From b7c1c35e384bd8501c34ca8bd7d144a447d150f1 Mon Sep 17 00:00:00 2001
From: NFAsylum <marcooinotna13@outlook.com>
Date: Thu, 30 Apr 2026 21:04:27 -0300
Subject: [PATCH] Update README

---
 README.md | 37 +++++++++++++++++++++++++++++++++----
 1 file changed, 33 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index ebeca49..bfc9b78 100644
--- a/README.md
+++ b/README.md
@@ -2,14 +2,18 @@
 
 TaskFlow is a Kanban board for task management via tickets. TaskFlow enables fast and simple task management with drag-and-drop and edit in-place of tickets.
 
+[Live Demo](https://taskflow-frontend-t4ww.onrender.com/) - first request may take ~1 min (free-tier auto-stop)
+
 ## Stack
 
 **Frontend:** React 19, TypeScript, Tailwind CSS, React Router, @dnd-kit
 
-**Backend:** ASP.NET Core (.NET 9), Entity Framework Core, SQLite
+**Backend:** ASP.NET Core (.NET 9), Entity Framework Core, Postgres
 
 **Auth:** JWT + BCrypt
 
+**Infrastructure:** Docker, nginx, GitHub Actions CI, Render (deploy)
+
 ## Screenshots
 
 ### Light mode
@@ -20,9 +24,19 @@ TaskFlow is a Kanban board for task management via tickets. TaskFlow enables fas
 
 ![TaskFlow Dark](screenshot-dark.png)
 
-## Setup
+## Quick start
+
+### With Docker
+
+```bash
+docker compose up --build
+```
+
+The app runs at http://localhost (frontend) with the API at http://localhost:8080
+
+### Without Docker
 
-### Backend
+Backend:
 
 ```bash
 cd TaskFlow.Api
@@ -31,7 +45,7 @@ dotnet ef database update
 dotnet run -- --auto-create-jwt true
 ```
 
-### Frontend
+Frontend:
 
 ```bash
 cd taskflow-frontend
@@ -40,3 +54,18 @@ npm run dev
 ```
 
 The app runs at http://localhost:5173 with the API at http://localhost:5278
+
+## Decisions
+
+- Postgres over SQLite: same database in development and production (dev/prod parity). SQLite doesn't survive container restarts without volume hacks;
+- JWT over cookies: simpler implementation for a SPA, token stored in localStorage;
+- nginx as reverse proxy: serves static frontend files and proxies /api to the backend, avoiding CORS in Docker;
+- Multi-stage Docker builds: final images contain only runtime dependencies.
+
+## What I'd do differently at scale
+
+- Refresh token rotation (current JWT has no expiration strategy)
+- Rate limiting on auth endpoints
+- Redis cache layer for frequently read tickets
+- Connection pooling with PgBouncer
+- E2E tests with Playwright