feat: update readme and policy

Author: minhnq

.github/workflows/deploy.yml

@@ -22,3 +22,6 @@ jobs:
             git pull origin main
             chmod +x deploy.sh
             ./deploy.sh
+            cd backend
+            chmod +x deploy.sh
+            ./deploy.sh

README.md

@@ -1,49 +1,140 @@
 # DevTools
 
-Free online developer tools. No signup required, 100% client-side processing.
+Free online developer tools. No signup required, 100% client-side processing for most tools.
+
+**Live Demo**: [pwhs.app](https://pwhs.app)
 
 ## Tools
 
-- **Subdomain Scanner** - Discover subdomains using CT logs, VirusTotal, Shodan, Subfinder
-- **OTP Generator** - Generate TOTP codes with key saving and password protection
-- **Base64 Image** - View/encode images to Base64 with drag & drop
-- **Webhook Tester** - Receive and inspect webhook requests in real-time
+| Tool | Description | Storage |
+|------|-------------|---------|
+| **Subdomain Scanner** | Discover subdomains using CT logs, VirusTotal, Shodan | Client-side |
+| **OTP Generator** | Generate TOTP codes with key saving and password protection | Local Storage |
+| **Base64 Image** | View/encode images to Base64 with drag & drop | Client-side |
+| **Webhook Tester** | Receive and inspect webhook requests in real-time | Server |
+| **JSON Server** | Host, validate, and share JSON data with mock APIs | Server |
+| **Image Uploader** | Upload images and get shareable links | S3/R2 |
+| **File Transfer** | Share any file with expiring download links | S3/R2 |
+| **Time Capsule** | Lock files until a future date | S3/R2 |
+| **ANeko Builder** | Create custom skins for ANeko Reborn Android app | Client-side |
+
+## Project Structure
+
+```
+devtool-fe/
+├── src/                    # Next.js frontend
+│   ├── app/               # App router pages
+│   ├── components/        # React components
+│   └── lib/               # Utilities
+├── backend/               # NestJS backend API
+│   └── src/
+│       ├── checkdomain/   # Subdomain scanner cron
+│       ├── upload/        # Image upload service
+│       ├── transfer/      # File transfer service
+│       └── capsule/       # Time capsule service
+└── prisma/                # Database schema
+```
 
 ## Quick Start
 
+### Frontend (Next.js)
+
 ```bash
-# Install
-npm install
+# Install dependencies
+bun install
 
-# Run
-npm run dev
+# Run development server
+bun run dev
 ```
 
 Open http://localhost:3000
 
+### Backend (NestJS)
+
+```bash
+cd backend
+
+# Install dependencies
+bun install
+
+# Run development server
+bun run start:dev
+```
+
+Backend runs on http://localhost:3001
+
 ## Environment Variables
 
+### Frontend (.env)
+
 ```env
 # VirusTotal API Key (free tier: 4 requests/minute)
-# Get yours at: https://www.virustotal.com/gui/sign-in
 VIRUSTOTAL_API_KEY=
 
 # Shodan API Key (free tier: 100 credits/month)
-# Get yours at: https://account.shodan.io
 SHODAN_API_KEY=
 
-# Base URL (e.g. https://yourdomain.com)
+# Base URL
 NEXT_PUBLIC_BASE_URL=https://yourdomain.com
 
-# PostgreSQL for Webhook Tester
+# PostgreSQL Database
+DATABASE_URL=postgresql://user:pass@host:5432/db
+
+# S3/R2 Cloudflare Storage
+S3_ENDPOINT=
+S3_ACCESS_KEY=
+S3_SECRET_KEY=
+S3_BUCKET=
+S3_PUBLIC_URL=
+
+# Custom Public URLs (optional)
+IMAGE_PUBLIC_URL=https://image.yourdomain.com
+CAPSULE_PUBLIC_URL=https://capsule.yourdomain.com
+
+# Time Capsule Settings (optional)
+CAPSULE_MAX_FILE_SIZE=104857600
+CAPSULE_MAX_LOCK_DAYS=365
+CAPSULE_MIN_LOCK_DAYS=1
+```
+
+### Backend (.env)
+
+```env
+# PostgreSQL Database
 DATABASE_URL=postgresql://user:pass@host:5432/db
+
+# S3/R2 Storage
+S3_ENDPOINT=
+S3_ACCESS_KEY=
+S3_SECRET_KEY=
+S3_BUCKET=
+
+# Server Port
+PORT=3001
 ```
 
 ## API Keys (Optional)
 
 Configure in UI Settings panel:
-- **VirusTotal** - [virustotal.com](https://www.virustotal.com/)
-- **Shodan** - [shodan.io](https://shodan.io/)
+- **VirusTotal** - [virustotal.com](https://www.virustotal.com/) - Subdomain enumeration
+- **Shodan** - [shodan.io](https://shodan.io/) - Subdomain enumeration
+
+##  Deployment
+
+### Frontend
+Deploy to any platform that supports Next.js (Vercel, Netlify, etc.)
+
+### Backend
+```bash
+cd backend
+bun run build
+bun run start:prod
+```
+
+Or use PM2:
+```bash
+pm2 start ecosystem.config.js
+```
 
 ## License
 

backend/deploy.sh

@@ -41,6 +41,10 @@ export default function PolicyPage() {
                         <li><strong>Base64 Converter:</strong> Image processing happens 100% locally. Your files are never uploaded to our servers.</li>
                         <li><strong>JSON Server:</strong> Data you explicitly save is stored in our database to generate a shareable URL. We do not analyze this data.</li>
                         <li><strong>Webhook Tester:</strong> Request data sent to your unique webhook URL is stored temporarily for your inspection. We do not use this data for any other purpose.</li>
+                        <li><strong>Image Uploader:</strong> Uploaded images are stored on our servers to generate shareable links. Images may be deleted after a period of inactivity.</li>
+                        <li><strong>File Transfer:</strong> Files you upload are stored temporarily on our servers to provide download links. Files are automatically deleted after the expiration time you set.</li>
+                        <li><strong>Time Capsule:</strong> Files and messages are encrypted and stored on our servers until the unlock date. After unlocking, data may be deleted after a period of inactivity.</li>
+                        <li><strong>ANeko Builder:</strong> All skin editing happens 100% locally in your browser. We do not upload or store any of your skin files.</li>
                     </ul>
 
                     <h3>2. Local Storage</h3>