chore: feat/objekte-kategorie → main (Version 1.10.1)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.devcontainer/devcontainer.json

@@ -0,0 +1,27 @@
+{
+  "name": "Logbuch Dev",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "app",
+  "workspaceFolder": "/workspace",
+  "forwardPorts": [3000, 3306],
+  "portsAttributes": {
+    "3000": {
+      "label": "Next.js Dev Server",
+      "onAutoForward": "notify"
+    },
+    "3306": {
+      "label": "MySQL",
+      "onAutoForward": "silent"
+    }
+  },
+  "postCreateCommand": "npm install",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "dbaeumer.vscode-eslint",
+        "bradlc.vscode-tailwindcss",
+        "ms-vscode.vscode-typescript-next"
+      ]
+    }
+  }
+}

.devcontainer/docker-compose.yml

@@ -0,0 +1,17 @@
+services:
+  app:
+    image: mcr.microsoft.com/devcontainers/javascript-node:20
+    volumes:
+      - ..:/workspace:cached
+    environment:
+      DB_HOST: host.docker.internal
+      DB_USER: logbuch
+      DB_PASS: Ds!?f?f6X5B2
+      DB_NAME: sternwarte
+      DB_PORT: 3336
+      AUTH_SECRET: 75c3075e200d50f2273c60edcea5aca58796831e2c99ce2a69fca0005d5920cd
+      DEFAULT_PASSWORD: welzheim
+      NODE_ENV: development
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    command: sleep infinity

.dockerignore

@@ -0,0 +1,7 @@
+.env
+.env.*
+.git
+.gitignore
+node_modules
+.next
+*.md

ANLEITUNG.md

@@ -1,4 +1,4 @@
-# Bedienungsanleitung – Logbuch Sternwarte Welzheim
+# Bedienungsanleitung – Führungsbuch Sternwarte Welzheim
 
 ## Inhaltsverzeichnis
 
@@ -19,7 +19,7 @@ Die App ist passwortgeschützt. Beim ersten Aufruf erscheint die Anmeldeseite.
 - **Kürzel**: das persönliche BEO-Kürzel (z. B. `RXF`)
 - **Passwort**: individuell gesetztes Passwort
 
-Wurde das Passwort noch nicht geändert (Anzeige „Standard"), muss nach dem ersten Login sofort ein neues Passwort vergeben werden. Das Standard-Passwort lautet `welzheim`.
+Wurde das Passwort noch nicht geändert, muss nach dem ersten Login sofort ein neues Passwort vergeben werden. Das Standard-Passwort lautet `welzheim`.
 
 ---
 
@@ -109,7 +109,7 @@ Im Tab „Liste" das Stift-Symbol (✎) anklicken. Die App springt zum Tab „Ei
 Die Werkzeugleiste oben in der Liste enthält in einer Zeile:
 
 - **Monatsnavigation** – Pfeiltasten ← → wechseln den Monat; Monatseingabe im Feld direkt möglich; **Aktueller Monat** springt zurück auf den laufenden Monat. Zukünftige Monate können nicht gewählt werden. Während einer aktiven Suche wird die Monatsnavigation ausgeblendet (der Platz bleibt frei, damit sich nichts verschiebt).
-- **Suchfeld** – Freitextsuche über alle Einträge des Logbuchs (Bemerkungen, Objekte und BEOs). Die Ergebnisse erscheinen monatübergreifend in absteigender Datumsreihenfolge. Das × im Suchfeld löscht die Eingabe und kehrt zur Monatsansicht zurück.
+- **Suchfeld** – Freitextsuche über alle Einträge des Führungsbuchs (Bemerkungen, Objekte und BEOs). Die Ergebnisse erscheinen monatübergreifend in absteigender Datumsreihenfolge. Das × im Suchfeld löscht die Eingabe und kehrt zur Monatsansicht zurück.
 - **🖨 Drucken** – siehe Abschnitt [Drucken](#6-drucken).
 
 ### Tabelleninhalt
@@ -141,6 +141,8 @@ Zeigt eine Monatstabelle mit Anzahl der Führungen und Besuchern, aufgeschlüsse
   - Kumulierte Besucher für die gesamte Sternwarte (alle Kuppeln)
   - Führungstage für die gesamte Sternwarte
 
+- **Grafik** Über diesen Button kann die (bekannte) Statistik-Grafik aufgerufen werden. Sie wird in ein einem gesonderten Fenster angezeigt. Zurück zum Führungsbuch kommt man über den Tab-Wechsel im Browser.
+ 
 ---
 
 ## 6. Drucken
@@ -174,4 +176,5 @@ Zeigt alle bekannten Objekte mit ID, Name und Datum der letzten Verwendung.
 
 - **Neues Objekt anlegen**: Feld unten ausfüllen und **Hinzufügen** klicken.
 - **Objekt umbenennen**: Stift-Symbol ✎ in der Zeile anklicken, Namen ändern und mit **Speichern** bestätigen oder mit **Abbrechen** verwerfen.
-- **Objekt löschen**: × in der Zeile – es erscheint ein Bestätigungsdialog. Das Löschen ist **unwiderruflich** und entfernt das Objekt aus allen bestehenden Logbucheinträgen.
+- **Objekt löschen**: × in der Zeile – es erscheint ein Bestätigungsdialog. Das Löschen ist **unwiderruflich** und entfernt das Objekt aus allen bestehenden Führungsbucheinträgen.
+

CLAUDE.md

@@ -16,7 +16,7 @@ No test suite exists. Deploy via `./deploy.sh [tag]` — builds multiplatform Do
 
 Next.js 16 App Router application. All pages are server components; interactive parts are Client Components in `app/MainClient.tsx` and `components/`.
 
-**Auth flow**: Users come from the existing MySQL `beos` table (not a separate users table). Login via `app/login/actions.ts` → `lib/auth.ts` (bcryptjs). Sessions are JWT cookies via jose (`lib/session.ts`, 1-hour expiry). If `pw IS NULL`, the default password is `welzheim` and `mustChangePassword` is forced to `true`. The middleware file exports `proxy` (not `middleware`) — Next.js 16 requirement.
+**Auth flow**: Users come from the existing MySQL `beos` table (not a separate users table). Login via `app/login/actions.ts` → `lib/auth.ts` (bcryptjs). Sessions are JWT cookies via jose (`lib/session.ts`, 1-hour expiry). If `pw IS NULL`, the default password is `welzheim` and `mustChangePassword` is forced to `true`. Middleware lives in `proxy.ts` (Next.js 16 convention) and exports `middleware` (not `proxy`).
 
 **Database**: MySQL, database name `sternwarte`, via `lib/db.ts` connection pool. The pre-existing `beos` table has non-standard columns: `` `kürzel` `` (umlaut → always needs backticks), `pw`, `id` (all lowercase). The DB charset is **utf8mb4** (collation `utf8mb4_unicode_ci`); connection pool uses `charset: 'utf8mb4'`.
 

Dockerfile

@@ -12,7 +12,9 @@ COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
 ARG BUILD_DATE
+ARG NEXT_PUBLIC_FAHRKOSTEN_SATZ=15
 ENV NEXT_PUBLIC_BUILD_DATE=${BUILD_DATE}
+ENV NEXT_PUBLIC_FAHRKOSTEN_SATZ=${NEXT_PUBLIC_FAHRKOSTEN_SATZ}
 ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN npm run build
@@ -23,11 +25,14 @@ WORKDIR /app
 ENV NODE_ENV=production
 ENV NEXT_TELEMETRY_DISABLED=1
 
+RUN apk add --no-cache mysql-client openssh-client
+
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs
 
 COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
 
 USER nextjs
 

README.md

@@ -34,3 +34,35 @@ You can check out [the Next.js GitHub repository](https://github.com/vercel/next
 The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
 
 Check out our [Next.js deployment documentation](https://nextjs.org/docs/app/building-your-application/deploying) for more details.
+
+## Neue Features (Statistik Grafik Proxy)
+
+- Proxy für das interne Statistik-Portal:
+	- Neuer Server-seitiger Proxy unter `/api/statistik/grafik` (und Catch-all `/api/statistik/grafik/*`).
+	- Holt die Statistik-Seite serverseitig mit Basic-Auth und gibt sie an den Browser weiter, damit Zugangsdaten nicht im Client landen.
+	- Leitet auch CSS/JS/Images und AJAX-POSTs durch den Proxy (weitergeleitete Methoden und Bodies werden erhalten).
+	- Die HTML-Antwort wird bereinigt und relative URLs so umgeschrieben, dass Assets über die Proxy-URL geladen werden (`<base href="/api/statistik/grafik/">`).
+
+- Environment-Variablen (server-side only):
+	- `STATISTIK_GRAFIK_URL` — Basis-URL des internen Statistik-Portals (z. B. `https://sternwarte-welzheim.de/intern/statistik`).
+	- `STATISTIK_GRAFIK_USER` — Benutzername für Basic-Auth.
+	- `STATISTIK_GRAFIK_PASS` — Passwort für Basic-Auth.
+
+- UI-Änderung:
+	- Der `Grafik`-Button in der Statistik-Ansicht öffnet jetzt die Statistik-Seite in einem neuen Fenster (`window.open('/api/statistik/grafik', '_blank')`). Die vorherige iframe-Integration wurde entfernt, da Browser (insb. Firefox/Safari) bei Einbettung Probleme mit X-Frame-Options/CSP gemacht haben.
+
+- Middleware / Sicherheit:
+	- Die Proxy-Route wird in der App-Auth-Middleware erlaubt, so dass der Proxy die Statistik-Seite auch ohne Benutzer-Session laden kann (Zugangskontrolle erfolgt über die serverseitigen Basic-Auth-Variablen).
+
+- Datenbank-Backup:
+	- Das neue Skript `backup_db.sh` erzeugt ein tägliches MySQL-Dump-Backup im Verzeichnis `DB_BACKUP/`.
+	- Standardmäßig werden Backups älter als 7 Tage automatisch gelöscht.
+	- Beispiel-Cron-Eintrag für täglich 02:00 Uhr:
+
+```cron
+0 2 * * * cd /pfad/zum/repo && DB_ROOT_PASS=deinrootpass DB_NAME=sternwarte ./backup_db.sh --days 7
+```
+
+Hinweis: Speichere sensible Zugangsdaten nicht in Repositories. Setze die drei `STATISTIK_...` Variablen in deiner Deployment-Umgebung (z. B. Docker secrets, CI/CD environment variables oder auf dem Server). Die Proxy-Implementierung entfernt framing-blockierende Header und schiebt relative Asset-Pfade durch den Proxy, um Kompatibilitätsprobleme mit Browsern zu vermeiden.
+
+Test, ob das nun Deployed, wenn auf main gepushed wird.

app/MainClient.tsx

@@ -21,6 +21,9 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
   const [activeTab, setActiveTab] = useState<'eingabe' | 'liste' | 'statistik' | 'fahrkosten'>('eingabe');
   const [refreshKey, setRefreshKey] = useState(0);
   const [editEntry, setEditEntry] = useState<LogbuchEintrag | null>(null);
+  const [backupState, setBackupState] = useState<'idle' | 'running' | 'ok' | 'error'>('idle');
+
+  const grafikSrc = '/api/statistik/grafik';
 
   const version = packageJson.version;
   const buildDate =
@@ -45,24 +48,48 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
     window.location.href = '/login';
   }
 
+  async function handleBackup() {
+    setBackupState('running');
+    try {
+      const r = await fetch('/api/backup', { method: 'POST' });
+      setBackupState(r.ok ? 'ok' : 'error');
+    } catch {
+      setBackupState('error');
+    }
+    setTimeout(() => setBackupState('idle'), 4000);
+  }
+
   return (
     <div className="min-h-screen bg-white py-1 px-2 sm:py-2 sm:px-4 print:p-0">
       <main className="max-w-6xl mx-auto border-2 border-black rounded-lg p-3 sm:p-4 bg-[#EEF4FF] print:max-w-none print:border-0 print:p-0 print:bg-white">
 
         {/* Header */}
         <div className="flex justify-between items-start sm:items-center mb-3 gap-2 print:hidden">
-          <h1 className="text-xl sm:text-2xl font-bold leading-tight">
+          <h1 className="text-xl sm:text-2xl font-bold leading-tight text-gray-900">
             <span className="hidden sm:inline">Sternwarte-Welzheim &nbsp; </span>
-            Logbuch für {activeKuppel}-Kuppel
+            Führungsbuch für {activeKuppel}-Kuppel
           </h1>
           <div className="flex items-center gap-2 shrink-0">
             {role?.includes('admin') && (
-              <a
-                href="/admin"
-                className="text-xs sm:text-sm px-2 sm:px-3 py-1.5 bg-gray-200 hover:bg-gray-300 rounded-lg text-gray-700"
-              >
-                Admin
-              </a>
+              <>
+                <button
+                  onClick={handleBackup}
+                  disabled={backupState === 'running'}
+                  className={`text-xs sm:text-sm px-2 sm:px-3 py-1.5 rounded-lg text-gray-900 disabled:opacity-50 ${
+                    backupState === 'ok' ? 'bg-green-200' :
+                    backupState === 'error' ? 'bg-red-200' :
+                    'bg-gray-200 hover:bg-gray-300'
+                  }`}
+                >
+                  {backupState === 'running' ? '⏳ Backup…' : backupState === 'ok' ? '✓ Backup OK' : backupState === 'error' ? '✗ Fehler' : '💾 Backup'}
+                </button>
+                <a
+                  href="/admin"
+                  className="text-xs sm:text-sm px-2 sm:px-3 py-1.5 bg-gray-200 hover:bg-gray-300 rounded-lg text-gray-700"
+                >
+                  Admin
+                </a>
+              </>
             )}
             <button
               onClick={handleLogout}
@@ -98,7 +125,10 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
             .map((tab) => (
             <button
               key={tab}
-              onClick={() => { setActiveTab(tab); if (tab === 'eingabe') setEditEntry(null); }}
+              onClick={() => {
+                setActiveTab(tab);
+                if (tab === 'eingabe') setEditEntry(null);
+              }}
               className={`px-4 py-2 text-sm font-medium transition-colors border-b-2 -mb-px ${
                 activeTab === tab
                   ? 'border-[#85B7D7] text-gray-900'
@@ -156,7 +186,7 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
         {activeTab === 'liste' && (
           <div className="border-2 border-gray-400 rounded-xl bg-white p-3 print:border-0 print:rounded-none print:p-0">
             <div className="hidden print:block mb-4">
-              <div className="text-lg font-bold">Sternwarte Welzheim — Logbuch {activeKuppel}-Kuppel</div>
+              <div className="text-lg font-bold">Sternwarte Welzheim — Führungsbuch {activeKuppel}-Kuppel</div>
               <div className="text-sm text-gray-500">Ausdruck vom {new Date().toLocaleDateString('de-DE')}</div>
             </div>
             <LogbuchList
@@ -173,16 +203,24 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
         {/* Statistik-Tab */}
         {activeTab === 'statistik' && (
           <div className="border-2 border-gray-400 rounded-xl bg-white p-3 print:border-0 print:rounded-none print:p-0">
-            <div className="flex justify-between items-center mb-2 print:hidden">
-              <span className="text-sm font-semibold text-gray-600">Statistik {activeKuppel}-Kuppel</span>
-              <button
-                onClick={() => window.print()}
-                className="text-sm px-3 py-1.5 bg-gray-200 hover:bg-gray-300 text-gray-700 rounded-lg"
-              >
-                🖨 Drucken
-              </button>
+            <div className="flex justify-between items-center mb-2 print:hidden gap-2">
+              <span className="text-sm font-semibold text-gray-900">Statistik (alle Kuppeln)</span>
+              <div className="flex items-center gap-2">
+                <button
+                  onClick={() => window.print()}
+                  className="text-sm px-3 py-1.5 bg-gray-200 hover:bg-gray-300 text-gray-700 rounded-lg"
+                >
+                  🖨 Drucken
+                </button>
+                <button
+                  onClick={() => window.open(grafikSrc, '_blank')}
+                  className="text-sm px-3 py-1.5 bg-blue-600 hover:bg-blue-700 text-white rounded-lg"
+                >
+                  📊 Grafik
+                </button>
+              </div>
             </div>
-            <Statistik kuppel={activeKuppel} />
+            <Statistik />
           </div>
         )}
 
@@ -190,7 +228,7 @@ export default function MainClient({ kuerzel, beoId, beoName, role }: Props) {
         {activeTab === 'fahrkosten' && (role?.includes('admin') || role?.includes('master')) && (
           <div className="border-2 border-gray-400 rounded-xl bg-white p-3 print:border-0 print:rounded-none print:p-0">
             <div className="flex justify-between items-center mb-2 print:hidden">
-              <span className="text-sm font-semibold text-gray-600">Fahrkostenabrechnung</span>
+              <span className="text-sm font-semibold text-gray-900">Fahrkostenabrechnung</span>
               <button
                 onClick={() => window.print()}
                 className="text-sm px-3 py-1.5 bg-gray-200 hover:bg-gray-300 text-gray-700 rounded-lg"

app/admin/ObjekteManager.tsx

@@ -12,7 +12,9 @@ export default function ObjekteManager({ initialObjekte }: Props) {
   const router = useRouter();
   const [editingId, setEditingId] = useState<number | null>(null);
   const [editName, setEditName] = useState('');
+  const [editKategorie, setEditKategorie] = useState<string>('stern');
   const [newName, setNewName] = useState('');
+  const [newKategorie, setNewKategorie] = useState<string>('stern');
   const [error, setError] = useState('');
   const [busy, setBusy] = useState(false);
 
