                <tbody id="unprinted-orders-table">
-                    <!-- Data will be dynamically loaded here -->
-                </tbody>
-            </table>
-        </div>
-    </div>
-</div>
-
-<script>
-// Simplified notification system
-function showNotification(message, type = 'info') {
-    const existingNotifications = document.querySelectorAll('.notification');
-    existingNotifications.forEach(n => n.remove());
-    
-    const notification = document.createElement('div');
-    notification.className = `notification alert alert-${type === 'error' ? 'danger' : type === 'success' ? 'success' : type === 'warning' ? 'warning' : 'info'}`;
-    notification.style.cssText = `
-        position: fixed;
-        top: 20px;
-        right: 20px;
-        z-index: 9999;
-        max-width: 350px;
-        padding: 15px;
-        border-radius: 5px;
-        box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-    `;
-    notification.innerHTML = `
-        <div style="display: flex; align-items: center; justify-content: space-between;">
-            <span style="flex: 1; padding-right: 10px;">${message}</span>
-            <button type="button" onclick="this.parentElement.parentElement.remove()" style="background: none; border: none; font-size: 20px; cursor: pointer;">&times;</button>
-        </div>
-    `;
-    
-    document.body.appendChild(notification);
-    
-    setTimeout(() => {
-        if (notification.parentElement) {
-            notification.remove();
-        }
-    }, 5000);
-}
-
-// Database loading functionality
-document.getElementById('check-db-btn').addEventListener('click', function() {
-    const button = this;
-    const originalText = button.textContent;
-    button.textContent = 'Loading...';
-    button.disabled = true;
-
-    fetch('/get_unprinted_orders')
-        .then(response => {
-            if (response.status === 403) {
-                return response.json().then(errorData => {
-                    throw new Error(`Access Denied: ${errorData.error}`);
-                });
-            } else if (!response.ok) {
-                return response.text().then(text => {
-                    throw new Error(`HTTP ${response.status}: ${text}`);
-                });
-            }
-            return response.json();
-        })
-        .then(data => {
-            console.log('Received data:', data);
-            const tbody = document.getElementById('unprinted-orders-table');
-            tbody.innerHTML = '';
-            
-            if (data.length === 0) {
-                tbody.innerHTML = '<tr><td colspan="15" style="text-align: center; padding: 20px; color: #28a745;"><strong>✅ All orders have been printed!</strong><br><small>No unprinted orders remaining.</small></td></tr>';
-                clearLabelPreview();
-                return;
-            }
-            
-            data.forEach((order, index) => {
-                const tr = document.createElement('tr');
-                tr.dataset.orderId = order.id;
-                tr.dataset.orderIndex = index;
-                tr.style.cursor = 'pointer';
-                tr.innerHTML = `
-                    <td style="font-size: 9px;">${order.id}</td>
-                    <td style="font-size: 9px;"><strong>${order.comanda_productie}</strong></td>
-                    <td style="font-size: 9px;">${order.cod_articol || '-'}</td>
-                    <td style="font-size: 9px;">${order.descr_com_prod}</td>
-                    <td style="text-align: right; font-weight: 600; font-size: 9px;">${order.cantitate}</td>
-                    <td style="text-align: center; font-size: 9px;">
-                        ${order.data_livrare ? new Date(order.data_livrare).toLocaleDateString() : '-'}
-                    </td>
-                    <td style="text-align: center; font-size: 9px;">${order.dimensiune || '-'}</td>
-                    <td style="font-size: 9px;">${order.com_achiz_client || '-'}</td>
-                    <td style="text-align: right; font-size: 9px;">${order.nr_linie_com_client || '-'}</td>
-                    <td style="font-size: 9px;">${order.customer_name || '-'}</td>
-                    <td style="font-size: 9px;">${order.customer_article_number || '-'}</td>
-                    <td style="font-size: 9px;">${order.open_for_order || '-'}</td>
-                    <td style="text-align: right; font-size: 9px;">${order.line_number || '-'}</td>
-                    <td style="text-align: center; font-size: 9px;">
-                        ${order.printed_labels == 1 ? 
-                            '<span style="color: #28a745; font-weight: bold;">✅ Yes</span>' : 
-                            '<span style="color: #dc3545;">❌ No</span>'}
-                    </td>
-                    <td style="font-size: 9px; color: #6c757d;">
-                        ${order.created_at ? new Date(order.created_at).toLocaleString() : '-'}
-                    </td>
-                `;
-                
-                tr.addEventListener('click', function() {
-                    console.log('Row clicked:', order.id);
-                    
-                    // Remove selection from other rows
-                    document.querySelectorAll('.print-module-table tbody tr').forEach(row => {
-                        row.classList.remove('selected');
-                        const cells = row.querySelectorAll('td');
-                        cells.forEach(cell => {
-                            cell.style.backgroundColor = '';
-                            cell.style.color = '';
-                        });
-                    });
-                    
-                    // Select this row
-                    this.classList.add('selected');
-                    const cells = this.querySelectorAll('td');
-                    cells.forEach(cell => {
-                        cell.style.backgroundColor = '#007bff';
-                        cell.style.color = 'white';
-                    });
-                    
-                    // Update label preview with selected order data
-                    updateLabelPreview(order);
-                });
-                
-                tbody.appendChild(tr);
-            });
-            
-            // Auto-select first row
-            setTimeout(() => {
-                const firstRow = document.querySelector('.print-module-table tbody tr');
-                if (firstRow && !firstRow.querySelector('td[colspan]')) {
-                    firstRow.click();
-                }
-            }, 100);
-            
-            showNotification(`✅ Loaded ${data.length} unprinted orders`, 'success');
-        })
-        .catch(error => {
-            console.error('Error loading orders:', error);
-            const tbody = document.getElementById('unprinted-orders-table');
-            tbody.innerHTML = '<tr><td colspan="15" style="text-align: center; padding: 20px; color: #dc3545;"><strong>❌ Failed to load data</strong><br><small>' + error.message + '</small></td></tr>';
-            showNotification('❌ Failed to load orders: ' + error.message, 'error');
-        })
-        .finally(() => {
-            button.textContent = originalText;
-            button.disabled = false;
-        });
-});
-
-// Update label preview with order data
-function updateLabelPreview(order) {
-    document.getElementById('customer-name-row').textContent = order.customer_name || 'N/A';
-    document.getElementById('quantity-ordered-value').textContent = order.cantitate || '0';
-    document.getElementById('client-order-info').textContent = 
-        `${order.com_achiz_client || 'N/A'}-${order.nr_linie_com_client || '00'}`;
-    document.getElementById('delivery-date-value').textContent = 
-        order.data_livrare ? new Date(order.data_livrare).toLocaleDateString() : 'N/A';
-    document.getElementById('description-value').textContent = order.descr_com_prod || 'N/A';
-    document.getElementById('size-value').textContent = order.dimensiune || 'N/A';
-    document.getElementById('article-code-value').textContent = order.cod_articol || 'N/A';
-    document.getElementById('prod-order-value').textContent = order.comanda_productie || 'N/A';
-    document.getElementById('barcode-text').textContent = order.comanda_productie || 'N/A';
-    document.getElementById('vertical-barcode-text').textContent = 
-        `${order.comanda_productie || '000000'}-${order.nr_linie_com_client ? String(order.nr_linie_com_client).padStart(2, '0') : '00'}`;
-}
-
-// Clear label preview when no orders are available
-function clearLabelPreview() {
-    document.getElementById('customer-name-row').textContent = 'No orders available';
-    document.getElementById('quantity-ordered-value').textContent = '0';
-    document.getElementById('client-order-info').textContent = 'N/A';
-    document.getElementById('delivery-date-value').textContent = 'N/A';
-    document.getElementById('size-value').textContent = 'N/A';
-    document.getElementById('description-value').textContent = 'N/A';
-    document.getElementById('article-code-value').textContent = 'N/A';
-    document.getElementById('prod-order-value').textContent = 'N/A';
-    document.getElementById('barcode-text').textContent = 'N/A';
-    document.getElementById('vertical-barcode-text').textContent = '000000-00';
-}
-
-// PDF Generation Handler
-document.getElementById('print-label-btn').addEventListener('click', function(e) {
-    e.preventDefault();
-    
-    // Get selected order
-    const selectedRow = document.querySelector('.print-module-table tbody tr.selected');
-    if (!selectedRow) {
-        showNotification('⚠️ Please select an order first from the table below.', 'warning');
-        return;
-    }
-    
-    handlePDFGeneration(selectedRow);
-});
-
-// Handle PDF generation
-function handlePDFGeneration(selectedRow) {
-    const orderId = selectedRow.dataset.orderId;
-    const quantityCell = selectedRow.querySelector('td:nth-child(5)');
-    const quantity = quantityCell ? parseInt(quantityCell.textContent) : 1;
-    const prodOrderCell = selectedRow.querySelector('td:nth-child(2)');
-    const prodOrder = prodOrderCell ? prodOrderCell.textContent.trim() : 'N/A';
-    
-    const button = document.getElementById('print-label-btn');
-    const originalText = button.textContent;
-    button.textContent = 'Generating PDF...';
-    button.disabled = true;
-    
-    console.log(`Generating PDF for order ${orderId} with ${quantity} labels`);
-    
-    // Generate PDF with paper-saving mode enabled (optimized for thermal printers)
-    fetch(`/generate_labels_pdf/${orderId}/true`, {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/json'
-        }
-    })
-    .then(response => {
-        if (!response.ok) {
-            throw new Error(`HTTP error! status: ${response.status}`);
-        }
-        return response.blob();
-    })
-    .then(blob => {
-        // Create blob URL for PDF
-        const url = window.URL.createObjectURL(blob);
-        
-        // Create download link for PDF
-        const a = document.createElement('a');
-        a.href = url;
-        a.download = `labels_${prodOrder}_${quantity}pcs.pdf`;
-        document.body.appendChild(a);
-        a.click();
-        document.body.removeChild(a);
-        
-        // Also open PDF in new tab for printing
-        const printWindow = window.open(url, '_blank');
-        if (printWindow) {
-            printWindow.focus();
-            
-            // Wait for PDF to load, then show print dialog
-            setTimeout(() => {
-                printWindow.print();
-                
-                // Clean up blob URL after print dialog is shown
-                setTimeout(() => {
-                    window.URL.revokeObjectURL(url);
-                }, 2000);
-            }, 1500);
-        } else {
-            // If popup was blocked, clean up immediately
-            setTimeout(() => {
-                window.URL.revokeObjectURL(url);
-            }, 1000);
-        }
-        
-        // Show success message
-        showNotification(`✅ PDF generated successfully!\n📊 Order: ${prodOrder}\n📦 Labels: ${quantity} pieces`, 'success');
-        
-        // Refresh the orders table to reflect printed status
-        setTimeout(() => {
-            document.getElementById('check-db-btn').click();
-        }, 1000);
-    })
-    .catch(error => {
-        console.error('Error generating PDF:', error);
-        showNotification('❌ Failed to generate PDF labels. Error: ' + error.message, 'error');
-    })
-    .finally(() => {
-        // Reset button state
-        button.textContent = originalText;
-        button.disabled = false;
-    });
-}
-
-// Load orders on page load
-document.addEventListener('DOMContentLoaded', function() {
-    setTimeout(() => {
-        document.getElementById('check-db-btn').click();
-    }, 500);
-});
-</script>
-{% endblock %}

old code/backup_db_scripts/add_email_column.py

@@ -1,110 +0,0 @@
-#!/usr/bin/env python3
-
-import mariadb
-import os
-import sys
-
-def get_external_db_connection():
-    """Reads the external_server.conf file and returns a MariaDB database connection."""
-    # Get the instance folder path
-    current_dir = os.path.dirname(os.path.abspath(__file__))
-    instance_folder = os.path.join(current_dir, '../../instance')
-    settings_file = os.path.join(instance_folder, 'external_server.conf')
-    
-    if not os.path.exists(settings_file):
-        raise FileNotFoundError(f"The external_server.conf file is missing: {settings_file}")
-
-    # Read settings from the configuration file
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            line = line.strip()
-            if line and '=' in line:
-                key, value = line.split('=', 1)
-                settings[key] = value
-
-    print(f"Connecting to MariaDB:")
-    print(f"  Host: {settings.get('server_domain', 'N/A')}")
-    print(f"  Port: {settings.get('port', 'N/A')}")
-    print(f"  Database: {settings.get('database_name', 'N/A')}")
-
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def main():
-    try:
-        print("=== Adding Email Column to Users Table ===")
-        conn = get_external_db_connection()
-        cursor = conn.cursor()
-        
-        # First, check the current table structure
-        print("\n1. Checking current table structure...")
-        cursor.execute("DESCRIBE users")
-        columns = cursor.fetchall()
-        
-        has_email = False
-        for column in columns:
-            print(f"   Column: {column[0]} ({column[1]})")
-            if column[0] == 'email':
-                has_email = True
-        
-        if not has_email:
-            print("\n2. Adding email column...")
-            cursor.execute("ALTER TABLE users ADD COLUMN email VARCHAR(255)")
-            conn.commit()
-            print("   ✓ Email column added successfully")
-        else:
-            print("\n2. Email column already exists")
-        
-        # Now check and display all users
-        print("\n3. Current users in database:")
-        cursor.execute("SELECT id, username, role, email FROM users")
-        users = cursor.fetchall()
-        
-        if users:
-            print(f"   Found {len(users)} users:")
-            for user in users:
-                email = user[3] if user[3] else "No email"
-                print(f"   - ID: {user[0]}, Username: {user[1]}, Role: {user[2]}, Email: {email}")
-        else:
-            print("   No users found - creating test users...")
-            
-            # Create some test users
-            test_users = [
-                ('admin_user', 'admin123', 'admin', 'admin@company.com'),
-                ('manager_user', 'manager123', 'manager', 'manager@company.com'),
-                ('warehouse_user', 'warehouse123', 'warehouse_manager', 'warehouse@company.com'),
-                ('quality_user', 'quality123', 'quality_manager', 'quality@company.com')
-            ]
-            
-            for username, password, role, email in test_users:
-                try:
-                    cursor.execute("""
-                        INSERT INTO users (username, password, role, email)
-                        VALUES (%s, %s, %s, %s)
-                    """, (username, password, role, email))
-                    print(f"   ✓ Created user: {username} ({role})")
-                except mariadb.IntegrityError as e:
-                    print(f"   ⚠ User {username} already exists: {e}")
-            
-            conn.commit()
-            print("   ✓ Test users created successfully")
-        
-        conn.close()
-        print("\n=== Database Update Complete ===")
-        
-    except Exception as e:
-        print(f"❌ Error: {e}")
-        import traceback
-        traceback.print_exc()
-        return 1
-    
-    return 0
-
-if __name__ == "__main__":
-    sys.exit(main())

old code/backup_db_scripts/check_external_db_users.py

@@ -1,105 +0,0 @@
-#!/usr/bin/env python3
-
-import mariadb
-import os
-import sys
-
-def get_external_db_connection():
-    """Reads the external_server.conf file and returns a MariaDB database connection."""
-    # Get the instance folder path
-    current_dir = os.path.dirname(os.path.abspath(__file__))
-    instance_folder = os.path.join(current_dir, '../../instance')
-    settings_file = os.path.join(instance_folder, 'external_server.conf')
-    
-    if not os.path.exists(settings_file):
-        raise FileNotFoundError(f"The external_server.conf file is missing: {settings_file}")
-
-    # Read settings from the configuration file
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            line = line.strip()
-            if line and '=' in line:
-                key, value = line.split('=', 1)
-                settings[key] = value
-
-    print(f"Connecting to MariaDB with settings:")
-    print(f"  Host: {settings.get('server_domain', 'N/A')}")
-    print(f"  Port: {settings.get('port', 'N/A')}")
-    print(f"  Database: {settings.get('database_name', 'N/A')}")
-    print(f"  Username: {settings.get('username', 'N/A')}")
-
-    # Create a database connection
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def main():
-    try:
-        print("=== Checking External MariaDB Database ===")
-        conn = get_external_db_connection()
-        cursor = conn.cursor()
-        
-        # Create users table if it doesn't exist
-        print("\n1. Creating/verifying users table...")
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS users (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                username VARCHAR(50) UNIQUE NOT NULL,
-                password VARCHAR(255) NOT NULL,
-                role VARCHAR(50) NOT NULL,
-                email VARCHAR(255)
-            )
-        ''')
-        print("   ✓ Users table created/verified")
-        
-        # Check existing users
-        print("\n2. Checking existing users...")
-        cursor.execute("SELECT id, username, role, email FROM users")
-        users = cursor.fetchall()
-        
-        if users:
-            print(f"   Found {len(users)} existing users:")
-            for user in users:
-                email = user[3] if user[3] else "No email"
-                print(f"   - ID: {user[0]}, Username: {user[1]}, Role: {user[2]}, Email: {email}")
-        else:
-            print("   No users found in external database")
-            
-            # Create some test users
-            print("\n3. Creating test users...")
-            test_users = [
-                ('admin_user', 'admin123', 'admin', 'admin@company.com'),
-                ('manager_user', 'manager123', 'manager', 'manager@company.com'),
-                ('warehouse_user', 'warehouse123', 'warehouse_manager', 'warehouse@company.com'),
-                ('quality_user', 'quality123', 'quality_manager', 'quality@company.com')
-            ]
-            
-            for username, password, role, email in test_users:
-                try:
-                    cursor.execute("""
-                        INSERT INTO users (username, password, role, email)
-                        VALUES (%s, %s, %s, %s)
-                    """, (username, password, role, email))
-                    print(f"   ✓ Created user: {username} ({role})")
-                except mariadb.IntegrityError as e:
-                    print(f"   ⚠ User {username} already exists: {e}")
-            
-            conn.commit()
-            print("   ✓ Test users created successfully")
-        
-        conn.close()
-        print("\n=== Database Check Complete ===")
-        
-    except Exception as e:
-        print(f"❌ Error: {e}")
-        return 1
-    
-    return 0
-
-if __name__ == "__main__":
-    sys.exit(main())

old code/backup_db_scripts/create_external_superadmin.py

@@ -1,60 +0,0 @@
-import mariadb
-import os
-
-def get_external_db_connection():
-    """Get MariaDB connection using external_server.conf"""
-    settings_file = os.path.abspath(os.path.join(os.path.dirname(__file__), '../../instance/external_server.conf'))
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            key, value = line.strip().split('=', 1)
-            settings[key] = value
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def create_external_users_table():
-    """Create users table and superadmin user in external MariaDB database"""
-    try:
-        conn = get_external_db_connection()
-        cursor = conn.cursor()
-        
-        # Create users table if not exists (MariaDB syntax)
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS users (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                username VARCHAR(50) UNIQUE NOT NULL,
-                password VARCHAR(255) NOT NULL,
-                role VARCHAR(50) NOT NULL
-            )
-        ''')
-        
-        # Insert superadmin user if not exists
-        cursor.execute('''
-            INSERT IGNORE INTO users (username, password, role)
-            VALUES (%s, %s, %s)
-        ''', ('superadmin', 'superadmin123', 'superadmin'))
-        
-        # Check if user was created/exists
-        cursor.execute("SELECT username, password, role FROM users WHERE username = %s", ('superadmin',))
-        result = cursor.fetchone()
-        
-        if result:
-            print(f"SUCCESS: Superadmin user exists in external database")
-            print(f"Username: {result[0]}, Password: {result[1]}, Role: {result[2]}")
-        else:
-            print("ERROR: Failed to create/find superadmin user")
-        
-        conn.commit()
-        conn.close()
-        print("External MariaDB users table setup completed.")
-        
-    except Exception as e:
-        print(f"ERROR: {e}")
-
-if __name__ == "__main__":
-    create_external_users_table()

old code/backup_db_scripts/create_order_for_labels_table.py

@@ -1,110 +0,0 @@
-#!/usr/bin/env python3
-"""
-Database script to create the order_for_labels table
-This table will store order information for label generation
-"""
-
-import sys
-import os
-import mariadb
-from flask import Flask
-
-# Add the app directory to the path
-sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-
-def get_db_connection():
-    """Get database connection using settings from external_server.conf"""
-    # Go up two levels from this script to reach py_app directory, then to instance
-    app_root = os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-    settings_file = os.path.join(app_root, 'instance', 'external_server.conf')
-    
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            key, value = line.strip().split('=', 1)
-            settings[key] = value
-    
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def create_order_for_labels_table():
-    """
-    Creates the order_for_labels table with the specified structure
-    """
-    try:
-        conn = get_db_connection()
-        cursor = conn.cursor()
-        
-        # First check if table already exists
-        cursor.execute("SHOW TABLES LIKE 'order_for_labels'")
-        result = cursor.fetchone()
-        
-        if result:
-            print("Table 'order_for_labels' already exists.")
-            # Show current structure
-            cursor.execute("DESCRIBE order_for_labels")
-            columns = cursor.fetchall()
-            print("\nCurrent table structure:")
-            for col in columns:
-                print(f"  {col[0]} - {col[1]} {'NULL' if col[2] == 'YES' else 'NOT NULL'}")
-        else:
-            # Create the table
-            create_table_sql = """
-            CREATE TABLE order_for_labels (
-                id BIGINT AUTO_INCREMENT PRIMARY KEY COMMENT 'Unique identifier',
-                comanda_productie VARCHAR(15) NOT NULL COMMENT 'Production Order',
-                cod_articol VARCHAR(15) COMMENT 'Article Code',
-                descr_com_prod VARCHAR(50) NOT NULL COMMENT 'Production Order Description',
-                cantitate INT(3) NOT NULL COMMENT 'Quantity',
-                com_achiz_client VARCHAR(25) COMMENT 'Client Purchase Order',
-                nr_linie_com_client INT(3) COMMENT 'Client Order Line Number',
-                customer_name VARCHAR(50) COMMENT 'Customer Name',
-                customer_article_number VARCHAR(25) COMMENT 'Customer Article Number',
-                open_for_order VARCHAR(25) COMMENT 'Open for Order Status',
-                line_number INT(3) COMMENT 'Line Number',
-                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP COMMENT 'Record creation timestamp',
-                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT 'Record update timestamp'
-            ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='Table for storing order information for label generation'
-            """
-            
-            cursor.execute(create_table_sql)
-            conn.commit()
-            print("✅ Table 'order_for_labels' created successfully!")
-            
-            # Show the created structure
-            cursor.execute("DESCRIBE order_for_labels")
-            columns = cursor.fetchall()
-            print("\n📋 Table structure:")
-            for col in columns:
-                null_info = 'NULL' if col[2] == 'YES' else 'NOT NULL'
-                default_info = f" DEFAULT {col[4]}" if col[4] else ""
-                print(f"  📌 {col[0]:<25} {col[1]:<20} {null_info}{default_info}")
-                
-        conn.close()
-        
-    except mariadb.Error as e:
-        print(f"❌ Database error: {e}")
-        return False
-    except Exception as e:
-        print(f"❌ Error: {e}")
-        return False
-    
-    return True
-
-if __name__ == "__main__":
-    print("🏗️  Creating order_for_labels table...")
-    print("="*50)
-    
-    success = create_order_for_labels_table()
-    
-    if success:
-        print("\n✅ Database setup completed successfully!")
-    else:
-        print("\n❌ Database setup failed!")
-    
-    print("="*50)

old code/backup_db_scripts/create_permissions_tables.py

@@ -1,141 +0,0 @@
-#!/usr/bin/env python3
-
-import mariadb
-import os
-import sys
-
-def get_external_db_connection():
-    """Reads the external_server.conf file and returns a MariaDB database connection."""
-    # Get the instance folder path
-    current_dir = os.path.dirname(os.path.abspath(__file__))
-    instance_folder = os.path.join(current_dir, '../../instance')
-    settings_file = os.path.join(instance_folder, 'external_server.conf')
-    
-    if not os.path.exists(settings_file):
-        raise FileNotFoundError(f"The external_server.conf file is missing: {settings_file}")
-
-    # Read settings from the configuration file
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            line = line.strip()
-            if line and '=' in line:
-                key, value = line.split('=', 1)
-                settings[key] = value
-
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def main():
-    try:
-        print("=== Creating Permission Management Tables ===")
-        conn = get_external_db_connection()
-        cursor = conn.cursor()
-        
-        # 1. Create permissions table
-        print("\n1. Creating permissions table...")
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS permissions (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                permission_key VARCHAR(255) UNIQUE NOT NULL,
-                page VARCHAR(100) NOT NULL,
-                page_name VARCHAR(255) NOT NULL,
-                section VARCHAR(100) NOT NULL,
-                section_name VARCHAR(255) NOT NULL,
-                action VARCHAR(50) NOT NULL,
-                action_name VARCHAR(255) NOT NULL,
-                description TEXT,
-                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
-            )
-        ''')
-        print("   ✓ Permissions table created/verified")
-        
-        # 2. Create role_permissions table
-        print("\n2. Creating role_permissions table...")
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS role_permissions (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                role VARCHAR(50) NOT NULL,
-                permission_key VARCHAR(255) NOT NULL,
-                granted BOOLEAN DEFAULT TRUE,
-                granted_by VARCHAR(50),
-                granted_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
-                UNIQUE KEY unique_role_permission (role, permission_key),
-                FOREIGN KEY (permission_key) REFERENCES permissions(permission_key) ON DELETE CASCADE
-            )
-        ''')
-        print("   ✓ Role permissions table created/verified")
-        
-        # 3. Create role_hierarchy table for role management
-        print("\n3. Creating role_hierarchy table...")
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS role_hierarchy (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                role_name VARCHAR(50) UNIQUE NOT NULL,
-                display_name VARCHAR(255) NOT NULL,
-                description TEXT,
-                level INT DEFAULT 0,
-                is_active BOOLEAN DEFAULT TRUE,
-                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
-            )
-        ''')
-        print("   ✓ Role hierarchy table created/verified")
-        
-        # 4. Create permission_audit_log table for tracking changes
-        print("\n4. Creating permission_audit_log table...")
-        cursor.execute('''
-            CREATE TABLE IF NOT EXISTS permission_audit_log (
-                id INT AUTO_INCREMENT PRIMARY KEY,
-                role VARCHAR(50) NOT NULL,
-                permission_key VARCHAR(255) NOT NULL,
-                action ENUM('granted', 'revoked') NOT NULL,
-                changed_by VARCHAR(50) NOT NULL,
-                changed_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-                reason TEXT,
-                ip_address VARCHAR(45)
-            )
-        ''')
-        print("   ✓ Permission audit log table created/verified")
-        
-        conn.commit()
-        
-        # 5. Check if we need to populate initial data
-        print("\n5. Checking for existing data...")
-        cursor.execute("SELECT COUNT(*) FROM permissions")
-        permission_count = cursor.fetchone()[0]
-        
-        if permission_count == 0:
-            print("   No permissions found - will need to populate with default data")
-            print("   Run 'populate_permissions.py' to initialize the permission system")
-        else:
-            print(f"   Found {permission_count} existing permissions")
-        
-        cursor.execute("SELECT COUNT(*) FROM role_hierarchy")
-        role_count = cursor.fetchone()[0]
-        
-        if role_count == 0:
-            print("   No roles found - will need to populate with default roles")
-        else:
-            print(f"   Found {role_count} existing roles")
-        
-        conn.close()
-        print("\n=== Permission Database Schema Created Successfully ===")
-        
-    except Exception as e:
-        print(f"❌ Error: {e}")
-        import traceback
-        traceback.print_exc()
-        return 1
-    
-    return 0
-
-if __name__ == "__main__":
-    sys.exit(main())

old code/backup_db_scripts/create_roles_table.py

@@ -1,45 +0,0 @@
-import sqlite3
-import os
-
-def create_roles_and_users_tables(db_path):
-    conn = sqlite3.connect(db_path)
-    cursor = conn.cursor()
-    # Create users table if not exists
-    cursor.execute('''
-        CREATE TABLE IF NOT EXISTS users (
-            id INTEGER PRIMARY KEY AUTOINCREMENT,
-            username TEXT UNIQUE NOT NULL,
-            password TEXT NOT NULL,
-            role TEXT NOT NULL
-        )
-    ''')
-    # Insert superadmin user if not exists (default password: 'admin', change after first login)
-    cursor.execute('''
-        INSERT OR IGNORE INTO users (username, password, role)
-        VALUES (?, ?, ?)
-    ''', ('superadmin', 'superadmin123', 'superadmin'))
-    # Create roles table if not exists
-    cursor.execute('''
-        CREATE TABLE IF NOT EXISTS roles (
-            id INTEGER PRIMARY KEY AUTOINCREMENT,
-            name TEXT UNIQUE NOT NULL,
-            access_level TEXT NOT NULL,
-            description TEXT
-        )
-    ''')
-    # Insert superadmin role if not exists
-    cursor.execute('''
-        INSERT OR IGNORE INTO roles (name, access_level, description)
-        VALUES (?, ?, ?)
-    ''', ('superadmin', 'full', 'Full access to all app areas and functions'))
-    conn.commit()
-    conn.close()
-
-if __name__ == "__main__":
-    # Default path to users.db in instance folder
-    instance_folder = os.path.abspath(os.path.join(os.path.dirname(__file__), '../../instance'))
-    if not os.path.exists(instance_folder):
-        os.makedirs(instance_folder)
-    db_path = os.path.join(instance_folder, 'users.db')
-    create_roles_and_users_tables(db_path)
-    print("Roles and users tables created. Superadmin user and role initialized.")

old code/backup_db_scripts/create_scan_1db.py

@@ -1,42 +0,0 @@
-import mariadb
-
-# Database connection credentials
-db_config = {
-    "user": "trasabilitate",
-    "password": "Initial01!",
-    "host": "localhost",
-    "database": "trasabilitate"
-}
-
-# Connect to the database
-try:
-    conn = mariadb.connect(**db_config)
-    cursor = conn.cursor()
-    print("Connected to the database successfully!")
-
-    # Create the scan1_orders table
-    create_table_query = """
-    CREATE TABLE IF NOT EXISTS scan1_orders (
-        Id INT AUTO_INCREMENT PRIMARY KEY, -- Auto-incremented ID with 6 digits
-        operator_code VARCHAR(4) NOT NULL, -- Operator code with 4 characters
-        CP_full_code VARCHAR(15) NOT NULL UNIQUE, -- Full CP code with up to 15 characters
-        OC1_code VARCHAR(4) NOT NULL, -- OC1 code with 4 characters
-        OC2_code VARCHAR(4) NOT NULL, -- OC2 code with 4 characters
-        CP_base_code VARCHAR(10) GENERATED ALWAYS AS (LEFT(CP_full_code, 10)) STORED, -- Auto-generated base code (first 10 characters of CP_full_code)
-        quality_code INT(3) NOT NULL, -- Quality code with 3 digits
-        date DATE NOT NULL, -- Date in format dd-mm-yyyy
-        time TIME NOT NULL, -- Time in format hh:mm:ss
-        approved_quantity INT DEFAULT 0, -- Auto-incremented quantity for quality_code = 000
-        rejected_quantity INT DEFAULT 0 -- Auto-incremented quantity for quality_code != 000
-    );
-    """
-    cursor.execute(create_table_query)
-    print("Table 'scan1_orders' created successfully!")
-
-    # Commit changes and close the connection
-    conn.commit()
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error connecting to the database: {e}")

old code/backup_db_scripts/create_scanfg_orders.py

@@ -1,41 +0,0 @@
-import mariadb
-
-# Database connection credentials
-# (reuse from create_scan_1db.py or update as needed)
-db_config = {
-    "user": "trasabilitate",
-    "password": "Initial01!",
-    "host": "localhost",
-    "database": "trasabilitate"
-}
-
-try:
-    conn = mariadb.connect(**db_config)
-    cursor = conn.cursor()
-    print("Connected to the database successfully!")
-
-    # Create the scanfg_orders table (same structure as scan1_orders)
-    create_table_query = """
-    CREATE TABLE IF NOT EXISTS scanfg_orders (
-        Id INT AUTO_INCREMENT PRIMARY KEY,
-        operator_code VARCHAR(4) NOT NULL,
-        CP_full_code VARCHAR(15) NOT NULL UNIQUE,
-        OC1_code VARCHAR(4) NOT NULL,
-        OC2_code VARCHAR(4) NOT NULL,
-        CP_base_code VARCHAR(10) GENERATED ALWAYS AS (LEFT(CP_full_code, 10)) STORED,
-        quality_code INT(3) NOT NULL,
-        date DATE NOT NULL,
-        time TIME NOT NULL,
-        approved_quantity INT DEFAULT 0,
-        rejected_quantity INT DEFAULT 0
-    );
-    """
-    cursor.execute(create_table_query)
-    print("Table 'scanfg_orders' created successfully!")
-
-    conn.commit()
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error connecting to the database: {e}")

old code/backup_db_scripts/create_triggers.py

@@ -1,70 +0,0 @@
-import mariadb
-
-# Database connection credentials
-db_config = {
-    "user": "trasabilitate",
-    "password": "Initial01!",
-    "host": "localhost",
-    "database": "trasabilitate"
-}
-
-# Connect to the database
-try:
-    conn = mariadb.connect(**db_config)
-    cursor = conn.cursor()
-    print("Connected to the database successfully!")
-
-    # Delete old triggers if they exist
-    try:
-        cursor.execute("DROP TRIGGER IF EXISTS increment_approved_quantity;")
-        print("Old trigger 'increment_approved_quantity' deleted successfully.")
-    except mariadb.Error as e:
-        print(f"Error deleting old trigger 'increment_approved_quantity': {e}")
-
-    try:
-        cursor.execute("DROP TRIGGER IF EXISTS increment_rejected_quantity;")
-        print("Old trigger 'increment_rejected_quantity' deleted successfully.")
-    except mariadb.Error as e:
-        print(f"Error deleting old trigger 'increment_rejected_quantity': {e}")
-
-    # Create corrected trigger for approved_quantity
-    create_approved_trigger = """
-    CREATE TRIGGER increment_approved_quantity
-    BEFORE INSERT ON scan1_orders
-    FOR EACH ROW
-    BEGIN
-        IF NEW.quality_code = 000 THEN
-            SET NEW.approved_quantity = (
-                SELECT COUNT(*)
-                FROM scan1_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code = 000
-            ) + 1;
-            SET NEW.rejected_quantity = (
-                SELECT COUNT(*)
-                FROM scan1_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code != 000
-            );
-        ELSE
-            SET NEW.approved_quantity = (
-                SELECT COUNT(*)
-                FROM scan1_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code = 000
-            );
-            SET NEW.rejected_quantity = (
-                SELECT COUNT(*)
-                FROM scan1_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code != 000
-            ) + 1;
-        END IF;
-    END;
-    """
-    cursor.execute(create_approved_trigger)
-    print("Trigger 'increment_approved_quantity' created successfully!")
-
-    # Commit changes and close the connection
-    conn.commit()
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error connecting to the database or creating triggers: {e}")

old code/backup_db_scripts/create_triggers_fg.py

@@ -1,73 +0,0 @@
-import mariadb
-
-# Database connection credentials
-db_config = {
-    "user": "trasabilitate",
-    "password": "Initial01!",
-    "host": "localhost",
-    "database": "trasabilitate"
-}
-
-# Connect to the database
-try:
-    conn = mariadb.connect(**db_config)
-    cursor = conn.cursor()
-    print("Connected to the database successfully!")
-
-    # Delete old triggers if they exist
-    try:
-        cursor.execute("DROP TRIGGER IF EXISTS increment_approved_quantity_fg;")
-        print("Old trigger 'increment_approved_quantity_fg' deleted successfully.")
-    except mariadb.Error as e:
-        print(f"Error deleting old trigger 'increment_approved_quantity_fg': {e}")
-
-    try:
-        cursor.execute("DROP TRIGGER IF EXISTS increment_rejected_quantity_fg;")
-        print("Old trigger 'increment_rejected_quantity_fg' deleted successfully.")
-    except mariadb.Error as e:
-        print(f"Error deleting old trigger 'increment_rejected_quantity_fg': {e}")
-
-    # Create corrected trigger for approved_quantity in scanfg_orders
-    create_approved_trigger_fg = """
-    CREATE TRIGGER increment_approved_quantity_fg
-    BEFORE INSERT ON scanfg_orders
-    FOR EACH ROW
-    BEGIN
-        IF NEW.quality_code = 000 THEN
-            SET NEW.approved_quantity = (
-                SELECT COUNT(*)
-                FROM scanfg_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code = 000
-            ) + 1;
-            SET NEW.rejected_quantity = (
-                SELECT COUNT(*)
-                FROM scanfg_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code != 000
-            );
-        ELSE
-            SET NEW.approved_quantity = (
-                SELECT COUNT(*)
-                FROM scanfg_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code = 000
-            );
-            SET NEW.rejected_quantity = (
-                SELECT COUNT(*)
-                FROM scanfg_orders
-                WHERE CP_base_code = NEW.CP_base_code AND quality_code != 000
-            ) + 1;
-        END IF;
-    END;
-    """
-    cursor.execute(create_approved_trigger_fg)
-    print("Trigger 'increment_approved_quantity_fg' created successfully for scanfg_orders table!")
-
-    # Commit changes and close the connection
-    conn.commit()
-    cursor.close()
-    conn.close()
-
-    print("\n✅ All triggers for scanfg_orders table created successfully!")
-    print("The approved_quantity and rejected_quantity will now be calculated automatically.")
-
-except mariadb.Error as e:
-    print(f"Error connecting to the database or creating triggers: {e}")

old code/backup_db_scripts/create_warehouse_locations_table.py

@@ -1,25 +0,0 @@
-import mariadb
-from app.warehouse import get_db_connection
-from flask import Flask
-import os
-
-def create_warehouse_locations_table():
-    conn = get_db_connection()
-    cursor = conn.cursor()
-    cursor.execute('''
-        CREATE TABLE IF NOT EXISTS warehouse_locations (
-            id BIGINT AUTO_INCREMENT PRIMARY KEY,
-            location_code VARCHAR(12) NOT NULL UNIQUE,
-            size INT,
-            description VARCHAR(250)
-        )
-    ''')
-    conn.commit()
-    conn.close()
-
-if __name__ == "__main__":
-    instance_path = os.path.abspath("instance")
-    app = Flask(__name__, instance_path=instance_path)
-    with app.app_context():
-        create_warehouse_locations_table()
-        print("warehouse_locations table created or already exists.")

old code/backup_db_scripts/delet scan1_orders values.py

@@ -1,30 +0,0 @@
-import mariadb
-
-# Database connection credentials
-def get_db_connection():
-    return mariadb.connect(
-        user="trasabilitate",  # Replace with your username
-        password="Initial01!",  # Replace with your password
-        host="localhost",  # Replace with your host
-        port=3306,  # Default MariaDB port
-        database="trasabilitate_database"  # Replace with your database name
-    )
-
-try:
-    # Connect to the database
-    conn = get_db_connection()
-    cursor = conn.cursor()
-
-    # Delete query
-    delete_query = "DELETE FROM scan1_orders"
-    cursor.execute(delete_query)
-    conn.commit()
-
-    print("All data from the 'scan1_orders' table has been deleted successfully.")
-
-    # Close the connection
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error deleting data: {e}")

old code/backup_db_scripts/drop_external_users_roles_tables.py

@@ -1,26 +0,0 @@
-import mariadb
-import os
-
-def get_external_db_connection():
-    settings_file = os.path.abspath(os.path.join(os.path.dirname(__file__), '../../instance/external_server.conf'))
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            key, value = line.strip().split('=', 1)
-            settings[key] = value
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-if __name__ == "__main__":
-    conn = get_external_db_connection()
-    cursor = conn.cursor()
-    cursor.execute("DROP TABLE IF EXISTS users")
-    cursor.execute("DROP TABLE IF EXISTS roles")
-    conn.commit()
-    conn.close()
-    print("Dropped users and roles tables from external database.")

old code/backup_db_scripts/find_users_databases.py

@@ -1,53 +0,0 @@
-import sqlite3
-import os
-
-def check_database(db_path, description):
-    """Check if a database exists and show its users."""
-    if os.path.exists(db_path):
-        print(f"\n{description}: FOUND at {db_path}")
-        try:
-            conn = sqlite3.connect(db_path)
-            cursor = conn.cursor()
-            
-            # Check if users table exists
-            cursor.execute("SELECT name FROM sqlite_master WHERE type='table' AND name='users'")
-            if cursor.fetchone():
-                cursor.execute("SELECT id, username, password, role FROM users")
-                users = cursor.fetchall()
-                if users:
-                    print("Users in this database:")
-                    for user in users:
-                        print(f"  ID: {user[0]}, Username: {user[1]}, Password: {user[2]}, Role: {user[3]}")
-                else:
-                    print("  Users table exists but is empty")
-            else:
-                print("  No users table found")
-            conn.close()
-        except Exception as e:
-            print(f"  Error reading database: {e}")
-    else:
-        print(f"\n{description}: NOT FOUND at {db_path}")
-
-if __name__ == "__main__":
-    # Check different possible locations for users.db
-    
-    # 1. Root quality_recticel/instance/users.db
-    root_instance = "/home/ske087/quality_recticel/instance/users.db"
-    check_database(root_instance, "Root instance users.db")
-    
-    # 2. App instance folder
-    app_instance = "/home/ske087/quality_recticel/py_app/instance/users.db"
-    check_database(app_instance, "App instance users.db")
-    
-    # 3. Current working directory
-    cwd_db = "/home/ske087/quality_recticel/py_app/users.db"
-    check_database(cwd_db, "Working directory users.db")
-    
-    # 4. Flask app database (relative to py_app)
-    flask_db = "/home/ske087/quality_recticel/py_app/app/users.db"
-    check_database(flask_db, "Flask app users.db")
-    
-    print("\n" + "="*50)
-    print("RECOMMENDATION:")
-    print("The login should use the external MariaDB database.")
-    print("Make sure you have created the superadmin user in MariaDB using create_roles_table.py")

old code/backup_db_scripts/populate_permissions.py

@@ -1,143 +0,0 @@
-#!/usr/bin/env python3
-
-import mariadb
-import os
-import sys
-
-# Add the app directory to the path so we can import our permissions module
-sys.path.append(os.path.join(os.path.dirname(__file__), '..'))
-
-from permissions import APP_PERMISSIONS, ROLE_HIERARCHY, ACTIONS, get_all_permissions, get_default_permissions_for_role
-
-def get_external_db_connection():
-    """Reads the external_server.conf file and returns a MariaDB database connection."""
-    current_dir = os.path.dirname(os.path.abspath(__file__))
-    instance_folder = os.path.join(current_dir, '../../instance')
-    settings_file = os.path.join(instance_folder, 'external_server.conf')
-    
-    if not os.path.exists(settings_file):
-        raise FileNotFoundError(f"The external_server.conf file is missing: {settings_file}")
-
-    settings = {}
-    with open(settings_file, 'r') as f:
-        for line in f:
-            line = line.strip()
-            if line and '=' in line:
-                key, value = line.split('=', 1)
-                settings[key] = value
-
-    return mariadb.connect(
-        user=settings['username'],
-        password=settings['password'],
-        host=settings['server_domain'],
-        port=int(settings['port']),
-        database=settings['database_name']
-    )
-
-def main():
-    try:
-        print("=== Populating Permission System ===")
-        conn = get_external_db_connection()
-        cursor = conn.cursor()
-        
-        # 1. Populate all permissions
-        print("\n1. Populating permissions...")
-        permissions = get_all_permissions()
-        
-        for perm in permissions:
-            try:
-                cursor.execute('''
-                    INSERT INTO permissions (permission_key, page, page_name, section, section_name, action, action_name)
-                    VALUES (%s, %s, %s, %s, %s, %s, %s)
-                    ON DUPLICATE KEY UPDATE
-                    page_name = VALUES(page_name),
-                    section_name = VALUES(section_name),
-                    action_name = VALUES(action_name),
-                    updated_at = CURRENT_TIMESTAMP
-                ''', (
-                    perm['key'],
-                    perm['page'],
-                    perm['page_name'],
-                    perm['section'],
-                    perm['section_name'],
-                    perm['action'],
-                    perm['action_name']
-                ))
-            except Exception as e:
-                print(f"   ⚠ Error inserting permission {perm['key']}: {e}")
-        
-        conn.commit()
-        print(f"   ✓ Populated {len(permissions)} permissions")
-        
-        # 2. Populate role hierarchy
-        print("\n2. Populating role hierarchy...")
-        for role_name, role_data in ROLE_HIERARCHY.items():
-            try:
-                cursor.execute('''
-                    INSERT INTO role_hierarchy (role_name, display_name, description, level)
-                    VALUES (%s, %s, %s, %s)
-                    ON DUPLICATE KEY UPDATE
-                    display_name = VALUES(display_name),
-                    description = VALUES(description),
-                    level = VALUES(level),
-                    updated_at = CURRENT_TIMESTAMP
-                ''', (
-                    role_name,
-                    role_data['name'],
-                    role_data['description'],
-                    role_data['level']
-                ))
-            except Exception as e:
-                print(f"   ⚠ Error inserting role {role_name}: {e}")
-        
-        conn.commit()
-        print(f"   ✓ Populated {len(ROLE_HIERARCHY)} roles")
-        
-        # 3. Set default permissions for each role
-        print("\n3. Setting default role permissions...")
-        for role_name in ROLE_HIERARCHY.keys():
-            default_permissions = get_default_permissions_for_role(role_name)
-            
-            print(f"   Setting permissions for {role_name}: {len(default_permissions)} permissions")
-            
-            for permission_key in default_permissions:
-                try:
-                    cursor.execute('''
-                        INSERT INTO role_permissions (role, permission_key, granted, granted_by)
-                        VALUES (%s, %s, TRUE, 'system')
-                        ON DUPLICATE KEY UPDATE
-                        granted = TRUE,
-                        updated_at = CURRENT_TIMESTAMP
-                    ''', (role_name, permission_key))
-                except Exception as e:
-                    print(f"     ⚠ Error setting permission {permission_key} for {role_name}: {e}")
-            
-            conn.commit()
-        
-        # 4. Show summary
-        print("\n4. Permission Summary:")
-        cursor.execute('''
-            SELECT r.role_name, r.display_name, COUNT(rp.permission_key) as permission_count
-            FROM role_hierarchy r
-            LEFT JOIN role_permissions rp ON r.role_name = rp.role AND rp.granted = TRUE
-            GROUP BY r.role_name, r.display_name
-            ORDER BY r.level DESC
-        ''')
-        
-        results = cursor.fetchall()
-        for role_name, display_name, count in results:
-            print(f"   {display_name} ({role_name}): {count} permissions")
-        
-        conn.close()
-        print("\n=== Permission System Initialization Complete ===")
-        
-    except Exception as e:
-        print(f"❌ Error: {e}")
-        import traceback
-        traceback.print_exc()
-        return 1
-    
-    return 0
-
-if __name__ == "__main__":
-    sys.exit(main())

