markdownr 0.5.9 → 0.5.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84700eb63ad3d72b16419ce7e3d1df58fd543e20b28db82197bd65336e1ae5d9
-  data.tar.gz: 6043776aefb91dcc08d280fec07cd06b9f2f2a4061c380ec7a856d37838b312a
+  metadata.gz: 49c6809e18e2fe51a4e65446e185529edd529e61bb77e6eea79696b734ebdb8b
+  data.tar.gz: 9d533023489082e69413b4e718c27efa05076f1da863f25d9d68de26bd3ec090
 SHA512:
-  metadata.gz: cdd4ccae742493f6bf4d8e8960e22b91e984ad2aa9954c89131a9bb98d22af6d5e6181177b7e29764b86f0267f42624c2df19ce8e7477e9bfe6c0620a1d41144
-  data.tar.gz: c1984de4fb7097acf566bdb530d287e4e500ff151525773a6b258014d35582eb83269573c47882cb0fe232ab56fcde83c588fe50377b3e7782827a94fc895f95
+  metadata.gz: a2602173ee41f8d6034e410a8deba4fb11f5f3149e39c410dbc6366349dc93ba0bec519c6860e4970a7f14ed20dd5f8eeadf03d6452e821993e0d0450bebf19e
+  data.tar.gz: a5dc9a0bb156371fddcbdcdab626ee36b82079a175c56d967f7d4ed1f746d5f191bf709efbb7c0d4cb4f8419d072f51b1d92c8e39e90c8e643c220ebe57d4cbf

data/bin/Dockerfile.markdownr

@@ -0,0 +1,5 @@
+FROM ruby:3.4-slim
+RUN apt-get update && apt-get install -y build-essential && gem install markdownr
+WORKDIR /data
+CMD ["markdownr", "--behind-proxy", "-b", "0.0.0.0", "/data"]
+

data/bin/build-and-push-to-docker

@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+
+IMAGE="$DOCKER_HUB_USERNAME/markdownr:latest"
+
+echo "$DOCKER_HUB_TOKEN" | docker login -u "$DOCKER_HUB_USERNAME" --password-stdin
+
+docker build --no-cache -f bin/Dockerfile.markdownr -t "$IMAGE" .
+
+docker push "$IMAGE"
+
+docker logout

data/bin/markdownr

@@ -23,6 +23,14 @@ OptionParser.new do |opts|
     options[:allow_robots] = true
   end
 
+  opts.on("--behind-proxy", "Trust X-Forwarded-For for client IP (use when behind a reverse proxy like Caddy)") do
+    options[:behind_proxy] = true
+  end
+
+  opts.on("-i", "--index-file FILENAME", "Render this file instead of the directory listing when present (e.g. index.md, moc.md)") do |f|
+    options[:index_file] = f
+  end
+
   opts.on("--no-link-tooltips", "Disable preview tooltips for local markdown links") do
     options[:link_tooltips] = false
   end
@@ -46,8 +54,10 @@ unless File.directory?(dir)
 end
 
 MarkdownServer::App.set :root_dir, dir
+MarkdownServer::App.set :behind_proxy, options[:behind_proxy] || false
 MarkdownServer::App.set :custom_title, options[:title]
 MarkdownServer::App.set :allow_robots, options[:allow_robots] || false
+MarkdownServer::App.set :index_file, options[:index_file]
 MarkdownServer::App.set :link_tooltips, options.fetch(:link_tooltips, true)
 MarkdownServer::App.set :hard_wrap, options.fetch(:hard_wrap, true)
 MarkdownServer::App.set :port, options[:port]

data/lib/markdown_server/app.rb

@@ -9,6 +9,7 @@ require "cgi"
 require "pathname"
 require "set"
 require "net/http"
+require "base64"
 
 module MarkdownServer
   class App < Sinatra::Base
@@ -20,11 +21,15 @@ module MarkdownServer
       set :root_dir, Dir.pwd
       set :custom_title, nil
       set :allow_robots, false
+      set :index_file, nil
       set :link_tooltips, true
       set :hard_wrap, true
       set :show_exceptions, false
       set :protection, false
       set :host_authorization, { permitted_hosts: [] }
+      set :behind_proxy, false
+      set :session_secret, ENV.fetch("MARKDOWNR_SESSION_SECRET", SecureRandom.hex(64))
+      set :sessions, key: "markdownr_session", same_site: :strict, httponly: true
     end
 
     helpers do
@@ -721,6 +726,23 @@ module MarkdownServer
         info_html + infl_html + usage_html + conc_html
       end
 
+      def inline_directory_html(dir_path, relative_dir)
+        entries = Dir.entries(dir_path).reject { |e| e.start_with?(".") || EXCLUDED.include?(e) }
+        items = entries.map do |name|
+          stat = File.stat(File.join(dir_path, name)) rescue next
+          is_dir = stat.directory?
+          href = "/browse/" + (relative_dir.empty? ? "" : relative_dir + "/") +
+                 encode_path_component(name) + (is_dir ? "/" : "")
+          { name: name, is_dir: is_dir, href: href }
+        end.compact.sort_by { |i| [i[:is_dir] ? 0 : 1, i[:name].downcase] }
+
+        rows = items.map do |i|
+          %(<li><a href="#{h(i[:href])}"><span class="icon">#{icon_for(i[:name], i[:is_dir])}</span> ) +
+          %(#{h(i[:name])}#{i[:is_dir] ? "/" : ""}</a></li>)
+        end.join
+        %(<ul class="dir-listing">#{rows}</ul>)
+      end
+
       def compile_regexes(query)
         words = query.split(/\s+/).reject(&:empty?)
         return nil if words.empty?
@@ -729,6 +751,43 @@ module MarkdownServer
         raise RegexpError, e.message
       end
 
+      def client_ip
+        if settings.behind_proxy
+          fwd = env["HTTP_X_FORWARDED_FOR"].to_s.split(",").map(&:strip).first
+          fwd && !fwd.empty? ? fwd : env["REMOTE_ADDR"]
+        else
+          env["REMOTE_ADDR"]
+        end
+      end
+
+      def setup_config
+        @setup_config ||= begin
+          path = File.join(root_dir, ".setup.yml")
+          (File.exist?(path) && YAML.safe_load(File.read(path))) || {}
+        rescue StandardError
+          {}
+        end
+      end
+
+      def admin?
+        return true if session[:admin]
+
+        adm = setup_config["admin"]
+        return false unless adm.is_a?(Hash)
+
+        return true if adm["ip"].to_s.strip == client_ip
+
+        if adm["user"] && adm["pw"]
+          auth = request.env["HTTP_AUTHORIZATION"].to_s
+          if auth.start_with?("Basic ")
+            user, pw = Base64.decode64(auth[6..]).split(":", 2)
+            return true if user == adm["user"].to_s && pw == adm["pw"].to_s
+          end
+        end
+
+        false
+      end
+
     end
 
     # Routes
@@ -746,6 +805,41 @@ module MarkdownServer
       redirect "/browse/"
     end
 
+    get "/setup-info" do
+      @title = "Setup Info"
+      @client_ip = client_ip
+      @is_admin = admin?
+      @served_path = root_dir if @is_admin
+      @public_config = setup_config.reject { |k, _| k == "admin" }
+      erb :setup_info
+    end
+
+    get "/admin/login" do
+      @title = "Admin Login"
+      @error = session.delete(:login_error)
+      @return_to = params[:return_to]
+      erb :admin_login
+    end
+
+    post "/admin/login" do
+      adm = setup_config["admin"]
+      if adm.is_a?(Hash) &&
+         params[:username] == adm["user"].to_s &&
+         params[:password] == adm["pw"].to_s
+        session[:admin] = true
+        return_to = params[:return_to].to_s
+        redirect(return_to.start_with?("/") ? return_to : "/")
+      else
+        session[:login_error] = "Invalid username or password."
+        redirect "/admin/login"
+      end
+    end
+
+    get "/admin/logout" do
+      session.clear
+      redirect "/"
+    end
+
     get "/browse/?*" do
       requested = params["splat"].first.to_s
       requested = requested.chomp("/")
@@ -757,7 +851,14 @@ module MarkdownServer
       end
 
