Veg Recipes
A meat-free recipe service: a web version, a mobile app, a Telegram bot, a FastAPI backend, a PRO subscription, search, a meal plan, and recipe recommendations.
01 / product scope
This isn't one screen — it's a service made of several parts
02 / stack & tags
The stack is split by part: backend, web, mobile, and bot
Veg Recipes is built around the recipe: search, nutrients, a meal plan, favorites, PRO features, adapting to the user's request, importing from video, and access via Telegram.
The screens aren't the only thing that matters here. There's a backend, web, mobile, a bot, payments, search, media storage, and scheduled jobs. The code shows where one part depends on another.
03 / release log
The releases show exactly which problems got fixed
v1.3
Auth & Profile Bug Fixes
This release fixes the refresh-token contract between backend, web, and mobile, plus profile saving.
- Web/mobile now send `{ token }` in the refresh request body.
- `display_name` and `bio` are now saved via the JSON body, not query params.
- Email verification now gets a 7-day lifetime via a new migration.
v1.2
Security Hardening & Developer Experience
An infrastructure release: secrets, rate limiting, Docker, healthchecks, and developer documentation.
- PostgreSQL, MinIO, Stripe, and Anthropic moved into env variables.
- Redis rate limiting for search in the Telegram bot: 5 requests / 60 seconds.
- Added `.dockerignore`, a backend/bot healthcheck, and `DEVELOPMENT.md`.
v1.1
Security & Bug Fixes — 31 Issues Resolved
A post-review release: 9 critical, 15 important, and 7 minor fixes across backend, mobile, and scripts.
- Closed SSRF, vote stuffing, refresh-token misuse, and open endpoints for recipe questions.
- Optimized the recommender, Celery tasks, the Stripe webhook, and email TLS.
- Added a ComfyUI workflow and improved photo-generation settings.
04 / file map
Key Files
05 / next projects