Add demo mode with hourly reset, example trips & demo banner

DEMO_MODE=true enables: auto-seeded admin + demo user, 3 example trips (Tokyo, Barcelona, Wien), hourly reset of demo user data, one-click demo login, visible banner with feature info. Zero behavior change when DEMO_MODE is not set.
2026-03-19 13:25:37 +01:00
parent f8dcce802e
commit e8acbbd129
13 changed files with 558 additions and 5 deletions
--- a/client/src/App.jsx
+++ b/client/src/App.jsx
@@ -12,6 +12,7 @@ import AdminPage from './pages/AdminPage'
 import SettingsPage from './pages/SettingsPage'
 import { ToastContainer } from './components/shared/Toast'
 import { TranslationProvider } from './i18n'
+import DemoBanner from './components/Layout/DemoBanner'

 function ProtectedRoute({ children, adminRequired = false }) {
  const { isAuthenticated, user, isLoading } = useAuthStore()
@@ -53,13 +54,19 @@ function RootRedirect() {
 }

 export default function App() {
-  const { loadUser, token, isAuthenticated } = useAuthStore()
+  const { loadUser, token, isAuthenticated, demoMode, setDemoMode } = useAuthStore()
  const { loadSettings } = useSettingsStore()

  useEffect(() => {
    if (token) {
      loadUser()
    }
+    // Check if demo mode is active
+    import('./api/client').then(({ authApi }) => {
+      authApi.getAppConfig?.().then(config => {
+        if (config?.demo_mode) setDemoMode(true)
+      }).catch(() => {})
+    })
  }, [])

  const { settings } = useSettingsStore()
@@ -82,6 +89,8 @@ export default function App() {
  return (
    <TranslationProvider>
      <ToastContainer />
+      {demoMode && isAuthenticated && <DemoBanner />}
+      <div style={demoMode && isAuthenticated ? { paddingTop: 36 } : undefined}>
      <Routes>
        <Route path="/" element={<RootRedirect />} />
        <Route path="/login" element={<LoginPage />} />
@@ -128,6 +137,7 @@ export default function App() {
        />
        <Route path="*" element={<Navigate to="/" replace />} />
      </Routes>
+      </div>
    </TranslationProvider>
  )
 }
--- a/client/src/api/client.js
+++ b/client/src/api/client.js
@@ -53,6 +53,7 @@ export const authApi = {
  updateAppSettings: (data) => apiClient.put('/auth/app-settings', data).then(r => r.data),
  validateKeys: () => apiClient.get('/auth/validate-keys').then(r => r.data),
  travelStats: () => apiClient.get('/auth/travel-stats').then(r => r.data),
+  demoLogin: () => apiClient.post('/auth/demo-login').then(r => r.data),
 }