old code/backup_db_scripts/print_internal_users.py

@@ -1,30 +0,0 @@
-import sqlite3
-import os
-
-instance_folder = os.path.abspath(os.path.join(os.path.dirname(__file__), '../../instance'))
-db_path = os.path.join(instance_folder, 'users.db')
-
-if not os.path.exists(db_path):
-    print("users.db not found at", db_path)
-    exit(1)
-
-conn = sqlite3.connect(db_path)
-cursor = conn.cursor()
-
-# Check if users table exists
-cursor.execute("SELECT name FROM sqlite_master WHERE type='table' AND name='users'")
-if not cursor.fetchone():
-    print("No users table found in users.db.")
-    conn.close()
-    exit(1)
-
-# Print all users
-cursor.execute("SELECT id, username, password, role FROM users")
-rows = cursor.fetchall()
-if not rows:
-    print("No users found in users.db.")
-else:
-    print("Users in users.db:")
-    for row in rows:
-        print(f"id={row[0]}, username={row[1]}, password={row[2]}, role={row[3]}")
-conn.close()

old code/backup_db_scripts/query.py

@@ -1,34 +0,0 @@
-import mariadb
-
-# Database connection credentials
-db_config = {
-    "user": "trasabilitate",
-    "password": "Initial01!",
-    "host": "localhost",
-    "database": "trasabilitate_database"
-}
-
-try:
-    # Connect to the database
-    conn = mariadb.connect(**db_config)
-    cursor = conn.cursor()
-
-    # Query to fetch all records from the scan1 table
-    query = "SELECT * FROM scan1_orders ORDER BY Id DESC LIMIT 15"
-    cursor.execute(query)
-
-    # Fetch and print the results
-    rows = cursor.fetchall()
-    if rows:
-        print("Records in the 'scan1_orders' table:")
-        for row in rows:
-            print(row)
-    else:
-        print("No records found in the 'scan1_orders' table.")
-
-    # Close the connection
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error connecting to the database: {e}")

old code/backup_db_scripts/recreate_order_for_labels_table.py

@@ -1,50 +0,0 @@
-import mariadb
-
-# Database connection credentials
-DB_CONFIG = {
-    "user": "sa",
-    "password": "12345678",
-    "host": "localhost",
-    "database": "recticel"
-}
-
-def recreate_order_for_labels_table():
-    conn = mariadb.connect(**DB_CONFIG)
-    cursor = conn.cursor()
-    print("Connected to the database successfully!")
-
-    # Drop the table if it exists
-    cursor.execute("DROP TABLE IF EXISTS order_for_labels")
-    print("Dropped existing 'order_for_labels' table.")
-
-    # Create the table with the new unique constraint
-    create_table_sql = """
-    CREATE TABLE order_for_labels (
-        id BIGINT AUTO_INCREMENT PRIMARY KEY COMMENT 'Unique identifier',
-        comanda_productie VARCHAR(15) NOT NULL UNIQUE COMMENT 'Production Order (unique)',
-        cod_articol VARCHAR(15) COMMENT 'Article Code',
-        descr_com_prod VARCHAR(50) NOT NULL COMMENT 'Production Order Description',
-        cantitate INT(3) NOT NULL COMMENT 'Quantity',
-        data_livrare DATE COMMENT 'Delivery date',
-        dimensiune VARCHAR(20) COMMENT 'Dimensions',
-        com_achiz_client VARCHAR(25) COMMENT 'Client Purchase Order',
-        nr_linie_com_client INT(3) COMMENT 'Client Order Line Number',
-        customer_name VARCHAR(50) COMMENT 'Customer Name',
-        customer_article_number VARCHAR(25) COMMENT 'Customer Article Number',
-        open_for_order VARCHAR(25) COMMENT 'Open for Order Status',
-        line_number INT(3) COMMENT 'Line Number',
-        printed_labels TINYINT(1) NOT NULL DEFAULT 0 COMMENT 'Boolean flag: 0=labels not printed, 1=labels printed',
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP COMMENT 'Record creation timestamp',
-        updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT 'Record update timestamp'
-    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='Table for storing order information for label generation';
-    """
-    cursor.execute(create_table_sql)
-    print("Created new 'order_for_labels' table with unique comanda_productie.")
-
-    conn.commit()
-    cursor.close()
-    conn.close()
-    print("Done.")
-
-if __name__ == "__main__":
-    recreate_order_for_labels_table()

old code/backup_db_scripts/seed_internal_superadmin.py

@@ -1,34 +0,0 @@
-import sqlite3
-import os
-from flask import Flask
-
-app = Flask(__name__)
-app.config['SECRET_KEY'] = 'your_secret_key'  # Use the same key as in __init__.py
-
-instance_folder = os.path.abspath(os.path.join(os.path.dirname(__file__), '../../instance'))
-if not os.path.exists(instance_folder):
-    os.makedirs(instance_folder)
-db_path = os.path.join(instance_folder, 'users.db')
-
-conn = sqlite3.connect(db_path)
-cursor = conn.cursor()
-
-# Create users table if not exists
-cursor.execute('''
-    CREATE TABLE IF NOT EXISTS users (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        username TEXT UNIQUE NOT NULL,
-        password TEXT NOT NULL,
-        role TEXT NOT NULL
-    )
-''')
-
-# Insert superadmin user if not exists
-cursor.execute('''
-    INSERT OR IGNORE INTO users (username, password, role)
-    VALUES (?, ?, ?)
-''', ('superadmin', 'superadmin123', 'superadmin'))
-
-conn.commit()
-conn.close()
-print("Internal users.db seeded with superadmin user.")

old code/backup_db_scripts/test.py

@@ -1,37 +0,0 @@
-import mariadb
-
-# Database connection credentials
-def get_db_connection():
-    return mariadb.connect(
-        user="trasabilitate",  # Replace with your username
-        password="Initial01!",  # Replace with your password
-        host="localhost",  # Replace with your host
-        port=3306,  # Default MariaDB port
-        database="trasabilitate_database"  # Replace with your database name
-    )
-
-try:
-    # Connect to the database
-    conn = get_db_connection()
-    cursor = conn.cursor()
-
-    # Insert query
-    insert_query = """
-        INSERT INTO scan1_orders (operator_code, CP_full_code, OC1_code, OC2_code, quality_code, date, time)
-        VALUES (?, ?, ?, ?, ?, ?, ?)
-    """
-    # Values to insert
-    values = ('OP01', 'CP12345678-0002', 'OC11', 'OC22', 000, '2025-04-22', '14:30:00')
-
-    # Execute the query
-    cursor.execute(insert_query, values)
-    conn.commit()
-
-    print("Test data inserted successfully into scan1_orders.")
-
-    # Close the connection
-    cursor.close()
-    conn.close()
-
-except mariadb.Error as e:
-    print(f"Error inserting data: {e}")

old code/documentation/INSTALLATION_GUIDE.md

@@ -1,361 +0,0 @@
-# Quality Recticel Windows Print Service - Installation Guide
-
-## 📋 Overview
-
-The Quality Recticel Windows Print Service enables **silent PDF printing** directly from the web application through a Chrome extension. This system eliminates the need for manual PDF downloads and provides seamless label printing functionality.
-
-## 🏗️ System Architecture
-
-```
-Web Application (print_module.html)
-         ↓
-Windows Print Service (localhost:8765)
-         ↓
-Chrome Extension (Native Messaging)
-         ↓
-Windows Print System
-```
-
-## 📦 Package Contents
-
-```
-windows_print_service/
-├── print_service.py           # Main Windows service (Flask API)
-├── service_manager.py         # Service installation & management
-├── install_service.bat        # Automated installation script
-├── chrome_extension/          # Chrome extension files
-│   ├── manifest.json         # Extension configuration
-│   ├── background.js         # Service worker
-│   ├── content.js           # Page integration
-│   ├── popup.html           # Extension UI
-│   ├── popup.js            # Extension logic
-│   └── icons/              # Extension icons
-└── INSTALLATION_GUIDE.md     # This documentation
-```
-
-## 🔧 Prerequisites
-
-### System Requirements
-- **Operating System**: Windows 10/11 (64-bit)
-- **Python**: Python 3.8 or higher
-- **Browser**: Google Chrome (latest version)
-- **Privileges**: Administrator access required for installation
-
-### Python Dependencies
-The following packages will be installed automatically:
-- `flask` - Web service framework
-- `flask-cors` - Cross-origin resource sharing
-- `requests` - HTTP client library  
-- `pywin32` - Windows service integration
-
-## 🚀 Installation Process
-
-### Step 1: Download and Extract Files
-
-1. Download the `windows_print_service` folder to your system
-2. Extract to a permanent location (e.g., `C:\QualityRecticel\PrintService\`)
-3. **Do not move or delete this folder after installation**
-
-### Step 2: Install Windows Service
-
-#### Method A: Automated Installation (Recommended)
-
-1. **Right-click** on `install_service.bat`
-2. Select **"Run as administrator"**
-3. Click **"Yes"** when Windows UAC prompt appears
-4. Wait for installation to complete
-
-#### Method B: Manual Installation
-
-If the automated script fails, follow these steps:
-
-```bash
-# Open Command Prompt as Administrator
-cd C:\path\to\windows_print_service
-
-# Install Python dependencies
-pip install flask flask-cors requests pywin32
-
-# Install Windows service
-python service_manager.py install
-
-# Add firewall exception
-netsh advfirewall firewall add rule name="Quality Recticel Print Service" dir=in action=allow protocol=TCP localport=8765
-
-# Create Chrome extension registry entry
-reg add "HKEY_CURRENT_USER\Software\Google\Chrome\NativeMessagingHosts\com.qualityrecticel.printservice" /ve /d "%cd%\chrome_extension\manifest.json" /f
-```
-
-### Step 3: Install Chrome Extension
-
-1. Open **Google Chrome**
-2. Navigate to `chrome://extensions/`
-3. Enable **"Developer mode"** (toggle in top-right corner)
-4. Click **"Load unpacked"**
-5. Select the `chrome_extension` folder
-6. Verify the extension appears with a printer icon
-
-### Step 4: Verify Installation
-
-#### Check Windows Service Status
-
-1. Press `Win + R`, type `services.msc`, press Enter
-2. Look for **"Quality Recticel Print Service"**
-3. Status should show **"Running"**
-4. Startup type should be **"Automatic"**
-
-#### Test API Endpoints
-
-Open a web browser and visit:
-- **Health Check**: `http://localhost:8765/health`
-- **Printer List**: `http://localhost:8765/printers`
-
-Expected response for health check:
-```json
-{
-  "status": "healthy",
-  "service": "Quality Recticel Print Service",
-  "version": "1.0",
-  "timestamp": "2025-09-21T10:30:00"
-}
-```
-
-#### Test Chrome Extension
-
-1. Click the extension icon in Chrome toolbar
-2. Verify it shows "Service Status: Connected ✅"
-3. Check that printers are listed
-4. Try the "Test Print" button
-
-## 🔄 Web Application Integration
-
-The web application automatically detects the Windows service and adapts the user interface:
-
-### Service Available (Green Button)
-- Button text: **"🖨️ Print Labels (Silent)"**
-- Functionality: Direct printing to default printer
-- User experience: Click → Labels print immediately
-
-### Service Unavailable (Blue Button)  
-- Button text: **"📄 Generate PDF"**
-- Functionality: PDF download for manual printing
-- User experience: Click → PDF downloads to browser
-
-### Detection Logic
-```javascript
-// Automatic service detection on page load
-const response = await fetch('http://localhost:8765/health');
-if (response.ok) {
-    // Service available - enable silent printing
-} else {
-    // Service unavailable - fallback to PDF download
-}
-```
-
-## 🛠️ Configuration
-
-### Service Configuration
-
-The service runs with the following default settings:
-
-| Setting | Value | Description |
-|---------|-------|-------------|
-| **Port** | 8765 | Local API port |
-| **Host** | localhost | Service binding |
-| **Startup** | Automatic | Starts with Windows |
-| **Printer** | Default | Uses system default printer |
-| **Copies** | 1 | Default print copies |
-
-### Chrome Extension Permissions
-
-The extension requires these permissions:
-- `printing` - Access to printer functionality
-- `nativeMessaging` - Communication with Windows service
-- `activeTab` - Access to current webpage
-- `storage` - Save extension settings
-
-## 🔍 Troubleshooting
-
-### Common Issues
-
-#### 1. Service Not Starting
-**Symptoms**: API not accessible at localhost:8765
-**Solutions**:
-```bash
-# Check service status
-python -c "from service_manager import service_status; service_status()"
-
-# Restart service manually
-python service_manager.py restart
-
-# Check Windows Event Viewer for service errors
-```
-
-#### 2. Chrome Extension Not Working
-**Symptoms**: Extension shows "Service Status: Disconnected ❌"
-**Solutions**:
-- Verify Windows service is running
-- Check firewall settings (port 8765 must be open)
-- Reload the Chrome extension
-- Restart Chrome browser
-
-#### 3. Firewall Blocking Connection
-**Symptoms**: Service runs but web page can't connect
-**Solutions**:
-```bash
-# Add firewall rule manually
-netsh advfirewall firewall add rule name="Quality Recticel Print Service" dir=in action=allow protocol=TCP localport=8765
-
-# Or disable Windows Firewall temporarily to test
-```
-
-#### 4. Permission Denied Errors
-**Symptoms**: Installation fails with permission errors
-**Solutions**:
-- Ensure running as Administrator
-- Check Windows UAC settings
-- Verify Python installation permissions
-
-#### 5. Print Jobs Not Processing
-**Symptoms**: API accepts requests but nothing prints
-**Solutions**:
-- Check default printer configuration
-- Verify printer drivers are installed
-- Test manual printing from other applications
-- Check Windows Print Spooler service
-
-### Log Files
-
-Check these locations for troubleshooting:
-
-| Component | Log Location |
-|-----------|--------------|
-| **Windows Service** | `print_service.log` (same folder as service) |
-| **Chrome Extension** | Chrome DevTools → Extensions → Background page |
-| **Windows Event Log** | Event Viewer → Windows Logs → System |
-
-### Diagnostic Commands
-
-```bash
-# Check service status
-python service_manager.py status
-
-# Test API manually
-curl http://localhost:8765/health
-
-# List available printers  
-curl http://localhost:8765/printers
-
-# Check Windows service
-sc query QualityRecticelPrintService
-
-# Check listening ports
-netstat -an | findstr :8765
-```
-
-## 🔄 Maintenance
-
-### Updating the Service
-
-1. Stop the current service:
-```bash
-python service_manager.py stop
-```
-
-2. Replace service files with new versions
-
-3. Restart the service:
-```bash
-python service_manager.py start
-```
-
-### Uninstalling
-
-#### Remove Chrome Extension
-1. Go to `chrome://extensions/`
-2. Find "Quality Recticel Print Service"
-3. Click "Remove"
-
-#### Remove Windows Service
-```bash
-# Run as Administrator
-python service_manager.py uninstall
-```
-
-#### Remove Firewall Rule
-```bash
-netsh advfirewall firewall delete rule name="Quality Recticel Print Service"
-```
-
-## 📞 Support Information
-
-### API Endpoints Reference
-
-| Endpoint | Method | Purpose |
-|----------|--------|---------|
-| `/health` | GET | Service health check |
-| `/printers` | GET | List available printers |
-| `/print/pdf` | POST | Print PDF from URL |
-| `/print/silent` | POST | Silent print with metadata |
-
-### Request Examples
-
-**Silent Print Request**:
-```json
-POST /print/silent
-{
-    "pdf_url": "http://localhost:5000/generate_labels_pdf/123",
-    "printer_name": "default",
-    "copies": 1,
-    "silent": true,
-    "order_id": "123",
-    "quantity": "10"
-}
-```
-
-**Expected Response**:
-```json
-{
-    "success": true,
-    "message": "Print job sent successfully",
-    "job_id": "print_20250921_103000",
-    "printer": "HP LaserJet Pro",
-    "timestamp": "2025-09-21T10:30:00"
-}
-```
-
-## 📚 Technical Details
-
-### Service Architecture
-- **Framework**: Flask (Python)
-- **Service Type**: Windows Service (pywin32)
-- **Communication**: HTTP REST API + Native Messaging
-- **Security**: Localhost binding only (127.0.0.1:8765)
-
-### Chrome Extension Architecture  
-- **Manifest Version**: 3
-- **Service Worker**: Handles background print requests
-- **Content Script**: Integrates with Quality Recticel web pages
-- **Native Messaging**: Communicates with Windows service
-
-### Security Considerations
-- Service only accepts local connections (localhost)
-- No external network access required
-- Chrome extension runs in sandboxed environment
-- Windows service runs with system privileges (required for printing)
-
----
-
-## 📋 Quick Start Checklist
-
-- [ ] Download `windows_print_service` folder
-- [ ] Right-click `install_service.bat` → "Run as administrator"  
-- [ ] Install Chrome extension from `chrome_extension` folder
-- [ ] Verify service at `http://localhost:8765/health`
-- [ ] Test printing from Quality Recticel web application
-
-**Installation Time**: ~5 minutes  
-**User Training Required**: Minimal (automatic detection and fallback)  
-**Maintenance**: Zero (auto-starts with Windows)
-
-For additional support, check the log files and diagnostic commands listed above.

old code/documentation/QUICK_SETUP.md

@@ -1,69 +0,0 @@
-# 🚀 Quality Recticel Print Service - Quick Setup
-
-## 📦 What You Get
-- **Silent PDF Printing** - No more manual downloads!
-- **Automatic Detection** - Smart fallback when service unavailable
-- **Zero Configuration** - Works out of the box
-
-## ⚡ 2-Minute Installation
-
-### Step 1: Install Windows Service
-1. **Right-click** `install_service.bat`
-2. Select **"Run as administrator"**  
-3. Click **"Yes"** and wait for completion
-
-### Step 2: Install Chrome Extension
-1. Open Chrome → `chrome://extensions/`
-2. Enable **"Developer mode"** 
-3. Click **"Load unpacked"** → Select `chrome_extension` folder
-
-### Step 3: Verify Installation  
-- Visit: `http://localhost:8765/health`
-- Should see: `{"status": "healthy"}`
-
-## 🎯 How It Works
-
-| Service Status | Button Appearance | What Happens |
-|---------------|-------------------|--------------|
-| **Running** ✅ | 🖨️ **Print Labels (Silent)** (Green) | Direct printing |
-| **Not Running** ❌ | 📄 **Generate PDF** (Blue) | PDF download |
-
-## ⚠️ Troubleshooting
-
-| Problem | Solution |
-|---------|----------|
-| **Service won't start** | Run `install_service.bat` as Administrator |
-| **Chrome extension not working** | Reload extension in `chrome://extensions/` |
-| **Can't connect to localhost:8765** | Check Windows Firewall (port 8765) |
-| **Nothing prints** | Verify default printer is set up |
-
-## 🔧 Management Commands
-
-```bash
-# Check service status
-python service_manager.py status
-
-# Restart service
-python service_manager.py restart
-
-# Uninstall service
-python service_manager.py uninstall
-```
-
-## 📍 Important Notes
-
-- ⚡ **Auto-starts** with Windows - no manual intervention needed
-- 🔒 **Local only** - service only accessible from same computer  
-- 🖨️ **Uses default printer** - configure your default printer in Windows
-- 💾 **Don't move files** after installation - keep folder in same location
-
-## 🆘 Quick Support
-
-**Service API**: `http://localhost:8765`  
-**Health Check**: `http://localhost:8765/health`  
-**Printer List**: `http://localhost:8765/printers`  
-
-**Log File**: `print_service.log` (same folder as installation)
-
----
-*Installation takes ~5 minutes • Zero maintenance required • Works with existing Quality Recticel web application*

