Initial commit: Fat Kiss site — Hugo + Decap CMS

server/contact-handler/README.md

@@ -0,0 +1,22 @@
+# Fat Kiss Contact Handler
+
+Lightweight Node/Express contact form backend.
+
+## Setup
+```bash
+cp .env.example .env
+# Fill in Turnstile secret, SMTP creds, mail routing
+npm install
+npm start
+```
+
+## Endpoints
+- `POST /api/contact` — accepts form submissions with Turnstile verification
+
+## Security
+- Rate limiting (5 req / 15 min default)
+- Honeypot field
+- Turnstile server-side verification
+- Input sanitization
+- Category allowlist
+- CORS locked to getfatkiss.com