perf: add database indexes, implement caching, enforce permission guards, and sanitize external URLs

paperless-backend/src/database/database.module.ts

@@ -66,7 +66,7 @@ const entities = [
         password: config.get<string>('DB_PASSWORD', ''),
         database: config.get<string>('DB_DATABASE', 'paperlessadd'),
         entities,
-        synchronize: true,
+        synchronize: config.get<string>('NODE_ENV') !== 'production',
         charset: 'utf8mb4',
       }),
     }),

paperless-backend/src/database/entities/postprocessing-log.entity.ts

@@ -1,16 +1,18 @@
-import { Entity, PrimaryGeneratedColumn, Column } from 'typeorm';
+import { Entity, PrimaryGeneratedColumn, Column, Index } from 'typeorm';
 
 @Entity('PostprocessingLogs')
 export class PostprocessingLog {
   @PrimaryGeneratedColumn()
   Id!: number;
 
+  @Index()
   @Column({ type: 'int' })
   PostprocessingId!: number;
 
   @Column({ type: 'int', nullable: true })
   ActionId!: number | null;
 
+  @Index()
   @Column({ type: 'int' })
   DocumentId!: number;
 
@@ -20,6 +22,7 @@ export class PostprocessingLog {
   @Column({ type: 'text', nullable: true })
   Message!: string | null;
 
+  @Index()
   @Column({ type: 'datetime', default: () => 'CURRENT_TIMESTAMP' })
   CreatedAt!: Date;
 }