From 81a893d72a430ee415991c04f2325d9e1ba53a6b Mon Sep 17 00:00:00 2001
From: firstoff23 <161253533+firstoff23@users.noreply.github.com>
Date: Mon, 11 May 2026 18:47:09 +0100
Subject: [PATCH] Add planning document for Cloudflare security features

---
 docs/planning/cloudflare-security.md | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 docs/planning/cloudflare-security.md

diff --git a/docs/planning/cloudflare-security.md b/docs/planning/cloudflare-security.md
new file mode 100644
index 0000000..96456b7
--- /dev/null
+++ b/docs/planning/cloudflare-security.md
@@ -0,0 +1,24 @@
+# Planeamento: Cloudflare DNS + WAF + Turnstile
+
+> Branch: `feature/cloudflare-security` | Issue: #10
+
+## Estado
+
+- [ ] Em desenvolvimento
+
+## Componentes
+
+- **DNS** — migrar registo A/CNAME para Cloudflare
+- **WAF** — regras para bloquear SQLi, XSS, bots
+- **Turnstile** — CAPTCHA amigável no chat
+- **Rate Limiting** — máx 60 req/min por IP nas rotas `/api/*`
+
+## Ficheiros a criar
+
+- `src/components/TurnstileWidget.jsx`
+- `middleware/rateLimiter.js` — atualizar
+- `cloudflare/waf-rules.json` — regras exportadas
+
+## Notas
+
+Ver issue #10 para detalhes completos das tarefas.