 export const tripsApi = {
--- a/client/src/components/Layout/DemoBanner.jsx
+++ b/client/src/components/Layout/DemoBanner.jsx
@@ -0,0 +1,130 @@
+import React, { useState, useEffect } from 'react'
+import { Info, X, Github, Shield, Key, Users, Database, ChevronDown, ChevronUp } from 'lucide-react'
+
+export default function DemoBanner() {
+  const [expanded, setExpanded] = useState(false)
+  const [minutesLeft, setMinutesLeft] = useState(null)
+
+  useEffect(() => {
+    const update = () => {
+      const now = new Date()
+      setMinutesLeft(59 - now.getMinutes())
+    }
+    update()
+    const interval = setInterval(update, 30000)
+    return () => clearInterval(interval)
+  }, [])
+
+  const adminFeatures = [
+    { icon: Key, text: 'API-Schluessel verwalten (Google Maps, Wetter)' },
+    { icon: Users, text: 'Benutzer & Rechte verwalten' },
+    { icon: Database, text: 'Automatische Backups & Wiederherstellung' },
+    { icon: Shield, text: 'Registrierung & Sicherheitseinstellungen' },
+  ]
+
+  return (
+    <div style={{ position: 'fixed', top: 0, left: 0, right: 0, zIndex: 300 }}>
+      {/* Main banner bar */}
+      <div style={{
+        background: 'linear-gradient(135deg, #f59e0b, #d97706)',
+        color: '#451a03',
+        padding: '8px 16px',
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'center',
+        gap: 8,
+        fontSize: 13,
+        fontWeight: 600,
+        fontFamily: "-apple-system, BlinkMacSystemFont, 'SF Pro Text', system-ui, sans-serif",
+        minHeight: 36,
+        boxShadow: '0 2px 8px rgba(217, 119, 6, 0.3)',
+      }}>
+        <Info size={15} style={{ flexShrink: 0 }} />
+        <span>
+          Demo-Modus
+          <span style={{ fontWeight: 400, margin: '0 6px' }}>&middot;</span>
+          Aenderungen werden stuendlich zurueckgesetzt
+          {minutesLeft !== null && (
+            <span style={{ fontWeight: 400, opacity: 0.8, marginLeft: 4 }}>
+              (naechster Reset in ~{minutesLeft} Min.)
+            </span>
+          )}
+        </span>
+        <button
+          onClick={() => setExpanded(!expanded)}
+          style={{
+            background: 'rgba(69, 26, 3, 0.15)',
+            border: 'none',
+            borderRadius: 6,
+            padding: '3px 8px',
+            cursor: 'pointer',
+            display: 'flex',
+            alignItems: 'center',
+            gap: 4,
+            color: '#451a03',
+            fontSize: 12,
+            fontWeight: 600,
+            fontFamily: 'inherit',
+            marginLeft: 4,
+          }}
+        >
+          {expanded ? <ChevronUp size={13} /> : <ChevronDown size={13} />}
+          {expanded ? 'Weniger' : 'Mehr Info'}
+        </button>
+      </div>
+
+      {/* Expanded info panel */}
+      {expanded && (
+        <div style={{
+          background: '#fffbeb',
+          borderBottom: '1px solid #fbbf24',
+          padding: '16px 24px',
+          fontFamily: "-apple-system, BlinkMacSystemFont, 'SF Pro Text', system-ui, sans-serif",
+          boxShadow: '0 4px 12px rgba(0,0,0,0.08)',
+        }}>
+          <div style={{ maxWidth: 640, margin: '0 auto' }}>
+            <p style={{ fontSize: 13, color: '#92400e', margin: '0 0 12px', lineHeight: 1.6 }}>
+              Du nutzt die NOMAD Demo. Du kannst Reisen ansehen, bearbeiten und eigene erstellen —
+              alles wird <strong>jede Stunde automatisch zurueckgesetzt</strong>.
+            </p>
+
+            <p style={{ fontSize: 12, fontWeight: 700, color: '#78350f', margin: '0 0 8px', textTransform: 'uppercase', letterSpacing: '0.05em' }}>
+              Diese Funktionen sind in der Vollversion verfuegbar:
+            </p>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(250px, 1fr))', gap: 6 }}>
+              {adminFeatures.map(({ icon: Icon, text }) => (
+                <div key={text} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 12.5, color: '#92400e' }}>
+                  <Icon size={14} style={{ flexShrink: 0, opacity: 0.7 }} />
+                  <span>{text}</span>
+                </div>
+              ))}
+            </div>
+
+            <div style={{
+              marginTop: 14,
+              paddingTop: 12,
+              borderTop: '1px solid #fde68a',
+              display: 'flex',
+              alignItems: 'center',
+              gap: 6,
+              fontSize: 12,
+              color: '#92400e',
+            }}>
+              <Github size={14} />
+              <span>NOMAD ist Open Source — </span>
+              <a
+                href="https://github.com/mauriceboe/NOMAD"
+                target="_blank"
+                rel="noopener noreferrer"
+                style={{ color: '#78350f', fontWeight: 700, textDecoration: 'underline' }}
+              >
+                selbst hosten &rarr;
+              </a>
+            </div>
+          </div>
+        </div>
+      )}
+    </div>
+  )
+}
--- a/client/src/pages/LoginPage.jsx
+++ b/client/src/pages/LoginPage.jsx
@@ -17,7 +17,7 @@ export default function LoginPage() {
  const [error, setError] = useState('')
  const [appConfig, setAppConfig] = useState(null)

-  const { login, register } = useAuthStore()
+  const { login, register, demoLogin } = useAuthStore()
  const { setLanguageLocal } = useSettingsStore()
  const navigate = useNavigate()

@@ -30,6 +30,19 @@ export default function LoginPage() {
    })
  }, [])

+  const handleDemoLogin = async () => {
+    setError('')
+    setIsLoading(true)
+    try {
+      await demoLogin()
+      navigate('/dashboard')
+    } catch (err) {
+      setError(err.message || 'Demo-Login fehlgeschlagen')
+    } finally {
+      setIsLoading(false)
+    }
+  }
+
  const handleSubmit = async (e) => {
    e.preventDefault()
    setError('')
@@ -315,7 +328,7 @@ export default function LoginPage() {
            </form>

            {/* Toggle login/register */}
-            {showRegisterOption && appConfig?.has_users && (
+            {showRegisterOption && appConfig?.has_users && !appConfig?.demo_mode && (
              <p style={{ textAlign: 'center', marginTop: 16, fontSize: 13, color: '#9ca3af' }}>
                {mode === 'login' ? t('login.noAccount') + ' ' : t('login.hasAccount') + ' '}
                <button onClick={() => { setMode(m => m === 'login' ? 'register' : 'login'); setError('') }}
@@ -325,6 +338,26 @@ export default function LoginPage() {
              </p>
            )}
          </div>
+
+          {/* Demo login button */}
+          {appConfig?.demo_mode && (
+            <button onClick={handleDemoLogin} disabled={isLoading}
+              style={{
+                marginTop: 16, width: '100%', padding: '14px',
+                background: 'linear-gradient(135deg, #f59e0b, #d97706)',
+                color: '#451a03', border: 'none', borderRadius: 14,
+                fontSize: 15, fontWeight: 700, cursor: isLoading ? 'default' : 'pointer',
+                fontFamily: 'inherit', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: 10,
+                opacity: isLoading ? 0.7 : 1, transition: 'all 0.2s',
+                boxShadow: '0 2px 12px rgba(245, 158, 11, 0.3)',
+              }}
+              onMouseEnter={e => { if (!isLoading) e.currentTarget.style.transform = 'translateY(-1px)'; e.currentTarget.style.boxShadow = '0 4px 16px rgba(245, 158, 11, 0.4)' }}
+              onMouseLeave={e => { e.currentTarget.style.transform = 'translateY(0)'; e.currentTarget.style.boxShadow = '0 2px 12px rgba(245, 158, 11, 0.3)' }}
+            >
+              <Plane size={18} />
+              Demo ausprobieren — ohne Registrierung
+            </button>
+          )}
        </div>
      </div>

--- a/client/src/store/authStore.js
+++ b/client/src/store/authStore.js
@@ -8,6 +8,7 @@ export const useAuthStore = create((set, get) => ({
  isAuthenticated: !!localStorage.getItem('auth_token'),
  isLoading: false,
  error: null,
+  demoMode: false,

  login: async (email, password) => {
    set({ isLoading: true, error: null })
@@ -129,4 +130,28 @@ export const useAuthStore = create((set, get) => ({
    await authApi.deleteAvatar()
    set(state => ({ user: { ...state.user, avatar_url: null } }))
  },
+
+  setDemoMode: (val) => set({ demoMode: val }),
+
+  demoLogin: async () => {
+    set({ isLoading: true, error: null })
+    try {
+      const data = await authApi.demoLogin()
+      localStorage.setItem('auth_token', data.token)
+      set({
+        user: data.user,
+        token: data.token,
+        isAuthenticated: true,
+        isLoading: false,
+        demoMode: true,
+        error: null,
+      })
+      connect(data.token)
+      return data
+    } catch (err) {
+      const error = err.response?.data?.error || 'Demo-Login fehlgeschlagen'
+      set({ isLoading: false, error })
+      throw new Error(error)
+    }
+  },
 }))
--- a/demo/.env.example
+++ b/demo/.env.example
@@ -0,0 +1,5 @@
+# Demo admin credentials (use strong password in production!)
+DEMO_ADMIN_PASS=admin12345
+
+# JWT secret (change this!)
+JWT_SECRET=demo-secret-change-me-in-production
--- a/demo/docker-compose.yml
+++ b/demo/docker-compose.yml
@@ -0,0 +1,24 @@
+services:
+  app:
+    image: mauriceboe/nomad:latest
+    container_name: nomad-demo
+    ports:
+      - "3000:3000"
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - DEMO_MODE=true
+      - DEMO_ADMIN_USER=admin
+      - DEMO_ADMIN_EMAIL=admin@nomad.app
+      - DEMO_ADMIN_PASS=${DEMO_ADMIN_PASS:-admin12345}
+      - JWT_SECRET=${JWT_SECRET:-demo-secret-change-me-in-production}
+    volumes:
+      - ./data:/app/data
+      - ./uploads:/app/uploads
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:3000/api/auth/app-config"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
--- a/server/src/db/database.js
+++ b/server/src/db/database.js
@@ -309,6 +309,16 @@ function initDb() {
 // Initialize on module load
 initDb();

+// Demo mode: seed admin + demo user + example trips
+if (process.env.DEMO_MODE === 'true') {
+  try {
+    const { seedDemoData } = require('../demo/demo-seed');
+    seedDemoData(_db);
+  } catch (err) {
+    console.error('[Demo] Seed error:', err.message);
+  }
+}
+
 // Proxy so all route modules always use the current _db instance
 // without needing a server restart after reinitialize()
 const db = new Proxy({}, {
--- a/server/src/demo/demo-reset.js
+++ b/server/src/demo/demo-reset.js
@@ -0,0 +1,34 @@
+function resetDemoUser(db) {
+  const DEMO_EMAIL = 'demo@nomad.app';
+
+  const demo = db.prepare('SELECT id FROM users WHERE email = ?').get(DEMO_EMAIL);
+  if (!demo) {
+    console.log('[Demo Reset] Demo user not found, skipping');
+    return;
+  }
+
+  const demoId = Number(demo.id);
+
+  // Delete all trips OWNED by demo user (shared trips from admin stay)
+  const demoTrips = db.prepare('SELECT id FROM trips WHERE user_id = ?').all(demoId);
+  for (const trip of demoTrips) {
+    // CASCADE handles days, places, assignments, packing, budget, reservations, photos, files, day_notes
+    db.prepare('DELETE FROM trips WHERE id = ?').run(trip.id);
+  }
+
+  // Delete demo user's custom categories and tags
+  db.prepare('DELETE FROM categories WHERE user_id = ?').run(demoId);
+  db.prepare('DELETE FROM tags WHERE user_id = ?').run(demoId);
+
+  // Reset demo user's settings
+  db.prepare('DELETE FROM settings WHERE user_id = ?').run(demoId);
+
+  const deletedCount = demoTrips.length;
+  if (deletedCount > 0) {
+    console.log(`[Demo Reset] Cleaned ${deletedCount} trips from demo user`);
+  } else {
+    console.log('[Demo Reset] No demo user trips to clean');
+  }
+}
+
+module.exports = { resetDemoUser };
--- a/server/src/demo/demo-seed.js
+++ b/server/src/demo/demo-seed.js
@@ -0,0 +1,241 @@
+const bcrypt = require('bcryptjs');
+
+function seedDemoData(db) {
+  const ADMIN_USER = process.env.DEMO_ADMIN_USER || 'admin';
+  const ADMIN_EMAIL = process.env.DEMO_ADMIN_EMAIL || 'admin@nomad.app';
+  const ADMIN_PASS = process.env.DEMO_ADMIN_PASS || 'admin12345';
+  const DEMO_EMAIL = 'demo@nomad.app';
+  const DEMO_PASS = 'demo12345';
+
+  // Create admin user if not exists
+  let admin = db.prepare('SELECT id FROM users WHERE email = ?').get(ADMIN_EMAIL);
+  if (!admin) {
+    const hash = bcrypt.hashSync(ADMIN_PASS, 10);
+    const r = db.prepare('INSERT INTO users (username, email, password_hash, role) VALUES (?, ?, ?, ?)').run(ADMIN_USER, ADMIN_EMAIL, hash, 'admin');
+    admin = { id: Number(r.lastInsertRowid) };
+    console.log('[Demo] Admin user created');
+  } else {
+    admin.id = Number(admin.id);
+  }
+
+  // Create demo user if not exists
+  let demo = db.prepare('SELECT id FROM users WHERE email = ?').get(DEMO_EMAIL);
+  if (!demo) {
+    const hash = bcrypt.hashSync(DEMO_PASS, 10);
+    const r = db.prepare('INSERT INTO users (username, email, password_hash, role) VALUES (?, ?, ?, ?)').run('demo', DEMO_EMAIL, hash, 'user');
+    demo = { id: Number(r.lastInsertRowid) };
+    console.log('[Demo] Demo user created');
+  } else {
+    demo.id = Number(demo.id);
+  }
+
+  // Disable registration in demo mode
+  db.prepare("INSERT OR REPLACE INTO app_settings (key, value) VALUES ('allow_registration', 'false')").run();
+
+  // Check if admin already has example trips
+  const adminTrips = db.prepare('SELECT COUNT(*) as count FROM trips WHERE user_id = ?').get(admin.id);
+  if (adminTrips.count > 0) {
+    console.log('[Demo] Example trips already exist, ensuring demo membership');
+    ensureDemoMembership(db, admin.id, demo.id);
+    return { adminId: admin.id, demoId: demo.id };
+  }
+
+  console.log('[Demo] Seeding example trips...');
+  seedExampleTrips(db, admin.id, demo.id);
+  return { adminId: admin.id, demoId: demo.id };
+}
+
+function ensureDemoMembership(db, adminId, demoId) {
