feat(ftp): implement asynchronous FTP/SFTP upload queue with improved remote gallery

This commit introduces a fully asynchronous upload pipeline for FTP/SFTP
remote storage, decoupling image upload from the photo capture workflow so
the Photobooth UI is never blocked while files are transferred.

Core architecture
-----------------
- New SQLite-backed UploadQueueService (src/Service/UploadQueueService.php)
  manages a persistent job queue (pending → in_progress → completed/failed).
  Each job stores a random 32-hex-character remote filename so local and
  remote filenames are never the same, preventing enumeration.
- New EncryptionService (src/Service/EncryptionService.php) encrypts the FTP
  password at rest using libsodium secretbox; key is stored in var/run/.
- New Symfony Console command UploadWorkerCommand
  (src/Command/UploadWorkerCommand.php) runs as a long-lived background
  worker (or once with --once). Picks up jobs, calls RemoteStorageService,
  retries up to 5 times on failure, and reloads config on every run so admin
  panel changes are picked up without restarting.
- New api/ftpListFolders.php lets the admin panel browse remote directories
  before saving configuration.
- resources/config/photobooth-upload-worker.service: systemd unit for running
  the worker as www-data.

API / backend changes
---------------------
- api/applyEffects.php: instead of uploading directly, enqueues a job via
  UploadQueueService and triggers the worker process in the background.
- api/deletePhoto.php: resolves the remote random filename via
  UploadQueueService::getRemoteFilename() before deleting on FTP, so the
  correct remote file is removed.
- api/qrcode.php, api/print.php: QR URLs now use UploadQueueService to look
  up the remote filename when FTP + useForQr is enabled.
- api/admin.php: exposes upload queue status (pending/failed counts) for the
  debug panel.
- api/serverInfo.php: includes FTP queue stats in server-info response.
- RemoteStorageService::getWebpageUri() correctly appends baseFolder to the
  website URL.
- RemoteStorageService::createWebpage() removes legacy .htaccess files
  (caused 403 on hosts without AllowOverride Options) and instead uploads
  index.php redirect guards to images/ and thumbs/.
- ConfigurationService: decrypts FTP password on load via EncryptionService.
- FtpConfiguration: password field marked as sensitive.
- src/Console/Application.php: registers UploadWorkerCommand.

Admin UI
--------
- lib/configsetup.inc.php: removed deprecated folder/urlTemplate fields;
  added folder browser (ftpListFolders API), queue status display, and
  "Test Connection" improvements.
- assets/js/admin/buttons.js: folder-browser modal, queue status polling,
  FTP test-connection wiring.
- resources/lang/en.json: removed ftp:folder / ftp:urlTemplate keys; updated
  manual:ftp:website description.

Remote gallery (resources/template/index.php)
---------------------------------------------
- Single-image view: image is rendered immediately with a JS onload/onerror
  spinner; onerror auto-reloads every 3 s while upload is in progress.
  Removed the PHP-side file_exists() upload-wait loop.
- Gallery mode: fixed guard so gallery is only rendered when
  gallery_enabled=true (was falling through to else).
- Images sorted newest-first via usort + filemtime.
- ZIP download: fixed corrupt archive by using ZipArchive::CREATE |
  ZipArchive::OVERWRITE (tempnam creates an existing file).
- Share button: uses Web Share API with native file sharing where supported;
  falls back to wa.me deep-link. Icon changed from fa-brands fa-whatsapp to
  fa-solid fa-share-nodes.
- Lightbox navigation: prev/next arrow buttons with wrap-around and keyboard
  support (ArrowLeft / ArrowRight / Escape).

Code style
----------
- PHP CS Fixer: expanded single-line closures in Configuration/Section/*
  to multi-line form for consistency with project style rules.

Author: flacoonb

admin/debug/index.php

@@ -51,6 +51,7 @@
 echo getNavItemDebug('remotebuzzerlog');
 echo getNavItemDebug('synctodrivelog');
 echo getNavItemDebug('remotestoragelog');
+echo getNavItemDebug('uploadworkerlog');
 echo getNavItemDebug('rembglog');
 echo getNavItemDebug('devlog');
 if (Environment::isLinux()) {

api/admin.php

@@ -12,6 +12,7 @@
 use Photobooth\Service\DatabaseManagerService;
 use Photobooth\Service\ImageMetadataCacheService;
 use Photobooth\Service\LoggerService;
+use Photobooth\Service\EncryptionService;
 use Photobooth\Service\MailService;
 use Photobooth\Service\PrintManagerService;
 use Photobooth\Service\ProcessService;
@@ -182,6 +183,14 @@
     $newConfig['login']['pin']        = $keepExistingSecret('pin', $newConfig['login']['pin'] ?? null, $config);
     $newConfig['login']['rental_pin'] = $keepExistingSecret('rental_pin', $newConfig['login']['rental_pin'] ?? null, $config);
 