old code/documentation/README.md

@@ -1,348 +0,0 @@
-# Quality Recticel Windows Print Service
-
-## 🏗️ Technical Architecture
-
-Local Windows service providing REST API for silent PDF printing via Chrome extension integration.
-
-```
-┌─────────────────────────────────────────────────────────────┐
-│                    Quality Recticel Web App                 │
-│                  (print_module.html)                       │
-└─────────────────────┬───────────────────────────────────────┘
-                      │ HTTP Request
-                      ▼
-┌─────────────────────────────────────────────────────────────┐
-│              Windows Print Service                          │
-│                (localhost:8765)                            │
-│  ┌─────────────┐  ┌──────────────┐  ┌─────────────────┐   │
-│  │   Flask     │  │    CORS      │  │   PDF Handler   │   │
-│  │   Server    │  │   Support    │  │                 │   │
-│  └─────────────┘  └──────────────┘  └─────────────────┘   │
-└─────────────────────┬───────────────────────────────────────┘
-                      │ Native Messaging
-                      ▼
-┌─────────────────────────────────────────────────────────────┐
-│                Chrome Extension                             │
-│  ┌─────────────┐  ┌──────────────┐  ┌─────────────────┐   │
-│  │ Background  │  │  Content     │  │     Popup       │   │
-│  │ Service     │  │  Script      │  │     UI          │   │
-│  │ Worker      │  │              │  │                 │   │
-│  └─────────────┘  └──────────────┘  └─────────────────┘   │
-└─────────────────────┬───────────────────────────────────────┘
-                      │ Windows API
-                      ▼
-┌─────────────────────────────────────────────────────────────┐
-│                Windows Print System                         │
-└─────────────────────────────────────────────────────────────┘
-```
-
-## 📁 Project Structure
-
-```
-windows_print_service/
-├── 📄 print_service.py           # Main Flask service
-├── 📄 service_manager.py         # Windows service wrapper  
-├── 📄 install_service.bat        # Installation script
-├── 📄 INSTALLATION_GUIDE.md      # Complete documentation
-├── 📄 QUICK_SETUP.md            # User quick reference  
-├── 📄 README.md                 # This file
-└── 📁 chrome_extension/         # Chrome extension
-    ├── 📄 manifest.json         # Extension manifest v3
-    ├── 📄 background.js         # Service worker
-    ├── 📄 content.js           # Page content integration
-    ├── 📄 popup.html           # Extension popup UI
-    ├── 📄 popup.js            # Popup functionality
-    └── 📁 icons/              # Extension icons
-```
-
-## 🚀 API Endpoints
-
-### Base URL: `http://localhost:8765`
-
-| Endpoint | Method | Description | Request Body | Response |
-|----------|--------|-------------|--------------|----------|
-| `/health` | GET | Service health check | None | `{"status": "healthy", ...}` |
-| `/printers` | GET | List available printers | None | `{"printers": [...]}` |
-| `/print/pdf` | POST | Print PDF from URL | `{"url": "...", "printer": "..."}` | `{"success": true, ...}` |
-| `/print/silent` | POST | Silent print with metadata | `{"pdf_url": "...", "order_id": "..."}` | `{"success": true, ...}` |
-
-### Example API Usage
-
-```javascript
-// Health Check
-const health = await fetch('http://localhost:8765/health');
-const status = await health.json();
-
-// Silent Print
-const printRequest = {
-    pdf_url: 'http://localhost:5000/generate_labels_pdf/123',
-    printer_name: 'default',
-    copies: 1,
-    silent: true,
-    order_id: '123',
-    quantity: '10'
-};
-
-const response = await fetch('http://localhost:8765/print/silent', {
-    method: 'POST',
-    headers: {'Content-Type': 'application/json'},
-    body: JSON.stringify(printRequest)
-});
-```
-
-## 🔧 Development Setup
-
-### Prerequisites
-- Python 3.8+
-- Windows 10/11
-- Chrome Browser
-- Administrator privileges
-
-### Local Development
-
-```bash
-# Clone/download the project
-cd windows_print_service
-
-# Install dependencies
-pip install flask flask-cors requests pywin32
-
-# Run development server (not as service)
-python print_service.py
-
-# Install as Windows service
-python service_manager.py install
-
-# Service management
-python service_manager.py start
-python service_manager.py stop  
-python service_manager.py restart
-python service_manager.py uninstall
-```
-
-### Chrome Extension Development
-
-```bash
-# Load extension in Chrome
-chrome://extensions/ → Developer mode ON → Load unpacked
-
-# Debug extension
-chrome://extensions/ → Details → Background page (for service worker)
-chrome://extensions/ → Details → Inspect views (for popup)
-```
-
-## 📋 Configuration
-
-### Service Configuration (`print_service.py`)
-
-```python
-class WindowsPrintService:
-    def __init__(self, host='127.0.0.1', port=8765):
-        self.host = host      # Localhost binding only
-        self.port = port      # Service port
-        self.app = Flask(__name__)
-```
-
-### Chrome Extension Permissions (`manifest.json`)
-
-```json
-{
-    "permissions": [
-        "printing",           // Access to printer API
-        "nativeMessaging",   // Communication with Windows service
-        "activeTab",         // Current tab access
-        "storage"           // Extension settings storage
-    ]
-}
-```
-
-## 🔄 Integration Flow
-
-### 1. Service Detection
-```javascript
-// Web page detects service availability
-const isServiceAvailable = await checkServiceHealth();
-updatePrintButton(isServiceAvailable);
-```
-
-### 2. Print Request Flow
-```
-User clicks print → Web app → Windows service → Chrome extension → Printer
-```
-
-### 3. Fallback Mechanism
-```
-Service unavailable → Fallback to PDF download → Manual printing
-```
-
-## 🛠️ Customization
-
-### Adding New Print Options
-
-```python
-# In print_service.py
-@app.route('/print/custom', methods=['POST'])
-def print_custom():
-    data = request.json
-    # Custom print logic here
-    return jsonify({'success': True})
-```
-
-### Modifying Chrome Extension
-
-```javascript
-// In background.js - Add new message handler
-chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
-    if (message.type === 'CUSTOM_PRINT') {
-        // Custom print logic
-    }
-});
-```
-
-### Web Application Integration
-
-```javascript
-// In print_module.html - Modify print function
-async function customPrintFunction(orderId) {
-    const response = await fetch('http://localhost:8765/print/custom', {
-        method: 'POST',
-        body: JSON.stringify({orderId, customOptions: {...}})
-    });
-}
-```
-
-## 🧪 Testing
-
-### Unit Tests (Future Enhancement)
-
-```python
-# test_print_service.py
-import unittest
-from print_service import WindowsPrintService
-
-class TestPrintService(unittest.TestCase):
-    def test_health_endpoint(self):
-        # Test implementation
-        pass
-```
-
-### Manual Testing Checklist
-
-- [ ] Service starts automatically on Windows boot
-- [ ] API endpoints respond correctly
-- [ ] Chrome extension loads without errors
-- [ ] Print jobs execute successfully
-- [ ] Fallback works when service unavailable
-- [ ] Firewall allows port 8765 traffic
-
-## 📊 Monitoring & Logging
-
-### Log Files
-- **Service Log**: `print_service.log` (Flask application logs)
-- **Windows Event Log**: Windows Services logs
-- **Chrome DevTools**: Extension console logs
-
-### Health Monitoring
-
-```python
-# Monitor service health
-import requests
-try:
-    response = requests.get('http://localhost:8765/health', timeout=5)
-    if response.status_code == 200:
-        print("✅ Service healthy")
-except:
-    print("❌ Service unavailable")
-```
-
-## 🔒 Security Considerations
-
-### Network Security
-- **Localhost Only**: Service binds to 127.0.0.1 (no external access)
-- **No Authentication**: Relies on local machine security
-- **Firewall Rule**: Port 8765 opened for local connections only
-
-### Chrome Extension Security
-- **Manifest V3**: Latest security standards
-- **Minimal Permissions**: Only necessary permissions requested
-- **Sandboxed**: Runs in Chrome's security sandbox
-
-### Windows Service Security
-- **System Service**: Runs with appropriate Windows service privileges
-- **Print Permissions**: Requires printer access (normal for print services)
-
-## 🚀 Deployment
-
-### Production Deployment
-
-1. **Package Distribution**:
-```bash
-# Create deployment package
-zip -r quality_recticel_print_service.zip windows_print_service/
-```
-
-2. **Installation Script**: Use `install_service.bat` for end users
-
-3. **Group Policy Deployment**: Deploy Chrome extension via enterprise policies
-
-### Enterprise Considerations
-
-- **Silent Installation**: Modify `install_service.bat` for unattended install
-- **Registry Deployment**: Pre-configure Chrome extension registry entries
-- **Network Policies**: Ensure firewall policies allow localhost:8765
-
-## 📚 Dependencies
-
-### Python Packages
-```
-flask>=2.3.0          # Web framework
-flask-cors>=4.0.0     # CORS support
-requests>=2.31.0      # HTTP client
-pywin32>=306          # Windows service integration
-```
-
-### Chrome APIs
-- `chrome.printing.*` - Printing functionality
-- `chrome.runtime.*` - Extension messaging
-- `chrome.nativeMessaging.*` - Native app communication
-
-## 🐛 Debugging
-
-### Common Debug Commands
-
-```bash
-# Check service status
-sc query QualityRecticelPrintService
-
-# Test API manually  
-curl http://localhost:8765/health
-
-# Check listening ports
-netstat -an | findstr :8765
-
-# View service logs
-type print_service.log
-```
-
-### Chrome Extension Debugging
-
-```javascript
-// In background.js - Add debug logging
-console.log('Print request received:', message);
-
-// In popup.js - Test API connection
-fetch('http://localhost:8765/health')
-    .then(r => r.json())
-    .then(data => console.log('Service status:', data));
-```
-
----
-
-## 📄 License & Support
-
-**Project**: Quality Recticel Print Service  
-**Version**: 1.0  
-**Compatibility**: Windows 10/11, Chrome 88+  
-**Maintenance**: Zero-maintenance after installation  
-
-For technical support, refer to `INSTALLATION_GUIDE.md` troubleshooting section.

old code/external_database_settings

@@ -1,5 +0,0 @@
-Server Domain/IP Address: testserver.com
-Port: 3602
-Database Name: recticel
-Username: sa
-Password: 12345678

old code/migrate_external_db.py

@@ -1,121 +0,0 @@
-#!/usr/bin/env python3
-"""
-Script to add modules column to external database and migrate existing users
-"""
-
-import os
-import sys
-import mariadb
-
-def migrate_external_database():
-    """Add modules column to external database and update existing users"""
-    try:
-        # Read external database configuration from instance folder
-        config_file = os.path.join(os.path.dirname(__file__), 'instance/external_server.conf')
-        if not os.path.exists(config_file):
-            print("External database configuration file not found at instance/external_server.conf")
-            return False
-            
-        with open(config_file, 'r') as f:
-            lines = f.read().strip().split('\n')
-            
-        # Parse the config file format "key=value"
-        config = {}
-        for line in lines:
-            if '=' in line and not line.strip().startswith('#'):
-                key, value = line.split('=', 1)
-                config[key.strip()] = value.strip()
-        
-        host = config.get('server_domain', 'localhost')
-        port = int(config.get('port', '3306'))
-        database = config.get('database_name', '')
-        user = config.get('username', '')
-        password = config.get('password', '')
-        
-        if not all([host, database, user, password]):
-            print("Missing required database configuration values.")
-            return False
-        
-        print(f"Connecting to external database: {host}:{port}/{database}")
-        
-        # Connect to external database
-        conn = mariadb.connect(
-            user=user,
-            password=password,
-            host=host,
-            port=port,
-            database=database
-        )
-        cursor = conn.cursor()
-        
-        # Check if users table exists
-        cursor.execute("SHOW TABLES LIKE 'users'")
-        if not cursor.fetchone():
-            print("Users table not found in external database.")
-            conn.close()
-            return False
-        
-        # Check if modules column already exists
-        cursor.execute("DESCRIBE users")
-        columns = [row[0] for row in cursor.fetchall()]
-        
-        if 'modules' not in columns:
-            print("Adding modules column to users table...")
-            cursor.execute("ALTER TABLE users ADD COLUMN modules TEXT")
-            print("Modules column added successfully.")
-        else:
-            print("Modules column already exists.")
-        
-        # Get current users and convert their roles
-        cursor.execute("SELECT id, username, role FROM users")
-        users = cursor.fetchall()
-        
-        role_mapping = {
-            'superadmin': ('superadmin', None),
-            'administrator': ('admin', None),
-            'admin': ('admin', None),
-            'quality': ('manager', '["quality"]'),
-            'warehouse': ('manager', '["warehouse"]'),
-            'warehouse_manager': ('manager', '["warehouse"]'),
-            'scan': ('worker', '["quality"]'),
-            'etichete': ('manager', '["labels"]'),
-            'quality_manager': ('manager', '["quality"]'),
-            'quality_worker': ('worker', '["quality"]'),
-        }
-        
-        print(f"Migrating {len(users)} users...")
-        
-        for user_id, username, old_role in users:
-            if old_role in role_mapping:
-                new_role, modules_json = role_mapping[old_role]
-                
-                cursor.execute("UPDATE users SET role = ?, modules = ? WHERE id = ?", 
-                             (new_role, modules_json, user_id))
-                
-                print(f"  {username}: {old_role} -> {new_role} with modules {modules_json}")
-            else:
-                print(f"  {username}: Unknown role '{old_role}', keeping as-is")
-        
-        conn.commit()
-        conn.close()
-        
-        print("External database migration completed successfully!")
-        return True
-        
-    except Exception as e:
-        print(f"Error migrating external database: {e}")
-        return False
-
-if __name__ == "__main__":
-    print("External Database Migration for Simplified 4-Tier Permission System")
-    print("=" * 70)
-    
-    success = migrate_external_database()
-    
-    if success:
-        print("\n✅ Migration completed successfully!")
-        print("\nUsers can now log in with the new simplified permission system.")
-        print("Role structure: superadmin → admin → manager → worker")
-        print("Modules: quality, warehouse, labels")
-    else:
-        print("\n❌ Migration failed. Please check the error messages above.")

old code/migrate_permissions.py

@@ -1,172 +0,0 @@
-#!/usr/bin/env python3
-"""
-Migration script to convert from complex permission system to simplified 4-tier system
-This script will:
-1. Add 'modules' column to users table
-2. Convert existing roles to new 4-tier system
-3. Assign appropriate modules based on old roles
-"""
-
-import sqlite3
-import json
-import os
-import sys
-
-# Add the app directory to Python path
-sys.path.insert(0, os.path.join(os.path.dirname(__file__), '..'))
-
-def get_db_connections():
-    """Get both internal SQLite and external database connections"""
-    connections = {}
-    
-    # Internal SQLite database
-    internal_db_path = os.path.join(os.path.dirname(__file__), 'instance/users.db')
-    if os.path.exists(internal_db_path):
-        connections['internal'] = sqlite3.connect(internal_db_path)
-        print(f"Connected to internal SQLite database: {internal_db_path}")
-    
-    # External database (try to connect using existing method)
-    try:
-        import mariadb
-        
-        # Read external database configuration
-        config_file = os.path.join(os.path.dirname(__file__), '../external_database_settings')
-        if os.path.exists(config_file):
-            with open(config_file, 'r') as f:
-                lines = f.read().strip().split('\n')
-                if len(lines) >= 5:
-                    host = lines[0].strip()
-                    port = int(lines[1].strip())
-                    database = lines[2].strip()
-                    user = lines[3].strip()
-                    password = lines[4].strip()
-                    
-                    conn = mariadb.connect(
-                        user=user,
-                        password=password,
-                        host=host,
-                        port=port,
-                        database=database
-                    )
-                    connections['external'] = conn
-                    print(f"Connected to external MariaDB database: {host}:{port}/{database}")
-    except Exception as e:
-        print(f"Could not connect to external database: {e}")
-    
-    return connections
-
-def role_mapping():
-    """Map old roles to new 4-tier system"""
-    return {
-        # Old role -> (new_role, modules)
-        'superadmin': ('superadmin', []),  # All modules by default
-        'administrator': ('admin', []),    # All modules by default
-        'admin': ('admin', []),           # All modules by default
-        'quality': ('manager', ['quality']),
-        'warehouse': ('manager', ['warehouse']),
-        'warehouse_manager': ('manager', ['warehouse']),
-        'scan': ('worker', ['quality']),  # Assume scan users are quality workers
-        'etichete': ('manager', ['labels']),
-        'quality_manager': ('manager', ['quality']),
-        'quality_worker': ('worker', ['quality']),
-    }
-
-def migrate_database(conn, db_type):
-    """Migrate a specific database"""
-    cursor = conn.cursor()
-    
-    print(f"Migrating {db_type} database...")
-    
-    # Check if users table exists
-    if db_type == 'internal':
-        cursor.execute("SELECT name FROM sqlite_master WHERE type='table' AND name='users'")
-    else:  # external/MariaDB
-        cursor.execute("SHOW TABLES LIKE 'users'")
-    
-    if not cursor.fetchone():
-        print(f"No users table found in {db_type} database")
-        return
-    
-    # Check if modules column already exists
-    try:
-        if db_type == 'internal':
-            cursor.execute("PRAGMA table_info(users)")
-            columns = [row[1] for row in cursor.fetchall()]
-        else:  # external/MariaDB
-            cursor.execute("DESCRIBE users")
-            columns = [row[0] for row in cursor.fetchall()]
-        
-        if 'modules' not in columns:
-            print(f"Adding modules column to {db_type} database...")
-            if db_type == 'internal':
-                cursor.execute("ALTER TABLE users ADD COLUMN modules TEXT")
-            else:  # external/MariaDB
-                cursor.execute("ALTER TABLE users ADD COLUMN modules TEXT")
-        else:
-            print(f"Modules column already exists in {db_type} database")
-    
-    except Exception as e:
-        print(f"Error checking/adding modules column in {db_type}: {e}")
-        return
-    
-    # Get current users
-    cursor.execute("SELECT id, username, role FROM users")
-    users = cursor.fetchall()
-    
-    print(f"Found {len(users)} users in {db_type} database")
-    
-    # Convert roles and assign modules
-    mapping = role_mapping()
-    updates = []
-    
-    for user_id, username, old_role in users:
-        if old_role in mapping:
-            new_role, modules = mapping[old_role]
-            modules_json = json.dumps(modules) if modules else None
-            updates.append((new_role, modules_json, user_id, username))
-            print(f"  {username}: {old_role} -> {new_role} with modules {modules}")
-        else:
-            print(f"  {username}: Unknown role '{old_role}', keeping as-is")
-    
-    # Apply updates
-    for new_role, modules_json, user_id, username in updates:
-        try:
-            cursor.execute("UPDATE users SET role = ?, modules = ? WHERE id = ?", 
-                         (new_role, modules_json, user_id))
-            print(f"  Updated {username} successfully")
-        except Exception as e:
-            print(f"  Error updating {username}: {e}")
-    
-    conn.commit()
-    print(f"Migration completed for {db_type} database")
-
-def main():
-    """Main migration function"""
-    print("Starting migration to simplified 4-tier permission system...")
-    print("="*60)
-    
-    connections = get_db_connections()
-    
-    if not connections:
-        print("No database connections available. Please check your configuration.")
-        return
-    
-    for db_type, conn in connections.items():
-        try:
-            migrate_database(conn, db_type)
-            print()
-        except Exception as e:
-            print(f"Error migrating {db_type} database: {e}")
-        finally:
-            conn.close()
-    
-    print("Migration completed!")
-    print("\nNew role structure:")
-    print("- superadmin: Full system access")
-    print("- admin: Full app access (except role_permissions and download_extension)")
-    print("- manager: Module-based access (can have multiple modules)")
-    print("- worker: Limited module access (one module only)")
-    print("\nAvailable modules: quality, warehouse, labels")
-
-if __name__ == "__main__":
-    main()

old code/qz-tray-PATCH-NOTES.txt

@@ -1,35 +0,0 @@
-QZ TRAY LIBRARY PATCH NOTES
-===========================
-Version: 2.2.4 (patched for custom QZ Tray with pairing key authentication)
-Date: October 2, 2025
-
-CHANGES MADE:
--------------
-
-1. Line ~387: Commented out certificate sending
-   - Original: _qz.websocket.connection.sendData({ certificate: cert, promise: openPromise });
-   - Patched: openPromise.resolve(); (resolves immediately without sending certificate)
-   
-2. Line ~391-403: Bypassed certificate retrieval
-   - Original: Called _qz.security.callCert() to get certificate from user
-   - Patched: Directly calls sendCert(null) without trying to get certificate
-   
-3. Comments added to indicate patches
-
-REASON FOR PATCHES:
-------------------
-The custom QZ Tray server has certificate validation COMPLETELY DISABLED.
-It uses ONLY pairing key (HMAC) authentication instead of certificates.
-The original qz-tray.js library expects certificate-based authentication and
-fails when the server doesn't respond to certificate requests.
-
-COMPATIBILITY:
--------------
-- Works with custom QZ Tray server (forked version with certificate validation disabled)
-- NOT compatible with standard QZ Tray servers
-- Connects to both ws://localhost:8181 and wss://localhost:8182
-- Authentication handled by server-side pairing keys
-
-BACKUP:
--------
-Original unpatched version saved as: qz-tray.js.backup

old code/recticel-app.service

@@ -1,15 +0,0 @@
-[Unit]
-Description=Recticel Quality App
-After=network.target mariadb.service
-
-[Service]
-Type=simple
-User=ske087
-WorkingDirectory=/home/ske087/quality_recticel
-Environment=PATH=/home/ske087/quality_recticel/recticel/bin
-ExecStart=/home/ske087/quality_recticel/recticel/bin/python py_app/run.py
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target