@@ -24,7 +26,7 @@ export default function ObjekteManager({ initialObjekte }: Props) {
     const res = await fetch('/api/objekte/' + id, {
       method: 'PUT',
       headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ name: trimmed }),
+      body: JSON.stringify({ name: trimmed, kategorie: editKategorie }),
     });
     setBusy(false);
     if (!res.ok) {
@@ -59,7 +61,7 @@ export default function ObjekteManager({ initialObjekte }: Props) {
     const res = await fetch('/api/objekte', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ name: trimmed }),
+      body: JSON.stringify({ name: trimmed, kategorie: newKategorie }),
     });
     setBusy(false);
     if (!res.ok) {
@@ -85,6 +87,15 @@ export default function ObjekteManager({ initialObjekte }: Props) {
           placeholder="Neues Objekt…"
           className="flex-1 px-3 py-2 border border-gray-300 rounded-lg text-sm focus:outline-none focus:border-blue-500"
         />
+        <select
+          value={newKategorie}
+          onChange={(e) => setNewKategorie(e.target.value)}
+          className="px-3 py-2 border border-gray-300 rounded-lg text-sm focus:outline-none focus:border-blue-500"
+        >
+          <option value="stern">Stern</option>
+          <option value="sonne">Sonne</option>
+          <option value="stern,sonne">Stern &amp; Sonne</option>
+        </select>
         <button
           type="submit"
           disabled={busy}
@@ -100,6 +111,7 @@ export default function ObjekteManager({ initialObjekte }: Props) {
             <tr>
               <th className="text-left px-4 py-3 font-semibold w-16">ID</th>
               <th className="text-left px-4 py-3 font-semibold">Name</th>
+              <th className="text-left px-4 py-3 font-semibold hidden sm:table-cell">Kategorie</th>
               <th className="text-left px-4 py-3 font-semibold hidden sm:table-cell">Zuletzt verwendet</th>
               <th className="px-4 py-3 w-36"></th>
             </tr>
@@ -125,6 +137,27 @@ export default function ObjekteManager({ initialObjekte }: Props) {
                     obj.Name
                   )}
                 </td>
+                <td className="px-4 py-2 hidden sm:table-cell">
+                  {editingId === obj.ID ? (
+                    <select
+                      value={editKategorie}
+                      onChange={(e) => setEditKategorie(e.target.value)}
+                      className="px-2 py-1 border border-blue-400 rounded text-sm focus:outline-none"
+                    >
+                      <option value="stern">Stern</option>
+                      <option value="sonne">Sonne</option>
+                      <option value="stern,sonne">Stern &amp; Sonne</option>
+                    </select>
+                  ) : (
+                    <span className="flex gap-1">
+                      {obj.Kategorie.split(',').map((k) => (
+                        <span key={k} className={`text-xs px-2 py-0.5 rounded-full font-medium ${k === 'sonne' ? 'bg-yellow-100 text-yellow-800' : 'bg-blue-100 text-blue-800'}`}>
+                          {k}
+                        </span>
+                      ))}
+                    </span>
+                  )}
+                </td>
                 <td className="px-4 py-2 text-gray-500 hidden sm:table-cell">
                   {obj.LastUsed ? new Date(obj.LastUsed).toLocaleDateString('de-DE') : '—'}
                 </td>
@@ -151,7 +184,7 @@ export default function ObjekteManager({ initialObjekte }: Props) {
                     <span className="flex justify-end gap-2">
                       <button
                         type="button"
-                        onClick={() => { setEditingId(obj.ID); setEditName(obj.Name); setError(''); }}
+                        onClick={() => { setEditingId(obj.ID); setEditName(obj.Name); setEditKategorie(obj.Kategorie); setError(''); }}
                         disabled={busy}
                         className="px-2 py-1 text-xs font-medium bg-blue-100 text-blue-700 border border-blue-300 rounded hover:bg-blue-200 disabled:opacity-50"
                       >
@@ -172,7 +205,7 @@ export default function ObjekteManager({ initialObjekte }: Props) {
             ))}
             {initialObjekte.length === 0 && (
               <tr>
-                <td colSpan={4} className="px-4 py-6 text-center text-gray-400 text-sm">Keine Objekte vorhanden.</td>
+                <td colSpan={5} className="px-4 py-6 text-center text-gray-400 text-sm">Keine Objekte vorhanden.</td>
               </tr>
             )}
           </tbody>

app/admin/actions.ts

@@ -2,39 +2,27 @@
 
 import { redirect } from 'next/navigation';
 import { getSession } from '@/lib/session';
-import { query } from '@/lib/db';
+import * as phpdb from '@/lib/phpdb';
+
+export type { BeoUser } from '@/lib/phpdb';
 
 export interface ObjektRow {
   ID: number;
   Name: string;
   LastUsed: string | null;
+  Kategorie: string;
 }
 
 export async function listObjekte(): Promise<ObjektRow[]> {
   const session = await getSession();
   if (!session || !session.role?.includes('admin')) redirect('/');
-  const rows = await query('SELECT ID, Name, LastUsed FROM objekte ORDER BY Name ASC', []);
-  return rows as ObjektRow[];
+  return phpdb.listObjekteAdmin();
 }
 
-export interface BeoUser {
-  id: number;
-  kürzel: string | null;
-  name: string;
-  vorname: string | null;
-  role: string | null;
-  hasPw: boolean;
-}
-
-export async function listUsers(): Promise<BeoUser[]> {
+export async function listUsers(): Promise<phpdb.BeoUser[]> {
   const session = await getSession();
   if (!session || !session.role?.includes('admin')) redirect('/');
-
-  const rows = await query(
-    'SELECT id, `kürzel`, name, vorname, role, (pw IS NOT NULL) AS hasPw FROM beos ORDER BY name, vorname',
-    []
-  ) as (Omit<BeoUser, 'hasPw'> & { hasPw: number })[];
-  return rows.map(r => ({ ...r, hasPw: r.hasPw === 1 }));
+  return phpdb.listUsers();
 }
 
 export async function resetPassword(
@@ -46,16 +34,11 @@ export async function resetPassword(
     return { error: 'Keine Berechtigung.' };
   }
 
-  const idRaw = formData.get('id');
-  const id = Number(idRaw);
+  const id = Number(formData.get('id'));
   if (!id || isNaN(id)) {
     return { error: 'Ungültige Benutzer-ID.' };
   }
 
-  await query(
-    'UPDATE beos SET pw = NULL, MustChangePassword = 1 WHERE id = ?',
-    [id]
-  );
-
+  await phpdb.resetBeoPassword(id);
   return { success: 'Passwort wurde zurückgesetzt. Der Benutzer muss sich mit dem Standard-Passwort anmelden und es dann ändern.' };
 }

app/admin/page.tsx

@@ -33,7 +33,7 @@ export default async function AdminPage({
     <div className="min-h-screen bg-white py-4 px-4">
       <main className="max-w-6xl mx-auto border-2 border-black rounded-lg p-6 bg-[#EEF4FF]">
         <div className="flex justify-between items-center mb-4">
-          <h1 className="text-3xl font-bold">Logbuch — Sternwarte Welzheim</h1>
+          <h1 className="text-3xl font-bold">Führungsbuch — Sternwarte Welzheim</h1>
           <Link href="/" className="text-sm text-blue-600 hover:underline">← Zurück</Link>
         </div>
 

app/api/DB4js_all.php/route.ts

@@ -0,0 +1,24 @@
+import { NextResponse } from 'next/server';
+
+const DB_URL = (process.env.PHP_DB_URL ?? 'http://localhost:8080/DB4js_all.php')
+  .replace(/\?.*$/, '');
+
+async function proxy(req: Request) {
+  const search = new URL(req.url).search;
+  const target = DB_URL + search;
+  const isReadOnly = req.method === 'GET' || req.method === 'HEAD';
+  const upstream = await fetch(target, {
+    method: req.method,
+    headers: { 'content-type': req.headers.get('content-type') ?? 'application/x-www-form-urlencoded' },
+    body: isReadOnly ? undefined : await req.arrayBuffer(),
+    cache: 'no-store',
+  });
+  const body = await upstream.arrayBuffer();
+  return new NextResponse(Buffer.from(body), {
+    status: upstream.status,
+    headers: { 'content-type': upstream.headers.get('content-type') ?? 'application/json' },
+  });
+}
+
+export const GET = proxy;
+export const POST = proxy;

app/api/backup/route.ts

@@ -0,0 +1,12 @@
+import { NextResponse } from 'next/server';
+import { getSession } from '@/lib/session';
+import { triggerBackup } from '@/lib/backup';
+
+export async function POST() {
+  const session = await getSession();
+  if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
+  if (!session.role?.includes('admin')) return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 });
+
+  triggerBackup();
+  return NextResponse.json({ ok: true });
+}

app/api/beos/route.ts

@@ -1,14 +1,12 @@
 import { NextResponse } from 'next/server';
-import { query } from '@/lib/db';
 import { getSession } from '@/lib/session';
+import * as phpdb from '@/lib/phpdb';
 
 export async function GET() {
   const session = await getSession();
   if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
   try {
-    const rows = await query(
-      'SELECT id AS ID, `kürzel` AS Kuerzel, CONCAT(IFNULL(vorname, \'\'), IF(vorname IS NOT NULL, \' \', \'\'), name) AS Name FROM beos WHERE `kürzel` IS NOT NULL AND FIND_IN_SET(\'guide\', role) > 0 ORDER BY name ASC'
-    ) as { ID: number; Kuerzel: string; Name: string }[];
+    const rows = await phpdb.getBeos();
     return NextResponse.json(rows);
   } catch (error) {
     console.error('GET /api/beos:', error);

app/api/fahrkosten/route.ts

@@ -1,15 +1,8 @@
 import { NextResponse } from 'next/server';
-import { query } from '@/lib/db';
 import { getSession } from '@/lib/session';
+import * as phpdb from '@/lib/phpdb';
 
-export interface FahrkostenRow {
-  ID: number;
-  Kuerzel: string;
-  Name: string;
-  Anzahl: number;
-}
-
-const EXCLUDED = "'PrF','Beob','BEOS','TD','ToT'";
+export type { FahrkostenRow } from '@/lib/phpdb';
 
 export async function GET(req: Request) {
   const session = await getSession();
@@ -22,18 +15,7 @@ export async function GET(req: Request) {
   }
 
   try {
-    const rows = await query(
-      'SELECT b.id AS ID, b.`kürzel` AS Kuerzel,' +
-      ' CONCAT(IFNULL(b.vorname, \'\'), IF(b.vorname IS NOT NULL, \' \', \'\'), b.name) AS Name,' +
-      ' COUNT(DISTINCT l.ID) AS Anzahl' +
-      ' FROM beos b' +
-      ' JOIN logbuch_beos lb ON lb.BeoID = b.id' +
-      ' JOIN logbuch l ON l.ID = lb.LogbuchID' +
-      ' WHERE l.Beginn >= ? AND l.ArtFuehrung NOT IN (' + EXCLUDED + ')' +
-      ' GROUP BY b.id, b.`kürzel`, b.name, b.vorname' +
-      ' ORDER BY b.name ASC',
-      [ab + ' 00:00:00']
-    ) as FahrkostenRow[];
+    const rows = await phpdb.getFahrkosten(ab);
     return NextResponse.json(rows);
   } catch (error) {
     console.error('GET /api/fahrkosten:', error);

app/api/logbuch/[id]/route.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { query, getPool } from '@/lib/db';
 import { getSession } from '@/lib/session';
-import type { SelectedObjekt } from '@/types/logbuch';
+import { triggerBackup } from '@/lib/backup';
+import * as phpdb from '@/lib/phpdb';
 
 export async function PUT(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
   const session = await getSession();
@@ -11,65 +11,25 @@ export async function PUT(request: NextRequest, { params }: { params: Promise<{
   const logbuchId = parseInt(id);
 
   try {
-    const existingRows = await query('SELECT ID FROM logbuch WHERE ID = ?', [logbuchId]) as { ID: number }[];
-    if (existingRows.length === 0) {
-      return NextResponse.json({ error: 'Eintrag nicht gefunden' }, { status: 404 });
-    }
-
-    const isAdmin = session.role?.includes('admin');
-    const beoRows = await query('SELECT COUNT(*) AS cnt FROM logbuch_beos WHERE LogbuchID = ? AND BeoID = ?', [logbuchId, session.beoId]) as { cnt: number }[];
-    const isBeo = (beoRows[0]?.cnt ?? 0) > 0;
-
-    if (!isAdmin && !isBeo) {
-      return NextResponse.json({ error: 'Keine Berechtigung zum Ändern dieses Eintrags' }, { status: 403 });
-    }
-
     const body = await request.json();
     const { Kuppel, ArtFuehrung, SonderName, Beginn, Ende, Besucher, beoIds, objekte, Bemerkungen, Wetter } = body;
 
-    await getPool().execute(
-      'UPDATE logbuch SET Kuppel=?, ArtFuehrung=?, SonderName=?, Beginn=?, Ende=?, Besucher=?,' +
-      ' Bemerkungen=?, WetterTemp=?, WetterFeuchte=?, WetterDruck=? WHERE ID=?',
-      [
-        Kuppel, ArtFuehrung, SonderName || null, Beginn, Ende,
-        Besucher ?? 0,
-        Bemerkungen?.slice(0, 500) || null,
-        Wetter?.temp ?? null,
-        Wetter?.feuchte ?? null,
-        Wetter?.druck ?? null,
-        logbuchId,
-      ]
-    );
-
-    await query('DELETE FROM logbuch_beos WHERE LogbuchID = ?', [logbuchId]);
-    await query('DELETE FROM logbuch_objekte WHERE LogbuchID = ?', [logbuchId]);
-
-    for (const beoId of (beoIds as number[]) || []) {
-      await query('INSERT INTO logbuch_beos (LogbuchID, BeoID) VALUES (?, ?)', [logbuchId, beoId]);
-    }
-
-    for (const obj of (objekte as SelectedObjekt[]) || []) {
-      let objektId = obj.ID;
-      if (!objektId) {
-        const existing = await query('SELECT ID, Name FROM objekte WHERE LOWER(Name) = LOWER(?)', [obj.Name]) as { ID: number; Name: string }[];
-        if (existing[0]) {
-          objektId = existing[0].ID;
-        } else {
-          const [ins] = await getPool().execute(
-            'INSERT INTO objekte (Name) VALUES (?)', [obj.Name]
-          ) as [{ insertId: number }, unknown];
-          objektId = ins.insertId;
-        }
-      }
-      await query('UPDATE objekte SET LastUsed = NOW() WHERE ID = ?', [objektId]);
-      await query(
-        'INSERT INTO logbuch_objekte (LogbuchID, ObjektID) VALUES (?, ?)',
-        [logbuchId, objektId]
-      );
-    }
+    await phpdb.updateLogbuch(logbuchId, session.beoId, session.role ?? '', {
+      Kuppel, ArtFuehrung, SonderName, Beginn, Ende,
+      Besucher: Besucher ?? 0,
+      beoIds: beoIds ?? [],
+      objekte: objekte ?? [],
+      Bemerkungen: Bemerkungen ?? null,
+      Wetter: Wetter ?? null,
+    });
 
+    triggerBackup();
     return NextResponse.json({ ok: true });
-  } catch (error) {
+  } catch (error: unknown) {
+    if (error instanceof Error) {
+      if (error.message.includes('404')) return NextResponse.json({ error: 'Eintrag nicht gefunden' }, { status: 404 });
+      if (error.message.includes('403')) return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 });
+    }
     console.error('PUT /api/logbuch/[id]:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
   }
@@ -83,22 +43,13 @@ export async function DELETE(_request: NextRequest, { params }: { params: Promis
   const logbuchId = parseInt(id);
 
   try {
-    const existingRows = await query('SELECT ID FROM logbuch WHERE ID = ?', [logbuchId]) as { ID: number }[];
-    if (existingRows.length === 0) {
-      return NextResponse.json({ error: 'Eintrag nicht gefunden' }, { status: 404 });
-    }
-
-    const isAdmin = session.role?.includes('admin');
-    const beoRows = await query('SELECT COUNT(*) AS cnt FROM logbuch_beos WHERE LogbuchID = ? AND BeoID = ?', [logbuchId, session.beoId]) as { cnt: number }[];
-    const isBeo = (beoRows[0]?.cnt ?? 0) > 0;
-
-    if (!isAdmin && !isBeo) {
-      return NextResponse.json({ error: 'Keine Berechtigung zum Löschen dieses Eintrags' }, { status: 403 });
-    }
-
-    await query('DELETE FROM logbuch WHERE ID = ?', [logbuchId]);
+    await phpdb.deleteLogbuch(logbuchId, session.beoId, session.role ?? '');
     return NextResponse.json({ ok: true });
-  } catch (error) {
+  } catch (error: unknown) {
+    if (error instanceof Error) {
+      if (error.message.includes('404')) return NextResponse.json({ error: 'Eintrag nicht gefunden' }, { status: 404 });
+      if (error.message.includes('403')) return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 });
+    }
     console.error('DELETE /api/logbuch/[id]:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
   }

app/api/logbuch/route.ts

@@ -1,89 +1,23 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { query, getPool } from '@/lib/db';
 import { getSession } from '@/lib/session';
-import type { SelectedObjekt } from '@/types/logbuch';
-
-const LIST_SQL =
-  'SELECT' +
-  ' l.ID, l.Kuppel, l.ArtFuehrung,' +
-  " DATE_FORMAT(l.Beginn, '%Y-%m-%dT%H:%i') AS Beginn," +
-  " DATE_FORMAT(l.Ende, '%Y-%m-%dT%H:%i') AS Ende," +
-  ' l.Besucher, l.Bemerkungen, l.SonderName,' +
-  ' l.WetterTemp, l.WetterFeuchte, l.WetterDruck,' +
-  ' l.created_by, l.created_at,' +
-  ' creator.kuerzel AS created_by_kuerzel,' +
-  " GROUP_CONCAT(DISTINCT bk.kuerzel ORDER BY bk.kuerzel SEPARATOR ', ') AS BEOs," +
-  " GROUP_CONCAT(DISTINCT o.Name ORDER BY o.Name SEPARATOR ', ') AS Objekte" +
-  ' FROM logbuch l' +
-  ' LEFT JOIN (SELECT id, `kürzel` AS kuerzel FROM beos) creator ON creator.id = l.created_by' +
-  ' LEFT JOIN logbuch_beos lb ON lb.LogbuchID = l.ID' +
-  ' LEFT JOIN (SELECT id, `kürzel` AS kuerzel FROM beos) bk ON bk.id = lb.BeoID' +
-  ' LEFT JOIN logbuch_objekte lo ON lo.LogbuchID = l.ID' +
-  ' LEFT JOIN objekte o ON o.ID = lo.ObjektID' +
-  ' WHERE l.Kuppel = ?' +
-  ' GROUP BY l.ID';
+import { triggerBackup } from '@/lib/backup';
+import * as phpdb from '@/lib/phpdb';
 
 export async function GET(request: NextRequest) {
   const session = await getSession();
-  if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });                                               
+  if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
+
   const { searchParams } = new URL(request.url);
   const kuppel = searchParams.get('kuppel') || 'West';
-  const limit = Math.min(parseInt(searchParams.get('limit') || '10') || 10, 500);
+  const limit  = Math.min(parseInt(searchParams.get('limit')  || '10')  || 10,  500);
   const offset = Math.max(0, parseInt(searchParams.get('offset') || '0') || 0);
-  const month = searchParams.get('month') || '';
-  const order = searchParams.get('order') === 'asc' ? 'ASC' : 'DESC';
-
+  const month  = searchParams.get('month') || '';
+  const order  = searchParams.get('order') === 'asc' ? 'asc' : 'desc';
   const search = (searchParams.get('search') || '').trim();
 
-  if (search) {
-    const pattern = '%' + search + '%';
-    const searchParams2 = [kuppel, pattern, pattern, pattern];
-    const countSQL =
-      'SELECT COUNT(*) AS total FROM (' +
-      'SELECT l.ID FROM logbuch l' +
-      ' LEFT JOIN logbuch_beos lb ON lb.LogbuchID = l.ID' +
-      ' LEFT JOIN (SELECT id, `kürzel` AS kuerzel FROM beos) bk ON bk.id = lb.BeoID' +
-      ' LEFT JOIN logbuch_objekte lo ON lo.LogbuchID = l.ID' +
-      ' LEFT JOIN objekte o ON o.ID = lo.ObjektID' +
-      ' WHERE l.Kuppel = ?' +
-      ' GROUP BY l.ID' +
-      " HAVING (MAX(l.Bemerkungen) LIKE ? OR GROUP_CONCAT(DISTINCT bk.kuerzel ORDER BY bk.kuerzel SEPARATOR ', ') LIKE ? OR GROUP_CONCAT(DISTINCT o.Name ORDER BY o.Name SEPARATOR ', ') LIKE ?)" +
-      ') AS sub';
-    const listSQL = LIST_SQL +
-      ' HAVING (MAX(l.Bemerkungen) LIKE ? OR BEOs LIKE ? OR Objekte LIKE ?)' +
-      ` ORDER BY l.Beginn DESC LIMIT ${limit} OFFSET ${offset}`;
-    try {
-      const [countRows, entries] = await Promise.all([
-        query(countSQL, searchParams2) as Promise<{ total: number }[]>,
-        query(listSQL, searchParams2),
-      ]);
-      return NextResponse.json({ entries, total: (countRows as unknown as { total: number }[])[0]?.total ?? 0 });
-    } catch (error) {
-      console.error('GET /api/logbuch (search):', error);
-      return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
-    }
-  }
-
-  let listWhere = 'WHERE l.Kuppel = ?';
-  let countWhere = 'WHERE Kuppel = ?';
-  let params: (string | number | null)[] = [kuppel];
-  if (month && /^\d{4}-\d{2}$/.test(month)) {
-    const [y, m] = month.split('-').map(Number);
-    const start = `${y}-${String(m).padStart(2, '0')}-01`;
-    const nextM = m === 12 ? 1 : m + 1;
-    const nextY = m === 12 ? y + 1 : y;
-    const end = `${nextY}-${String(nextM).padStart(2, '0')}-01`;
-    listWhere  += ' AND l.Beginn >= ? AND l.Beginn < ?';
-    countWhere += ' AND Beginn >= ? AND Beginn < ?';
-    params = [kuppel, start, end];
-  }
-
   try {
-    const [countRows, entries] = await Promise.all([
-      query('SELECT COUNT(*) AS total FROM logbuch ' + countWhere, params) as Promise<{ total: number }[]>,
-      query(LIST_SQL.replace('WHERE l.Kuppel = ?', listWhere) + ` ORDER BY l.Beginn ${order} LIMIT ${limit} OFFSET ${offset}`, params),
-    ]);
-    return NextResponse.json({ entries, total: (countRows as unknown as { total: number }[])[0]?.total ?? 0 });
+    const result = await phpdb.listLogbuch({ kuppel, limit, offset, month, search, order });
+    return NextResponse.json(result);
   } catch (error) {
     console.error('GET /api/logbuch:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
@@ -98,46 +32,18 @@ export async function POST(request: NextRequest) {
     const body = await request.json();
     const { Kuppel, ArtFuehrung, SonderName, Beginn, Ende, Besucher, beoIds, objekte, Bemerkungen, Wetter } = body;
 
-    const pool = getPool();
-    const [result] = await pool.execute(
-      'INSERT INTO logbuch (Kuppel, ArtFuehrung, SonderName, Beginn, Ende, Besucher, Bemerkungen, WetterTemp, WetterFeuchte, WetterDruck, created_by)' +
-      ' VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
-      [
-        Kuppel, ArtFuehrung, SonderName || null, Beginn, Ende,
-        Besucher ?? 0,
-        Bemerkungen?.slice(0, 500) || null,
-        Wetter?.temp ?? null,
-        Wetter?.feuchte ?? null,
-        Wetter?.druck ?? null,
-        session.beoId,
-      ]
-    ) as [{ insertId: number }, unknown];
+    const result = await phpdb.createLogbuch({
+      Kuppel, ArtFuehrung, SonderName, Beginn, Ende,
+      Besucher: Besucher ?? 0,
+      beoIds: beoIds ?? [],
+      objekte: objekte ?? [],
+      Bemerkungen: Bemerkungen ?? null,
+      Wetter: Wetter ?? null,
+      created_by: session.beoId,
+    });
 
-    const logbuchId = result.insertId;
-
-    for (const beoId of (beoIds as number[]) || []) {
-      await query('INSERT INTO logbuch_beos (LogbuchID, BeoID) VALUES (?, ?)', [logbuchId, beoId]);
-    }
-
-    for (const obj of (objekte as SelectedObjekt[]) || []) {
-      let objektId = obj.ID;
-      if (!objektId) {
-        const existing = await query('SELECT ID, Name FROM objekte WHERE LOWER(Name) = LOWER(?)', [obj.Name]) as { ID: number; Name: string }[];
-        if (existing[0]) {
-          objektId = existing[0].ID;
-        } else {
-          const [ins] = await pool.execute('INSERT INTO objekte (Name) VALUES (?)', [obj.Name]) as [{ insertId: number }, unknown];
-          objektId = ins.insertId;
-        }
-      }
-      await query('UPDATE objekte SET LastUsed = NOW() WHERE ID = ?', [objektId]);
-      await query(
-        'INSERT INTO logbuch_objekte (LogbuchID, ObjektID) VALUES (?, ?)',
-        [logbuchId, objektId]
-      );
-    }
-
-    return NextResponse.json({ id: logbuchId }, { status: 201 });
+    triggerBackup();
+    return NextResponse.json(result, { status: 201 });
   } catch (error) {
     console.error('POST /api/logbuch:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });

app/api/objekte/[id]/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { query } from '@/lib/db';
 import { getSession } from '@/lib/session';
+import * as phpdb from '@/lib/phpdb';
 
 export async function PUT(req: NextRequest, { params }: { params: Promise<{ id: string }> }) {
   const session = await getSession();
@@ -10,11 +10,13 @@ export async function PUT(req: NextRequest, { params }: { params: Promise<{ id:
     const { id } = await params;
     const numId = Number(id);
     if (isNaN(numId)) return NextResponse.json({ error: 'Ungültige ID' }, { status: 400 });
-    const { name } = await req.json();
+    const { name, kategorie } = await req.json();
     const trimmed = (name as string)?.trim();
     if (!trimmed) return NextResponse.json({ error: 'Name darf nicht leer sein' }, { status: 400 });
-    await query('UPDATE objekte SET Name = ? WHERE ID = ?', [trimmed, numId]);
-    return NextResponse.json({ ID: numId, Name: trimmed });
+    const VALID = ['stern', 'sonne', 'stern,sonne'];
+    const kat: string | undefined = VALID.includes(kategorie) ? kategorie : undefined;
+    const result = await phpdb.updateObjekt(numId, trimmed, kat);
+    return NextResponse.json(result);
   } catch (error) {
     console.error('PUT /api/objekte/[id]:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
@@ -29,7 +31,7 @@ export async function DELETE(_req: NextRequest, { params }: { params: Promise<{
     const { id } = await params;
     const numId = Number(id);
     if (isNaN(numId)) return NextResponse.json({ error: 'Ungültige ID' }, { status: 400 });
-    await query('DELETE FROM objekte WHERE ID = ?', [numId]);
+    await phpdb.deleteObjekt(numId);
     return NextResponse.json({ ok: true });
   } catch (error) {
     console.error('DELETE /api/objekte/[id]:', error);

app/api/objekte/route.ts

@@ -1,12 +1,14 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { query } from '@/lib/db';
 import { getSession } from '@/lib/session';
+import * as phpdb from '@/lib/phpdb';
 
-export async function GET() {
+export async function GET(req: NextRequest) {
   const session = await getSession();
   if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
   try {
-    const rows = await query('SELECT ID, Name FROM objekte ORDER BY LastUsed DESC LIMIT 100');
+    const raw = req.nextUrl.searchParams.get('kategorie');
+    const kategorie = raw === 'sonne' ? 'sonne' : 'stern';
+    const rows = await phpdb.getObjekte(kategorie);
     return NextResponse.json(rows);
   } catch (error) {
     console.error('GET /api/objekte:', error);
@@ -19,11 +21,13 @@ export async function POST(req: NextRequest) {
   if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
   if (!session.role?.includes('admin')) return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 });
   try {
-    const { name } = await req.json();
+    const { name, kategorie } = await req.json();
     const trimmed = (name as string)?.trim();
     if (!trimmed) return NextResponse.json({ error: 'Name darf nicht leer sein' }, { status: 400 });
-    const result = await query('INSERT INTO objekte (Name) VALUES (?)', [trimmed]) as { insertId: number };
-    return NextResponse.json({ ID: result.insertId, Name: trimmed }, { status: 201 });
+    const VALID = ['stern', 'sonne', 'stern,sonne'];
+    const kat: string = VALID.includes(kategorie) ? kategorie : 'stern';
+    const result = await phpdb.createObjekt(trimmed, kat);
+    return NextResponse.json(result, { status: 201 });
   } catch (error) {
     console.error('POST /api/objekte:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });

app/api/statistik/grafik/[...slug]/route.ts

@@ -0,0 +1,18 @@
+import { grafikProxy } from '../proxy';
+
+function getSlugFromRequest(req: Request) {
+  const url = new URL(req.url);
+  const prefix = '/api/statistik/grafik';
+  const path = url.pathname;
+  if (!path.startsWith(prefix)) return undefined;
+  const suffix = path.slice(prefix.length);
+  return suffix.split('/').filter(Boolean);
+}
+
+export async function GET(req: Request) {
+  return grafikProxy(req, getSlugFromRequest(req));
+}
+
+export async function POST(req: Request) {
+  return grafikProxy(req, getSlugFromRequest(req));
+}

app/api/statistik/grafik/proxy.ts

@@ -0,0 +1,120 @@
+import { NextResponse } from 'next/server';
+
+const blockedHeaders = new Set([
+  'x-frame-options',
+  'content-security-policy',
+  'content-security-policy-report-only',
+  'frame-options',
+  'content-encoding',
+  'content-length',
+  'transfer-encoding',
+]);
+
+function buildProxyTarget(req: Request, slug?: string[]) {
+  const upstreamUrl = process.env.STATISTIK_GRAFIK_URL;
+  if (!upstreamUrl) {
+    throw new Error('STATISTIK_GRAFIK_URL is not configured');
+  }
+
+  const target = new URL(upstreamUrl);
+  const pathSuffix = slug?.filter(Boolean).join('/') || '';
+  if (pathSuffix) {
+    target.pathname = `${target.pathname.replace(/\/$/, '')}/${pathSuffix}`;
+  }
+  target.search = new URL(req.url).search;
+  return target.toString();
+}
+
+function buildAuthHeaders() {
+  const headers: Record<string, string> = {};
+  const user = process.env.STATISTIK_GRAFIK_USER;
+  const pass = process.env.STATISTIK_GRAFIK_PASS;
+  if (user && pass) {
+    const token = Buffer.from(`${user}:${pass}`).toString('base64');
+    headers.Authorization = `Basic ${token}`;
+  }
+  return headers;
+}
+
+function escapeRegExp(value: string) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+function rewriteHtml(body: string) {
+  const proxyBase = '/api/statistik/grafik';
+  const upstreamOrigin = new URL(process.env.STATISTIK_GRAFIK_URL!).origin;
+  const escapedProxyBase = escapeRegExp(proxyBase);
+  const proxyBasePattern = escapedProxyBase.replace(/\//g, '\\/');
+
+  return body
+    .replace(/<meta[^>]*?(?:http-equiv|httpEquiv)\s*=\s*['"]?[^'">\s]+['"]?[^>]*>/ig, (m) => {
+      if (/x-frame-options/i.test(m)) return '';
+      if (/content-security-policy/i.test(m)) return '';
+      if (/frame-ancestors/i.test(m)) return '';
+      return m;
+    })
+    .replace(/<head([^>]*)>/i, `<head$1><base href="${proxyBase}/">`)
+    .replace(new RegExp(`(href|src|action)=(["'])(?!${proxyBasePattern}\\/)\/`, 'gi'), `$1=$2${proxyBase}/`)
+    .replace(new RegExp(`url\\((['"]?)(?!${proxyBasePattern}\\/)\/`, 'gi'), `url($1${proxyBase}/`)
+    .replace(new RegExp(escapeRegExp(upstreamOrigin), 'g'), proxyBase);
+}
+
+export async function grafikProxy(req: Request, slug?: string[]) {
+  let targetUrl: string;
+  try {
+    targetUrl = buildProxyTarget(req, slug);
+  } catch (error) {
+    return new NextResponse((error as Error).message, { status: 500 });
+  }
+
+  try {
+    const requestHeaders: Record<string, string> = {};
+    req.headers.forEach((value, key) => {
+      const lower = key.toLowerCase();
+      if (lower === 'host' || lower === 'content-length') return;
+      requestHeaders[key] = value;
+    });
+    Object.assign(requestHeaders, buildAuthHeaders());
+
+    const body = ['GET', 'HEAD'].includes(req.method) ? undefined : await req.arrayBuffer();
+    const upstream = await fetch(targetUrl, {
+      method: req.method,
+      headers: requestHeaders,
+      body,
+      cache: 'no-store',
+    });
+    const bodyBuf = await upstream.arrayBuffer();
+
+      const outHeaders: Record<string, string> = {};
+    upstream.headers.forEach((value, key) => {
+      if (!blockedHeaders.has(key.toLowerCase())) {
+        outHeaders[key] = value;
+      }
+    });
+
+    const contentType = upstream.headers.get('content-type') || outHeaders['content-type'] || '';
+    const isHtmlResponse = contentType.toLowerCase().includes('text/html');
+
+    // JS/CSS/font assets that come back as HTML are upstream errors (404, redirect pages).
+    // Return a 404 so the browser doesn't refuse to execute them as wrong MIME type.
+    const assetExtension = /\.(js|css|woff2?|ttf|eot|png|jpg|gif|svg|ico)(\?|$)/i;
+    const requestPath = new URL(req.url).pathname;
+    if (isHtmlResponse && slug?.length && assetExtension.test(requestPath)) {
+      return new NextResponse(null, { status: 404 });
+    }
+
+    if (isHtmlResponse) {
+      const text = Buffer.from(bodyBuf).toString('utf8');
+      const cleaned = rewriteHtml(text);
+      outHeaders['content-type'] = 'text/html; charset=utf-8';
+      outHeaders['x-frame-options'] = 'ALLOWALL';
+      return new NextResponse(cleaned, { status: upstream.status, headers: outHeaders });
+    }
+
+    outHeaders['x-frame-options'] = 'ALLOWALL';
+    return new NextResponse(Buffer.from(bodyBuf), { status: upstream.status, headers: outHeaders });
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return new NextResponse(`grafikProxy error: ${message}`, { status: 500 });
+  }
+}

app/api/statistik/grafik/route.ts

@@ -0,0 +1,18 @@
+import { grafikProxy } from './proxy';
+
+function getSlugFromRequest(req: Request) {
+  const url = new URL(req.url);
+  const prefix = '/api/statistik/grafik';
+  const path = url.pathname;
+  if (!path.startsWith(prefix)) return undefined;
+  const suffix = path.slice(prefix.length);
+  return suffix.split('/').filter(Boolean);
+}
+
+export async function GET(req: Request) {
+  return grafikProxy(req, getSlugFromRequest(req));
+}
+
+export async function POST(req: Request) {
+  return grafikProxy(req, getSlugFromRequest(req));
+}

app/api/statistik/route.ts

@@ -1,68 +1,17 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { query } from '@/lib/db';
 import { getSession } from '@/lib/session';
+import * as phpdb from '@/lib/phpdb';
 
 export async function GET(request: NextRequest) {
   const session = await getSession();
   if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });
 
   const { searchParams } = new URL(request.url);
-  const kuppel = searchParams.get('kuppel') || 'West';
   const year = parseInt(searchParams.get('year') || String(new Date().getFullYear()), 10);
 
   try {
-    // 1) Monatliche Besucherzahlen nach ArtFuehrung
-    const monthlyRows = await query(
-      `SELECT
-         MONTH(Beginn) AS monat,
-         ArtFuehrung,
-         SUM(Besucher) AS besucher,
-         COUNT(*) AS anzahl
-       FROM logbuch
-       WHERE Kuppel = ? AND YEAR(Beginn) = ?
-       GROUP BY MONTH(Beginn), ArtFuehrung
-       ORDER BY monat, ArtFuehrung`,
-      [kuppel, year]
-    ) as { monat: number; ArtFuehrung: string; besucher: number; anzahl: number }[];
-
-    // 2) Kumulierte Besucher im Jahr
-    const cumulativeRows = await query(
-      `SELECT SUM(Besucher) AS total FROM logbuch WHERE Kuppel = ? AND YEAR(Beginn) = ?`,
-      [kuppel, year]
-    ) as { total: number | null }[];
-
-    // 3) Anzahl Führungstage (distinct Datum)
-    const tageRows = await query(
-      `SELECT COUNT(DISTINCT DATE(Beginn)) AS tage FROM logbuch WHERE Kuppel = ? AND YEAR(Beginn) = ?`,
-      [kuppel, year]
-    ) as { tage: number }[];
-
-    // 4) Kumulierte Besucher über alle Kuppeln
-    const allCumulativeRows = await query(
-      `SELECT SUM(Besucher) AS total FROM logbuch WHERE YEAR(Beginn) = ?`,
-      [year]
-    ) as { total: number | null }[];
-
-    // 5) Führungstage über alle Kuppeln
-    const allTageRows = await query(
-      `SELECT COUNT(DISTINCT DATE(Beginn)) AS tage FROM logbuch WHERE YEAR(Beginn) = ?`,
-      [year]
-    ) as { tage: number }[];
-
-    return NextResponse.json({
-      monthly: monthlyRows.map((r) => ({
-        monat: Number(r.monat),
-        ArtFuehrung: r.ArtFuehrung,
-        besucher: Number(r.besucher),
-        anzahl: Number(r.anzahl),
-      })),
-      cumulative: Number(cumulativeRows[0]?.total ?? 0),
-      tage: Number(tageRows[0]?.tage ?? 0),
-      allCumulative: Number(allCumulativeRows[0]?.total ?? 0),
-      allTage: Number(allTageRows[0]?.tage ?? 0),
-      year,
-      kuppel,
-    });
+    const result = await phpdb.getStatistik(year);
+    return NextResponse.json(result);
   } catch (error) {
     console.error('GET /api/statistik:', error);
     return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });

app/change-password/actions.ts

@@ -3,7 +3,7 @@
 import { redirect } from 'next/navigation';
 import { getSession, createSession } from '@/lib/session';
 import { hashPassword } from '@/lib/auth';
-import { query } from '@/lib/db';
+import { updateBeoPassword } from '@/lib/phpdb';
 
 export async function changePassword(
   _prevState: { error: string } | undefined,
@@ -28,10 +28,7 @@ export async function changePassword(
   }
 
   const hashed = await hashPassword(newPassword);
-  await query(
-    'UPDATE beos SET pw = ?, MustChangePassword = 0 WHERE id = ?',
-    [hashed, session.beoId]
-  );
+  await updateBeoPassword(session.beoId, hashed);
 
   await createSession({
     kuerzel: session.kuerzel,

app/change-password/page.tsx

@@ -11,7 +11,7 @@ export default function ChangePasswordPage() {
   return (
     <div className="min-h-screen bg-white py-4 px-4">
       <main className="max-w-6xl mx-auto border-2 border-black rounded-lg p-6 bg-[#EEF4FF]">
-        <h1 className="text-3xl font-bold mb-6">Logbuch — Sternwarte Welzheim</h1>
+        <h1 className="text-3xl font-bold mb-6">Führungsbuch — Sternwarte Welzheim</h1>
 
         <div className="flex justify-center py-10">
           <div className="w-full max-w-sm bg-white border border-gray-300 rounded-xl shadow-md p-8">

app/layout.tsx

@@ -2,8 +2,8 @@ import type { Metadata, Viewport } from 'next';
 import './globals.css';
 
 export const metadata: Metadata = {
-  title: 'Logbuch — Sternwarte Welzheim',
-  description: 'Logbuch für die Sternwarte Welzheim',
+  title: 'Führungsbuch — Sternwarte Welzheim',
+  description: 'Führungsbuch für die Sternwarte Welzheim',
 };
 
 export const viewport: Viewport = {

app/login/page.tsx

@@ -17,7 +17,7 @@ export default function LoginPage() {
     <div className="min-h-screen bg-white py-4 px-4">
       <main className="max-w-6xl mx-auto border-2 border-black rounded-lg p-6 bg-[#EEF4FF]">
         <div className="flex justify-between items-center mb-6">
-          <h1 className="text-3xl font-bold">Logbuch — Sternwarte Welzheim</h1>
+          <h1 className="text-3xl font-bold">Führungsbuch — Sternwarte Welzheim</h1>
         </div>
 
         <div className="flex justify-center py-10">

backup_db.sh

@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Tägliches MySQL-Backup für das Logbuch-Projekt.
+#
+# Verwendung:
+#   ./backup_db.sh
+#   DB_ROOT_PASS=... DB_NAME=... ./backup_db.sh
+#   ./backup_db.sh --days 14 --backup-dir /var/backups/logbuch
+#
+# Installiert keine Abhängigkeiten. Nutzt den laufenden Container mit dem Namen logbuch_mysql.
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+BACKUP_DIR_DEFAULT="$SCRIPT_DIR/DB_BACKUP"
+CONTAINER_DEFAULT="logbuch_mysql"
+KEEP_DAYS_DEFAULT=7
+
+ROOT_PASS="${DB_ROOT_PASS:-${MYSQL_ROOT_PASSWORD:-}}"
+DB_NAME="${DB_NAME:-${MYSQL_DATABASE:-}}"
+BACKUP_DIR="$BACKUP_DIR_DEFAULT"
+CONTAINER="$CONTAINER_DEFAULT"
+KEEP_DAYS="$KEEP_DAYS_DEFAULT"
+REMOTE=""
+REMOTE_RETENTION=""
+
+usage() {
+  cat <<EOF
+Usage: $0 [options]
+
+Options:
+  --backup-dir DIR     Backup-Verzeichnis (default: $BACKUP_DIR_DEFAULT)
+  --container NAME      MySQL-Container-Name (default: $CONTAINER_DEFAULT)
+  --days N              Aufbewahrungszeitraum in Tagen (default: $KEEP_DAYS_DEFAULT)
+  --db-name NAME        Datenbankname (default: DB_NAME oder MYSQL_DATABASE env)
+  --root-pass PASS      MySQL root Passwort (default: DB_ROOT_PASS oder MYSQL_ROOT_PASSWORD env)
+  --remote user@host:/path  Optional: kopiere Backup per scp auf Remote-Host
+  --remote-retention N     Optional: Aufbewahrungstage auf Remote (default: same as --days)
+  -h, --help            Diese Hilfe anzeigen
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --backup-dir)
+      BACKUP_DIR="$2"
+      shift 2
+      ;;
+    --container)
+      CONTAINER="$2"
+      shift 2
+      ;;
+    --days)
+      KEEP_DAYS="$2"
+      shift 2
+      ;;
+    --db-name)
+      DB_NAME="$2"
+      shift 2
+      ;;
+    --root-pass)
+      ROOT_PASS="$2"
+      shift 2
+      ;;
+    --remote)
+      REMOTE="$2"
+      shift 2
+      ;;
+    --remote-retention)
+      REMOTE_RETENTION="$2"
+      shift 2
+      ;;
+    -h|--help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "Unbekannte Option: $1" >&2
+      usage
+      exit 1
+      ;;
+  esac
+done
+
+if [[ -z "$ROOT_PASS" ]]; then
+  echo "Fehler: MySQL root Passwort ist nicht gesetzt. Setze DB_ROOT_PASS oder MYSQL_ROOT_PASSWORD." >&2
+  exit 1
+fi
+
+if [[ -z "$DB_NAME" ]]; then
+  echo "Fehler: Datenbankname ist nicht gesetzt. Setze DB_NAME oder MYSQL_DATABASE." >&2
+  exit 1
+fi
+
+mkdir -p "$BACKUP_DIR"
+
+TIMESTAMP="$(date +%Y%m%d_%H%M%S)"
+BACKUP_FILE="$BACKUP_DIR/${DB_NAME}_$TIMESTAMP.sql.gz"
+
+echo "Erstelle Backup: $BACKUP_FILE"
+
+docker exec "$CONTAINER" mysqldump --single-transaction --quick --lock-tables=false \
+  --triggers --routines --events --set-gtid-purged=OFF -uroot -p"$ROOT_PASS" "$DB_NAME" | gzip > "$BACKUP_FILE"
+
+if [[ ! -s "$BACKUP_FILE" ]]; then
+  echo "Fehler: Backup konnte nicht erstellt werden." >&2
+  exit 1
+fi
+
+echo "Backup erfolgreich erstellt: $BACKUP_FILE"
+
+# Optional: upload to remote host (format: user@host:/path)
+if [[ -n "$REMOTE" ]]; then
+  echo "Upload nach Remote: $REMOTE"
+  if [[ -z "$REMOTE_RETENTION" ]]; then
+    REMOTE_RETENTION="$KEEP_DAYS"
+  fi
+  if [[ "$REMOTE" == *":"* ]]; then
+    REMOTE_HOSTPART="${REMOTE%%:*}"
+    REMOTE_PATH="${REMOTE#*:}"
+    if [[ -z "$REMOTE_PATH" ]]; then
+      REMOTE_PATH="."
+    fi
+    # Verzeichnis auf Remote anlegen, dann Datei kopieren
+    ssh -o BatchMode=yes "$REMOTE_HOSTPART" "mkdir -p \"$REMOTE_PATH\""
+    if ! scp -q "$BACKUP_FILE" "${REMOTE_HOSTPART}:${REMOTE_PATH}/"; then
+      echo "Warnung: Hochladen nach Remote fehlgeschlagen." >&2
+    else
+      echo "Upload erfolgreich."
+      echo "Auf Remote $REMOTE_HOSTPART: entferne Backups älter als $REMOTE_RETENTION Tage in $REMOTE_PATH"
+      ssh -o BatchMode=yes "$REMOTE_HOSTPART" "find \"$REMOTE_PATH\" -maxdepth 1 -type f -name '${DB_NAME}_*.sql.gz' -mtime +$REMOTE_RETENTION -print -delete" || true
+    fi
+  else
+    if ! scp -q "$BACKUP_FILE" "$REMOTE"; then
+      echo "Warnung: Hochladen nach Remote fehlgeschlagen." >&2
+    else
+      echo "Upload erfolgreich."
+    fi
+  fi
+fi
+
+echo "Lösche Backups älter als $KEEP_DAYS Tage im Verzeichnis $BACKUP_DIR"
+find "$BACKUP_DIR" -maxdepth 1 -type f -name "${DB_NAME}_*.sql.gz" -mtime +"$KEEP_DAYS" -print -delete || true
+
+echo "Fertig."

claude/Logbuch.md

@@ -1,5 +1,5 @@
-Erstelle ein Logbuch für die Sternwarte in Welzheim.
-+ Die Sternwarte hat 4 Kuppeln: West, Ost, Süd und Pluto, die West-Kuppel ist der Default. Für jede Kuppel gibt es ein eigenes Logbuch. Alle 4 Logbücher sind identisch gebaut. 
+Erstelle ein Führungsbuch für die Sternwarte in Welzheim.
++ Die Sternwarte hat 4 Kuppeln: West, Ost, Süd und Pluto, die West-Kuppel ist der Default. Für jede Kuppel gibt es ein eigenes Führungsbuch. Alle 4 Logbücher sind identisch gebaut. 
 + Als Datenbank soll eine MYSQL verwendet werden
 + Als Sprache soll nextjs zum Einsatz kommen
 + Der Zugang zu der Webseite soll per User/Passwort gesichert werden

components/DateInput.tsx

@@ -0,0 +1,241 @@
+'use client';
+
+import { useEffect, useMemo, useRef, useState } from 'react';
+
+interface Props {
+  value: string; // "YYYY-MM-DD"
+  onChange: (value: string) => void;
+  className?: string;
+}
+
+const MONTH_NAMES = [
+  'Januar', 'Februar', 'Maerz', 'April', 'Mai', 'Juni',
+  'Juli', 'August', 'September', 'Oktober', 'November', 'Dezember',
+];
+
+const WEEKDAY_SHORT = ['Mo', 'Di', 'Mi', 'Do', 'Fr', 'Sa', 'So'];
+
+function pad(n: number): string {
+  return String(n).padStart(2, '0');
+}
+
+function monthKey(date: Date): string {
+  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}`;
+}
+
+function monthLabel(ym: string): string {
+  const [ys, ms] = ym.split('-');
+  const y = Number(ys);
+  const m = Number(ms);
+  return `${MONTH_NAMES[m - 1]} ${y}`;
+}
+
+function shiftMonth(ym: string, delta: number): string {
+  const [ys, ms] = ym.split('-');
+  const d = new Date(Number(ys), Number(ms) - 1 + delta, 1);
+  return monthKey(d);
+}
+
+function parseISODate(v: string): Date | null {
+  if (!isValidDateString(v)) return null;
+  const [ys, ms, ds] = v.split('-');
+  return new Date(Number(ys), Number(ms) - 1, Number(ds));
+}
+
+function buildMonthGrid(ym: string): Array<number | null> {
+  const [ys, ms] = ym.split('-');
+  const y = Number(ys);
+  const m = Number(ms);
+  const first = new Date(y, m - 1, 1);
+  const days = new Date(y, m, 0).getDate();
+  const mondayStartOffset = (first.getDay() + 6) % 7;
+  const cells: Array<number | null> = Array(mondayStartOffset).fill(null);
+  for (let d = 1; d <= days; d += 1) cells.push(d);
+  while (cells.length % 7 !== 0) cells.push(null);
+  return cells;
+}
+
+function isValidDateString(v: string): boolean {
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(v)) return false;
+  const [ys, ms, ds] = v.split('-');
+  const y = Number(ys);
+  const m = Number(ms);
+  const d = Number(ds);
+  if (m < 1 || m > 12 || d < 1 || d > 31) return false;
+
+  const dt = new Date(Date.UTC(y, m - 1, d));
+  return (
+    dt.getUTCFullYear() === y &&
+    dt.getUTCMonth() === m - 1 &&
+    dt.getUTCDate() === d
+  );
+}
+
+function normalize(v: string): string {
+  const digits = v.replace(/\D/g, '').slice(0, 8);
+  const y = digits.slice(0, 4);
+  const m = digits.slice(4, 6);
+  const d = digits.slice(6, 8);
+
+  if (digits.length <= 4) return y;
+  if (digits.length <= 6) return `${y}-${m}`;
+  return `${y}-${m}-${d}`;
+}
+
+export default function DateInput({ value, onChange, className = '' }: Props) {
+  const [local, setLocal] = useState(value);
+  const [error, setError] = useState(false);
+  const [open, setOpen] = useState(false);
+  const [viewMonth, setViewMonth] = useState(monthKey(new Date()));
+  const wrapperRef = useRef<HTMLDivElement>(null);
+
+  const selectedDate = useMemo(() => parseISODate(value), [value]);
+  const dayCells = useMemo(() => buildMonthGrid(viewMonth), [viewMonth]);
+
+  useEffect(() => {
+    setLocal(value);
+    setError(false);
+  }, [value]);
+
+  useEffect(() => {
+    const date = parseISODate(value);
+    if (date) setViewMonth(monthKey(date));
+  }, [value]);
+
+  useEffect(() => {
+    function onDocMouseDown(ev: MouseEvent) {
+      if (!wrapperRef.current) return;
+      if (!wrapperRef.current.contains(ev.target as Node)) setOpen(false);
+    }
+    function onDocKeyDown(ev: KeyboardEvent) {
+      if (ev.key === 'Escape') setOpen(false);
+    }
+    document.addEventListener('mousedown', onDocMouseDown);
+    document.addEventListener('keydown', onDocKeyDown);
+    return () => {
+      document.removeEventListener('mousedown', onDocMouseDown);
+      document.removeEventListener('keydown', onDocKeyDown);
+    };
+  }, []);
+
+  function handleChange(raw: string) {
+    setError(false);
+    setLocal(normalize(raw));
+  }
+
+  function handleBlur() {
+    if (local === '') {
+      setLocal(value);
+      setError(false);
+      return;
+    }
+
+    if (isValidDateString(local)) {
+      setError(false);
+      onChange(local);
+      return;
+    }
+
+    setError(true);
+  }
+
+  function selectDay(day: number) {
+    const [ys, ms] = viewMonth.split('-');
+    const iso = `${ys}-${ms}-${pad(day)}`;
+    setLocal(iso);
+    setError(false);
+    onChange(iso);
+    setOpen(false);
+  }
+
+  function isSelected(day: number): boolean {
+    if (!selectedDate) return false;
+    const [ys, ms] = viewMonth.split('-').map(Number);
+    return selectedDate.getFullYear() === ys && selectedDate.getMonth() === ms - 1 && selectedDate.getDate() === day;
+  }
+
+  return (
+    <div ref={wrapperRef} className={`relative ${className}`}>
+      <div className="flex items-center gap-1">
+        <input
+          type="text"
+          inputMode="numeric"
+          value={local}
+          onChange={(e) => handleChange(e.target.value)}
+          onBlur={handleBlur}
+          placeholder="YYYY-MM-DD"
+          maxLength={10}
+          className={`w-full px-2 py-1 border-2 rounded-lg bg-white text-sm text-gray-900 font-mono text-center focus:outline-none ${
+            error ? 'border-red-500 focus:border-red-500' : 'border-gray-400 focus:border-blue-500'
+          }`}
+        />
+        <button
+          type="button"
+          onClick={() => setOpen((v) => !v)}
+          className="px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-xs text-gray-700 hover:bg-gray-50"
+          aria-label="Kalender oeffnen"
+        >
+          Kalender
+        </button>
+      </div>
+
+      {open && (
+        <div className="absolute left-0 top-full mt-1 z-20 w-64 border-2 border-gray-300 rounded-lg bg-white shadow-lg p-2">
+          <div className="flex items-center justify-between mb-2">
+            <button
+              type="button"
+              onClick={() => setViewMonth((m) => shiftMonth(m, -1))}
+              className="px-2 py-1 rounded bg-gray-100 hover:bg-gray-200 text-sm"
+              aria-label="Vorheriger Monat"
+            >
+              {'<'}
+            </button>
+            <div className="text-sm font-medium">{monthLabel(viewMonth)}</div>
+            <button
+              type="button"
+              onClick={() => setViewMonth((m) => shiftMonth(m, 1))}
+              className="px-2 py-1 rounded bg-gray-100 hover:bg-gray-200 text-sm"
+              aria-label="Naechster Monat"
+            >
+              {'>'}
+            </button>
+          </div>
+
+          <div className="grid grid-cols-7 gap-1 mb-1">
+            {WEEKDAY_SHORT.map((wd) => (
+              <div key={wd} className="text-[11px] text-center text-gray-500 py-1">
+                {wd}
+              </div>
+            ))}
+          </div>
+
+          <div className="grid grid-cols-7 gap-1">
+            {dayCells.map((day, idx) => (
+              <button
+                key={`${viewMonth}-${idx}`}
+                type="button"
+                disabled={day === null}
+                onClick={() => day !== null && selectDay(day)}
+                className={`h-8 rounded text-sm ${
+                  day === null
+                    ? 'text-transparent cursor-default'
+                    : isSelected(day)
+                      ? 'bg-blue-600 text-white'
+                      : 'bg-gray-50 hover:bg-gray-100 text-gray-800'
+                }`}
+              >
+                {day ?? '-'}
+              </button>
+            ))}
+          </div>
+        </div>
+      )}
+
+      {error && (
+        <p className="absolute left-0 top-full mt-0.5 text-xs text-red-600 whitespace-nowrap z-10">
+          Ungueltiges Datum (YYYY-MM-DD)
+        </p>
+      )}
+    </div>
+  );
+}

components/Fahrkosten.tsx

@@ -35,11 +35,11 @@ export default function Fahrkosten() {
 
   const gesamt = rows ? rows.reduce((s, r) => s + r.Anzahl * SATZ, 0) : 0;
 
-  const thCls = 'px-3 py-2 border border-gray-300 text-xs font-semibold bg-gray-100 text-left whitespace-nowrap';
+  const thCls = 'px-3 py-2 border border-gray-300 text-xs font-semibold bg-gray-100 text-left whitespace-nowrap text-gray-900';
   const thNarrowCls = `${thCls} w-16`;
-  const tdCls = 'px-3 py-2 border border-gray-200 text-sm';
+  const tdCls = 'px-3 py-2 border border-gray-200 text-sm text-gray-900';
   const tdNarrowCls = `${tdCls} w-16`;
-  const tdNumCls = 'px-3 py-2 border border-gray-200 text-sm text-right tabular-nums w-20';
+  const tdNumCls = 'px-3 py-2 border border-gray-200 text-sm text-right tabular-nums w-20 text-gray-900';
 
   const abFormatted = new Date(ab + 'T00:00:00').toLocaleDateString('de-DE', {
     day: '2-digit', month: '2-digit', year: 'numeric',
@@ -53,7 +53,7 @@ export default function Fahrkosten() {
           type="date"
           value={ab}
           onChange={(e) => setAb(e.target.value)}
-          className="px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-sm focus:border-blue-500 focus:outline-none"
+          className="px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-gray-900 text-sm focus:border-blue-500 focus:outline-none"
         />
       </div>
 

components/LogbuchForm.tsx

@@ -120,8 +120,11 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
         .catch(() => {});
     }
     if (editEntry && editEntry.Objekte) {
-      const names = editEntry.Objekte.split(', ').map((n) => n.trim());
-      fetch('/api/objekte')
+      const allNames = editEntry.Objekte.split(', ').map((n) => n.trim());
+      const isSonneEntry = editEntry.ArtFuehrung === SONNE_ART;
+      const names = isSonneEntry ? allNames.filter((n) => n.toLowerCase() !== 'sonne') : allNames;
+      const kat = isSonneEntry ? 'sonne' : 'stern';
+      fetch('/api/objekte?kategorie=' + kat)
         .then((r) => r.json())
         .then((all: { ID: number; Name: string }[]) => {
           const result: SelectedObjekt[] = names.map((name) => {
@@ -134,12 +137,11 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
     }
   }, [editEntry]);
 
-  // Objekte-Vorauswahl je nach Art der Führung
+  // Objekte und Besucher zurücksetzen beim Wechsel der Art der Führung
   useEffect(() => {
-    if (artFuehrung === SONNE_ART) {
-      setObjekte([{ ID: null, Name: 'Sonne' }]);
-    } else if (NO_OBJEKTE_ARTEN.includes(artFuehrung)) {
-      setObjekte([]);
+    setObjekte([]);
+    if (NO_OBJEKTE_ARTEN.includes(artFuehrung)) {
+      setBesucher('');
     }
   }, [artFuehrung]);
 
@@ -171,7 +173,7 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
       Ende: ende,
       Besucher: besucher === '' ? 0 : besucher,
       beoIds: beos.map((b) => b.ID),
-      objekte: showObjekte ? objekte : [],
+      objekte: showObjekte ? (isSonne ? [{ ID: null, Name: 'Sonne' }, ...objekte] : objekte) : [],
       Bemerkungen: bemerkungen,
       Wetter: { ...wetter, temp: parseFloat(tempRaw) || 0 },
     };
@@ -204,7 +206,7 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
     }
   }
 
-  const inputCls = 'w-full px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-sm focus:border-blue-500 focus:outline-none';
+  const inputCls = 'w-full px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-gray-900 text-sm focus:border-blue-500 focus:outline-none';
   const labelCls = 'block text-xs font-medium text-gray-700 mb-0.5';
 
   return (
@@ -272,7 +274,7 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
               onChange={(e) => setBesucher(e.target.value === '' ? '' : parseInt(e.target.value) || 0)}
               min={0}
               max={9999}
-              className="w-20 px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-sm focus:border-blue-500 focus:outline-none"
+              className="w-20 px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-gray-900 text-sm focus:border-blue-500 focus:outline-none"
             />
           </div>
         )}
@@ -303,16 +305,12 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
       {showObjekte && (
         <div>
           <label className={labelCls}>Beobachtete Objekte</label>
-          {isSonne ? (
-            <div className="flex items-center gap-2">
-              <span className="inline-flex items-center bg-green-100 text-green-800 text-sm px-3 py-1.5 rounded-full">
-                Sonne
-              </span>
-              <span className="text-xs text-gray-500">(bei Sonnenführung fest vorgegeben)</span>
-            </div>
-          ) : (
-            <ObjektSelector selected={objekte} onChange={setObjekte} />
-          )}
+          <ObjektSelector
+            selected={objekte}
+            onChange={setObjekte}
+            kategorie={isSonne ? 'sonne' : 'stern'}
+            fixedItems={isSonne ? [{ ID: null, Name: 'Sonne' }] : []}
+          />
         </div>
       )}
 
@@ -326,7 +324,7 @@ export default function LogbuchForm({ kuppel, currentUserBeo, editEntry, onSaved
           value={bemerkungen}
           onChange={(e) => setBemerkungen(e.target.value.slice(0, 500))}
           rows={2}
-          className="w-full px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-sm focus:border-blue-500 focus:outline-none resize-y"
+          className="w-full px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-gray-900 text-sm focus:border-blue-500 focus:outline-none resize-y"
           placeholder="Freier Text (max. 500 Zeichen)"
         />
       </div>

components/LogbuchList.tsx

@@ -148,7 +148,7 @@ export default function LogbuchList({ kuppel, refreshKey, onEdit, currentUserKue
           value={month}
           max={currentMonth()}
           onChange={(e) => setMonth(e.target.value > currentMonth() ? currentMonth() : e.target.value)}
-          className="border border-[#407BFF] rounded-lg px-2 py-1 text-sm focus:outline-none focus:ring-2 focus:ring-inset focus:ring-[#235CC8]"
+          className="border border-[#407BFF] rounded-lg px-2 py-1 text-sm text-gray-900 focus:outline-none focus:ring-2 focus:ring-inset focus:ring-[#235CC8]"
         />
         <button
           onClick={() => setMonth((m) => nextMonth(m))}
@@ -168,7 +168,7 @@ export default function LogbuchList({ kuppel, refreshKey, onEdit, currentUserKue
           value={search}
           onChange={(e) => setSearch(e.target.value)}
           placeholder="Suche in Bemerkungen, Objekte, BEOs…"
-          className="w-full px-3 py-1.5 pr-8 border border-[#407BFF] rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-inset focus:ring-[#235CC8]"
+          className="w-full px-3 py-1.5 pr-8 border border-[#407BFF] rounded-lg text-sm text-gray-900 focus:outline-none focus:ring-2 focus:ring-inset focus:ring-[#235CC8]"
         />
         {search ? (
           <button
@@ -194,11 +194,11 @@ export default function LogbuchList({ kuppel, refreshKey, onEdit, currentUserKue
   );
 
   const cell = compact
-    ? 'px-1.5 py-1 border border-gray-200 text-xs'
-    : 'px-3 py-2 border border-gray-200';
+    ? 'px-1.5 py-1 border border-gray-200 text-xs text-gray-900'
+    : 'px-3 py-2 border border-gray-200 text-gray-900';
   const head = compact
-    ? 'px-1.5 py-1 border border-gray-300 text-xs font-semibold'
-    : 'px-3 py-2 border border-gray-300';
+    ? 'px-1.5 py-1 border border-gray-300 text-xs font-semibold text-gray-900'
+    : 'px-3 py-2 border border-gray-300 text-gray-900';
 
   const displayEntries = printEntries ?? entries;
 
@@ -306,13 +306,13 @@ export default function LogbuchList({ kuppel, refreshKey, onEdit, currentUserKue
           <button
             onClick={() => setPageState({ page: page - 1, key: filterKey })}
             disabled={page === 0}
-            className="px-3 py-1.5 text-sm rounded-lg bg-gray-200 hover:bg-gray-300 disabled:opacity-40 disabled:cursor-not-allowed"
+            className="px-3 py-1.5 text-sm text-gray-900 rounded-lg bg-gray-200 hover:bg-gray-300 disabled:opacity-40 disabled:cursor-not-allowed"
           >← Zurück</button>
           <span className="text-sm text-gray-600">Seite {page + 1} von {Math.ceil(total / limit)}</span>
           <button
             onClick={() => setPageState({ page: page + 1, key: filterKey })}
             disabled={(page + 1) * limit >= total}
-            className="px-3 py-1.5 text-sm rounded-lg bg-gray-200 hover:bg-gray-300 disabled:opacity-40 disabled:cursor-not-allowed"
+            className="px-3 py-1.5 text-sm text-gray-900 rounded-lg bg-gray-200 hover:bg-gray-300 disabled:opacity-40 disabled:cursor-not-allowed"
           >Weiter →</button>
         </div>
       )}

components/ObjektSelector.tsx

@@ -6,9 +6,11 @@ import type { ObjektOption, SelectedObjekt } from '@/types/logbuch';
 interface Props {
   selected: SelectedObjekt[];
   onChange: (objekte: SelectedObjekt[]) => void;
+  kategorie?: 'stern' | 'sonne';
+  fixedItems?: SelectedObjekt[];
 }
 
-export default function ObjektSelector({ selected, onChange }: Props) {
+export default function ObjektSelector({ selected, onChange, kategorie = 'stern', fixedItems = [] }: Props) {
   const [all, setAll] = useState<ObjektOption[]>([]);
   const [search, setSearch] = useState('');
   const [dropdownOpen, setDropdownOpen] = useState(false);
@@ -16,11 +18,11 @@ export default function ObjektSelector({ selected, onChange }: Props) {
   const inputRef = useRef<HTMLInputElement>(null);
 
   useEffect(() => {
-    fetch('/api/objekte')
+    fetch('/api/objekte?kategorie=' + kategorie)
       .then((r) => { if (!r.ok) throw new Error('Fehler'); return r.json(); })
       .then(setAll)
       .catch(() => {});
-  }, []);
+  }, [kategorie]);
 
   useEffect(() => {
     function handleOutside(e: MouseEvent) {
@@ -32,14 +34,17 @@ export default function ObjektSelector({ selected, onChange }: Props) {
     return () => document.removeEventListener('mousedown', handleOutside);
   }, [dropdownOpen]);
 
+  const fixedNamesLower = new Set(fixedItems.map((o) => o.Name.toLowerCase()));
   const selectedNames = new Set(selected.map((o) => o.Name.toLowerCase()));
-  const available = all.filter((o) => !selectedNames.has(o.Name.toLowerCase()));
+  const available = all.filter(
+    (o) => !selectedNames.has(o.Name.toLowerCase()) && !fixedNamesLower.has(o.Name.toLowerCase())
+  );
   const filtered = search
     ? available.filter((o) => o.Name.toLowerCase().startsWith(search.toLowerCase()))
     : available;
 
   const searchTrimmed = search.trim();
-  const alreadySelected = searchTrimmed !== '' && selectedNames.has(searchTrimmed.toLowerCase());
+  const alreadySelected = searchTrimmed !== '' && (selectedNames.has(searchTrimmed.toLowerCase()) || fixedNamesLower.has(searchTrimmed.toLowerCase()));
   const exactAvailableMatch = available.find((o) => o.Name.toLowerCase() === searchTrimmed.toLowerCase());
   const showAddNew = searchTrimmed !== '' && !alreadySelected && !exactAvailableMatch;
 
@@ -51,7 +56,7 @@ export default function ObjektSelector({ selected, onChange }: Props) {
 
   function addNew(name: string) {
     const trimmed = name.trim();
-    if (!trimmed || selectedNames.has(trimmed.toLowerCase())) return;
+    if (!trimmed || selectedNames.has(trimmed.toLowerCase()) || fixedNamesLower.has(trimmed.toLowerCase())) return;
     const existing = all.find((o) => o.Name.toLowerCase() === trimmed.toLowerCase());
     if (existing) {
       onChange([...selected, { ID: existing.ID, Name: existing.Name }]);
@@ -79,6 +84,14 @@ export default function ObjektSelector({ selected, onChange }: Props) {
   return (
     <div className="space-y-3">
       <div className="flex flex-wrap gap-2">
+        {fixedItems.map((o) => (
+          <span
+            key={'fixed-' + o.Name}
+            className="inline-flex items-center gap-2 bg-blue-100 text-blue-800 text-base px-3 py-1.5 rounded-full"
+          >
+            {o.Name}
+          </span>
+        ))}
         {selected.map((o) => (
           <span
             key={o.Name}

components/Statistik.tsx

@@ -1,24 +1,29 @@
 'use client';
 
-import { useEffect, useMemo, useState } from 'react';
-import type { ArtFuehrung, Kuppel } from '@/types/logbuch';
-import { artLabel } from '@/types/logbuch';
+import { useEffect, useState } from 'react';
 
-interface MonthlyRow {
+interface MonthRow {
   monat: number;
-  ArtFuehrung: string;
-  besucher: number;
-  anzahl: number;
+  tageFuehrungen: number;
+  tageBeob: number;
+  tageTD: number;
+  tageSonst: number;
+  tageBEOS: number;
+  tagesToT: number;
+  tageGesamt: number;
+  besucherRF: number;
+  besucherSF: number;
+  besucherSonF: number;
+  besucherPrF: number;
+  besucherToT: number;
+  besucherGesamt: number;
 }
 
 interface StatsData {
-  monthly: MonthlyRow[];
+  monthly: MonthRow[];
   cumulative: number;
   tage: number;
-  allCumulative: number;
-  allTage: number;
   year: number;
-  kuppel: Kuppel;
 }
 
 const MONATE = [
@@ -26,73 +31,44 @@ const MONATE = [
   'Juli','August','September','Oktober','November','Dezember',
 ];
 
-interface Props {
-  kuppel: Kuppel;
+function n(v: number) {
+  return v > 0 ? v.toLocaleString('de-DE') : '';
 }
 
-export default function Statistik({ kuppel }: Props) {
+export default function Statistik() {
   const [year, setYear] = useState(new Date().getFullYear());
   const [data, setData] = useState<StatsData | null>(null);
-  const [fetchError, setFetchError] = useState<{ year: number; kuppel: Kuppel } | null>(null);
+  const [fetchError, setFetchError] = useState<number | null>(null);
 
-  const error = fetchError?.year === year && fetchError?.kuppel === kuppel
-    ? 'Fehler beim Laden der Statistik.'
-    : '';
-  const loading = !error && (!data || data.year !== year || data.kuppel !== kuppel);
+  const error = fetchError === year ? 'Fehler beim Laden der Statistik.' : '';
+  const loading = !error && (!data || data.year !== year);
 
   useEffect(() => {
     let cancelled = false;
-    fetch(`/api/statistik?kuppel=${encodeURIComponent(kuppel)}&year=${year}`)
+    fetch(`/api/statistik?year=${year}`)
       .then((r) => { if (!r.ok) throw new Error(); return r.json(); })
       .then((d: StatsData) => { if (!cancelled) { setData(d); setFetchError(null); } })
-      .catch(() => { if (!cancelled) setFetchError({ year, kuppel }); });
+      .catch(() => { if (!cancelled) setFetchError(year); });
     return () => { cancelled = true; };
-  }, [kuppel, year]);
-
-  const { arten, matrix, monatTotal, artTotal, grandTotal, anzahlTotal } = useMemo(() => {
-    if (!data) {
-      return { arten: [] as string[], matrix: [] as (number | null)[][], monatTotal: [] as number[], artTotal: [] as number[], grandTotal: 0, anzahlTotal: [] as number[] };
-    }
-
-    const artenSet = new Set<string>();
-    data.monthly.forEach((r) => artenSet.add(r.ArtFuehrung));
-    const arten = Array.from(artenSet).sort();
-
-    const matrix: (number | null)[][] = [];
-    const monatTotal: number[] = [];
-    const anzahlTotal: number[] = [];
-    const artTotal: number[] = new Array(arten.length).fill(0);
-    let grandTotal = 0;
-
-    for (let m = 1; m <= 12; m++) {
-      const row: (number | null)[] = [];
-      let mSum = 0;
-      let aSum = 0;
-      arten.forEach((art, idx) => {
-        const found = data.monthly.find((r) => r.monat === m && r.ArtFuehrung === art);
-        const val = found ? found.besucher : null;
-        row.push(val);
-        if (val !== null) {
-          mSum += val;
-          artTotal[idx] += val;
-          aSum += found!.anzahl;
-        }
-      });
-      matrix.push(row);
-      monatTotal.push(mSum);
-      anzahlTotal.push(aSum);
-      grandTotal += mSum;
-    }
-
-    return { arten, matrix, monatTotal, artTotal, grandTotal, anzahlTotal };
-  }, [data]);
+  }, [year]);
 
   if (loading) return <div className="text-gray-500 text-sm py-4">Lade Statistik...</div>;
   if (error)   return <div className="text-red-600 text-sm py-4">{error}</div>;
 
-  const headCls = 'px-3 py-2 border border-gray-300 text-xs font-semibold bg-gray-100 whitespace-nowrap';
-  const cellCls = 'px-3 py-2 border border-gray-200 text-sm text-right tabular-nums';
-  const labelCls = 'px-3 py-2 border border-gray-200 text-sm text-left whitespace-nowrap';
+  const rows = data!.monthly;
+
+  function col(key: keyof MonthRow): number {
+    return rows.reduce((s, r) => s + (r[key] as number), 0);
+  }
+
+  const thTop  = 'px-3 py-2 border border-gray-300 text-xs font-semibold bg-gray-100 text-center text-gray-900';
+  const thSub  = 'px-3 py-2 border border-gray-300 text-xs font-semibold bg-gray-50 whitespace-nowrap text-gray-900';
+  const thDiv  = 'px-3 py-2 border border-gray-300 border-l-4 border-l-gray-400 text-xs font-semibold bg-gray-50 whitespace-nowrap text-gray-900';
+  const td     = 'px-3 py-2 border border-gray-200 text-sm text-right tabular-nums text-gray-900';
+  const tdDiv  = 'px-3 py-2 border border-gray-200 border-l-4 border-l-gray-400 text-sm text-right tabular-nums text-gray-900';
+  const tdL    = 'px-3 py-2 border border-gray-200 text-sm text-left whitespace-nowrap text-gray-900';
+  const tdSum  = 'px-3 py-2 border border-gray-200 text-sm text-right tabular-nums font-semibold bg-gray-50 text-gray-900';
+  const tdSumDiv = 'px-3 py-2 border border-gray-200 border-l-4 border-l-gray-400 text-sm text-right tabular-nums font-semibold bg-gray-50 text-gray-900';
 
   return (
     <div className="space-y-4">
@@ -104,7 +80,7 @@ export default function Statistik({ kuppel }: Props) {
           onChange={(e) => setYear(parseInt(e.target.value, 10) || new Date().getFullYear())}
           min={2000}
           max={2100}
-          className="w-24 px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-sm focus:border-blue-500 focus:outline-none"
+          className="w-24 px-2 py-1 border-2 border-gray-400 rounded-lg bg-white text-gray-900 text-sm focus:border-blue-500 focus:outline-none"
         />
       </div>
 
@@ -112,62 +88,79 @@ export default function Statistik({ kuppel }: Props) {
         <table className="w-full border-collapse text-sm">
           <thead>
             <tr>
-              <th className={headCls}>Monat</th>
-              <th className={headCls}>Führungen</th>
-              {arten.map((art) => (
-                <th key={art} className={headCls}>{artLabel(art as ArtFuehrung)}</th>
-              ))}
-              <th className={headCls}>Gesamt</th>
+              <th className={thTop} rowSpan={2}>Monat</th>
+              <th className={thTop} colSpan={6}>Besucher</th>
+              <th className={`${thTop} border-l-4 border-l-gray-400`} colSpan={7}>Anzahl</th>
+            </tr>
+            <tr>
+              <th className={thSub}>RF</th>
+              <th className={thSub}>SF</th>
+              <th className={thSub}>SonF</th>
+              <th className={thSub}>PrF</th>
+              <th className={thSub}>ToT</th>
+              <th className={thSub}>Gesamt</th>
+              <th className={thDiv}>Führ.</th>
+              <th className={thSub}>Beob.</th>
+              <th className={thSub}>TD</th>
+              <th className={thSub}>Sonst.</th>
+              <th className={thSub}>BEOS</th>
+              <th className={thSub}>ToT</th>
+              <th className={thSub}>Gesamt</th>
             </tr>
           </thead>
           <tbody>
             {MONATE.map((name, idx) => {
-              const mSum = monatTotal[idx];
-              const aSum = anzahlTotal[idx];
+              const m = idx + 1;
+              const r = rows.find((row) => row.monat === m);
+              const hasData = r && r.tageGesamt > 0;
+              const cls = hasData ? '' : 'text-gray-400';
               return (
-                <tr key={name} className={mSum > 0 ? '' : 'text-gray-400'}>
-                  <td className={labelCls}>{name}</td>
-                  <td className={cellCls}>{aSum > 0 ? aSum : ''}</td>
-                  {arten.map((_, aIdx) => {
-                    const val = matrix[idx][aIdx];
-                    return (
-                      <td key={aIdx} className={cellCls}>
-                        {val !== null && val > 0 ? val.toLocaleString('de-DE') : ''}
-                      </td>
-                    );
-                  })}
-                  <td className={`${cellCls} font-semibold`}>{mSum > 0 ? mSum.toLocaleString('de-DE') : ''}</td>
+                <tr key={name} className={cls}>
+                  <td className={tdL}>{name}</td>
+                  <td className={td}>{r ? n(r.besucherRF) : ''}</td>
+                  <td className={td}>{r ? n(r.besucherSF) : ''}</td>
+                  <td className={td}>{r ? n(r.besucherSonF) : ''}</td>
+                  <td className={td}>{r ? n(r.besucherPrF) : ''}</td>
+                  <td className={td}>{r ? n(r.besucherToT) : ''}</td>
+                  <td className={`${td} font-semibold`}>{r ? n(r.besucherGesamt) : ''}</td>
+                  <td className={`${tdDiv} font-semibold`}>{r ? n(r.tageFuehrungen) : ''}</td>
+                  <td className={td}>{r ? n(r.tageBeob) : ''}</td>
+                  <td className={td}>{r ? n(r.tageTD) : ''}</td>
+                  <td className={td}>{r ? n(r.tageSonst) : ''}</td>
+                  <td className={td}>{r ? n(r.tageBEOS) : ''}</td>
+                  <td className={td}>{r ? n(r.tagesToT) : ''}</td>
+                  <td className={`${td} font-semibold`}>{r ? n(r.tageGesamt) : ''}</td>
                 </tr>
               );
             })}
-            <tr className="bg-gray-50 font-semibold">
-              <td className={labelCls}>Summe</td>
-              <td className={cellCls}>{anzahlTotal.reduce((s, v) => s + v, 0) > 0 ? anzahlTotal.reduce((s, v) => s + v, 0).toLocaleString('de-DE') : ''}</td>
-              {artTotal.map((t, i) => (
-                <td key={i} className={cellCls}>{t > 0 ? t.toLocaleString('de-DE') : ''}</td>
-              ))}
-              <td className={cellCls}>{grandTotal > 0 ? grandTotal.toLocaleString('de-DE') : ''}</td>
+            <tr>
+              <td className={tdL + ' font-semibold'}>Summe</td>
+              <td className={tdSum}>{n(col('besucherRF'))}</td>
+              <td className={tdSum}>{n(col('besucherSF'))}</td>
+              <td className={tdSum}>{n(col('besucherSonF'))}</td>
+              <td className={tdSum}>{n(col('besucherPrF'))}</td>
+              <td className={tdSum}>{n(col('besucherToT'))}</td>
+              <td className={tdSum}>{n(col('besucherGesamt'))}</td>
+              <td className={tdSumDiv}>{n(col('tageFuehrungen'))}</td>
+              <td className={tdSum}>{n(col('tageBeob'))}</td>
+              <td className={tdSum}>{n(col('tageTD'))}</td>
+              <td className={tdSum}>{n(col('tageSonst'))}</td>
+              <td className={tdSum}>{n(col('tageBEOS'))}</td>
+              <td className={tdSum}>{n(col('tagesToT'))}</td>
+              <td className={tdSum}>{n(col('tageGesamt'))}</td>
             </tr>
           </tbody>
         </table>
       </div>
 
-      <div className="grid grid-cols-2 lg:grid-cols-4 gap-4 w-full">
+      <div className="grid grid-cols-2 gap-4 w-full max-w-sm">
         <div className="border-2 border-gray-300 rounded-xl p-4 bg-white">
-          <div className="text-xs text-gray-500 mb-1">Kumulierte Besucher {year} ({data?.kuppel})</div>
-          <div className="text-2xl font-bold">{data?.cumulative.toLocaleString('de-DE') ?? 0}</div>
+          <div className="text-xs text-gray-500 mb-1">Besucher {year}</div>
+          <div className="text-2xl font-bold text-gray-900">{data?.cumulative.toLocaleString('de-DE') ?? 0}</div>
         </div>
         <div className="border-2 border-gray-300 rounded-xl p-4 bg-white">
-          <div className="text-xs text-gray-500 mb-1">Führungstage {year} ({data?.kuppel})</div>
-          <div className="text-2xl font-bold">{data?.tage ?? 0}</div>
-        </div>
-        <div className="border-2 border-green-600 rounded-xl p-4 bg-green-50">
-          <div className="text-xs text-green-700 mb-1">Kumulierte Besucher {year} (Sternwarte gesamt)</div>
-          <div className="text-2xl font-bold text-green-800">{data?.allCumulative.toLocaleString('de-DE') ?? 0}</div>
-        </div>
-        <div className="border-2 border-green-600 rounded-xl p-4 bg-green-50">
-          <div className="text-xs text-green-700 mb-1">Führungstage {year} (Sternwarte gesamt)</div>
-          <div className="text-2xl font-bold text-green-800">{data?.allTage ?? 0}</div>
+          <div className="text-xs text-gray-500 mb-1">Führungen {year}</div>
+          <div className="text-2xl font-bold text-gray-900">{data?.tage ?? 0}</div>
         </div>
       </div>
     </div>

compose.yml

@@ -1,79 +1,14 @@
 services:
-  logbuch_mysql:
-    image: mysql:lts
-    container_name: logbuch_mysql
-    restart: unless-stopped
-    environment:
-      MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASS}
-      MYSQL_DATABASE: ${DB_NAME}
-      MYSQL_USER: ${DB_USER}
-      MYSQL_PASSWORD: ${DB_PASS}
-    volumes:
-      - db_data:/var/lib/mysql
-    ports:
-      - "127.0.0.1:3336:3306"
-    networks:
-      - proxy
-    healthcheck:
-      test:
-        - CMD
-        - mysqladmin
-        - ping
-        - -h
-        - localhost
-        - -uroot
-        - -p${DB_ROOT_PASS}
-      interval: 10s
-      timeout: 5s
-      retries: 10
-    # Kein Port nach außen — nur internes Netzwerk
-
-  logbuch_phpmyadmin:
-    image: phpmyadmin:latest
-    container_name: logbuch_phpmyadmin
-    restart: unless-stopped
-    environment:
-      PMA_HOST: logbuch_mysql
-      PMA_PORT: 3306
-      PMA_ABSOLUTE_URI: https://logbuch.fuerst-stuttgart.de/myadmin/
-    depends_on:
-      logbuch_mysql:
-        condition: service_healthy
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.logbuch-pma.entrypoints=http
-      - traefik.http.routers.logbuch-pma.rule=Host(`logbuch.fuerst-stuttgart.de`) && PathPrefix(`/myadmin`)
-      - traefik.http.middlewares.logbuch-pma-https-redirect.redirectscheme.scheme=https
-      - traefik.http.routers.logbuch-pma.middlewares=logbuch-pma-https-redirect
-      - traefik.http.routers.logbuch-pma-secure.entrypoints=https
-      - traefik.http.routers.logbuch-pma-secure.rule=Host(`logbuch.fuerst-stuttgart.de`) && PathPrefix(`/myadmin`)
-      - traefik.http.routers.logbuch-pma-secure.tls=true
-      - traefik.http.routers.logbuch-pma-secure.middlewares=logbuch-pma-slash,logbuch-pma-strip
-      - traefik.http.middlewares.logbuch-pma-slash.redirectregex.regex=^https://logbuch\.fuerst-stuttgart\.de/myadmin$$
-      - traefik.http.middlewares.logbuch-pma-slash.redirectregex.replacement=https://logbuch.fuerst-stuttgart.de/myadmin/
-      - traefik.http.middlewares.logbuch-pma-strip.stripprefix.prefixes=/myadmin
-      - traefik.http.routers.logbuch-pma-secure.service=logbuch-pma
-      - traefik.http.services.logbuch-pma.loadbalancer.server.port=80
-    networks:
-      - proxy
-
   logbuch_app:
     image: docker.citysensor.de/logbuch:latest
     container_name: logbuch_app
     restart: unless-stopped
     environment:
-      DB_HOST: logbuch_mysql
-      DB_USER: ${DB_USER}
-      DB_PASS: ${DB_PASS}
-      DB_NAME: ${DB_NAME}
-      DB_PORT: 3306
+      PHP_DB_URL: ${PHP_DB_URL}
       AUTH_SECRET: ${AUTH_SECRET}
       NODE_ENV: production
     ports:
       - 127.0.0.1:${APP_PORT:-3000}:3000
-    depends_on:
-      logbuch_mysql:
-        condition: service_healthy
     labels:
       - traefik.enable=true
       - traefik.http.routers.logbuch.entrypoints=http
@@ -88,6 +23,7 @@ services:
     networks:
       - proxy
       - gitea-internal
+
 networks:
   proxy:
     name: dockge_default
@@ -95,5 +31,3 @@ networks:
   gitea-internal:
     name: gitea_gitea-internal
     external: true
-volumes:
-  db_data: null

