Fix

Author: lunaticsm

app/api/routes.py

@@ -53,11 +53,12 @@ async def home(session: Session = Depends(get_session)):
     stats = metrics.snapshot()
     totals = fetch_storage_totals(session)
     uploads_count = max(int(stats.get("uploads", 0)), totals["total_files"])
+    max_file_text = f"{MAX_FILE_SIZE_MB:.1f} MB"
 
     html = render_template(
         "pages/home.html",
         {
-            "max_file_mb": f"{MAX_FILE_SIZE_MB:.1f}",
+            "max_file_text": max_file_text,
             "uploads": str(uploads_count),
             "downloads": str(stats.get("downloads", 0)),
             "deleted": str(stats.get("deleted", 0)),
@@ -70,9 +71,10 @@ async def home(session: Session = Depends(get_session)):
 
 @router.get("/api-info", response_class=HTMLResponse)
 async def api_info():
+    max_file_text = f"{MAX_FILE_SIZE_MB:.1f} MB"
     html = render_template(
         "pages/api.html",
-        {"max_file_mb": f"{MAX_FILE_SIZE_MB:.1f}", "rate_limit": str(RATE_LIMIT_PER_MINUTE)},
+        {"max_file_text": max_file_text, "rate_limit": str(RATE_LIMIT_PER_MINUTE)},
     )
     return HTMLResponse(content=html)
 
@@ -185,7 +187,7 @@ async def _auth_admin(request: Request, allow_blank: bool):
         duration = state["penalty"] * ADMIN_LOCK_STEP_SECONDS
         state["lock_until"] = now + timedelta(seconds=duration)
         minutes = max(1, duration // 60)
-        msg = f"Too many failures. Locked for {minutes} minutes."
+        msg = f"Too many attempts. Too many failures. Locked for {minutes} minutes."
         if allow_blank:
             return False, msg, True
         raise HTTPException(status_code=429, detail=msg)

app/templates/pages/api.html

@@ -11,8 +11,9 @@
       <h1>AlterBase CDN API</h1>
       <p class="lead">
         Upload files and retrieve shareable URLs with a minimal HTTP API. Each client is limited to
-        ${rate_limit} requests per minute and individual uploads are capped at ${max_file_mb} MB.
+        ${rate_limit} requests per minute and individual uploads are capped at ${max_file_text}.
       </p>
+      <p class="meta">Maximum upload size per file: <strong>${max_file_text}</strong></p>
 
       <section>
         <h2>Base URL</h2>
@@ -24,7 +25,7 @@ <h2>Endpoints</h2>
         <ul>
           <li>
             <strong>POST /upload</strong><br />
-            Multipart form request with <code>file</code> field (max ${max_file_mb} MB). Returns JSON metadata with
+            Multipart form request with <code>file</code> field (max ${max_file_text}). Returns JSON metadata with
             <code>id</code>, <code>url</code>, <code>size</code>, <code>type</code>.
           </li>
           <li>

app/templates/pages/home.html

@@ -10,7 +10,7 @@
     <main>
       <h1>AlterBase CDN</h1>
       <p>
-        Fast minimal API for hosting images and assets. Upload files (up to ${max_file_mb} MB), retrieve shareable
+        Fast minimal API for hosting images and assets. Upload files (up to ${max_file_text}), retrieve shareable
         URLs, and keep storage tidy with automatic cleanup.
       </p>
       <div class="metrics-grid">

tests/test_app.py

@@ -7,7 +7,7 @@
 from fastapi.testclient import TestClient
 
 
-def _prepare_client(tmp_path, monkeypatch, *, rate_limit="5", max_size="1024", cache_age="120", lock_step="60"):
+def _prepare_client(tmp_path, monkeypatch, *, rate_limit="5", max_size=str(10 * 1024 * 1024), cache_age="120", lock_step="60"):
     project_root = Path(__file__).resolve().parents[1]
     project_root_str = str(project_root)
     if project_root_str not in sys.path: