diff --git a/apps/server/src/index.ts b/apps/server/src/index.ts
index de1899d..ae64e76 100644
--- a/apps/server/src/index.ts
+++ b/apps/server/src/index.ts
@@ -35,6 +35,12 @@ app.set('trust proxy', 1);
 app.use(cors({ origin: config.corsOrigins }));
 app.use(express.json({ limit: '10mb' }));
 
+// Debug middleware: Log every request
+app.use((req, _res, next) => {
+  console.log(`[${new Date().toISOString()}] ${req.method} ${req.url} from ${req.ip}`);
+  next();
+});
+
 // Serve uploads — decrypts encrypted files on the fly
 app.use('/uploads', (req, res, next) => {
   // Security headers