+  const trips = db.prepare('SELECT id FROM trips WHERE user_id = ?').all(adminId);
+  const insertMember = db.prepare('INSERT OR IGNORE INTO trip_members (trip_id, user_id, invited_by) VALUES (?, ?, ?)');
+  for (const trip of trips) {
+    insertMember.run(trip.id, demoId, adminId);
+  }
+}
+
+function seedExampleTrips(db, adminId, demoId) {
+  const insertTrip = db.prepare('INSERT INTO trips (user_id, title, description, start_date, end_date, currency) VALUES (?, ?, ?, ?, ?, ?)');
+  const insertDay = db.prepare('INSERT INTO days (trip_id, day_number, date) VALUES (?, ?, ?)');
+  const insertPlace = db.prepare('INSERT INTO places (trip_id, name, lat, lng, address, category_id, place_time, duration_minutes, notes, image_url) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)');
+  const insertAssignment = db.prepare('INSERT INTO day_assignments (day_id, place_id, order_index) VALUES (?, ?, ?)');
+  const insertPacking = db.prepare('INSERT INTO packing_items (trip_id, name, checked, category, sort_order) VALUES (?, ?, ?, ?, ?)');
+  const insertBudget = db.prepare('INSERT INTO budget_items (trip_id, category, name, total_price, persons, note) VALUES (?, ?, ?, ?, ?, ?)');
+  const insertReservation = db.prepare('INSERT INTO reservations (trip_id, day_id, title, reservation_time, confirmation_number, status, type, location) VALUES (?, ?, ?, ?, ?, ?, ?, ?)');
+  const insertMember = db.prepare('INSERT OR IGNORE INTO trip_members (trip_id, user_id, invited_by) VALUES (?, ?, ?)');
+
+  // ─── Trip 1: Tokyo & Kyoto ───
+  const trip1 = insertTrip.run(adminId, 'Tokyo & Kyoto', 'Zwei Wochen Japan — von den neonbeleuchteten Strassen Tokyos bis zu den stillen Tempeln Kyotos.', '2026-04-15', '2026-04-21', 'EUR');
+  const t1 = Number(trip1.lastInsertRowid);
+
+  const t1days = [];
+  for (let i = 0; i < 7; i++) {
+    const d = insertDay.run(t1, i + 1, `2026-04-${15 + i}`);
+    t1days.push(Number(d.lastInsertRowid));
+  }
+
+  // Places — cat IDs: 1=Hotel, 2=Restaurant, 3=Sehenswuerdigkeit, 5=Transport, 7=Bar/Cafe, 9=Natur
+  const t1places = [
+    [t1, 'Hotel Shinjuku Granbell', 35.6938, 139.7035, 'Shinjuku, Tokyo, Japan', 1, '15:00', 60, 'Check-in ab 15 Uhr. Nahe Shinjuku Station.', null],
+    [t1, 'Senso-ji Tempel', 35.7148, 139.7967, 'Asakusa, Tokyo, Japan', 3, '09:00', 90, 'Aeltester Tempel Tokyos. Morgens weniger Touristen.', null],
+    [t1, 'Shibuya Crossing', 35.6595, 139.7004, 'Shibuya, Tokyo, Japan', 3, '18:00', 45, 'Die beruehmteste Kreuzung der Welt. Abends am beeindruckendsten.', null],
+    [t1, 'Tsukiji Outer Market', 35.6654, 139.7707, 'Tsukiji, Tokyo, Japan', 2, '08:00', 120, 'Frisches Sushi zum Fruehstueck! Strassenstaende erkunden.', null],
+    [t1, 'Meiji-Schrein', 35.6764, 139.6993, 'Shibuya, Tokyo, Japan', 3, '10:00', 75, 'Ruhige Oase mitten in der Stadt. Durch den Wald zum Schrein.', null],
+    [t1, 'Akihabara', 35.7023, 139.7745, 'Akihabara, Tokyo, Japan', 3, '14:00', 180, 'Electric Town — Anime, Manga, Elektronik. Retro-Gaming Shops!', null],
+    [t1, 'Shinkansen nach Kyoto', 35.6812, 139.7671, 'Tokyo Station, Japan', 5, '08:30', 140, 'Nozomi Shinkansen, ca. 2h15. Fensterplatz fuer Fuji-Blick!', null],
+    [t1, 'Hotel Granvia Kyoto', 34.9856, 135.7580, 'Kyoto Station, Kyoto, Japan', 1, '14:00', 60, 'Direkt am Bahnhof. Perfekte Lage fuer Tagesausfluege.', null],
+    [t1, 'Fushimi Inari Taisha', 34.9671, 135.7727, 'Fushimi, Kyoto, Japan', 3, '07:00', 150, '10.000 rote Torii-Tore. Frueh morgens starten fuer leere Wege!', null],
+    [t1, 'Kinkaku-ji (Goldener Pavillon)', 35.0394, 135.7292, 'Kita, Kyoto, Japan', 3, '10:00', 60, 'Der goldene Tempel am See. Ikonisches Fotomotiv.', null],
+    [t1, 'Arashiyama Bambushain', 35.0095, 135.6673, 'Arashiyama, Kyoto, Japan', 9, '09:00', 90, 'Magischer Bambuswald. Am besten morgens vor den Massen.', null],