+    // Keep existing FTP/Mail passwords when the form sends an empty value
+    if (($newConfig['ftp']['password'] ?? '') === '' && !empty($config['ftp']['password'])) {
+        $newConfig['ftp']['password'] = $config['ftp']['password'];
+    }
+    if (($newConfig['mail']['password'] ?? '') === '' && !empty($config['mail']['password'])) {
+        $newConfig['mail']['password'] = $config['mail']['password'];
+    }
+
     // Hash password early when a new value is provided
     if (!empty($newConfig['login']['password']) && $newConfig['login']['password'] !== ($config['login']['password'] ?? null)) {
         $newConfig['login']['password'] = password_hash($newConfig['login']['password'], PASSWORD_DEFAULT);
@@ -334,6 +343,15 @@
         }
     }
 
+    // Encrypt FTP and Mail passwords before saving to config file
+    $encryptionService = EncryptionService::getInstance();
+    if (!empty($newConfig['ftp']['password']) && !$encryptionService->isEncrypted($newConfig['ftp']['password'])) {
+        $newConfig['ftp']['password'] = $encryptionService->encrypt($newConfig['ftp']['password']);
+    }
+    if (!empty($newConfig['mail']['password']) && !$encryptionService->isEncrypted($newConfig['mail']['password'])) {
+        $newConfig['mail']['password'] = $encryptionService->encrypt($newConfig['mail']['password']);
+    }
+
     if ($newConfig['logo']['enabled']) {
         $logoPath = $newConfig['logo']['path'];
 

api/applyEffects.php

@@ -13,6 +13,7 @@
 use Photobooth\Service\DatabaseManagerService;
 use Photobooth\Service\LoggerService;
 use Photobooth\Service\RemoteStorageService;
+use Photobooth\Service\UploadQueueService;
 use Photobooth\Utility\ImageUtility;
 use Photobooth\Utility\PathUtility;
 
@@ -336,13 +337,14 @@
             }
         }
 
-        // Store images on remote storage
+        // Queue images for async remote storage upload
         if ($config['ftp']['enabled']) {
-            $remoteStorage->write($remoteStorage->getStorageFolder() . '/images/' . $vars['singleImageFile'], (string) file_get_contents($vars['resultFile']));
-            $remoteStorage->write($remoteStorage->getStorageFolder() . '/thumbs/' . $vars['singleImageFile'], (string) file_get_contents($vars['thumbFile']));
-            if ($config['ftp']['create_webpage']) {
-                $remoteStorage->createWebpage();
-            }
+            $uploadQueue = UploadQueueService::getInstance();
+            $uploadQueue->enqueue(
+                $vars['singleImageFile'],
+                $vars['singleImageFile'],
+                (bool) $config['ftp']['create_webpage']
+            );
         }
 
         // Change permissions

api/deletePhoto.php

@@ -10,14 +10,13 @@
 use Photobooth\Service\ImageMetadataCacheService;
 use Photobooth\Service\LoggerService;
 use Photobooth\Service\RemoteStorageService;
+use Photobooth\Service\UploadQueueService;
 
 header('Content-Type: application/json');
 
 $logger = LoggerService::getInstance()->getLogger('main');
 $logger->debug(basename($_SERVER['PHP_SELF']));
 
-$remoteStorage = RemoteStorageService::getInstance();
-
 try {
     if (empty($_POST['file'])) {
         throw new \Exception('No file provided');
@@ -81,8 +80,11 @@
     }
 
     if ($config['ftp']['enabled'] && $config['ftp']['delete']) {
-        $remoteStorage->delete($remoteStorage->getStorageFolder() . '/images/' . $fileName);
-        $remoteStorage->delete($remoteStorage->getStorageFolder() . '/thumbs/' . $fileName);
+        $remoteStorage = RemoteStorageService::getInstance();
+        $uploadQueue = UploadQueueService::getInstance();
+        $remoteFilename = $uploadQueue->getRemoteFilename($fileName) ?? $fileName;
+        $remoteStorage->delete('images/' . $remoteFilename);
+        $remoteStorage->delete('thumbs/' . $remoteFilename);
     }
 }
 

api/ftpListFolders.php

@@ -0,0 +1,44 @@
+<?php
+
+require_once '../lib/boot.php';
+
+use Photobooth\Service\ConfigurationService;
+use Photobooth\Service\RemoteStorageService;
+
+header('Content-Type: application/json');
+checkCsrfOrFail($_POST);
+
+$ftpData = $_POST['ftp'] ?? [];
+
+$type = (string) ($ftpData['type'] ?? 'ftp');
+$host = (string) ($ftpData['baseURL'] ?? '');
+$port = (int) ($ftpData['port'] ?? 21);
+$username = (string) ($ftpData['username'] ?? '');
+$password = (string) ($ftpData['password'] ?? '');
+$path = (string) ($_POST['path'] ?? '/');
+
+if ($host === '' || $username === '') {
+    echo json_encode(['error' => 'Missing connection parameters']);
+    exit();
+}
+
+// If password is empty, use the saved (decrypted) config password
+if ($password === '') {
+    $savedConfig = ConfigurationService::getInstance()->getConfiguration();
+    $password = (string) ($savedConfig['ftp']['password'] ?? '');
+}
+
+try {
+    $folders = RemoteStorageService::listFolders([
+        'type' => $type,
+        'baseURL' => $host,
+        'port' => $port,
+        'username' => $username,
+        'password' => $password,
+    ], $path);
+
+    echo json_encode(['folders' => $folders]);
+} catch (\Throwable $e) {
+    echo json_encode(['error' => $e->getMessage()]);
+}
+exit();

api/print.php

@@ -10,6 +10,7 @@
 use Photobooth\Service\LoggerService;
 use Photobooth\Service\PrintManagerService;
 use Photobooth\Service\RemoteStorageService;
+use Photobooth\Service\UploadQueueService;
 use Photobooth\Utility\PathUtility;
 
 header('Content-Type: application/json');
@@ -156,10 +157,11 @@
                 $remoteStorageService = RemoteStorageService::getInstance();
                 $url = $remoteStorageService->getWebpageUri();
                 if ($config['qr']['append_filename']) {
-                    $url .= '/images/';
+                    $uploadQueue = UploadQueueService::getInstance();
+                    $remoteFilename = $uploadQueue->getRemoteFilename($vars['fileName']) ?? $vars['fileName'];
+                    $url .= '/?img=' . rawurlencode($remoteFilename);
                 }
-            }
-            if ($config['qr']['append_filename']) {
+            } elseif ($config['qr']['append_filename']) {
                 $url .= $vars['fileName'];
             }
             $imageHandler->qrUrl = PathUtility::getPublicPath($url, true);

api/qrcode.php

@@ -3,6 +3,7 @@
 /** @var array $config */
 
 use Photobooth\Service\RemoteStorageService;
+use Photobooth\Service\UploadQueueService;
 use Photobooth\Utility\PathUtility;
 use Photobooth\Utility\QrCodeUtility;
 
@@ -20,12 +21,15 @@
     if ($config['ftp']['enabled'] && $config['ftp']['useForQr']) {
         $remoteStorageService = RemoteStorageService::getInstance();
         $url = $remoteStorageService->getWebpageUri();
-        if ($config['qr']['append_filename']) {
-            $url .= '/images/';
-        }
     }
     if ($config['qr']['append_filename']) {
-        $url .= $filename;
+        if ($config['ftp']['enabled'] && $config['ftp']['useForQr']) {
+            $uploadQueue = UploadQueueService::getInstance();
+            $remoteFilename = $uploadQueue->getRemoteFilename($filename) ?? $filename;
+            $url .= '/?img=' . rawurlencode($remoteFilename);
+        } else {
+            $url .= $filename;
+        }
     }
     $url = PathUtility::getPublicPath($url, true);
     try {

api/serverInfo.php

@@ -20,6 +20,8 @@ function handleDebugPanel(string $content, array $config): string|false
             return readFileContents(PathUtility::getAbsolutePath('var/log/synctodrive.log'));
         case 'nav-remotestoragelog':
             return readFileContents(PathUtility::getAbsolutePath('var/log/remotestorage.log'));
+        case 'nav-uploadworkerlog':
+            return readFileContents(PathUtility::getAbsolutePath('var/log/uploadworker.log'));
         case 'nav-rembglog':
             return readFileContents(PathUtility::getAbsolutePath('var/log/rembg.log'));
         case 'nav-myconfig':