old code/role_permissions.html

@@ -1,454 +0,0 @@
-{% extends "base.html" %}
-
-{% block title %}Role Permissions Management{% endblock %}
-
-{% block head %}
-<style>
-.permissions-container {
-    max-width: 1600px;
-    margin: 0 auto;
-    padding: 20px;
-    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-}
-
-.permissions-table-container {
-    background: white;
-    border-radius: 15px;
-    box-shadow: 0 8px 24px rgba(0,0,0,0.15);
-    overflow: hidden;
-    margin: 0 auto 30px auto;
-    border: 2px solid #dee2e6;
-    max-width: 100%;
-}
-
-.permissions-table {
-    width: 100%;
-    border-collapse: collapse;
-    font-size: 14px;
-    margin: 0;
-}
-
-.permissions-table thead {
-    background: linear-gradient(135deg, #007bff, #0056b3);
-    color: white;
-}
-
-.permissions-table th {
-    padding: 15px 12px;
-    text-align: left;
-    font-weight: 600;
-    border-bottom: 2px solid rgba(255,255,255,0.2);
-}
-
-.permissions-table th:nth-child(1) { width: 15%; }
-.permissions-table th:nth-child(2) { width: 20%; }
-.permissions-table th:nth-child(3) { width: 25%; }
-.permissions-table th:nth-child(4) { width: 40%; }
-
-.permission-row {
-    border-bottom: 2px solid #dee2e6 !important;
-    transition: all 0.3s ease;
-}
-
-.permission-row:hover {
-    background: linear-gradient(135deg, #e3f2fd, #f0f8ff) !important;
-    transform: translateY(-1px) !important;
-    box-shadow: 0 4px 12px rgba(0,123,255,0.15) !important;
-}
-
-.role-cell, .module-cell, .page-cell, .functions-cell {
-    padding: 15px 12px !important;
-    vertical-align: top !important;
-    border-right: 1px solid #f1f3f4 !important;
-}
-
-.role-cell {
-    border-left: 4px solid #007bff !important;
-}
-
-.module-cell {
-    border-left: 2px solid #28a745 !important;
-}
-
-.page-cell {
-    border-left: 2px solid #ffc107 !important;
-}
-
-.functions-cell {
-    border-left: 2px solid #dc3545 !important;
-}
-
-.role-badge {
-    display: flex;
-    align-items: center;
-    gap: 8px;
-    background: #e3f2fd;
-    padding: 8px 12px;
-    border-radius: 20px;
-}
-
-.functions-grid {
-    display: grid;
-    grid-template-columns: repeat(auto-fit, minmax(150px, 1fr));
-    gap: 10px;
-}
-
-.function-item {
-    display: flex;
-    align-items: center;
-    gap: 8px;
-    padding: 8px 12px;
-    background: #f8f9fa;
-    border-radius: 8px;
-    border: 1px solid #dee2e6;
-}
-
-.function-toggle {
-    display: flex;
-    align-items: center;
-    cursor: pointer;
-}
-
-.toggle-slider {
-    position: relative;
-    display: inline-block;
-    width: 40px;
-    height: 20px;
-    background: #ccc;
-    border-radius: 20px;
-    transition: all 0.3s ease;
-}
-
-.toggle-slider::before {
-    content: '';
-    position: absolute;
-    top: 2px;
-    left: 2px;
-    width: 16px;
-    height: 16px;
-    background: white;
-    border-radius: 50%;
-    transition: all 0.3s ease;
-}
-
-input[type="checkbox"]:checked + .toggle-slider {
-    background: #007bff;
-}
-
-input[type="checkbox"]:checked + .toggle-slider::before {
-    transform: translateX(20px);
-}
-
-input[type="checkbox"] {
-    display: none;
-}
-
-.function-text {
-    font-size: 12px;
-    font-weight: 500;
-}
-
-.role-separator, .module-separator {
-    background: #f8f9fa;
-    border-bottom: 1px solid #dee2e6;
-}
-
-.separator-line {
-    padding: 12px 20px;
-    font-weight: 600;
-    color: #495057;
-    background: linear-gradient(135deg, #e9ecef, #f8f9fa);
-}
-
-.module-badge {
-    padding: 8px 15px;
-    background: linear-gradient(135deg, #28a745, #20c997);
-    color: white;
-    border-radius: 15px;
-    font-weight: 500;
-}
-
-.action-buttons-container {
-    text-align: center;
-    margin: 30px 0;
-}
-
-.action-buttons {
-    display: flex;
-    justify-content: center;
-    gap: 20px;
-    flex-wrap: wrap;
-}
-
-.btn {
-    padding: 12px 24px;
-    border: none;
-    border-radius: 8px;
-    font-weight: 600;
-    cursor: pointer;
-    transition: all 0.3s ease;
-    text-decoration: none;
-    display: inline-flex;
-    align-items: center;
-    gap: 8px;
-}
-
-.btn-primary {
-    background: #007bff;
-    color: white;
-}
-
-.btn-primary:hover {
-    background: #0056b3;
-    transform: translateY(-2px);
-    box-shadow: 0 4px 12px rgba(0,123,255,0.3);
-}
-
-.btn-secondary {
-    background: #6c757d;
-    color: white;
-}
-
-.btn-secondary:hover {
-    background: #545b62;
-    transform: translateY(-2px);
-    box-shadow: 0 4px 12px rgba(108,117,125,0.3);
-}
-</style>
-{% endblock %}
-
-{% block content %}
-<div class="permissions-container">
-    <div style="text-align: center; margin-bottom: 40px;">
-        <h1 style="color: #2c3e50; margin-bottom: 15px; font-weight: 700; font-size: 32px;">
-            🔐 Role Permissions Management
-        </h1>
-        <p style="color: #6c757d; font-size: 16px;">
-            Configure granular access permissions for each role in the system
-        </p>
-    </div>
-
-    <!-- 4-Column Permissions Table -->
-    <div class="permissions-table-container">
-        <table class="permissions-table" id="permissionsTable">
-            <thead>
-                <tr>
-                    <th>👤 Role Name</th>
-                    <th>🏢 Module Name</th>
-                    <th>📄 Page Name</th>
-                    <th>⚙️ Functions & Permissions</th>
-                </tr>
-            </thead>
-            <tbody>
-                {% set current_role = '' %}
-                {% set current_module = '' %}
-                {% for role_name, role_data in roles.items() %}
-                    {% for page_key, page_data in pages.items() %}
-                        {% for section_key, section_data in page_data.sections.items() %}
-                        
-                        <!-- Role separator row -->
-                        {% if current_role != role_name %}
-                            {% set current_role = role_name %}
-                            <tr class="role-separator">
-                                <td colspan="4">
-                                    <div class="separator-line">
-                                        <span>{{ role_data.display_name }} (Level {{ role_data.level }})</span>
-                                    </div>
-                                </td>
-                            </tr>
-                        {% endif %}
-                        
-                        <!-- Module separator -->
-                        {% if current_module != page_key %}
-                            {% set current_module = page_key %}
-                            <tr class="module-separator">
-                                <td></td>
-                                <td colspan="3">
-                                    <div style="padding: 8px 15px;">
-                                        <span class="module-badge">{{ page_data.name }}</span>
-                                    </div>
-                                </td>
-                            </tr>
-                        {% endif %}
-                        
-                        <tr class="permission-row" data-role="{{ role_name }}" data-module="{{ page_key }}">
-                            <td class="role-cell">
-                                <div class="role-badge">
-                                    <span>👤</span>
-                                    <span>{{ role_data.display_name }}</span>
-                                </div>
-                            </td>
-                            <td class="module-cell">
-                                <span>{{ page_data.name }}</span>
-                            </td>
-                            <td class="page-cell">
-                                <div style="display: flex; align-items: center; gap: 8px;">
-                                    <span>📋</span>
-                                    <span>{{ section_data.name }}</span>
-                                </div>
-                            </td>
-                            <td class="functions-cell">
-                                <div class="functions-grid">
-                                    {% for action in section_data.actions %}
-                                    {% set permission_key = page_key + '.' + section_key + '.' + action %}
-                                    <div class="function-item" data-permission="{{ permission_key }}" data-role="{{ role_name }}">
-                                        <label class="function-toggle">
-                                            <input type="checkbox" 
-                                                   data-role="{{ role_name }}"
-                                                   data-page="{{ page_key }}"
-                                                   data-section="{{ section_key }}"
-                                                   data-action="{{ action }}"
-                                                   onchange="togglePermission('{{ role_name }}', '{{ page_key }}', '{{ section_key }}', '{{ action }}', this)">
-                                            <span class="toggle-slider"></span>
-                                        </label>
-                                        <span class="function-text">{{ action_names[action] }}</span>
-                                    </div>
-                                    {% endfor %}
-                                </div>
-                            </td>
-                        </tr>
-                        {% endfor %}
-                        {% set current_module = '' %}
-                    {% endfor %}
-                {% endfor %}
-            </tbody>
-        </table>
-    </div>
-
-    <!-- Action Buttons -->
-    <div class="action-buttons-container">
-        <div class="action-buttons">
-            <button class="btn btn-secondary" onclick="resetAllToDefaults()">
-                <span>🔄</span>
-                Reset All to Defaults
-            </button>
-            <button class="btn btn-primary" onclick="saveAllPermissions()">
-                <span>💾</span>
-                Save All Changes
-            </button>
-        </div>
-    </div>
-</div>
-
-<script>
-// Initialize data from backend
-let permissions = {{ permissions_json|safe }};
-let rolePermissions = {{ role_permissions_json|safe }};
-
-// Toggle permission function
-function togglePermission(roleName, pageKey, sectionKey, action, checkbox) {
-    const isChecked = checkbox.checked;
-    const permissionKey = `${pageKey}.${sectionKey}.${action}`;
-    
-    // Update visual state of the function item
-    const functionItem = checkbox.closest('.function-item');
-    if (isChecked) {
-        functionItem.classList.remove('disabled');
-    } else {
-        functionItem.classList.add('disabled');
-    }
-    
-    // Update data structure (flat array format)
-    if (!rolePermissions[roleName]) {
-        rolePermissions[roleName] = [];
-    }
-    
-    if (isChecked && !rolePermissions[roleName].includes(permissionKey)) {
-        rolePermissions[roleName].push(permissionKey);
-    } else if (!isChecked) {
-        const index = rolePermissions[roleName].indexOf(permissionKey);
-        if (index > -1) {
-            rolePermissions[roleName].splice(index, 1);
-        }
-    }
-}
-
-// Save all permissions
-function saveAllPermissions() {
-    // Convert flat permission arrays to nested structure for backend
-    const structuredPermissions = {};
-    
-    for (const [roleName, permissions] of Object.entries(rolePermissions)) {
-        structuredPermissions[roleName] = {};
-        
-        permissions.forEach(permissionKey => {
-            const [pageKey, sectionKey, action] = permissionKey.split('.');
-            
-            if (!structuredPermissions[roleName][pageKey]) {
-                structuredPermissions[roleName][pageKey] = {};
-            }
-            if (!structuredPermissions[roleName][pageKey][sectionKey]) {
-                structuredPermissions[roleName][pageKey][sectionKey] = [];
-            }
-            
-            structuredPermissions[roleName][pageKey][sectionKey].push(action);
-        });
-    }
-    
-    fetch('/settings/save_all_role_permissions', {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({
-            permissions: structuredPermissions
-        })
-    })
-    .then(response => response.json())
-    .then(data => {
-        if (data.success) {
-            alert('All permissions saved successfully!');
-        } else {
-            alert('Error saving permissions: ' + data.error);
-        }
-    })
-    .catch(error => {
-        alert('Error saving permissions: ' + error);
-    });
-}
-
-// Reset all permissions to defaults
-function resetAllToDefaults() {
-    if (confirm('Are you sure you want to reset ALL role permissions to defaults? This will overwrite all current settings.')) {
-        fetch('/settings/reset_all_role_permissions', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            }
-        })
-        .then(response => response.json())
-        .then(data => {
-            if (data.success) {
-                location.reload();
-            } else {
-                alert('Error resetting permissions: ' + data.error);
-            }
-        })
-        .catch(error => {
-            alert('Error resetting permissions: ' + error);
-        });
-    }
-}
-
-// Initialize checkbox states when page loads
-document.addEventListener('DOMContentLoaded', function() {
-    // Set initial states based on data
-    document.querySelectorAll('.function-item').forEach(item => {
-        const roleName = item.dataset.role;
-        const permissionKey = item.dataset.permission;
-        const checkbox = item.querySelector('input[type="checkbox"]');
-        
-        // Check if this role has this permission
-        const hasPermission = rolePermissions[roleName] && rolePermissions[roleName].includes(permissionKey);
-        
-        if (hasPermission) {
-            checkbox.checked = true;
-            item.classList.remove('disabled');
-        } else {
-            checkbox.checked = false;
-            item.classList.add('disabled');
-        }
-    });
-});
-</script>
-{% endblock %}

old code/test_permissions.py

@@ -1,111 +0,0 @@
-#!/usr/bin/env python3
-"""
-Test script for the new simplified 4-tier permission system
-"""
-
-import sys
-import os
-sys.path.insert(0, os.path.join(os.path.dirname(__file__), 'app'))
-
-from permissions_simple import check_access, validate_user_modules, get_user_accessible_pages
-
-def test_permission_system():
-    """Test the new permission system with various scenarios"""
-    print("Testing Simplified 4-Tier Permission System")
-    print("=" * 50)
-    
-    # Test cases: (role, modules, page, expected_result)
-    test_cases = [
-        # Superadmin tests
-        ('superadmin', [], 'dashboard', True),
-        ('superadmin', [], 'role_permissions', True),
-        ('superadmin', [], 'quality', True),
-        ('superadmin', [], 'warehouse', True),
-        
-        # Admin tests
-        ('admin', [], 'dashboard', True),
-        ('admin', [], 'role_permissions', False),  # Restricted for admin
-        ('admin', [], 'download_extension', False),  # Restricted for admin
-        ('admin', [], 'quality', True),
-        ('admin', [], 'warehouse', True),
-        
-        # Manager tests
-        ('manager', ['quality'], 'quality', True),
-        ('manager', ['quality'], 'quality_reports', True),
-        ('manager', ['quality'], 'warehouse', False),  # No warehouse module
-        ('manager', ['warehouse'], 'warehouse', True),
-        ('manager', ['warehouse'], 'quality', False),  # No quality module
-        ('manager', ['quality', 'warehouse'], 'quality', True),  # Multiple modules
-        ('manager', ['quality', 'warehouse'], 'warehouse', True),
-        
-        # Worker tests
-        ('worker', ['quality'], 'quality', True),
-        ('worker', ['quality'], 'quality_reports', False),  # Workers can't access reports
-        ('worker', ['quality'], 'warehouse', False),  # No warehouse module
-        ('worker', ['warehouse'], 'move_orders', True),
-        ('worker', ['warehouse'], 'create_locations', False),  # Workers can't create locations
-        
-        # Invalid role test
-        ('invalid_role', ['quality'], 'quality', False),
-    ]
-    
-    print("Testing access control:")
-    print("-" * 30)
-    
-    passed = 0
-    failed = 0
-    
-    for role, modules, page, expected in test_cases:
-        result = check_access(role, modules, page)
-        status = "PASS" if result == expected else "FAIL"
-        print(f"{status}: {role:12} {str(modules):20} {page:18} -> {result} (expected {expected})")
-        
-        if result == expected:
-            passed += 1
-        else:
-            failed += 1
-    
-    print(f"\nResults: {passed} passed, {failed} failed")
-    
-    # Test module validation
-    print("\nTesting module validation:")
-    print("-" * 30)
-    
-    validation_tests = [
-        ('superadmin', ['quality'], True),  # Superadmin can have any modules
-        ('admin', ['warehouse'], True),     # Admin can have any modules
-        ('manager', ['quality'], True),     # Manager can have one module
-        ('manager', ['quality', 'warehouse'], True),  # Manager can have multiple modules
-        ('manager', [], False),             # Manager must have at least one module
-        ('worker', ['quality'], True),      # Worker can have one module
-        ('worker', ['quality', 'warehouse'], False),  # Worker cannot have multiple modules
-        ('worker', [], False),              # Worker must have exactly one module
-        ('invalid_role', ['quality'], False),  # Invalid role
-    ]
-    
-    for role, modules, expected in validation_tests:
-        is_valid, error_msg = validate_user_modules(role, modules)
-        status = "PASS" if is_valid == expected else "FAIL"
-        print(f"{status}: {role:12} {str(modules):20} -> {is_valid} (expected {expected})")
-        if error_msg:
-            print(f"      Error: {error_msg}")
-    
-    # Test accessible pages for different users
-    print("\nTesting accessible pages:")
-    print("-" * 30)
-    
-    user_tests = [
-        ('superadmin', []),
-        ('admin', []),
-        ('manager', ['quality']),
-        ('manager', ['warehouse']),
-        ('worker', ['quality']),
-        ('worker', ['warehouse']),
-    ]
-    
-    for role, modules in user_tests:
-        accessible_pages = get_user_accessible_pages(role, modules)
-        print(f"{role:12} {str(modules):20} -> {len(accessible_pages)} pages: {', '.join(accessible_pages[:5])}{'...' if len(accessible_pages) > 5 else ''}")
-
-if __name__ == "__main__":
-    test_permission_system()

old code/to_do.txt

@@ -1,23 +0,0 @@
-python3 -m venv recticel
-source recticel/bin/activate
- python /home/ske087/quality_recticel/py_app/run.py
-
-sudo apt install mariadb-server mariadb-client
-sudo apt-get install libmariadb-dev libmariadb-dev-compat
-
- sudo mysql -u root -p
-
-    root password : Initaial01! acasa Matei@123
-
-    CREATE DATABASE trasabilitate_database;
-    CREATE USER 'trasabilitate'@'localhost' IDENTIFIED BY 'Initial01!';
-    GRANT ALL PRIVILEGES ON trasabilitate_database.* TO 'trasabilitate'@'localhost';
-    FLUSH PRIVILEGES;
-    EXIT
-
-
-    Server Domain/IP Address: testserver.com
-Port: 3602
-Database Name: recticel
-Username: sa
-Password: 12345678

old code/to_do_install.txt

@@ -1,32 +0,0 @@
-
-# Steps to Prepare Environment for Installing Python Requirements
-
-1. Change ownership of the project directory (if needed):
-	sudo chown -R $USER:$USER /home/ske087/quality_recticel
-
-2. Install Python venv module:
-	sudo apt install -y python3-venv
-
-3. Create and activate the virtual environment:
-	python3 -m venv recticel
-	source recticel/bin/activate
-
-4. Install MariaDB server and development libraries:
-	sudo apt install -y mariadb-server libmariadb-dev
-
-5. Create MariaDB database and user:
-	sudo mysql -e "CREATE DATABASE trasabilitate; CREATE USER 'sa'@'localhost' IDENTIFIED BY 'qasdewrftgbcgfdsrytkmbf\"b'; GRANT ALL PRIVILEGES ON quality.* TO 'sa'@'localhost'; FLUSH PRIVILEGES;"
-	sa 
-	qasdewrftgbcgfdsrytkmbf\"b
-
-	trasabilitate
-	Initial01!
-
-6. Install build tools (for compiling Python packages):
-	sudo apt install -y build-essential
-
-7. Install Python development headers:
-	sudo apt install -y python3-dev
-
-8. Install Python requirements:
-	pip install -r py_app/requirements.txt

old code/tray/.github/workflows/build.yaml

@@ -1,60 +0,0 @@
-name: build
-
-on: [push, pull_request]
-
-jobs:
-  ubuntu:
-    runs-on: [ubuntu-latest]
-    strategy:
-      matrix:
-        java: [11, 21]
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          java-version: ${{ matrix.java }}
-          distribution: 'liberica'
-      - run: sudo apt-get install nsis makeself
-      - run: ant makeself
-      - run: sudo out/qz-tray-*.run
-      - run: /opt/qz-tray/qz-tray --version
-      - run: ant nsis
-
-  macos:
-    runs-on: [macos-latest]
-    strategy:
-      matrix:
-        java: [11, 21]
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          java-version: ${{ matrix.java }}
-          distribution: 'liberica'
-      - run: brew install nsis makeself
-      - run: ant pkgbuild
-      - run: echo "Setting CA trust settings to 'allow' (https://github.com/actions/runner-images/issues/4519)"
-      - run: security authorizationdb read com.apple.trust-settings.admin > /tmp/trust-settings-backup.xml
-      - run: sudo security authorizationdb write com.apple.trust-settings.admin allow
-      - run: sudo installer -pkg out/qz-tray-*.pkg -target /
-      - run: echo "Restoring CA trust settings back to default"
-      - run: sudo security authorizationdb write com.apple.trust-settings.admin < /tmp/trust-settings-backup.xml
-      - run: "'/Applications/QZ Tray.app/Contents/MacOS/QZ Tray' --version"
-      - run: ant makeself
-      - run: ant nsis
-
-  windows:
-    runs-on: [windows-latest]
-    strategy:
-      matrix:
-        java: [11, 21]
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          java-version: ${{ matrix.java }}
-          distribution: 'liberica'
-      - run: choco install nsis
-      - run: ant nsis
-      - run: Start-Process -Wait ./out/qz-tray-*.exe -ArgumentList "/S"
-      - run: "&'C:/Program Files/QZ Tray/qz-tray.exe' --wait --version|Out-Null"

old code/tray/.gitignore

@@ -1,33 +0,0 @@
-# Build outputs
-/out/
-*.class
-
-# Node modules
-/js/node_modules
-
-# JavaFX runtime (too large, should be downloaded)
-/lib/javafx*
-
-# IDE files
-/.idea/workspace.xml
-/.idea/misc.xml
-/.idea/uiDesigner.xml
-/.idea/compiler.xml
-.idea/
-*.iml
-.vscode/
-
-# OS files
-.DS_Store
-Thumbs.db
-windows-debug-launcher.nsi.in
-
-# Build artifacts
-/fx.zip
-/provision.json
-
-# Private keys
-/ant/private/qz.ks
-
-# Logs
-*.log

old code/tray/Dockerfile

@@ -1,14 +0,0 @@
-FROM openjdk:11 as build
-RUN apt-get update
-RUN apt-get install -y ant nsis makeself
-COPY . /usr/src/tray
-WORKDIR /usr/src/tray
-RUN ant makeself
-
-FROM openjdk:11-jre as install
-RUN apt-get update
-RUN apt-get install -y libglib2.0-bin
-COPY --from=build /usr/src/tray/out/*.run /tmp
-RUN find /tmp -iname "*.run" -exec {} \;
-WORKDIR /opt/qz-tray
-ENTRYPOINT ["/opt/qz-tray/qz-tray"]