+    [t1, 'Nishiki Market', 35.0050, 135.7647, 'Nakagyo, Kyoto, Japan', 2, '12:00', 90, 'Kyotos Kuechengasse. Matcha-Eis und frische Mochi probieren!', null],
+    [t1, 'Gion Viertel', 35.0037, 135.7755, 'Gion, Kyoto, Japan', 3, '17:00', 120, 'Historisches Geisha-Viertel. Abends beste Chance auf Maiko-Sichtung.', null],
+  ];
+
+  const t1pIds = t1places.map(p => Number(insertPlace.run(...p).lastInsertRowid));
+
+  // Assign places to days
+  // Day 1: Hotel Check-in, Shibuya
+  insertAssignment.run(t1days[0], t1pIds[0], 0);
+  insertAssignment.run(t1days[0], t1pIds[2], 1);
+  // Day 2: Tsukiji, Senso-ji, Akihabara
+  insertAssignment.run(t1days[1], t1pIds[3], 0);
+  insertAssignment.run(t1days[1], t1pIds[1], 1);
+  insertAssignment.run(t1days[1], t1pIds[5], 2);
+  // Day 3: Meiji-Schrein, free afternoon
+  insertAssignment.run(t1days[2], t1pIds[4], 0);
+  // Day 4: Shinkansen to Kyoto, Hotel
+  insertAssignment.run(t1days[3], t1pIds[6], 0);
+  insertAssignment.run(t1days[3], t1pIds[7], 1);
+  // Day 5: Fushimi Inari, Nishiki Market
+  insertAssignment.run(t1days[4], t1pIds[8], 0);
+  insertAssignment.run(t1days[4], t1pIds[11], 1);
+  // Day 6: Kinkaku-ji, Arashiyama
+  insertAssignment.run(t1days[5], t1pIds[9], 0);
+  insertAssignment.run(t1days[5], t1pIds[10], 1);
+  // Day 7: Gion
+  insertAssignment.run(t1days[6], t1pIds[12], 0);
+
+  // Packing
+  const t1packing = [
+    ['Reisepass', 1, 'Dokumente', 0], ['Japan Rail Pass', 1, 'Dokumente', 1],
+    ['Adapter Typ A/B', 0, 'Elektronik', 2], ['Kamera + Ladegeraet', 0, 'Elektronik', 3],
+    ['Bequeme Laufschuhe', 0, 'Kleidung', 4], ['Regenjacke', 0, 'Kleidung', 5],
+    ['Sonnencreme', 0, 'Hygiene', 6], ['Reiseapotheke', 0, 'Hygiene', 7],
+    ['Pocket WiFi Bestaetigung', 1, 'Elektronik', 8], ['Yen Bargeld', 0, 'Dokumente', 9],
+  ];
+  t1packing.forEach(p => insertPacking.run(t1, ...p));
+
+  // Budget
+  insertBudget.run(t1, 'Unterkunft', 'Hotel Shinjuku (3 Naechte)', 450, 2, 'Doppelzimmer');
+  insertBudget.run(t1, 'Unterkunft', 'Hotel Granvia Kyoto (4 Naechte)', 680, 2, 'Superior Room');
+  insertBudget.run(t1, 'Transport', 'Fluege FRA-NRT', 1200, 2, 'Lufthansa Direktflug');
+  insertBudget.run(t1, 'Transport', 'Japan Rail Pass (7 Tage)', 380, 2, 'Ordinaer');
+  insertBudget.run(t1, 'Essen', 'Tagesbudget Essen', 350, 2, 'Ca. 50 EUR/Tag');
+  insertBudget.run(t1, 'Aktivitaeten', 'Tempel-Eintritte & Erlebnisse', 120, 2, null);
+
+  // Reservations
+  insertReservation.run(t1, t1days[0], 'Hotel Shinjuku Check-in', '15:00', 'SG-2026-78432', 'confirmed', 'hotel', 'Shinjuku, Tokyo');
+  insertReservation.run(t1, t1days[3], 'Shinkansen Tokyo → Kyoto', '08:30', 'JR-NOZOMI-445', 'confirmed', 'transport', 'Tokyo Station');
+
+  // Share with demo user
+  insertMember.run(t1, demoId, adminId);
+
+  // ─── Trip 2: Barcelona Citytrip ───
+  const trip2 = insertTrip.run(adminId, 'Barcelona Citytrip', 'Gaudi, Tapas und Meerblick — ein langes Wochenende in Kataloniens Hauptstadt.', '2026-05-21', '2026-05-24', 'EUR');
+  const t2 = Number(trip2.lastInsertRowid);
+
+  const t2days = [];
+  for (let i = 0; i < 4; i++) {
+    const d = insertDay.run(t2, i + 1, `2026-05-${21 + i}`);
+    t2days.push(Number(d.lastInsertRowid));
+  }
+
+  const t2places = [
+    [t2, 'Hotel W Barcelona', 41.3686, 2.1920, 'Barceloneta, Barcelona, Spain', 1, '14:00', 60, 'Direkt am Strand. Rooftop-Bar mit Panorama!', null],
+    [t2, 'Sagrada Familia', 41.4036, 2.1744, 'Eixample, Barcelona, Spain', 3, '10:00', 120, 'Gaudis Meisterwerk. Tickets unbedingt vorher online buchen!', null],
+    [t2, 'Park Gueell', 41.4145, 2.1527, 'Gracia, Barcelona, Spain', 3, '09:00', 90, 'Mosaik-Terrasse mit Stadtblick. Frueh buchen fuer Monumental Zone.', null],
+    [t2, 'La Boqueria', 41.3816, 2.1717, 'La Rambla, Barcelona, Spain', 2, '12:00', 75, 'Beruehmter Markt an der Rambla. Frischer Saft und Jamon Iberico!', null],
+    [t2, 'Barceloneta Beach', 41.3784, 2.1925, 'Barceloneta, Barcelona, Spain', 8, '16:00', 120, 'Stadtstrand zum Entspannen nach dem Sightseeing.', null],
+    [t2, 'Barri Gotic', 41.3834, 2.1762, 'Ciutat Vella, Barcelona, Spain', 3, '15:00', 90, 'Mittelalterliche Gassen. Kathedrale und Placa Reial entdecken.', null],
+    [t2, 'Casa Batllo', 41.3916, 2.1650, 'Passeig de Gracia, Barcelona, Spain', 3, '11:00', 75, 'Gaudis Drachen-Haus. Die Fassade allein ist schon ein Erlebnis.', null],
+    [t2, 'El Born & Tapas', 41.3856, 2.1825, 'El Born, Barcelona, Spain', 7, '20:00', 120, 'Trendviertel mit den besten Tapas-Bars. Cal Pep oder El Xampanyet!', null],
+  ];
+
+  const t2pIds = t2places.map(p => Number(insertPlace.run(...p).lastInsertRowid));
+
+  // Day 1: Arrival, Beach, El Born
+  insertAssignment.run(t2days[0], t2pIds[0], 0);
+  insertAssignment.run(t2days[0], t2pIds[4], 1);
+  insertAssignment.run(t2days[0], t2pIds[7], 2);
+  // Day 2: Sagrada Familia, Casa Batllo, La Boqueria
+  insertAssignment.run(t2days[1], t2pIds[1], 0);
+  insertAssignment.run(t2days[1], t2pIds[6], 1);
+  insertAssignment.run(t2days[1], t2pIds[3], 2);
+  // Day 3: Park Gueell, Barri Gotic
+  insertAssignment.run(t2days[2], t2pIds[2], 0);
+  insertAssignment.run(t2days[2], t2pIds[5], 1);
+  // Day 4: Free morning, departure
+  insertAssignment.run(t2days[3], t2pIds[4], 0);
+
+  // Packing
+  ['Reisepass', 'Sonnencreme SPF50', 'Badehose/Bikini', 'Sonnenbrille', 'Bequeme Sandalen', 'Strandtuch'].forEach((name, i) => {
+    insertPacking.run(t2, name, 0, i < 1 ? 'Dokumente' : 'Sommer', i);
+  });
+
+  // Budget
+  insertBudget.run(t2, 'Unterkunft', 'Hotel W Barcelona (3 Naechte)', 780, 2, 'Sea View Room');
+  insertBudget.run(t2, 'Transport', 'Fluege BER-BCN', 180, 2, 'Eurowings');
+  insertBudget.run(t2, 'Essen', 'Restaurants & Tapas', 300, 2, 'Ca. 75 EUR/Tag');
+  insertBudget.run(t2, 'Aktivitaeten', 'Sagrada Familia + Park Gueell + Casa Batllo', 95, 2, 'Online-Tickets');
+
+  insertReservation.run(t2, t2days[1], 'Sagrada Familia Eintritt', '10:00', 'SF-2026-11234', 'confirmed', 'activity', 'Eixample, Barcelona');
+
+  insertMember.run(t2, demoId, adminId);
+
+  // ─── Trip 3: Wochenende in Wien ───
+  const trip3 = insertTrip.run(adminId, 'Wochenende in Wien', 'Kaffeehaus-Kultur, imperiale Pracht und Sachertorte.', '2026-06-12', '2026-06-14', 'EUR');
+  const t3 = Number(trip3.lastInsertRowid);
+
+  const t3days = [];
+  for (let i = 0; i < 3; i++) {
+    const d = insertDay.run(t3, i + 1, `2026-06-${12 + i}`);
+    t3days.push(Number(d.lastInsertRowid));
+  }
+
+  const t3places = [
+    [t3, 'Hotel Sacher Wien', 48.2038, 16.3699, 'Philharmonikerstrasse 4, Wien, Austria', 1, '15:00', 45, 'Das legendaere Hotel. Sachertorte im Cafe muss sein!', null],
+    [t3, 'Stephansdom', 48.2082, 16.3738, 'Stephansplatz, Wien, Austria', 3, '10:00', 60, 'Wahrzeichen Wiens. Turmbesteigung fuer 360-Grad-Blick.', null],
+    [t3, 'Schloss Schoenbrunn', 48.1845, 16.3122, 'Schoenbrunn, Wien, Austria', 3, '09:30', 150, 'Imperiale Pracht. Grand Tour Ticket fuer alle 40 Raeume.', null],
+    [t3, 'Naschmarkt', 48.1986, 16.3633, 'Wienzeile, Wien, Austria', 2, '12:00', 75, 'Wiens groesster Markt. Orientalische Gewuerze bis Wiener Schnitzel.', null],
+    [t3, 'Cafe Central', 48.2107, 16.3654, 'Herrengasse 14, Wien, Austria', 7, '15:00', 60, 'Wo einst Trotzki Schach spielte. Melange und Apfelstrudel!', null],
+    [t3, 'Prater & Riesenrad', 48.2166, 16.3964, 'Prater, Wien, Austria', 6, '17:00', 90, 'Riesenrad bei Sonnenuntergang. Blick ueber die ganze Stadt.', null],
+  ];
+
+  const t3pIds = t3places.map(p => Number(insertPlace.run(...p).lastInsertRowid));
+
+  // Day 1: Arrival, Stephansdom, Cafe Central
+  insertAssignment.run(t3days[0], t3pIds[0], 0);
+  insertAssignment.run(t3days[0], t3pIds[1], 1);
+  insertAssignment.run(t3days[0], t3pIds[4], 2);
+  // Day 2: Schoenbrunn, Naschmarkt, Prater
+  insertAssignment.run(t3days[1], t3pIds[2], 0);
+  insertAssignment.run(t3days[1], t3pIds[3], 1);
+  insertAssignment.run(t3days[1], t3pIds[5], 2);
+  // Day 3: Free morning
+  insertAssignment.run(t3days[2], t3pIds[4], 0);
+
+  // Packing
+  ['Personalausweis', 'Regenschirm', 'Bequeme Schuhe', 'Kamera'].forEach((name, i) => {
+    insertPacking.run(t3, name, 0, i < 1 ? 'Dokumente' : 'Sonstiges', i);
+  });
+
+  // Budget
+  insertBudget.run(t3, 'Unterkunft', 'Hotel Sacher (2 Naechte)', 520, 2, 'Classic Doppelzimmer');
+  insertBudget.run(t3, 'Transport', 'Zug MUC-VIE', 60, 2, 'OeBB Sparschiene');
+  insertBudget.run(t3, 'Essen', 'Restaurants & Cafes', 200, 2, null);
+
+  insertMember.run(t3, demoId, adminId);
+
+  console.log('[Demo] 3 example trips seeded and shared with demo user');
+}
+
+module.exports = { seedDemoData };
--- a/server/src/index.js
+++ b/server/src/index.js
@@ -115,7 +115,9 @@ const PORT = process.env.PORT || 3001;
 const server = app.listen(PORT, () => {
  console.log(`NOMAD API running on port ${PORT}`);
  console.log(`Environment: ${process.env.NODE_ENV || 'development'}`);
+  if (process.env.DEMO_MODE === 'true') console.log('Demo mode: ENABLED');
  scheduler.start();
+  scheduler.startDemoReset();
  const { setupWebSocket } = require('./websocket');
  setupWebSocket(server);
 });
--- a/server/src/routes/auth.js
+++ b/server/src/routes/auth.js
@@ -65,7 +65,26 @@ router.get('/app-config', (req, res) => {
  const userCount = db.prepare('SELECT COUNT(*) as count FROM users').get().count;
  const setting = db.prepare("SELECT value FROM app_settings WHERE key = 'allow_registration'").get();
  const allowRegistration = userCount === 0 || (setting?.value ?? 'true') === 'true';
-  res.json({ allow_registration: allowRegistration, has_users: userCount > 0 });
+  const isDemo = process.env.DEMO_MODE === 'true';
+  res.json({
+    allow_registration: isDemo ? false : allowRegistration,
+    has_users: userCount > 0,
+    demo_mode: isDemo,
+    demo_email: isDemo ? 'demo@nomad.app' : undefined,
+    demo_password: isDemo ? 'demo12345' : undefined,
+  });
+});
+
+// POST /api/auth/demo-login (demo mode only)
+router.post('/demo-login', (req, res) => {
+  if (process.env.DEMO_MODE !== 'true') {
+    return res.status(404).json({ error: 'Not found' });
+  }
+  const user = db.prepare('SELECT * FROM users WHERE email = ?').get('demo@nomad.app');
+  if (!user) return res.status(500).json({ error: 'Demo user not found' });
+  const token = generateToken(user);
+  const { password_hash, maps_api_key, openweather_api_key, unsplash_api_key, ...safe } = user;
+  res.json({ token, user: { ...safe, avatar_url: avatarUrl(user) } });
 });

 // POST /api/auth/register
--- a/server/src/scheduler.js
+++ b/server/src/scheduler.js
@@ -102,4 +102,23 @@ function start() {
  console.log(`[Auto-Backup] Geplant: ${settings.interval} (${expression}), Aufbewahrung: ${settings.keep_days === 0 ? 'immer' : settings.keep_days + ' Tage'}`);
 }

-module.exports = { start, loadSettings, saveSettings, VALID_INTERVALS };
+// Demo mode: hourly reset of demo user data
+let demoTask = null;
+
+function startDemoReset() {
+  if (demoTask) { demoTask.stop(); demoTask = null; }
+  if (process.env.DEMO_MODE !== 'true') return;
+
+  demoTask = cron.schedule('0 * * * *', () => {
+    try {
+      const { db } = require('./db/database');
+      const { resetDemoUser } = require('./demo/demo-reset');
+      resetDemoUser(db);
+    } catch (err) {
+      console.error('[Demo Reset] Error:', err.message);
+    }
+  });
+  console.log('[Demo] Hourly reset scheduled (at :00 every hour)');
+}
+
+module.exports = { start, startDemoReset, loadSettings, saveSettings, VALID_INTERVALS };