Session 2026-04-20: Medien-Konvertierung, Umami Analytics, Username/Privacy

- HEIC→JPEG, MOV/AVI→MP4 Konvertierung bei allen Upload-Endpoints (media_utils.py)
- ffmpeg im Docker-Image, Video-Thumbnails (extract_video_thumb, poster-Attribut)
- Google Analytics entfernt, Umami self-hosted eingebunden (index.html, datenschutz.js)
- Admin-Panel Analytics-Tab: Stat-Cards, Sparkline 7 Tage, Top-Seiten (Umami-API-Proxy)
- Admin-Panel Tab-Icons korrigiert (aus vorhandenem Phosphor-Sprite)
- users.real_name Spalte: Username öffentlich, echter Name privat und optional
- Registrierung: Label "Benutzername", Leerzeichen verboten, Profanity-Blockliste
- Datenschutzerklärung: GA-Abschnitt durch Umami-Text ersetzt

backend/routes/diary.py

@@ -8,6 +8,7 @@ from database import db
 from auth import get_current_user
 import ki as KI
 import httpx
+from media_utils import convert_media, extract_video_thumb
 
 router    = APIRouter()
 MEDIA_DIR = os.getenv("MEDIA_DIR", "/data/media")
@@ -486,14 +487,20 @@ async def upload_media(dog_id: int, entry_id: int,
                            ".mp4",".mov",".webm",".m4v",".pdf"}:
             raise HTTPException(415, "Nur Bilder, Videos und PDFs erlaubt.")
 
-    ext        = os.path.splitext(file.filename or "")[1] or ".jpg"
+    raw_data   = await file.read()
+    raw_data, ext = convert_media(raw_data, file.filename or "")
+    if not ext:
+        ext = ".jpg"
     filename   = f"diary_{entry_id}_{uuid.uuid4().hex[:8]}{ext}"
     path       = os.path.join(MEDIA_DIR, "diary", filename)
     media_type = _guess_media_type(ct, file.filename or "")
     os.makedirs(os.path.dirname(path), exist_ok=True)
 
     with open(path, "wb") as f:
-        f.write(await file.read())
+        f.write(raw_data)
+
+    if media_type == "video":
+        extract_video_thumb(path)
 
     media_url = f"/media/diary/{filename}"