old code/tray/LICENSE.txt

@@ -1,601 +0,0 @@
-          ATTRIBUTION, LICENSING AND SUMMARY OF COMPONENTS
-                     Version 1.2, February 2016
-
-Project Source Code (unless otherwise specified):
-  Copyright (c) 2013-2016 QZ Industries, LLC
-  LGPL-2.1 License (attached)
-  https://qz.io
-
-All API Examples (unless otherwise specified):
-  Covers: JavaScript examples, Wiki API Examples, Signing API Examples
-  Public Domain (no restrictions)
-______________________________________________________________________
-
-Other licenses:
-
-jOOR Reflection Library (As-Is, No Modifications)
-  Copyright (c) 2011-2012, Lukas Eder, lukas.eder@gmail.com
-  Apache License, Version 2.0 (attached), with Copyright Notice
-  https://github.com/jOOQ/jOOR
-
-
-jetty Web Server Library (As-Is, No Modifications)
-  Copyright (c) 1995-2014 Eclipse Foundation
-  Apache License, Version 2.0 (attached), with Copyright Notice
-  http://eclipse.org/jetty/
-
-
-Apache log4j (As-Is, No Modifications)
-  Copyright (C) 1999-2005 The Apache Software Foundation
-  Apache License, Version 2.0 (attached), with Copyright Notice
-  https://logging.apache.org/
-
-
-Apache PDFBox (As-Is, No Modifications)
-  Copyright (C) 2009–2015 The Apache Software Foundation
-  Apache License, Version 2.0 (attached), with Copyright Notice
-  https://pdfbox.apache.org/
-
-
-jSSC Library (As-Is, No Modifications)
-  Copyright (c) 2010-2013 Alexey Sokolov (scream3r)
-  LGPL-2.1 License (attached), with Copyright notice
-  https://code.google.com/p/java-simple-serial-connector/
-
-
-hid4java (As-Is, No Modifications)
-  Copyright (c) 2014 Gary Rowe
-  MIT License (attached), with Copyright notice
-  https://github.com/gary-rowe/hid4java
-
-
-jsemver (As-Is, No Modifications)
-  Copyright 2012-2014 Zafar Khaja <zafarkhaja@gmail.com>
-  MIT License (attached), with Copyright notice
-  https://github.com/zafarkhaja/jsemver
-______________________________________________________________________
-
-
-LGPL 2.1
-Applies ONLY to: qz-tray, jssc
-
-
-                  GNU LESSER GENERAL PUBLIC LICENSE
-                       Version 2.1, February 1999
-
- Copyright (C) 1991, 1999 Free Software Foundation, Inc.
- 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-[This is the first released version of the Lesser GPL.  It also counts
- as the successor of the GNU Library Public License, version 2, hence
- the version number 2.1.]
-
-                            Preamble
-
-  The licenses for most software are designed to take away your
-freedom to share and change it.  By contrast, the GNU General Public
-Licenses are intended to guarantee your freedom to share and change
-free software--to make sure the software is free for all its users.
-
-  This license, the Lesser General Public License, applies to some
-specially designated software packages--typically libraries--of the
-Free Software Foundation and other authors who decide to use it.  You
-can use it too, but we suggest you first think carefully about whether
-this license or the ordinary General Public License is the better
-strategy to use in any particular case, based on the explanations below.
-
-  When we speak of free software, we are referring to freedom of use,
-not price.  Our General Public Licenses are designed to make sure that
-you have the freedom to distribute copies of free software (and charge
-for this service if you wish); that you receive source code or can get
-it if you want it; that you can change the software and use pieces of
-it in new free programs; and that you are informed that you can do
-these things.
-
-  To protect your rights, we need to make restrictions that forbid
-distributors to deny you these rights or to ask you to surrender these
-rights.  These restrictions translate to certain responsibilities for
-you if you distribute copies of the library or if you modify it.
-
-  For example, if you distribute copies of the library, whether gratis
-or for a fee, you must give the recipients all the rights that we gave
-you.  You must make sure that they, too, receive or can get the source
-code.  If you link other code with the library, you must provide
-complete object files to the recipients, so that they can relink them
-with the library after making changes to the library and recompiling
-it.  And you must show them these terms so they know their rights.
-
-  We protect your rights with a two-step method: (1) we copyright the
-library, and (2) we offer you this license, which gives you legal
-permission to copy, distribute and/or modify the library.
-
-  To protect each distributor, we want to make it very clear that
-there is no warranty for the free library.  Also, if the library is
-modified by someone else and passed on, the recipients should know
-that what they have is not the original version, so that the original
-author's reputation will not be affected by problems that might be
-introduced by others.
-
-  Finally, software patents pose a constant threat to the existence of
-any free program.  We wish to make sure that a company cannot
-effectively restrict the users of a free program by obtaining a
-restrictive license from a patent holder.  Therefore, we insist that
-any patent license obtained for a version of the library must be
-consistent with the full freedom of use specified in this license.
-
-  Most GNU software, including some libraries, is covered by the
-ordinary GNU General Public License.  This license, the GNU Lesser
-General Public License, applies to certain designated libraries, and
-is quite different from the ordinary General Public License.  We use
-this license for certain libraries in order to permit linking those
-libraries into non-free programs.
-
-  When a program is linked with a library, whether statically or using
-a shared library, the combination of the two is legally speaking a
-combined work, a derivative of the original library.  The ordinary
-General Public License therefore permits such linking only if the
-entire combination fits its criteria of freedom.  The Lesser General
-Public License permits more lax criteria for linking other code with
-the library.
-
-  We call this license the "Lesser" General Public License because it
-does Less to protect the user's freedom than the ordinary General
-Public License.  It also provides other free software developers Less
-of an advantage over competing non-free programs.  These disadvantages
-are the reason we use the ordinary General Public License for many
-libraries.  However, the Lesser license provides advantages in certain
-special circumstances.
-
-  For example, on rare occasions, there may be a special need to
-encourage the widest possible use of a certain library, so that it becomes
-a de-facto standard.  To achieve this, non-free programs must be
-allowed to use the library.  A more frequent case is that a free
-library does the same job as widely used non-free libraries.  In this
-case, there is little to gain by limiting the free library to free
-software only, so we use the Lesser General Public License.
-
-  In other cases, permission to use a particular library in non-free
-programs enables a greater number of people to use a large body of
-free software.  For example, permission to use the GNU C Library in
-non-free programs enables many more people to use the whole GNU
-operating system, as well as its variant, the GNU/Linux operating
-system.
-
-  Although the Lesser General Public License is Less protective of the
-users' freedom, it does ensure that the user of a program that is
-linked with the Library has the freedom and the wherewithal to run
-that program using a modified version of the Library.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.  Pay close attention to the difference between a
-"work based on the library" and a "work that uses the library".  The
-former contains code derived from the library, whereas the latter must
-be combined with the library in order to run.
-
-                  GNU LESSER GENERAL PUBLIC LICENSE
-   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
-
-  0. This License Agreement applies to any software library or other
-program which contains a notice placed by the copyright holder or
-other authorized party saying it may be distributed under the terms of
-this Lesser General Public License (also called "this License").
-Each licensee is addressed as "you".
-
-  A "library" means a collection of software functions and/or data
-prepared so as to be conveniently linked with application programs
-(which use some of those functions and data) to form executables.
-
-  The "Library", below, refers to any such software library or work
-which has been distributed under these terms.  A "work based on the
-Library" means either the Library or any derivative work under
-copyright law: that is to say, a work containing the Library or a
-portion of it, either verbatim or with modifications and/or translated
-straightforwardly into another language.  (Hereinafter, translation is
-included without limitation in the term "modification".)
-
-  "Source code" for a work means the preferred form of the work for
-making modifications to it.  For a library, complete source code means
-all the source code for all modules it contains, plus any associated
-interface definition files, plus the scripts used to control compilation
-and installation of the library.
-
-  Activities other than copying, distribution and modification are not
-covered by this License; they are outside its scope.  The act of
-running a program using the Library is not restricted, and output from
-such a program is covered only if its contents constitute a work based
-on the Library (independent of the use of the Library in a tool for
-writing it).  Whether that is true depends on what the Library does
-and what the program that uses the Library does.
-
-  1. You may copy and distribute verbatim copies of the Library's
-complete source code as you receive it, in any medium, provided that
-you conspicuously and appropriately publish on each copy an
-appropriate copyright notice and disclaimer of warranty; keep intact
-all the notices that refer to this License and to the absence of any
-warranty; and distribute a copy of this License along with the
-Library.
-
-  You may charge a fee for the physical act of transferring a copy,
-and you may at your option offer warranty protection in exchange for a
-fee.
-
-  2. You may modify your copy or copies of the Library or any portion
-of it, thus forming a work based on the Library, and copy and
-distribute such modifications or work under the terms of Section 1
-above, provided that you also meet all of these conditions:
-
-    a) The modified work must itself be a software library.
-
-    b) You must cause the files modified to carry prominent notices
-    stating that you changed the files and the date of any change.
-
-    c) You must cause the whole of the work to be licensed at no
-    charge to all third parties under the terms of this License.
-
-    d) If a facility in the modified Library refers to a function or a
-    table of data to be supplied by an application program that uses
-    the facility, other than as an argument passed when the facility
-    is invoked, then you must make a good faith effort to ensure that,
-    in the event an application does not supply such function or
-    table, the facility still operates, and performs whatever part of
-    its purpose remains meaningful.
-
-    (For example, a function in a library to compute square roots has
-    a purpose that is entirely well-defined independent of the
-    application.  Therefore, Subsection 2d requires that any
-    application-supplied function or table used by this function must
-    be optional: if the application does not supply it, the square
-    root function must still compute square roots.)
-
-These requirements apply to the modified work as a whole.  If
-identifiable sections of that work are not derived from the Library,
-and can be reasonably considered independent and separate works in
-themselves, then this License, and its terms, do not apply to those
-sections when you distribute them as separate works.  But when you
-distribute the same sections as part of a whole which is a work based
-on the Library, the distribution of the whole must be on the terms of
-this License, whose permissions for other licensees extend to the
-entire whole, and thus to each and every part regardless of who wrote
-it.
-
-Thus, it is not the intent of this section to claim rights or contest
-your rights to work written entirely by you; rather, the intent is to
-exercise the right to control the distribution of derivative or
-collective works based on the Library.
-
-In addition, mere aggregation of another work not based on the Library
-with the Library (or with a work based on the Library) on a volume of
-a storage or distribution medium does not bring the other work under
-the scope of this License.
-
-  3. You may opt to apply the terms of the ordinary GNU General Public
-License instead of this License to a given copy of the Library.  To do
-this, you must alter all the notices that refer to this License, so
-that they refer to the ordinary GNU General Public License, version 2,
-instead of to this License.  (If a newer version than version 2 of the
-ordinary GNU General Public License has appeared, then you can specify
-that version instead if you wish.)  Do not make any other change in
-these notices.
-
-  Once this change is made in a given copy, it is irreversible for
-that copy, so the ordinary GNU General Public License applies to all
-subsequent copies and derivative works made from that copy.
-
-  This option is useful when you wish to copy part of the code of
-the Library into a program that is not a library.
-
-  4. You may copy and distribute the Library (or a portion or
-derivative of it, under Section 2) in object code or executable form
-under the terms of Sections 1 and 2 above provided that you accompany
-it with the complete corresponding machine-readable source code, which
-must be distributed under the terms of Sections 1 and 2 above on a
-medium customarily used for software interchange.
-
-  If distribution of object code is made by offering access to copy
-from a designated place, then offering equivalent access to copy the
-source code from the same place satisfies the requirement to
-distribute the source code, even though third parties are not
-compelled to copy the source along with the object code.
-
-  5. A program that contains no derivative of any portion of the
-Library, but is designed to work with the Library by being compiled or
-linked with it, is called a "work that uses the Library".  Such a
-work, in isolation, is not a derivative work of the Library, and
-therefore falls outside the scope of this License.
-
-  However, linking a "work that uses the Library" with the Library
-creates an executable that is a derivative of the Library (because it
-contains portions of the Library), rather than a "work that uses the
-library".  The executable is therefore covered by this License.
-Section 6 states terms for distribution of such executables.
-
-  When a "work that uses the Library" uses material from a header file
-that is part of the Library, the object code for the work may be a
-derivative work of the Library even though the source code is not.
-Whether this is true is especially significant if the work can be
-linked without the Library, or if the work is itself a library.  The
-threshold for this to be true is not precisely defined by law.
-
-  If such an object file uses only numerical parameters, data
-structure layouts and accessors, and small macros and small inline
-functions (ten lines or less in length), then the use of the object
-file is unrestricted, regardless of whether it is legally a derivative
-work.  (Executables containing this object code plus portions of the
-Library will still fall under Section 6.)
-
-  Otherwise, if the work is a derivative of the Library, you may
-distribute the object code for the work under the terms of Section 6.
-Any executables containing that work also fall under Section 6,
-whether or not they are linked directly with the Library itself.
-
-  6. As an exception to the Sections above, you may also combine or
-link a "work that uses the Library" with the Library to produce a
-work containing portions of the Library, and distribute that work
-under terms of your choice, provided that the terms permit
-modification of the work for the customer's own use and reverse
-engineering for debugging such modifications.
-
-  You must give prominent notice with each copy of the work that the
-Library is used in it and that the Library and its use are covered by
-this License.  You must supply a copy of this License.  If the work
-during execution displays copyright notices, you must include the
-copyright notice for the Library among them, as well as a reference
-directing the user to the copy of this License.  Also, you must do one
-of these things:
-
-    a) Accompany the work with the complete corresponding
-    machine-readable source code for the Library including whatever
-    changes were used in the work (which must be distributed under
-    Sections 1 and 2 above); and, if the work is an executable linked
-    with the Library, with the complete machine-readable "work that
-    uses the Library", as object code and/or source code, so that the
-    user can modify the Library and then relink to produce a modified
-    executable containing the modified Library.  (It is understood
-    that the user who changes the contents of definitions files in the
-    Library will not necessarily be able to recompile the application
-    to use the modified definitions.)
-
-    b) Use a suitable shared library mechanism for linking with the
-    Library.  A suitable mechanism is one that (1) uses at run time a
-    copy of the library already present on the user's computer system,
-    rather than copying library functions into the executable, and (2)
-    will operate properly with a modified version of the library, if
-    the user installs one, as long as the modified version is
-    interface-compatible with the version that the work was made with.
-
-    c) Accompany the work with a written offer, valid for at
-    least three years, to give the same user the materials
-    specified in Subsection 6a, above, for a charge no more
-    than the cost of performing this distribution.
-
-    d) If distribution of the work is made by offering access to copy
-    from a designated place, offer equivalent access to copy the above
-    specified materials from the same place.
-
-    e) Verify that the user has already received a copy of these
-    materials or that you have already sent this user a copy.
-
-  For an executable, the required form of the "work that uses the
-Library" must include any data and utility programs needed for
-reproducing the executable from it.  However, as a special exception,
-the materials to be distributed need not include anything that is
-normally distributed (in either source or binary form) with the major
-components (compiler, kernel, and so on) of the operating system on
-which the executable runs, unless that component itself accompanies
-the executable.
-
-  It may happen that this requirement contradicts the license
-restrictions of other proprietary libraries that do not normally
-accompany the operating system.  Such a contradiction means you cannot
-use both them and the Library together in an executable that you
-distribute.
-
-  7. You may place library facilities that are a work based on the
-Library side-by-side in a single library together with other library
-facilities not covered by this License, and distribute such a combined
-library, provided that the separate distribution of the work based on
-the Library and of the other library facilities is otherwise
-permitted, and provided that you do these two things:
-
-    a) Accompany the combined library with a copy of the same work
-    based on the Library, uncombined with any other library
-    facilities.  This must be distributed under the terms of the
-    Sections above.
-
-    b) Give prominent notice with the combined library of the fact
-    that part of it is a work based on the Library, and explaining
-    where to find the accompanying uncombined form of the same work.
-
-  8. You may not copy, modify, sublicense, link with, or distribute
-the Library except as expressly provided under this License.  Any
-attempt otherwise to copy, modify, sublicense, link with, or
-distribute the Library is void, and will automatically terminate your
-rights under this License.  However, parties who have received copies,
-or rights, from you under this License will not have their licenses
-terminated so long as such parties remain in full compliance.
-
-  9. You are not required to accept this License, since you have not
-signed it.  However, nothing else grants you permission to modify or
-distribute the Library or its derivative works.  These actions are
-prohibited by law if you do not accept this License.  Therefore, by
-modifying or distributing the Library (or any work based on the
-Library), you indicate your acceptance of this License to do so, and
-all its terms and conditions for copying, distributing or modifying
-the Library or works based on it.
-
-  10. Each time you redistribute the Library (or any work based on the
-Library), the recipient automatically receives a license from the
-original licensor to copy, distribute, link with or modify the Library
-subject to these terms and conditions.  You may not impose any further
-restrictions on the recipients' exercise of the rights granted herein.
-You are not responsible for enforcing compliance by third parties with
-this License.
-
-  11. If, as a consequence of a court judgment or allegation of patent
-infringement or for any other reason (not limited to patent issues),
-conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot
-distribute so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you
-may not distribute the Library at all.  For example, if a patent
-license would not permit royalty-free redistribution of the Library by
-all those who receive copies directly or indirectly through you, then
-the only way you could satisfy both it and this License would be to
-refrain entirely from distribution of the Library.
-
-If any portion of this section is held invalid or unenforceable under any
-particular circumstance, the balance of the section is intended to apply,
-and the section as a whole is intended to apply in other circumstances.
-
-It is not the purpose of this section to induce you to infringe any
-patents or other property right claims or to contest validity of any
-such claims; this section has the sole purpose of protecting the
-integrity of the free software distribution system which is
-implemented by public license practices.  Many people have made
-generous contributions to the wide range of software distributed
-through that system in reliance on consistent application of that
-system; it is up to the author/donor to decide if he or she is willing
-to distribute software through any other system and a licensee cannot
-impose that choice.
-
-This section is intended to make thoroughly clear what is believed to
-be a consequence of the rest of this License.
-
-  12. If the distribution and/or use of the Library is restricted in
-certain countries either by patents or by copyrighted interfaces, the
-original copyright holder who places the Library under this License may add
-an explicit geographical distribution limitation excluding those countries,
-so that distribution is permitted only in or among countries not thus
-excluded.  In such case, this License incorporates the limitation as if
-written in the body of this License.
-
-  13. The Free Software Foundation may publish revised and/or new
-versions of the Lesser General Public License from time to time.
-Such new versions will be similar in spirit to the present version,
-but may differ in detail to address new problems or concerns.
-
-Each version is given a distinguishing version number.  If the Library
-specifies a version number of this License which applies to it and
-"any later version", you have the option of following the terms and
-conditions either of that version or of any later version published by
-the Free Software Foundation.  If the Library does not specify a
-license version number, you may choose any version ever published by
-the Free Software Foundation.
-
-  14. If you wish to incorporate parts of the Library into other free
-programs whose distribution conditions are incompatible with these,
-write to the author to ask for permission.  For software which is
-copyrighted by the Free Software Foundation, write to the Free
-Software Foundation; we sometimes make exceptions for this.  Our
-decision will be guided by the two goals of preserving the free status
-of all derivatives of our free software and of promoting the sharing
-and reuse of software generally.
-
-                            NO WARRANTY
-
-  15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO
-WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
-EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
-OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY
-KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE
-LIBRARY IS WITH YOU.  SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME
-THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN
-WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY
-AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU
-FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR
-CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE
-LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING
-RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A
-FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF
-SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
-DAMAGES.
-
-                     END OF TERMS AND CONDITIONS
-
-           How to Apply These Terms to Your New Libraries
-
-  If you develop a new library, and you want it to be of the greatest
-possible use to the public, we recommend making it free software that
-everyone can redistribute and change.  You can do so by permitting
-redistribution under these terms (or, alternatively, under the terms of the
-ordinary General Public License).
-
-  To apply these terms, attach the following notices to the library.  It is
-safest to attach them to the start of each source file to most effectively
-convey the exclusion of warranty; and each file should have at least the
-"copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the library's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This library is free software; you can redistribute it and/or
-    modify it under the terms of the GNU Lesser General Public
-    License as published by the Free Software Foundation; either
-    version 2.1 of the License, or (at your option) any later version.
-
-    This library is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    Lesser General Public License for more details.
-
-    You should have received a copy of the GNU Lesser General Public
-    License along with this library; if not, write to the Free Software
-    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301
-    USA
-
-END OF LGPL 2.1
-
-______________________________________________________________________
-
-
-Apache 2.0
-Applies ONLY to: joor, jetty, Apache PDFBox, Apache log4j
-
-
-                           APACHE LICENSE
-                       Version 2.0, January 2004
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-END OF Apache 2.0
-
-______________________________________________________________________
-
-
-MIT License
-Applies ONLY to: hid4java, jsemver
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-END OF MIT License
-
-______________________________________________________________________
-
-END OF ATTRIBUTION, LICENSING AND SUMMARY OF QZ-TRAY COMPONENTS

old code/tray/README.md

@@ -1,23 +0,0 @@
-QZ Tray
-========
-
- [![Build Status](https://github.com/qzind/tray/actions/workflows/build.yaml/badge.svg)](../../actions) [![Downloads](https://img.shields.io/github/downloads/qzind/tray/latest/total.svg)](../../releases) [![Issues](https://img.shields.io/github/issues/qzind/tray.svg)](../../issues) [![Commits](https://img.shields.io/github/commit-activity/m/qzind/tray.svg)](../../commits)
-
-Browser plugin for sending documents and raw commands to a printer or attached device
-
-## Getting Started
-  * Download here https://qz.io/download/
-  * See our [Getting Started](../../wiki/getting-started) guide.
-  * Visit our home page https://qz.io.
-  
-## Support
-  * File a bug via our [issue tracker](../../issues)
-  * Ask the community via our [community support page](https://qz.io/support/)
-  * Ask the developers via [premium support](https://qz.io/contact/) (fees may apply)
-
-## Changelog
-  * See our [most recent releases](../../releases)
-
-## Java Developer Resources
-  * [Install dependencies](../../wiki/install-dependencies)
-  * [Compile, Package](../../wiki/compiling)

old code/tray/SUPPORT.md

@@ -1,11 +0,0 @@
-Please feel free to open bug reports on GitHub. Before opening an issue, we ask that you consider whether your issue is a support question, or a potential bug with the software.
-
-If you have a support question, first [check the FAQ](https://qz.io/wiki/faq) and the [wiki](https://qz.io/wiki/Home).  If you cannot find a solution please reach out to one of the appropriate channels:
-
-### Community Support
-
-If you need assistance using the software and do not have a paid subscription, please reference our community support channel: https://qz.io/support/
-
-### Premium Support
-
-If you have an active support license with QZ Industries, LLC, please send support requests to support@qz.io

old code/tray/ant/apple/appdmg.json.in

@@ -1,12 +0,0 @@
-{
-  "title": "${project.name}",
-  "background": "${basedir}/ant/apple/dmg-background.png",
-  "icon-size": 128,
-  "contents": [
-    { "x": 501, "y": 154, "type": "link", "path": "/Applications" },
-    { "x": 179, "y": 154, "type": "file", "path": "${build.dir}/${project.name}.app" }
-  ],
-  "code-sign": {
-    "signing-identity" : "${codesign.activeid}"
-  }
-}

old code/tray/ant/apple/apple-bundle.plist.in

@@ -1,28 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0"><dict>
-    <key>CFBundleDevelopmentRegion</key><string>English</string>
-    <key>CFBundleIconFile</key><string>${project.filename}</string>
-    <key>CFBundleIdentifier</key><string>${apple.bundleid}</string>
-    <key>CFBundlePackageType</key><string>APPL</string>
-    <key>CFBundleGetInfoString</key><string>${project.name} ${build.version}</string>
-    <key>CFBundleSignature</key><string>${project.name}</string>
-    <key>CFBundleExecutable</key><string>${project.name}</string>
-    <key>CFBundleVersion</key><string>${build.version}</string>
-    <key>CFBundleShortVersionString</key><string>${build.version}</string>
-    <key>CFBundleName</key><string>${project.name}</string>
-    <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
-    <key>CFBundleURLTypes</key>
-        <array>
-            <dict>
-                <key>CFBundleURLName</key>
-                <string>${project.name}</string>
-                <key>CFBundleURLSchemes</key>
-                <array><string>${vendor.name}</string></array>
-            </dict>
-        </array>
-    <key>LSArchitecturePriority</key>
-    <array>
-        <string>${apple.target.arch}</string>
-    </array>
-</dict></plist>

old code/tray/ant/apple/apple-entitlements.plist.in

@@ -1,30 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>com.apple.security.app-sandbox</key>
-    <${build.sandboxed}/>
-    <key>com.apple.security.network.client</key>
-    <true/>
-    <key>com.apple.security.network.server</key>
-    <true/>
-    <key>com.apple.security.files.all</key>
-    <true/>
-    <key>com.apple.security.print</key>
-    <true/>
-    <key>com.apple.security.device.usb</key>
-    <true/>
-    <key>com.apple.security.device.bluetooth</key>
-    <true/>
-    <key>com.apple.security.cs.allow-jit</key>
-    <true/>
-    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-    <true/>
-    <key>com.apple.security.cs.disable-library-validation</key>
-    <true/>
-    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-    <true/>
-    <key>com.apple.security.cs.debugger</key>
-    <true/>
-</dict>
-</plist>

old code/tray/ant/apple/apple-postinstall.sh.in

@@ -1,23 +0,0 @@
-#!/bin/bash
-
-# Halt on first error
-set -e
-
-# Get working directory
-DIR=$(cd "$(dirname "$0")" && pwd)
-pushd "$DIR/payload/${project.name}.app/Contents/MacOS/"
-
-./"${project.name}" install >> "${install.log}" 2>&1
-popd
-
-# Use install target from pkgbuild, an undocumented feature; fallback on sane location
-if [ -n "$2" ]; then
-    pushd "$2/Contents/MacOS/"
-else
-    pushd "/Applications/${project.name}.app/Contents/MacOS/"
-fi
-
-./"${project.name}" certgen >> "${install.log}" 2>&1
-
-# Start qz by calling open on the .app as an ordinary user
-su "$USER" -c "open ../../" || true

old code/tray/ant/apple/apple-preinstall.sh.in

@@ -1,31 +0,0 @@
-#!/bin/bash
-
-# Halt on first error
-set -e
-
-# Clear the log for writing
-> "${install.log}"
-
-# Log helper
-dbg () {
-    echo -e "[BASH] $(date -Iseconds)\n\t$1" >> "${install.log}" 2>&1
-}
-
-# Get working directory
-dbg "Calculating working directory..."
-DIR=$(cd "$(dirname "$0")" && pwd)
-dbg "Using working directory $DIR"
-dbg "Switching to payload directory $DIR/payload/${project.name}.app/Contents/MacOS/"
-pushd "$DIR/payload/${project.name}.app/Contents/MacOS/" >> "${install.log}" 2>&1
-
-# Offer to download Java if missing
-dbg "Checking for Java in payload directory..."
-if ! ./"${project.name}" --version >> "${install.log}" 2>&1; then
-    dbg "Java was not found"
-    osascript -e "tell app \"Installer\" to display dialog \"Java is required.  Please install Java and try again.\""
-    sudo -u "$USER" open "${java.download}"
-    exit 1
-fi
-
-dbg "Java was found in payload directory, running preinstall"
-./"${project.name}" preinstall >> "${install.log}" 2>&1

old code/tray/ant/apple/apple.properties

@@ -1,6 +0,0 @@
-# Apple build properties
-apple.packager.signid=P5DMU6659X
-# jdk9+ flags
-# - Tray icon requires workaround https://github.com/dyorgio/macos-tray-icon-fixer/issues/9
-# - Dark theme requires workaround https://github.com/bobbylight/Darcula/issues/8
-apple.launch.jigsaw=--add-opens java.desktop/sun.lwawt.macosx=ALL-UNNAMED --add-opens java.desktop/java.awt=ALL-UNNAMED --add-exports java.desktop/com.apple.laf=ALL-UNNAMED

old code/tray/ant/apple/installer.xml

@@ -1,376 +0,0 @@
-<project name="apple-installer" basedir="../../" xmlns:if="ant:if">
-    <property file="ant/project.properties"/>
-    <import file="${basedir}/ant/version.xml"/>
-    <import file="${basedir}/ant/platform-detect.xml"/>
-
-    <!--
-    ################################################################
-    #                     Apple Installer                          #
-    ################################################################
-    -->
-
-    <target name="build-pkg" depends="get-identity,add-certificates,get-version,platform-detect">
-        <echo level="info">Creating installer using pkgbuild</echo>
-        <!--
-        #####################################
-        #  Create scripts, payload and pkg  #
-        #####################################
-        -->
-
-        <mkdir dir="${build.dir}/scripts/payload"/>
-
-        <!-- Get the os-preferred name for the target architecture -->
-        <condition property="apple.target.arch" value="arm64">
-            <isset property="target.arch.aarch64"/>
-        </condition>
-        <property name="apple.target.arch" value="x86_64" description="fallback value"/>
-
-        <!-- Build app without sandboxing by default-->
-        <property name="build.sandboxed" value="false"/>
-        <antcall target="build-app">
-            <param name="bundle.dir" value="${build.dir}/scripts/payload/${project.name}.app"/>
-        </antcall>
-        <!-- Add a break in the logs -->
-        <antcall target="packaging"/>
-
-        <!-- scripts/ -->
-        <copy file="ant/apple/apple-preinstall.sh.in" tofile="${build.dir}/scripts/preinstall">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-        <copy file="ant/apple/apple-postinstall.sh.in" tofile="${build.dir}/scripts/postinstall">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-        <chmod perm="a+x" type="file">
-            <fileset dir="${build.dir}/scripts">
-                <include name="preinstall"/>
-                <include name="postinstall"/>
-            </fileset>
-        </chmod>
-
-        <exec executable="pkgbuild" failonerror="true">
-            <arg value="--identifier"/>
-            <arg value="${apple.bundleid}"/>
-
-            <arg value="--nopayload"/>
-
-            <arg value="--install-location"/>
-            <arg value="/Applications/${project.name}.app"/>
-
-            <arg value="--scripts"/>
-            <arg value="${build.dir}/scripts"/>
-
-            <arg value="--version"/>
-            <arg value="${build.version}"/>
-
-            <arg value="--sign" if:true="${codesign.available}"/>
-            <arg value="${codesign.activeid}" if:true="${codesign.available}"/>
-
-            <arg value="${out.dir}/${project.filename}${build.type}-${build.version}-${apple.target.arch}-unbranded.pkg"/>
-        </exec>
-
-        <!-- Branding for qz only -->
-        <condition property="pkg.background" value="pkg-background.tiff" else="pkg-background-blank.tiff">
-            <equals arg1="${project.filename}" arg2="qz-tray"/>
-        </condition>
-
-        <!-- Copy branded resources to out/resources -->
-        <mkdir dir="${out.dir}/resources"/>
-        <copy file="${basedir}/ant/apple/${pkg.background}" tofile="${out.dir}/resources/background.tiff" failonerror="true"/>
-
-        <!-- Create product definition plist that stipulates supported arch -->
-        <copy file="ant/apple/product-def.plist.in" tofile="${build.dir}/product-def.plist">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <!-- Create a distribution.xml file for productbuild -->
-        <exec executable="productbuild" failonerror="true">
-            <arg value="--synthesize"/>
-
-            <arg value="--sign" if:true="${codesign.available}"/>
-            <arg value="${codesign.activeid}" if:true="${codesign.available}"/>
-
-            <arg value="--timestamp"/>
-
-            <arg value="--package"/>
-            <arg value="${out.dir}/${project.filename}${build.type}-${build.version}-${apple.target.arch}-unbranded.pkg"/>
-
-            <arg value="--product"/>
-            <arg value="${build.dir}/product-def.plist"/>
-
-            <arg value="--scripts"/>
-            <arg value="${build.dir}/scripts"/>
-
-            <arg value="${out.dir}/distribution.xml"/>
-        </exec>
-
-        <!-- Inject title, background -->
-        <replace file="${out.dir}/distribution.xml" token="&lt;options customize">
-            <replacevalue><![CDATA[<title>@project.name@ @build.version@</title>
-	<background file="background.tiff" mime-type="image/tiff" alignment="bottomleft" scaling="none"/>
-	<background-darkAqua file="background.tiff" mime-type="image/tiff" alignment="bottomleft" scaling="none"/>
-	<options customize]]></replacevalue>
-            <replacefilter token="@project.name@" value="${project.name}"/>
-            <replacefilter token="@build.version@" value="${build.version}"/>
-        </replace>
-
-        <!-- Create a branded .pkg using productbuild -->
-        <exec executable="productbuild" dir="${out.dir}" failonerror="true">
-            <arg value="--sign" if:true="${codesign.available}"/>
-            <arg value="${codesign.activeid}" if:true="${codesign.available}"/>
-
-            <arg value="--timestamp"/>
-
-            <arg value="--distribution"/>
-            <arg value="${out.dir}/distribution.xml"/>
-
-            <arg value="--resources"/>
-            <arg value="${out.dir}/resources"/>
-
-            <arg value="--product"/>
-            <arg value="${build.dir}/product-def.plist"/>
-
-            <arg value="--package-path"/>
-            <arg value="${project.filename}${build.type}-${build.version}-${apple.target.arch}-unbranded.pkg"/>
-
-            <arg value="${out.dir}/${project.filename}${build.type}-${build.version}-${apple.target.arch}.pkg"/>
-        </exec>
-
-        <!-- Cleanup unbranded version -->
-        <delete file="${out.dir}/${project.filename}${build.type}-${build.version}-${apple.target.arch}-unbranded.pkg"/>
-    </target>
-
-    <target name="build-dmg" depends="get-identity,add-certificates,get-version">
-        <echo level="info">Creating app bundle</echo>
-        <!--
-        #####################################
-        #  Create payload and bundle as dmg #
-        #####################################
-        -->
-
-        <!-- Dmg JSON -->
-        <copy file="ant/apple/appdmg.json.in" tofile="${build.dir}/appdmg.json">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <!-- Build app with sandboxing by default-->
-        <property name="build.sandboxed" value="true"/>
-        <antcall target="build-app">
-            <param name="bundle.dir" value="${build.dir}/${project.name}.app"/>
-        </antcall>
-        <!-- Add a break in the logs -->
-        <antcall target="packaging"/>
-
-        <exec executable="appdmg" failonerror="true">
-            <arg value="${build.dir}/appdmg.json"/>
-            <arg value="${out.dir}/${project.filename}${build.type}-${build.version}.dmg"/>
-        </exec>
-    </target>
-
-    <target name="build-app" depends="get-identity">
-        <!-- App Bundle -->
-        <mkdir dir="${bundle.dir}"/>
-
-        <!-- Contents/ -->
-        <copy file="ant/apple/apple-bundle.plist.in" tofile="${bundle.dir}/Contents/Info.plist">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <!-- Contents/MacOS/ -->
-        <mkdir dir="${bundle.dir}/Contents/MacOS"/>
-        <copy file="ant/unix/unix-launcher.sh.in" tofile="${bundle.dir}/Contents/MacOS/${project.name}">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <!-- Contents/Resources/ -->
-        <copy todir="${bundle.dir}/Contents/Resources">
-            <fileset dir="${dist.dir}">
-                <include name="${project.filename}.jar"/>
-                <include name="LICENSE.txt"/>
-                <include name="override.crt"/>
-            </fileset>
-        </copy>
-        <copy file="assets/branding/apple-icon.icns" tofile="${bundle.dir}/Contents/Resources/${project.filename}.icns"/>
-
-        <copy file="ant/unix/unix-uninstall.sh.in" tofile="${bundle.dir}/Contents/Resources/uninstall">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <copy todir="${bundle.dir}/Contents/Resources/demo">
-            <fileset dir="${dist.dir}/demo" includes="**"/>
-        </copy>
-
-        <!-- Provision files -->
-        <delete dir="${bundle.dir}/Contents/Resources/provision" failonerror="false"/>
-        <copy todir="${bundle.dir}/Contents/Resources/provision" failonerror="false">
-            <fileset dir="${provision.dir}" includes="**"/>
-        </copy>
-        <chmod perm="a+x" type="file" verbose="true">
-            <fileset dir="${bundle.dir}/Contents/Resources/" casesensitive="false">
-                <!-- Must iterate on parent directory in case "provision" is missing -->
-                <include name="provision/*"/>
-                <exclude name="provision/*.crt"/>
-                <exclude name="provision/*.txt"/>
-                <exclude name="provision/*.json"/>
-            </fileset>
-        </chmod>
-
-        <!-- Java runtime -->
-        <copy todir="${bundle.dir}/Contents/PlugIns/Java.runtime">
-            <fileset dir="${dist.dir}/Java.runtime" includes="**"/>
-        </copy>
-        <copy todir="${bundle.dir}/Contents/Frameworks">
-            <fileset dir="${dist.dir}/libs" includes="**"/>
-        </copy>
-
-        <copy todir="${bundle.dir}">
-            <fileset dir="${bundle.dir}" includes="**"/>
-        </copy>
-
-        <!-- set payload files executable -->
-        <chmod perm="a+x" type="file">
-            <fileset dir="${bundle.dir}">
-                <include name="**/${project.name}"/>
-                <include name="**/Resources/uninstall"/>
-                <include name="**/bin/*"/>
-                <include name="**/lib/jspawnhelper"/>
-            </fileset>
-        </chmod>
-
-        <copy file="ant/apple/apple-entitlements.plist.in" tofile="${build.dir}/apple-entitlements.plist">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <!-- use xargs to loop over and codesign all files-->
-        <echo level="info" message="Signing ${bundle.dir} using ${codesign.activeid}"/>
-        <!-- Find -X fails on spaces but doesn't failonerror, this may lead to overlooked errors. -->
-        <!-- Currently the only file that may contains a space is the main executable which we omit from signing anyway. -->
-        <exec executable="bash" failonerror="true" dir="${bundle.dir}">
-            <arg value="-c"/>
-            <arg value="find -X &quot;.&quot; -type f -not -path &quot;*/Contents/MacOS/*&quot; -exec sh -c 'file -I &quot;{}&quot; |grep -m1 &quot;x-mach-binary&quot;|cut -f 1 -d \:' \; |xargs codesign --force -s &quot;${codesign.activeid}&quot; --timestamp --options runtime"/>
-        </exec>
-        <exec executable="codesign" failonerror="true">
-            <arg value="--force"/>
-            <arg value="-s"/>
-            <arg value="${codesign.activeid}"/>
-            <arg value="--timestamp"/>
-            <arg value="--options"/>
-            <arg value="runtime"/>
-            <arg value="--entitlement"/>
-            <arg value="${build.dir}/apple-entitlements.plist"/>
-            <arg value="${bundle.dir}/Contents/PlugIns/Java.runtime/Contents/Home/bin/java"/>
-            <arg value="${bundle.dir}/Contents/PlugIns/Java.runtime/Contents/Home/bin/jcmd"/>
-            <arg value="${bundle.dir}/Contents/PlugIns/Java.runtime"/>
-        </exec>
-        <exec executable="codesign" failonerror="true">
-            <arg value="-s"/>
-            <arg value="${codesign.activeid}"/>
-            <arg value="--timestamp"/>
-            <arg value="--options"/>
-            <arg value="runtime"/>
-            <arg value="--entitlement"/>
-            <arg value="${build.dir}/apple-entitlements.plist"/>
-            <arg value="${bundle.dir}"/>
-        </exec>
-
-        <!-- Verify Java.runtime -->
-        <antcall target="verify-signature">
-            <param name="signed.bundle.name" value="Java.runtime"/>
-            <param name="signed.bundle.dir" value="${bundle.dir}/Contents/PlugIns/Java.runtime"/>
-        </antcall>
-        <!-- Verify QZ Tray.app -->
-        <antcall target="verify-signature" >
-            <param name="signed.bundle.name" value="${project.name}.app"/>
-            <param name="signed.bundle.dir" value="${bundle.dir}"/>
-        </antcall>
-    </target>
-
-    <target name="add-certificates" depends="get-identity">
-        <!-- Remove expired certificates -->
-        <exec executable="security">
-            <arg value="delete-certificate"/>
-            <arg value="-Z"/>
-            <arg value="A69020D49B47383064ADD5779911822850235953"/>
-        </exec>
-        <exec executable="security">
-            <arg value="delete-certificate"/>
-            <arg value="-Z"/>
-            <arg value="6FD7892971854384AF40FAD1E0E6C56A992BC5EE"/>
-        </exec>
-        <exec executable="security">
-            <arg value="delete-certificate"/>
-            <arg value="-Z"/>
-            <arg value="F7F10838412D9187042EE1EB018794094AFA189A"/>
-        </exec>
-
-        <exec executable="security">
-            <arg value="add-certificates"/>
-            <arg value="${basedir}/ant/apple/certs/apple-packager.cer"/>
-            <arg value="${basedir}/ant/apple/certs/apple-intermediate.cer"/>
-            <arg value="${basedir}/ant/apple/certs/apple-codesign.cer"/>
-        </exec>
-    </target>
-
-    <target name="copy-dylibs" if="target.os.mac">
-        <echo level="info">Copying native library files to libs</echo>
-
-        <mkdir dir="${dist.dir}/libs"/>
-        <copy todir="${dist.dir}/libs" flatten="true" verbose="true">
-                <fileset dir="${out.dir}/libs-temp">
-                    <!--x86_64-->
-                    <include name="**/darwin-x86-64/*" if="target.arch.x86_64"/> <!-- jna/hid4java -->
-                    <include name="**/osx-x86_64/*" if="target.arch.x86_64"/> <!-- usb4java -->
-                    <include name="**/osx_64/*" if="target.arch.x86_64"/> <!-- jssc -->
-                    <!--aarch64-->
-                    <include name="**/darwin-aarch64/*" if="target.arch.aarch64"/> <!-- jna/hid4java -->
-                    <include name="**/osx-aarch64/*" if="target.arch.aarch64"/> <!-- usb4java -->
-                    <include name="**/osx_arm64/*" if="target.arch.aarch64"/> <!-- jssc -->
-                </fileset>
-        </copy>
-    </target>
-
-    <target name="get-identity">
-        <property file="ant/apple/apple.properties"/>
-        <!-- Ensure ${apple.packager.signid} is in Keychain -->
-        <exec executable="bash" failonerror="false" resultproperty="codesign.qz">
-            <arg value="-c"/>
-            <arg value="security find-identity -v |grep '(${apple.packager.signid})'"/>
-        </exec>
-        <!-- Fallback to "-" (ad-hoc) if ${apple.packager.signid} isn't found -->
-        <condition property="codesign.activeid" value="${apple.packager.signid}" else="-">
-            <equals arg1="${codesign.qz}" arg2="0"/>
-        </condition>
-
-        <!-- Fallback to "-" (ad-hoc) if ${apple.packager.signid} isn't found -->
-        <condition property="codesign.available">
-            <equals arg1="${codesign.qz}" arg2="0"/>
-        </condition>
-
-        <!-- Property to show warning later -->
-        <condition property="codesign.selfsign">
-            <equals arg1="${codesign.activeid}" arg2="-"/>
-        </condition>
-    </target>
-
-    <target name="verify-signature">
-        <echo level="info">Verifying ${signed.bundle.name} Signature</echo>
-        <echo level="info">Location: ${signed.bundle.dir}</echo>
-
-        <exec executable="codesign" failifexecutionfails="false" resultproperty="signing.status">
-            <arg value="-v"/>
-            <arg value="--strict"/>
-            <arg value="${signed.bundle.dir}"/>
-        </exec>
-        <condition property="message.severity" value="info" else="warn">
-            <equals arg1="${signing.status}" arg2="0"/>
-        </condition>
-        <condition property="message.description"
-                   value="Signing passed: Successfully signed"
-                   else="Signing failed:: Signing failed (will prevent app from launching)">
-            <equals arg1="${signing.status}" arg2="0"/>
-        </condition>
-        <echo level="${message.severity}">${message.description}</echo>
-    </target>
-
-    <!-- Stub title/separator workaround for build-pkg/build-dmg -->
-    <target name="packaging"/>
-</project>

old code/tray/ant/apple/product-def.plist.in

@@ -1,10 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>arch</key>
-  <array>
-    <string>${apple.target.arch}</string>
-  </array>
-</dict>
-</plist>

old code/tray/ant/javafx.xml

@@ -1,221 +0,0 @@
-<project name="javafx" default="download-javafx" basedir="..">
-    <property file="ant/project.properties"/>
-    <import file="${basedir}/ant/platform-detect.xml"/>
-    <import file="${basedir}/ant/version.xml"/>
-
-    <!-- TODO: Short-circuit download if host and target are identical? -->
-    <target name="download-javafx" depends="download-javafx-host,download-javafx-target"/>
-
-    <target name="download-javafx-host" unless="${host.fx.exists}" depends="get-javafx-versions,host-fx-exists">
-        <antcall target="download-extract-javafx">
-            <param name="fx.os" value="${host.os}"/>
-            <param name="fx.arch" value="${host.arch}"/>
-            <param name="fx.id" value="${host.fx.id}"/>
-            <param name="fx.basedir" value="${host.fx.basedir}"/>
-            <param name="fx.dir" value="${host.fx.dir}"/>
-            <param name="fx.ver" value="${host.fx.ver}"/>
-            <param name="fx.majver" value="${host.fx.majver}"/>
-            <param name="fx.urlver" value="${host.fx.urlver}"/>
-        </antcall>
-    </target>
-
-    <target name="download-javafx-target" unless="${target.fx.exists}" depends="get-javafx-versions,target-fx-exists">
-        <antcall target="download-extract-javafx">
-            <param name="fx.os" value="${target.os}"/>
-            <param name="fx.arch" value="${target.arch}"/>
-            <param name="fx.id" value="${target.fx.id}"/>
-            <param name="fx.basedir" value="${target.fx.basedir}"/>
-            <param name="fx.dir" value="${target.fx.dir}"/>
-            <param name="fx.majver" value="${target.fx.majver}"/>
-            <param name="fx.urlver" value="${target.fx.urlver}"/>
-        </antcall>
-    </target>
-
-    <target name="host-fx-exists" depends="platform-detect">
-        <!-- Host fx is saved to lib/ -->
-        <property name="host.fx.basedir" value="${basedir}/lib"/>
-        <property name="host.fx.id" value="javafx-${host.os}-${host.arch}-${host.fx.urlver}"/>
-        <property name="host.fx.dir" value="${host.fx.basedir}/${host.fx.id}"/>
-        <mkdir dir="${host.fx.dir}"/>
-
-        <!-- File to look for: "glass.dll", "libglass.dylib" or "libglass.so" -->
-        <property name="host.libglass" value="${host.libprefix}glass.${host.libext}"/>
-
-        <!-- Grab the first file match -->
-        <first id="host.fx.files">
-            <fileset dir="${host.fx.dir}">
-                <include name="**/${host.libglass}"/>
-            </fileset>
-        </first>
-        <!-- Convert the file to a usable string -->
-        <pathconvert property="host.fx.path" refid="host.fx.files"/>
-
-        <!-- Set our flag if found -->
-        <condition property="host.fx.exists">
-            <not><equals arg1="${host.fx.path}" arg2=""/></not>
-        </condition>
-
-        <!-- Human readable message -->
-        <condition property="host.fx.message"
-                   value="JavaFX host platform file ${host.libglass} found, skipping download.${line.separator}Location: ${host.fx.path}"
-                   else="JavaFX host platform file ${host.libglass} is missing, will download.${line.separator}Searched: ${host.fx.dir}">
-            <isset property="host.fx.exists"/>
-        </condition>
-
-        <echo level="info">${host.fx.message}</echo>
-    </target>
-
-    <target name="target-fx-exists">
-        <!-- Target fx is saved to out/ -->
-        <property name="target.fx.basedir" value="${out.dir}"/>
-        <property name="target.fx.id" value="javafx-${target.os}-${target.arch}-${target.fx.urlver}"/>
-        <property name="target.fx.dir" value="${target.fx.basedir}/${target.fx.id}"/>
-        <mkdir dir="${target.fx.dir}"/>
-
-        <!-- File to look for: "glass.dll", "libglass.dylib" or "libglass.so" -->
-        <property name="target.libglass" value="${target.libprefix}glass.${target.libext}"/>
-
-        <!-- Grab the first file match -->
-        <first id="target.fx.files">
-            <fileset dir="${target.fx.dir}">
-                <!-- look for "glass.dll", "libglass.dylib" or "libglass.so" -->
-                <include name="**/${target.libglass}"/>
-            </fileset>
-        </first>
-        <!-- Convert the file to a usable string -->
-        <pathconvert property="target.fx.path" refid="target.fx.files"/>
-
-        <!-- Set our flag if found -->
-        <condition property="target.fx.exists">
-            <not><equals arg1="${target.fx.path}" arg2=""/></not>
-        </condition>
-
-        <!-- Human readable message -->
-        <condition property="target.fx.message"
-                   value="JavaFX target platform file ${target.libglass} found, skipping download.${line.separator}Location: ${target.fx.path}"
-                   else="JavaFX target platform file ${target.libglass} is missing, will download.${line.separator}Searched: ${target.fx.dir}">
-            <isset property="target.fx.exists"/>
-        </condition>
-
-        <echo level="info">${target.fx.message}</echo>
-    </target>
-
-    <!--
-        Populates: host.fx.ver, host.fx.urlver, target.fx.ver, target.fx.urlver
-
-        - Converts version to a usable URL format
-        - Leverage older releases for Intel builds until upstream bug report SUPQZ-14 is fixed
-
-        To build:   We need javafx to download a javafx which matches "host.os" and "host.arch"
-        To package: We need javafx to download a javafx which matches "target.os" and "target.arch"
-     -->
-    <target name="get-javafx-versions" depends="platform-detect">
-        <!-- Fallback to sane values -->
-        <property name="host.fx.ver" value="${javafx.version}"/>
-        <property name="target.fx.ver" value="${javafx.version}"/>
-
-        <!-- Handle pesky url "." = "-" differences -->
-        <loadresource property="host.fx.urlver">
-            <propertyresource name="host.fx.ver"/>
-            <filterchain>
-                <tokenfilter>
-                    <filetokenizer/>
-                    <replacestring from="." to="-"/>
-                </tokenfilter>
-            </filterchain>
-        </loadresource>
-        <loadresource property="target.fx.urlver">
-            <propertyresource name="target.fx.ver"/>
-            <filterchain>
-                <tokenfilter>
-                    <filetokenizer/>
-                    <replacestring from="." to="-"/>
-                </tokenfilter>
-            </filterchain>
-        </loadresource>
-        <property description="suppress property warning" name="target.fx.urlver" value="something went wrong"/>
-        <property description="suppress property warning" name="host.fx.urlver" value="something went wrong"/>
-
-        <!-- Calculate our javafx "major" version -->
-        <loadresource property="host.fx.majver">
-            <propertyresource name="host.fx.ver"/>
-            <filterchain>
-                <replaceregex pattern="[-_.].*" replace="" />
-            </filterchain>
-        </loadresource>
-        <loadresource property="target.fx.majver">
-            <propertyresource name="target.fx.ver"/>
-            <filterchain>
-                <replaceregex pattern="[-_.].*" replace="" />
-            </filterchain>
-        </loadresource>
-        <property description="suppress property warning" name="target.fx.majver" value="something went wrong"/>
-        <property description="suppress property warning" name="host.fx.majver" value="something went wrong"/>
-
-        <echo level="info">
-        JavaFX host platform:
-            Version: ${host.fx.ver} (${host.os}, ${host.arch})
-            Major Version: ${host.fx.majver}
-            URLs: &quot;${host.fx.urlver}&quot;
-
-        JavaFX target platform:
-            Version: ${target.fx.ver} (${target.os}, ${target.arch})
-            Major Version: ${target.fx.majver}
-            URLs: "&quot;${target.fx.urlver}&quot;
-        </echo>
-    </target>
-
-    <!-- Downloads and extracts javafx for the specified platform -->
-    <target name="download-extract-javafx">
-        <!-- Cleanup old versions -->
-        <delete includeemptydirs="true" defaultexcludes="false">
-            <fileset dir="${fx.basedir}">
-                <include name="javafx*/"/>
-            </fileset>
-        </delete>
-        <mkdir dir="${fx.dir}"/>
-
-        <!-- Valid os values: "windows", "linux", "osx" -->
-        <!-- translate "mac" to "osx" -->
-        <condition property="fx.os.fixed" value="osx" else="${fx.os}">
-            <equals arg1="${fx.os}" arg2="mac"/>
-        </condition>
-
-        <!-- Valid arch values: "x64", "aarch64", "x86" -->
-        <!-- translate "x86_64" to "x64" -->
-        <condition property="fx.arch.fixed" value="x64">
-            <or>
-                <equals arg1="${fx.arch}" arg2="x86_64"/>
-                <and>
-                    <!-- TODO: Remove "aarch64" to "x64" when windows aarch64 binaries become available -->
-                    <equals arg1="${fx.arch}" arg2="aarch64"/>
-                    <equals arg1="${fx.os}" arg2="windows"/>
-                </and>
-                <and>
-                    <!-- TODO: Remove "riscv" to "x64" when linux riscv64 binaries become available -->
-                    <equals arg1="${fx.arch}" arg2="riscv64"/>
-                    <equals arg1="${fx.os}" arg2="linux"/>
-                </and>
-            </or>
-        </condition>
-        <property name="fx.arch.fixed" value="${fx.arch}" description="fallback value"/>
-
-        <!-- Fix underscore when "monocle" is missing -->
-        <condition property="fx.url" value="${javafx.mirror}/${fx.majver}/openjfx-${fx.urlver}_${fx.os.fixed}-${fx.arch.fixed}_bin-sdk.zip">
-            <not>
-                <contains string="${fx.urlver}" substring="monocle"/>
-            </not>
-        </condition>
-
-        <property name="fx.url" value="${javafx.mirror}/${fx.majver}/openjfx-${fx.urlver}-${fx.os.fixed}-${fx.arch.fixed}_bin-sdk.zip"/>
-        <property name="fx.zip" value="${out.dir}/${fx.id}.zip"/>
-
-        <echo level="info">Downloading JavaFX from ${fx.url}</echo>
-        <echo level="info">Temporarily saving JavaFX to ${fx.zip}</echo>
-
-        <mkdir dir="${out.dir}"/>
-        <get src="${fx.url}" verbose="true" dest="${fx.zip}"/>
-        <unzip src="${fx.zip}" dest="${fx.dir}" overwrite="true"/>
-        <delete file="${fx.zip}"/>
-    </target>
-</project>