docker-compose.prod.yml

@@ -1,64 +1,21 @@
 services:
-
-  logbuch_mysql:
-    image: mysql:lts
-    container_name: logbuch_mysql
-    restart: unless-stopped
-    environment:
-      MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASS}
-      MYSQL_DATABASE: ${DB_NAME}
-      MYSQL_USER: ${DB_USER}
-      MYSQL_PASSWORD: ${DB_PASS}
-    volumes:
-      - db_data:/var/lib/mysql
-    networks:
-      - logbuch_net
-    healthcheck:
-      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-uroot", "-p${DB_ROOT_PASS}"]
-      interval: 10s
-      timeout: 5s
-      retries: 10
-    # Kein Port nach außen — nur internes Netzwerk
-
-  logbuch_phpmyadmin:
-    image: phpmyadmin:latest
-    container_name: logbuch_phpmyadmin
-    restart: unless-stopped
-    environment:
-      PMA_HOST: logbuch_mysql
-      PMA_PORT: 3306
-      PMA_ABSOLUTE_URI: https://logbuch.fuerst-stuttgart.de/myadmin/
-    ports:
-      - "127.0.0.1:${PMA_PORT:-8080}:80"
-    depends_on:
-      logbuch_mysql:
-        condition: service_healthy
-    networks:
-      - logbuch_net
-
   logbuch_app:
     image: docker.citysensor.de/logbuch:latest
     container_name: logbuch_app
     restart: unless-stopped
+    env_file: .env
     environment:
-      DB_HOST: logbuch_mysql
-      DB_PORT: 3306
-      DB_USER: ${DB_USER}
-      DB_PASS: ${DB_PASS}
-      DB_NAME: ${DB_NAME}
-      AUTH_SECRET: ${AUTH_SECRET}
       NODE_ENV: production
+      BACKUP_SSH_KEY_PATH: /run/secrets/backup_ssh_key
+    volumes:
+      - ${BACKUP_SSH_KEY_FILE:-/dev/null}:/run/secrets/backup_ssh_key:ro
     ports:
       - "127.0.0.1:${APP_PORT:-3000}:3000"
-    depends_on:
-      logbuch_mysql:
-        condition: service_healthy
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     networks:
       - logbuch_net
 
 networks:
   logbuch_net:
     driver: bridge
-
-volumes:
-  db_data:

lib/auth.ts

@@ -1,34 +1,13 @@
 import bcrypt from 'bcryptjs';
-import { query } from './db';
+import { getBeoByKuerzel, getBeoByName } from './phpdb';
 
-export interface Beo {
-  id: number;
-  name: string;
-  vorname: string | null;
-  kürzel: string | null;
-  pw: string | null;
-  MustChangePassword: number;
-  role: string | null;
-}
-
-export async function getBeoByKuerzel(kuerzel: string): Promise<Beo | null> {
-  const rows = await query(
-    'SELECT id, name, vorname, `kürzel`, pw, MustChangePassword, role FROM beos WHERE `kürzel` = ?',
-    [kuerzel]
-  ) as Beo[];
-  return rows[0] ?? null;
-}
+export type { Beo } from './phpdb';
+import type { Beo } from './phpdb';
 
 export async function getBeoByLogin(login: string): Promise<Beo | null> {
-  // First try exact Kürzel match, then case-insensitive Nachname match
   const byKuerzel = await getBeoByKuerzel(login);
   if (byKuerzel) return byKuerzel;
-
-  const rows = await query(
-    'SELECT id, name, vorname, `kürzel`, pw, MustChangePassword, role FROM beos WHERE LOWER(name) = LOWER(?)',
-    [login]
-  ) as Beo[];
-  return rows[0] ?? null;
+  return getBeoByName(login);
 }
 
 export async function verifyCredentials(
@@ -41,8 +20,7 @@ export async function verifyCredentials(
   if (!beo.pw) {
     const defaultPw = process.env.DEFAULT_PASSWORD;
     if (!defaultPw) throw new Error('DEFAULT_PASSWORD Umgebungsvariable ist nicht gesetzt!');
-    const valid = password === defaultPw;
-    return { beo, valid };
+    return { beo, valid: password === defaultPw };
   }
 
   const valid = await bcrypt.compare(password, beo.pw);

lib/backup.ts

@@ -0,0 +1,123 @@
+import { createWriteStream, mkdirSync, unlinkSync } from 'fs';
+import { createGzip } from 'zlib';
+import { join } from 'path';
+import { spawn } from 'child_process';
+import { getBackupData } from './phpdb';
+
+export function triggerBackup(): void {
+  setImmediate(() => runBackup().catch((e) => console.error('[backup] Fehler:', e)));
+}
+
+async function dumpToFile(filePath: string): Promise<void> {
+  const { tables } = await getBackupData();
+
+  const gzip = createGzip();
+  const file = createWriteStream(filePath);
+  gzip.pipe(file);
+
+  const write = (s: string) => new Promise<void>((res, rej) =>
+    gzip.write(s, (e) => e ? rej(e) : res())
+  );
+
+  const now = new Date().toISOString();
+  await write(`-- Führungsbuch Backup ${now}\n-- Logbuch-Tabellen\n\nSET FOREIGN_KEY_CHECKS=0;\n\n`);
+
+  for (const { name, createSql, rows } of tables) {
+    await write(`DROP TABLE IF EXISTS \`${name}\`;\n`);
+    await write(`${createSql};\n\n`);
+
+    if (rows.length > 0) {
+      const cols = Object.keys(rows[0]).map((c) => `\`${c}\``).join(', ');
+      const batchSize = 200;
+      for (let i = 0; i < rows.length; i += batchSize) {
+        const batch = rows.slice(i, i + batchSize);
+        const values = batch.map((row) =>
+          '(' + Object.values(row).map((v) => {
+            if (v === null) return 'NULL';
+            if (typeof v === 'number') return String(v);
+            return `'${String(v).replace(/\\/g, '\\\\').replace(/'/g, "\\'")}'`;
+          }).join(', ') + ')'
+        ).join(',\n  ');
+        await write(`INSERT INTO \`${name}\` (${cols}) VALUES\n  ${values};\n`);
+      }
+      await write('\n');
+    }
+  }
+
+  await write('SET FOREIGN_KEY_CHECKS=1;\n');
+
+  await new Promise<void>((resolve, reject) => {
+    gzip.end();
+    file.on('close', resolve);
+    file.on('error', reject);
+  });
+}
+
+async function runBackup(): Promise<void> {
+  const sshUrl = process.env.BACKUP_SSH_URL || '';
+  const localDir = process.env.BACKUP_LOCAL_DIR || '/tmp/logbuch-backup';
+
+  const ts = new Date().toISOString().replace('T', '_').replace(/:/g, '-').slice(0, 19);
+  const filename = `sternwarte_${ts}.sql.gz`;
+
+  mkdirSync(localDir, { recursive: true });
+  const localPath = join(localDir, filename);
+
+  await dumpToFile(localPath);
+  console.log(`[backup] Dump geschrieben: ${localPath}`);
+
+  try {
+    if (!sshUrl) return;
+
+    const match = sshUrl.match(/^([^:]+):(.+)$/);
+    if (!match) {
+      console.error('[backup] BACKUP_SSH_URL muss das Format user@host:/pfad haben');
+      return;
+    }
+    const [, sshHost, remotePath] = match;
+
+    const rawKeyPath = process.env.BACKUP_SSH_KEY_PATH || '';
+    const keyPath = rawKeyPath.startsWith('~')
+      ? rawKeyPath.replace('~', process.env.HOME || '/root')
+      : rawKeyPath;
+
+    const sshOpts = [
+      ...(keyPath ? ['-i', keyPath] : []),
+      '-o', 'StrictHostKeyChecking=no',
+      '-o', 'BatchMode=yes',
+      '-o', 'ConnectTimeout=15',
+    ];
+
+    await new Promise<void>((resolve, reject) => {
+      const ssh = spawn('ssh', [...sshOpts, sshHost, `mkdir -p ${remotePath}`]);
+      ssh.on('error', reject);
+      ssh.on('close', (code) => code === 0 ? resolve() : reject(new Error(`mkdir -p exit ${code}`)));
+    });
+
+    await new Promise<void>((resolve, reject) => {
+      const scp = spawn('scp', [...sshOpts, localPath, `${sshHost}:${remotePath}/${filename}`]);
+      let scpErr = '';
+      scp.stderr.on('data', (d: Buffer) => { scpErr += d.toString(); });
+      scp.on('error', reject);
+      scp.on('close', (code) =>
+        code === 0 ? resolve() : reject(new Error(`scp exit ${code}${scpErr ? ': ' + scpErr.trim() : ''}`))
+      );
+    });
+
+    console.log(`[backup] ${filename} → ${sshHost}:${remotePath}`);
+
+    await new Promise<void>((resolve) => {
+      const ssh = spawn('ssh', [
+        ...sshOpts, sshHost,
+        `find ${remotePath} -name 'sternwarte_*.sql.gz' -mtime +30 -delete`,
+      ]);
+      ssh.on('error', (e) => { console.error('[backup] Cleanup spawn-Fehler:', e.message); resolve(); });
+      ssh.on('close', (code) => {
+        if (code !== 0) console.error('[backup] Cleanup fehlgeschlagen (exit ' + code + ')');
+        resolve();
+      });
+    });
+  } finally {
+    try { unlinkSync(localPath); } catch { /* bereits gelöscht oder nie angelegt */ }
+  }
+}

lib/db.ts

@@ -1,29 +0,0 @@
-import mysql from 'mysql2/promise';
-import type { QueryResult } from 'mysql2/promise';
-
-const dbConfig = {
-  host: process.env.DB_HOST || 'mydbase_mysql',
-  port: process.env.DB_PORT ? parseInt(process.env.DB_PORT) : 3306,
-  user: process.env.DB_USER,
-  password: process.env.DB_PASS,
-  database: process.env.DB_NAME || 'logbuch',
-  charset: 'utf8mb4',
-  waitForConnections: true,
-  connectionLimit: 10,
-  queueLimit: 0,
-};
-
-let pool: mysql.Pool | null = null;
-
-export function getPool() {
-  if (!pool) {
-    pool = mysql.createPool(dbConfig);
-  }
-  return pool;
-}
-
-export async function query(sql: string, params?: (string | number | null)[]): Promise<QueryResult> {
-  const p = getPool();
-  const [rows] = await p.execute(sql, params || []);
-  return rows as QueryResult;
-}

lib/phpdb.ts

@@ -0,0 +1,185 @@
+import type { BeoOption, LogbuchEintrag, ObjektOption, SelectedObjekt, Wetter } from '@/types/logbuch';
+
+const PHP_DB_URL = process.env.PHP_DB_URL ?? 'http://localhost:8080/DB4js_all.php';
+
+async function call<T>(cmd: string, params: object = {}): Promise<T> {
+  const res = await fetch(PHP_DB_URL, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ cmd, ...params }),
+    cache: 'no-store',
+  });
+  if (!res.ok) {
+    let detail = '';
+    try { detail = await res.text(); } catch { /* ignore */ }
+    throw new Error(`DB4js ${cmd} HTTP ${res.status}: ${detail}`);
+  }
+  const json: unknown = await res.json();
+  if (json && typeof json === 'object' && 'error' in json) {
+    throw new Error(`DB4js ${cmd}: ${(json as { error: string }).error}`);
+  }
+  return json as T;
+}
+
+// ---- Auth / Benutzer ----
+
+export interface Beo {
+  id: number;
+  name: string;
+  vorname: string | null;
+  'kürzel': string | null;
+  pw: string | null;
+  MustChangePassword: number;
+  role: string | null;
+}
+
+export interface BeoUser {
+  id: number;
+  'kürzel': string | null;
+  name: string;
+  vorname: string | null;
+  role: string | null;
+  hasPw: boolean;
+}
+
+export async function getBeoByKuerzel(kuerzel: string): Promise<Beo | null> {
+  const r = await call<{ beo: Beo | null }>('LB_AUTH_KUERZEL', { kuerzel });
+  return r.beo;
+}
+
+export async function getBeoByName(name: string): Promise<Beo | null> {
+  const r = await call<{ beo: Beo | null }>('LB_AUTH_NAME', { name });
+  return r.beo;
+}
+
+export async function updateBeoPassword(id: number, pwHash: string): Promise<void> {
+  await call('LB_UPDATE_PW', { id, pw: pwHash });
+}
+
+export async function resetBeoPassword(id: number): Promise<void> {
+  await call('LB_RESET_PW', { id });
+}
+
+export async function listUsers(): Promise<BeoUser[]> {
+  return call<BeoUser[]>('LB_LIST_USERS');
+}
+
+// ---- Logbuch ----
+
+export interface ListLogbuchParams {
+  kuppel?: string;
+  limit?: number;
+  offset?: number;
+  month?: string;
+  search?: string;
+  order?: string;
+}
+
+export async function listLogbuch(
+  params: ListLogbuchParams
+): Promise<{ entries: LogbuchEintrag[]; total: number }> {
+  return call('LB_LIST_LOGBUCH', params);
+}
+
+export interface CreateLogbuchData {
+  Kuppel: string;
+  ArtFuehrung: string;
+  SonderName?: string | null;
+  Beginn: string;
+  Ende: string;
+  Besucher?: number;
+  beoIds?: number[];
+  objekte?: SelectedObjekt[];
+  Bemerkungen?: string | null;
+  Wetter?: Partial<Wetter> | null;
+  created_by: number;
+}
+
+export async function createLogbuch(data: CreateLogbuchData): Promise<{ id: number }> {
+  return call('LB_CREATE_LOGBUCH', data);
+}
+
+export async function updateLogbuch(
+  id: number,
+  userId: number,
+  userRole: string,
+  data: Omit<CreateLogbuchData, 'created_by'>
+): Promise<void> {
+  await call('LB_UPDATE_LOGBUCH', { id, user_id: userId, user_role: userRole, ...data });
+}
+
+export async function deleteLogbuch(
+  id: number,
+  userId: number,
+  userRole: string
+): Promise<void> {
+  await call('LB_DELETE_LOGBUCH', { id, user_id: userId, user_role: userRole });
+}
+
+// ---- BEOs & Objekte ----
+
+export async function getBeos(): Promise<BeoOption[]> {
+  return call('LB_GET_BEOS');
+}
+
+export async function getObjekte(kategorie: 'stern' | 'sonne' = 'stern'): Promise<ObjektOption[]> {
+  return call('LB_GET_OBJEKTE', { kategorie });
+}
+
+export async function createObjekt(name: string, kategorie: string = 'stern'): Promise<ObjektOption> {
+  return call('LB_CREATE_OBJEKT', { name, kategorie });
+}
+
+export async function updateObjekt(id: number, name: string, kategorie?: string): Promise<ObjektOption> {
+  return call('LB_UPDATE_OBJEKT', { id, name, ...(kategorie ? { kategorie } : {}) });
+}
+
+export async function deleteObjekt(id: number): Promise<void> {
+  await call('LB_DELETE_OBJEKT', { id });
+}
+
+export async function listObjekteAdmin(): Promise<{ ID: number; Name: string; LastUsed: string | null; Kategorie: string }[]> {
+  return call('LB_LIST_OBJEKTE_ADMIN');
+}
+
+// ---- Auswertungen ----
+
+export interface FahrkostenRow {
+  ID: number;
+  Kuerzel: string;
+  Name: string;
+  Anzahl: number;
+}
+
+export async function getFahrkosten(ab: string): Promise<FahrkostenRow[]> {
+  return call('LB_FAHRKOSTEN', { ab });
+}
+
+export interface StatistikResult {
+  monthly: {
+    monat: number;
+    tageFuehrungen: number; tageBeob: number; tageTD: number;
+    tageSonst: number; tageBEOS: number; tagesToT: number; tageGesamt: number;
+    besucherRF: number; besucherSF: number; besucherSonF: number;
+    besucherPrF: number; besucherToT: number; besucherGesamt: number;
+  }[];
+  cumulative: number;
+  tage: number;
+  year: number;
+}
+
+export async function getStatistik(year: number): Promise<StatistikResult> {
+  return call('LB_STATISTIK', { year });
+}
+
+// ---- Backup ----
+
+export interface BackupTable {
+  name: string;
+  createSql: string;
+  rows: Record<string, string | number | null>[];
+}
+
+export async function getBackupData(): Promise<{ tables: BackupTable[] }> {
+  return call('LB_BACKUP_DATA');
+}

lib/session.ts

@@ -4,11 +4,11 @@ import { SignJWT, jwtVerify } from 'jose';
 const SESSION_COOKIE_NAME = 'logbuch_session';
 const SESSION_DURATION = 60 * 60 * 1000;
 
-const secretKey = process.env.AUTH_SECRET;
-if (!secretKey) {
-  throw new Error('AUTH_SECRET Umgebungsvariable ist nicht gesetzt!');
+function getKey(): Uint8Array {
+  const secretKey = process.env.AUTH_SECRET;
+  if (!secretKey) throw new Error('AUTH_SECRET Umgebungsvariable ist nicht gesetzt!');
+  return new TextEncoder().encode(secretKey);
 }
-const key = new TextEncoder().encode(secretKey);
 
 export interface SessionData {
   kuerzel: string;
@@ -25,12 +25,12 @@ async function encrypt(payload: SessionData): Promise<string> {
     .setProtectedHeader({ alg: 'HS256' })
     .setIssuedAt()
     .setExpirationTime(new Date(payload.expiresAt))
-    .sign(key);
+    .sign(getKey());
 }
 
 async function decrypt(token: string): Promise<SessionData | null> {
   try {
-    const { payload } = await jwtVerify(token, key, { algorithms: ['HS256'] });
+    const { payload } = await jwtVerify(token, getKey(), { algorithms: ['HS256'] });
     return payload as unknown as SessionData;
   } catch {
     return null;

next.config.ts

@@ -7,7 +7,6 @@ const nextConfig: NextConfig = {
       {
         source: '/(.*)',
         headers: [
-          { key: 'X-Frame-Options', value: 'DENY' },
           { key: 'X-Content-Type-Options', value: 'nosniff' },
           { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
           { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' },
@@ -19,6 +18,7 @@ const nextConfig: NextConfig = {
       },
     ];
   },
+
 };
 
 export default nextConfig;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "logbuch",
-  "version": "1.7.6",
+  "version": "1.10.1",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -11,8 +11,7 @@
   "dependencies": {
     "bcryptjs": "^3.0.3",
     "jose": "^6.2.2",
-    "mysql2": "^3.22.3",
-    "next": "16.1.6",
+"next": "16.1.6",
     "react": "19.2.3",
     "react-dom": "19.2.3"
   },

proxy.ts

@@ -3,7 +3,8 @@ import type { NextRequest } from 'next/server';
 import { jwtVerify } from 'jose';
 
 const SESSION_COOKIE_NAME = 'logbuch_session';
-const secretKey = process.env.AUTH_SECRET || 'logbuch-secret-change-in-production';
+const secretKey = process.env.AUTH_SECRET;
+if (!secretKey) throw new Error('AUTH_SECRET Umgebungsvariable ist nicht gesetzt!');
 const key = new TextEncoder().encode(secretKey);
 
 export async function proxy(request: NextRequest) {
@@ -13,6 +14,11 @@ export async function proxy(request: NextRequest) {
     return NextResponse.next();
   }
 
+  // Allow the statistik grafik proxy route to be called without an app session cookie
+  if (pathname.startsWith('/api/statistik/grafik')) {
+    return NextResponse.next();
+  }
+
   const cookie = request.cookies.get(SESSION_COOKIE_NAME);
 
   if (!cookie?.value) {
@@ -31,7 +37,15 @@ export async function proxy(request: NextRequest) {
       return NextResponse.redirect(new URL('/', request.url));
     }
 
-    return NextResponse.next();
+    if (pathname === '/api/statistik/grafik') {
+      return NextResponse.next();
+    }
+
+    return NextResponse.next({
+      headers: {
+        'X-Frame-Options': 'DENY',
+      },
+    });
   } catch {
     return NextResponse.redirect(new URL('/login', request.url));
   }

public/anleitung.html

@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>Bedienungsanleitung – Logbuch Sternwarte Welzheim</title>
+  <title>Bedienungsanleitung – Führungsbuch Sternwarte Welzheim</title>
   <style>
     *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
 
@@ -15,14 +15,12 @@
       background: #f4f6fb;
     }
 
-    /* ── Layout ── */
     .page {
       max-width: 860px;
       margin: 0 auto;
       padding: 2rem 1.5rem 4rem;
     }
 
-    /* ── Header ── */
     header {
       background: linear-gradient(135deg, #1a2d5a 0%, #2e4e8a 100%);
       color: #fff;
@@ -33,24 +31,10 @@
       align-items: center;
       gap: 1.2rem;
     }
-    header .star {
-      font-size: 2.8rem;
-      flex-shrink: 0;
-      line-height: 1;
-    }
-    header h1 {
-      font-size: 1.6rem;
-      font-weight: 700;
-      letter-spacing: -0.02em;
-      line-height: 1.25;
-    }
-    header p {
-      margin-top: 0.3rem;
-      font-size: 0.9rem;
-      opacity: 0.75;
-    }
+    header .star { font-size: 2.8rem; flex-shrink: 0; line-height: 1; }
+    header h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; line-height: 1.25; }
+    header p { margin-top: 0.3rem; font-size: 0.9rem; opacity: 0.75; }
 
-    /* ── TOC ── */
     nav.toc {
       background: #fff;
       border: 1px solid #d8e0f0;
@@ -59,36 +43,21 @@
       margin-bottom: 2.5rem;
     }
     nav.toc h2 {
-      font-size: 0.75rem;
-      font-weight: 700;
-      text-transform: uppercase;
-      letter-spacing: 0.08em;
-      color: #6b7a9b;
-      margin-bottom: 0.75rem;
+      font-size: 0.75rem; font-weight: 700; text-transform: uppercase;
+      letter-spacing: 0.08em; color: #6b7a9b; margin-bottom: 0.75rem;
     }
     nav.toc ol {
-      list-style: none;
-      counter-reset: toc;
-      display: grid;
-      grid-template-columns: 1fr 1fr;
-      gap: 0.3rem 2rem;
+      list-style: none; counter-reset: toc;
+      display: grid; grid-template-columns: 1fr 1fr; gap: 0.3rem 2rem;
     }
     nav.toc li { counter-increment: toc; display: flex; align-items: baseline; gap: 0.5rem; }
     nav.toc li::before {
-      content: counter(toc) ".";
-      font-size: 0.8rem;
-      color: #85b7d7;
-      font-weight: 700;
-      min-width: 1.4rem;
-    }
-    nav.toc a {
-      color: #2e4e8a;
-      text-decoration: none;
-      font-size: 0.92rem;
+      content: counter(toc) "."; font-size: 0.8rem; color: #85b7d7;
+      font-weight: 700; min-width: 1.4rem;
     }
+    nav.toc a { color: #2e4e8a; text-decoration: none; font-size: 0.92rem; }
     nav.toc a:hover { text-decoration: underline; }
 
-    /* ── Sections ── */
     section {
       background: #fff;
       border: 1px solid #d8e0f0;
@@ -98,127 +67,69 @@
     }
 
     h2.section-title {
-      font-size: 1.15rem;
-      font-weight: 700;
-      color: #1a2d5a;
-      margin-bottom: 1.2rem;
-      padding-bottom: 0.6rem;
+      font-size: 1.15rem; font-weight: 700; color: #1a2d5a;
+      margin-bottom: 1.2rem; padding-bottom: 0.6rem;
       border-bottom: 2px solid #85b7d7;
-      display: flex;
-      align-items: center;
-      gap: 0.6rem;
+      display: flex; align-items: center; gap: 0.6rem;
     }
     h2.section-title .num {
-      background: #85b7d7;
-      color: #1a2d5a;
-      font-size: 0.78rem;
-      font-weight: 800;
-      width: 1.6rem;
-      height: 1.6rem;
-      border-radius: 50%;
-      display: inline-flex;
-      align-items: center;
-      justify-content: center;
-      flex-shrink: 0;
+      background: #85b7d7; color: #1a2d5a; font-size: 0.78rem; font-weight: 800;
+      width: 1.6rem; height: 1.6rem; border-radius: 50%;
+      display: inline-flex; align-items: center; justify-content: center; flex-shrink: 0;
     }
 
     h3 {
-      font-size: 0.95rem;
-      font-weight: 700;
-      color: #2e4e8a;
-      margin: 1.3rem 0 0.5rem;
-      text-transform: uppercase;
-      letter-spacing: 0.05em;
+      font-size: 0.95rem; font-weight: 700; color: #2e4e8a;
+      margin: 1.3rem 0 0.5rem; text-transform: uppercase; letter-spacing: 0.05em;
     }
     h3:first-child { margin-top: 0; }
 
     p { margin-bottom: 0.7rem; }
     p:last-child { margin-bottom: 0; }
 
-    /* ── Lists ── */
-    ul, ol {
-      padding-left: 1.4rem;
-      margin-bottom: 0.7rem;
-    }
+    ul, ol { padding-left: 1.4rem; margin-bottom: 0.7rem; }
     li { margin-bottom: 0.35rem; }
     li:last-child { margin-bottom: 0; }
 
-    /* ── Tables ── */
-    table {
-      width: 100%;
-      border-collapse: collapse;
-      font-size: 0.88rem;
-      margin: 0.8rem 0;
-    }
+    table { width: 100%; border-collapse: collapse; font-size: 0.88rem; margin: 0.8rem 0; }
     th {
-      background: #eef2fa;
-      color: #2e4e8a;
-      font-weight: 700;
-      text-align: left;
-      padding: 0.5rem 0.9rem;
-      border: 1px solid #d0d8ee;
-    }
-    td {
-      padding: 0.45rem 0.9rem;
-      border: 1px solid #e0e6f5;
-      vertical-align: top;
+      background: #eef2fa; color: #2e4e8a; font-weight: 700;
+      text-align: left; padding: 0.5rem 0.9rem; border: 1px solid #d0d8ee;
     }
+    td { padding: 0.45rem 0.9rem; border: 1px solid #e0e6f5; vertical-align: top; }
     tr:nth-child(even) td { background: #f7f9fd; }
 
-    /* ── Code / kbd ── */
     code {
-      background: #eef2fa;
-      color: #1a2d5a;
+      background: #eef2fa; color: #1a2d5a;
       font-family: 'SF Mono', 'Fira Code', monospace;
-      font-size: 0.85em;
-      padding: 0.1em 0.35em;
-      border-radius: 4px;
+      font-size: 0.85em; padding: 0.1em 0.35em; border-radius: 4px;
     }
 
-    /* ── Callout boxes ── */
     .callout {
-      background: #eef6fb;
-      border-left: 4px solid #85b7d7;
-      border-radius: 0 8px 8px 0;
-      padding: 0.8rem 1rem;
-      margin: 0.9rem 0;
-      font-size: 0.9rem;
-    }
-    .callout.warn {
-      background: #fff8ec;
-      border-left-color: #f5a623;
-    }
-    .callout.danger {
-      background: #fff0f0;
-      border-left-color: #e05252;
+      background: #eef6fb; border-left: 4px solid #85b7d7;
+      border-radius: 0 8px 8px 0; padding: 0.8rem 1rem;
+      margin: 0.9rem 0; font-size: 0.9rem;
     }
+    .callout.warn { background: #fff8ec; border-left-color: #f5a623; }
+    .callout.danger { background: #fff0f0; border-left-color: #e05252; }
 
     strong { font-weight: 700; }
 
-    /* ── Responsive ── */
+    .back-btn {
+      display: inline-flex; align-items: center; gap: 0.4rem;
+      margin-bottom: 1.5rem; padding: 0.5rem 1rem;
+      background: #fff; border: 1px solid #d8e0f0; border-radius: 8px;
+      color: #2e4e8a; font-size: 0.9rem; font-weight: 600;
+      text-decoration: none; cursor: pointer;
+    }
+    .back-btn:hover { background: #eef2fa; }
+
     @media (max-width: 600px) {
       nav.toc ol { grid-template-columns: 1fr; }
       header h1 { font-size: 1.25rem; }
       section { padding: 1.2rem 1rem; }
     }
 
-    .back-btn {
-      display: inline-flex;
-      align-items: center;
-      gap: 0.4rem;
-      margin-bottom: 1.5rem;
-      padding: 0.5rem 1rem;
-      background: #fff;
-      border: 1px solid #d8e0f0;
-      border-radius: 8px;
-      color: #2e4e8a;
-      font-size: 0.9rem;
-      font-weight: 600;
-      text-decoration: none;
-      cursor: pointer;
-    }
-    .back-btn:hover { background: #eef2fa; }
-
     @media print {
       body { background: #fff; font-size: 12pt; }
       .page { max-width: none; padding: 0; }
@@ -233,13 +144,13 @@
 <body>
 <div class="page">
 
-  <a href="/" class="back-btn">← Zurück zum Logbuch</a>
+  <a href="/" class="back-btn">← Zurück zum Führungsbuch</a>
 
   <header>
     <div class="star">★</div>
     <div>
       <h1>Bedienungsanleitung</h1>
-      <p>Logbuch Sternwarte Welzheim</p>
+      <p>Führungsbuch Sternwarte Welzheim</p>
     </div>
   </header>
 
@@ -265,7 +176,7 @@
       <li><strong>Passwort</strong> – individuell gesetztes Passwort</li>
     </ul>
     <div class="callout warn">
-      Wurde das Passwort noch nicht geändert (Anzeige „Standard"), muss nach dem ersten Login sofort ein neues Passwort vergeben werden. Das Standard-Passwort lautet <code>welzheim</code>.
+      Wurde das Passwort noch nicht geändert, muss nach dem ersten Login sofort ein neues Passwort vergeben werden. Das Standard-Passwort lautet <code>welzheim</code>.
     </div>
   </section>
 
@@ -303,7 +214,6 @@
     <h2 class="section-title"><span class="num">3</span> Eintrag erfassen (Tab „Eingabe")</h2>
 
     <h3>Pflichtfelder</h3>
-
     <p><strong>Art der Führung</strong> – Auswahl aus dem Dropdown:</p>
     <table>
       <thead><tr><th>Anzeige</th><th>Bedeutung</th></tr></thead>
@@ -362,7 +272,7 @@
     <p>Die Werkzeugleiste oben in der Liste enthält in einer Zeile:</p>
     <ul>
       <li><strong>Monatsnavigation</strong> – Pfeiltasten ← → wechseln den Monat; Monatseingabe im Feld direkt möglich; <strong>Aktueller Monat</strong> springt zurück auf den laufenden Monat. Zukünftige Monate können nicht gewählt werden. Während einer aktiven Suche wird die Monatsnavigation ausgeblendet (der Platz bleibt frei, damit sich nichts verschiebt).</li>
-      <li><strong>Suchfeld</strong> – Freitextsuche über alle Einträge des Logbuchs (Bemerkungen, Objekte und BEOs). Die Ergebnisse erscheinen monatsübergreifend in absteigender Datumsreihenfolge. Das × im Suchfeld löscht die Eingabe und kehrt zur Monatsansicht zurück.</li>
+      <li><strong>Suchfeld</strong> – Freitextsuche über alle Einträge des Führungsbuchs (Bemerkungen, Objekte und BEOs). Die Ergebnisse erscheinen monatsübergreifend in absteigender Datumsreihenfolge. Das × im Suchfeld löscht die Eingabe und kehrt zur Monatsansicht zurück.</li>
       <li><strong>🖨 Drucken</strong> – siehe Abschnitt <a href="#s6">Drucken</a>.</li>
     </ul>
 
@@ -395,6 +305,9 @@
         </ul>
       </li>
     </ul>
+    <div class="callout">
+      Über den Button <strong>📊 Grafik</strong> kann die Statistik-Grafik in einem separaten Fenster aufgerufen werden.
+    </div>
   </section>
 
   <!-- ── 6. Drucken ── -->
@@ -428,7 +341,7 @@
       <li><strong>Objekt umbenennen</strong> – Stift-Symbol ✎ in der Zeile anklicken, Namen ändern und mit <strong>Speichern</strong> bestätigen oder mit <strong>Abbrechen</strong> verwerfen.</li>
       <li><strong>Objekt löschen</strong> – × in der Zeile; es erscheint ein Bestätigungsdialog.</li>
     </ul>
-    <div class="callout danger">Das Löschen ist <strong>unwiderruflich</strong> und entfernt das Objekt aus allen bestehenden Logbucheinträgen.</div>
+    <div class="callout danger">Das Löschen ist <strong>unwiderruflich</strong> und entfernt das Objekt aus allen bestehenden Führungsbucheinträgen.</div>
   </section>
 
 </div>