old code/tray/ant/lib/slim-icu.py

@@ -1,109 +0,0 @@
-# 2018 Yohanes Nugroho <yohanes@gmail.com> (@yohanes)
-#
-# 1. Download icu4j source code, build using ant.
-#    It will generate icu4j.jar and icu4j-charset.jar
-#
-# 2. Run slim-icu.py to generate slim version.
-#
-#    To invoke from ant, add python to $PATH
-#    and add the following to build.xml:
-#
-#      <target name="distill-icu" depends="init">
-#          <exec executable="python">
-#              <arg line="ant/lib/slim-icu.py lib/charsets"/>
-#          </exec>
-#      </target>
-#
-#      ... then call: ant distill-icu
-#
-# 3. Overwrite files in lib/charsets/
-
-# slim ICU
-import sys
-import os
-from pathlib import Path
-import zipfile
-from zipfile import ZipFile
-
-directory = str(Path(__file__).resolve().parent)
-if len(sys.argv) > 1:
-    directory = sys.argv[1]
-
-mode = zipfile.ZIP_DEFLATED
-
-
-def keep_file(filename):
-    # skip all break iterators
-    if filename.endswith(".brk") \
-            or filename.endswith(".dict") \
-            or filename.endswith("unames.icu") \
-            or filename.endswith("ucadata.icu") \
-            or filename.endswith(".spp"):
-        return False
-
-    # keep english and arabic
-    if filename.startswith("en") \
-            or filename.startswith("ar") \
-            or not filename.endswith(".res"):
-        return True
-
-    return False
-
-
-zin = ZipFile(os.path.join(directory, 'icu4j.jar'), 'r')
-zout = ZipFile(os.path.join(directory, 'icu4j-slim.jar'), 'w', mode)
-
-for item in zin.infolist():
-    buff = zin.read(item.filename)
-    print(item.filename)
-
-    if keep_file(item.filename):
-        print("Keep")
-        zout.writestr(item, buff)
-    else:
-        print("Remove")
-
-zout.close()
-zin.close()
-
-
-def keep_charset_file(filename):
-    to_remove = [
-        "cns-11643-1992.cnv",
-        "ebcdic-xml-us.cnv",
-        "euc-jp-2007.cnv",
-        "euc-tw-2014.cnv",
-        "gb18030.cnv",
-        "ibm-1363_P11B-1998.cnv",
-        "ibm-1364_P110-2007.cnv",
-        "ibm-1371_P100-1999.cnv",
-        "ibm-1373_P100-2002.cnv",
-        "ibm-1375_P100-2008.cnv",
-        "ibm-1383_P110-1999.cnv",
-        "ibm-1386_P100-2001.cnv",
-        "ibm-1388_P103-2001.cnv",
-        "ibm-1390_P110-2003.cnv"
-    ]
-
-    for i in to_remove:
-        if i in filename:
-            return False
-
-    return True
-
-
-zin = ZipFile(os.path.join(directory, 'icu4j-charset.jar'), 'r')
-zout = ZipFile(os.path.join(directory, 'icu4j-charset-slim.jar'), 'w', mode)
-
-for item in zin.infolist():
-    buff = zin.read(item.filename)
-    print(item.filename, end=' ')
-
-    if keep_charset_file(item.filename):
-        print("Keep")
-        zout.writestr(item, buff)
-    else:
-        print("Remove")
-
-zout.close()
-zin.close()

old code/tray/ant/linux/installer.xml

@@ -1,69 +0,0 @@
-<project name="linux-installer" basedir="../../">
-    <property file="ant/project.properties"/>
-    <property file="ant/linux/linux.properties"/>
-    <import file="${basedir}/ant/version.xml"/>
-    <import file="${basedir}/ant/platform-detect.xml"/>
-
-    <target name="build-run" depends="get-version,platform-detect">
-        <echo level="info">Creating installer using makeself</echo>
-
-        <!-- Get the os-preferred name for the target architecture -->
-        <condition property="linux.target.arch" value="arm64">
-            <isset property="target.arch.aarch64"/>
-        </condition>
-        <property name="linux.target.arch" value="${target.arch}" description="fallback value"/>
-
-        <copy file="assets/branding/linux-icon.svg" tofile="${dist.dir}/${project.filename}.svg"/>
-
-        <mkdir dir="${build.dir}/scripts"/>
-        <copy file="ant/linux/linux-installer.sh.in" tofile="${dist.dir}/install">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <copy file="ant/unix/unix-launcher.sh.in" tofile="${dist.dir}/${project.filename}">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <copy file="ant/unix/unix-uninstall.sh.in" tofile="${dist.dir}/uninstall">
-            <filterchain><expandproperties/></filterchain>
-        </copy>
-
-        <chmod perm="a+x" type="file">
-            <fileset dir="${dist.dir}">
-                <include name="**/${project.filename}"/>
-                <include name="**/install"/>
-                <include name="**/uninstall"/>
-            </fileset>
-        </chmod>
-
-        <exec executable="makeself" failonerror="true">
-            <arg value="${dist.dir}"/>
-            <arg value="${out.dir}/${project.filename}${build.type}-${build.version}-${linux.target.arch}.run"/>
-            <arg value="${project.name} Installer"/>
-            <arg value="./install"/>
-        </exec>
-    </target>
-
-    <target name="copy-solibs" if="target.os.linux">
-        <echo level="info">Copying native library files to libs</echo>
-
-        <mkdir dir="${dist.dir}/libs"/>
-        <copy todir="${dist.dir}/libs" flatten="true" verbose="true">
-            <fileset dir="${out.dir}/libs-temp">
-                <!--x86_64-->
-                <include name="**/linux-x86-64/*" if="target.arch.x86_64"/> <!-- jna/hid4java -->
-                <include name="**/linux-x86_64/*" if="target.arch.x86_64"/> <!-- usb4java -->
-                <include name="**/linux_64/*" if="target.arch.x86_64"/> <!-- jssc -->
-                <!--aarch64-->
-                <include name="**/linux-aarch64/*" if="target.arch.aarch64"/> <!-- jna/hid4java/usb4java -->
-                <include name="**/linux_arm64/*" if="target.arch.aarch64"/> <!-- jssc -->
-                <!--arm32-->
-                <include name="**/linux-arm/*" if="target.arch.arm32"/> <!-- jna/hid4java/usb4java -->
-                <include name="**/linux_arm/*" if="target.arch.arm32"/> <!-- jssc -->
-                <!--riscv64-->
-                <include name="**/linux-riscv64/*" if="target.arch.riscv64"/> <!-- jna/hid4java -->
-                <include name="**/linux_riscv64/*" if="target.arch.riscv64"/> <!-- jssc -->
-            </fileset>
-        </copy>
-    </target>
-</project>

old code/tray/ant/linux/linux-installer.sh.in

@@ -1,68 +0,0 @@
-#!/bin/bash
-
-# Halt on first error
-set -e
-
-if [ "$(id -u)" != "0" ]; then
-   echo "This script must be run with root (sudo) privileges" 1>&2
-   exit 1
-fi
-
-# Console colors
-RED="\\x1B[1;31m";GREEN="\\x1B[1;32m";YELLOW="\\x1B[1;33m";PLAIN="\\x1B[0m"
-
-# Statuses
-SUCCESS="   [${GREEN}success${PLAIN}]"
-FAILURE="   [${RED}failure${PLAIN}]"
-WARNING="   [${YELLOW}warning${PLAIN}]"
-
-mask=755
-
-echo -e "Starting install...\n"
-
-# Clear the log for writing
-> "${install.log}"
-
-run_task () {
-    echo -e "Running $1 task..."
-    if [ -n "$DEBUG" ]; then
-        "./${project.filename}" $@ && ret_val=$? || ret_val=$?
-    else
-        "./${project.filename}" $@ &>> "${install.log}" && ret_val=$? || ret_val=$?
-    fi
-
-    if [ $ret_val -eq 0 ]; then
-        echo -e "   $SUCCESS Task $1 was successful"
-    else
-        if [ "$1" == "spawn" ]; then
-            echo -e "   $WARNING Task $1 skipped.  You'll have to start ${project.name} manually."
-            return
-        fi
-        echo -e "   $FAILURE Task $1 failed.\n\nRe-run with DEBUG=true for more information."
-        false # throw error
-    fi
-}
-
-# Ensure java is installed and working before starting
-"./${project.filename}" --version
-
-# Make a temporary jar for preliminary installation steps
-run_task preinstall
-
-run_task install --dest "/opt/${project.filename}"
-
-# We should be installed now, generate the certificate
-pushd "/opt/${project.filename}" &> /dev/null
-run_task certgen
-
-# Tell the desktop to look for new mimetypes in the background
-umask_bak="$(umask)"
-umask 0002 # more permissive umask for mimetype registration
-update-desktop-database &> /dev/null &
-umask "$umask_bak"
-
-echo "Installation complete... Starting ${project.name}..."
-# spawn itself as a regular user, inheriting environment
-run_task spawn "/opt/${project.filename}/${project.filename}"
-
-popd &> /dev/null

old code/tray/ant/linux/linux.properties

@@ -1,2 +0,0 @@
-# Expose UNIXToolkit.getGtkVersion
-linux.launch.jigsaw=--add-opens java.desktop/sun.awt=ALL-UNNAMED

old code/tray/ant/platform-detect.xml

@@ -1,254 +0,0 @@
-<project name="host-info" default="platform-detect" basedir="..">
-    <property file="ant/project.properties"/>
-    <!--
-        Detects and echos host and target information
-
-        String:
-        - host.os, host.arch, host.libext, host.libprefix
-        - target.os, target.arch, target.libext, target.libprefix
-
-        Booleans:
-        - host.${host.arch}=true, host.${host.os}=true
-        - target.${target.arch}=true, target.${target.os}=true
-    -->
-    <target name="platform-detect" depends="get-target-os,get-target-arch,get-libext">
-        <!-- Echo host information -->
-        <antcall target="echo-platform">
-            <param name="title" value="Host"/>
-            <param name="prefix" value="host"/>
-            <param name="prefix.os" value="${host.os}"/>
-            <param name="prefix.arch" value="${host.arch}"/>
-            <param name="prefix.libext" value="${host.libext}"/>
-        </antcall>
-        <!-- Echo target information -->
-        <antcall target="echo-platform">
-            <param name="title" value="Target"/>
-            <param name="prefix" value="target"/>
-            <param name="prefix.os" value="${target.os}"/>
-            <param name="prefix.arch" value="${target.arch}"/>
-            <param name="prefix.libext" value="${target.libext}"/>
-        </antcall>
-    </target>
-    <target name="echo-platform">
-        <!-- Make output more readable -->
-
-        <!-- Boolean platform.os.foo value -->
-        <condition property="os.echo" value="${prefix}.os.windows">
-            <isset property="${prefix}.os.windows"/>
-        </condition>
-        <condition property="os.echo" value="${prefix}.os.mac">
-            <isset property="${prefix}.os.mac"/>
-        </condition>
-        <property name="os.echo" value="${prefix}.os.linux" description="fallback value"/>
-
-        <!-- Boolean target.arch.foo value -->
-        <condition property="arch.echo" value="${prefix}.arch.aarch64">
-            <isset property="${prefix}.arch.aarch64"/>
-        </condition>
-        <property name="arch.echo" value="${prefix}.arch.x86_64" description="fallback value"/>
-
-        <echo level="info">
-        ${title} platform:
-            ${prefix}.os: &quot;${prefix.os}&quot;
-            ${prefix}.arch: &quot;${prefix.arch}&quot;
-            ${prefix}.libext: &quot;${prefix.libext}&quot;
-            ${os.echo}: true
-            ${arch.echo}: true
-        </echo>
-
-    </target>
-
-    <!-- Force Linux runtime.  Set by "makeself" target -->
-    <target name="target-os-linux">
-        <!-- String value -->
-        <property name="target.os" value ="linux"/>
-        <!-- Boolean value -->
-        <property name="target.os.linux" value="true"/>
-    </target>
-
-    <!-- Force Linux runtime.  Set by "nsis" target -->
-    <target name="target-os-windows">
-        <!-- String value -->
-        <property name="target.os" value ="windows"/>
-        <!-- Boolean value -->
-        <property name="target.os.windows" value="true"/>
-    </target>
-
-    <!-- Force Linux runtime.  Set by "pkgbuild", "dmg" targets -->
-    <target name="target-os-mac">
-        <!-- String value -->
-        <property name="target.os" value ="mac"/>
-        <!-- Boolean value -->
-        <property name="target.os.mac" value="true"/>
-    </target>
-
-    <target name="get-target-os" depends="get-host-os">
-        <!-- Suppress property warning :) -->
-        <condition description="suppress property warning (no-op)"
-                   property="target.os" value="${target.os}">
-            <isset property="target.os"/>
-        </condition>
-        <!-- Set Boolean if only the String was set -->
-        <condition property="target.os.windows">
-            <and>
-                <isset property="target.os"/>
-                <equals arg1="${target.os}" arg2="windows"/>
-            </and>
-        </condition>
-        <condition property="target.os.mac">
-            <and>
-                <isset property="target.os"/>
-                <equals arg1="${target.os}" arg2="mac"/>
-            </and>
-        </condition>
-        <condition property="target.os.linux">
-            <and>
-                <isset property="target.os"/>
-                <equals arg1="${target.os}" arg2="linux"/>
-            </and>
-        </condition>
-
-        <!-- Fallback to host boolean values if target values aren't specified -->
-        <property name="target.os" value="${host.os}" description="fallback value"/>
-        <condition property="target.os.windows" description="fallback value">
-            <equals arg1="${target.os}" arg2="windows"/>
-        </condition>
-        <condition property="target.os.mac" description="fallback value">
-            <equals arg1="${target.os}" arg2="mac"/>
-        </condition>
-        <condition property="target.os.linux" description="fallback value">
-            <equals arg1="${target.os}" arg2="linux"/>
-        </condition>
-    </target>
-
-    <!-- Calculate target architecture based on ${target.arch} value -->
-    <target name="get-target-arch" depends="get-host-arch">
-        <!-- Fallback to ${host.arch} if not specified -->
-        <property name="target.arch" value="${host.arch}" description="fallback value"/>
-        <condition property="target.arch.x86_64">
-            <equals arg1="amd64" arg2="${target.arch}"/>
-        </condition>
-        <condition property="target.arch.x86_64">
-            <equals arg1="x86_64" arg2="${target.arch}"/>
-        </condition>
-        <condition property="target.arch.aarch64">
-            <equals arg1="aarch64" arg2="${target.arch}"/>
-        </condition>
-        <condition property="target.arch.riscv64">
-            <equals arg1="riscv64" arg2="${target.arch}"/>
-        </condition>
-        <!-- Warning: Placeholder only! 32-bit builds are not supported -->
-        <condition property="target.arch.arm32">
-            <equals arg1="arm32" arg2="${target.arch}"/>
-        </condition>
-        <condition property="target.arch.x86">
-            <equals arg1="x86" arg2="${target.arch}"/>
-        </condition>
-    </target>
-
-    <!-- Calculate native file extension -->
-    <target name="get-libext" depends="get-host-os">
-        <!-- Some constants -->
-        <property name="windows.libext" value="dll"/>
-        <property name="mac.libext" value="dylib"/>
-        <property name="linux.libext" value="so"/>
-        <!-- Host uses "dll" -->
-        <condition property="host.libext" value="${windows.libext}">
-            <isset property="host.os.windows"/>
-        </condition>
-        <!-- Host uses "dylib" -->
-        <condition property="host.libext" value="${mac.libext}">
-            <isset property="host.os.mac"/>
-        </condition>
-        <!-- Host uses "so" -->
-        <condition property="host.libext" value="${linux.libext}">
-            <isset property="host.os.linux"/>
-        </condition>
-        <!-- Target uses "dll" -->
-        <condition property="target.libext" value="${windows.libext}">
-            <isset property="target.os.windows"/>
-        </condition>
-        <!-- Target uses "dylib" -->
-        <condition property="target.libext" value="${mac.libext}">
-            <isset property="target.os.mac"/>
-        </condition>
-        <!-- Target uses "so" -->
-        <condition property="target.libext" value="${linux.libext}">
-            <isset property="target.os.linux"/>
-        </condition>
-
-        <!-- Target uses "" or "lib" prefix for native files -->
-        <condition property="host.libprefix" value="" else="lib">
-            <isset property="host.os.windows"/>
-        </condition>
-
-        <!-- Host uses "" or "lib" prefix for native files -->
-        <condition property="target.libprefix" value="" else="lib">
-            <isset property="target.os.windows"/>
-        </condition>
-    </target>
-
-    <!-- Calculate and standardize host architecture based on ${os.arch} value -->
-    <target name="get-host-arch">
-        <!-- Boolean value (x86_64) -->
-        <condition property="host.arch.x86_64">
-            <equals arg1="amd64" arg2="${os.arch}"/>
-        </condition>
-        <condition property="host.arch.x86_64">
-            <equals arg1="x86_64" arg2="${os.arch}"/>
-        </condition>
-
-        <!-- Boolean value (aarch64) -->
-        <condition property="host.arch.aarch64">
-            <equals arg1="aarch64" arg2="${os.arch}"/>
-        </condition>
-
-        <!-- Boolean value (x86 - unsupported) -->
-        <condition property="host.arch.x86">
-            <equals arg1="x86" arg2="${os.arch}"/>
-        </condition>
-
-        <!-- String value (aarch64) -->
-        <condition property="host.arch" value="aarch64">
-            <equals arg1="aarch64" arg2="${os.arch}"/>
-        </condition>
-        <!-- String value (x86) -->
-        <condition property="host.arch" value="x86">
-            <equals arg1="x86" arg2="${os.arch}"/>
-        </condition>
-        <condition property="host.arch" value="x86">
-            <equals arg1="i386" arg2="${os.arch}"/>
-        </condition>
-
-        <!-- String value (x86_64 - fallback, most common) -->
-        <property name="host.arch" value="x86_64" description="fallback value"/>
-    </target>
-
-    <!-- Calculate the host os -->
-    <target name="get-host-os">
-        <!-- Boolean value -->
-        <condition property="host.os.windows" value="true">
-            <os family="windows"/>
-        </condition>
-        <condition property="host.os.mac" value="true">
-            <os family="mac"/>
-        </condition>
-        <condition property="host.os.linux" value="true">
-            <and>
-                <os family="unix"/>
-                <not>
-                    <os family="mac"/>
-                </not>
-            </and>
-        </condition>
-
-        <!-- String value -->
-        <condition property="host.os" value="windows">
-            <os family="windows"/>
-        </condition>
-        <condition property="host.os" value="mac">
-            <os family="mac"/>
-        </condition>
-        <property name="host.os" value="linux" description="fallback value"/>
-    </target>
-</project>

old code/tray/ant/private/private.properties

@@ -1,5 +0,0 @@
-signing.alias=self-signed
-signing.keystore=ant/private/qz.ks
-signing.keypass=jzebraonfire
-signing.storepass=jzebraonfire
-signing.algorithm=SHA-256