       if File.directory?(real_path)
-        render_directory(real_path, requested)
+        index = settings.index_file
+        index_path = index && File.join(real_path, index)
+        if index_path && File.file?(index_path)
+          index_rel = requested.empty? ? index : "#{requested}/#{index}"
+          render_file(index_path, index_rel)
+        else
+          render_directory(real_path, requested)
+        end
       else
         render_file(real_path, requested)
       end
@@ -1022,6 +1123,11 @@ module MarkdownServer
         @meta, body = parse_frontmatter(content)
         @current_wiki_dir = File.dirname(real_path)
         @content = render_markdown(body)
+        relative_dir = File.dirname(relative_path)
+        relative_dir = "" if relative_dir == "."
+        listing = -> { inline_directory_html(File.dirname(real_path), relative_dir) }
+        @content.gsub!("<p>{{directory}}</p>") { listing.call }
+        @content.gsub!("<p>{{admin-directory}}</p>") { admin? ? listing.call : "" }
         @toc = extract_toc(@content)
         @has_toc = @toc.length > 1
         erb :markdown

data/lib/markdown_server/version.rb

@@ -1,3 +1,3 @@
 module MarkdownServer
-  VERSION = "0.5.9"
+  VERSION = "0.5.11"
 end

data/views/admin_login.erb

@@ -0,0 +1,24 @@
+<div class="title-bar">
+  <h1 class="page-title">Admin Login</h1>
+</div>
+
+<div class="md-content" style="max-width: 360px;">
+  <% if @error %>
+    <p style="color: #b33; margin-bottom: 1rem;"><%= h(@error) %></p>
+  <% end %>
+
+  <form method="post" action="/admin/login">
+    <input type="hidden" name="return_to" value="<%= h(@return_to.to_s) %>">
+    <table class="meta-table" style="margin-bottom: 1rem;">
+      <tr>
+        <th class="blb-th">Username</th>
+        <td><input type="text" name="username" autofocus style="width:100%;padding:2px 4px;"></td>
+      </tr>
+      <tr>
+        <th class="blb-th">Password</th>
+        <td><input type="password" name="password" style="width:100%;padding:2px 4px;"></td>
+      </tr>
+    </table>
+    <button type="submit" style="padding:4px 16px;">Log in</button>
+  </form>
+</div>

data/views/layout.erb

@@ -1219,6 +1219,7 @@
       var touchStartX = 0;
       var touchStartY = 0;
       var touchCurrentX = 0;
+      var touchStartedOnTable = false;
       var isDragging = false;
 
       function openDrawer() {
@@ -1277,6 +1278,7 @@
         touchStartY = e.touches[0].clientY;
         touchCurrentX = touchStartX;
         isDragging = false;
+        touchStartedOnTable = !!e.target.closest('table');
       }, { passive: true });
 
       document.addEventListener('touchmove', function(e) {
@@ -1315,7 +1317,8 @@
         if (dy > 80) return; // Too vertical
 
         if (!isOpen && dx < -threshold) {
-          // Swipe left — open drawer
+          // Swipe left — open drawer (not when swipe started on a table)
+          if (touchStartedOnTable) return;
           openDrawer();
         } else if (isOpen && dx > threshold) {
           // Swipe right — close drawer

data/views/setup_info.erb

@@ -0,0 +1,28 @@
+<div class="title-bar">
+  <h1 class="page-title">Setup Info</h1>
+</div>
+
+<div class="md-content">
+  <% if @is_admin %>
+    <p><strong>You are an administrator.</strong></p>
+  <% end %>
+
+  <table class="meta-table">
+    <tr><th>Your IP</th><td><%= h(@client_ip) %></td></tr>
+    <% if @served_path %>
+      <tr><th>Serving</th><td><%= h(@served_path) %></td></tr>
+    <% end %>
+  </table>
+
+  <% unless @public_config.empty? %>
+    <h3>Configuration</h3>
+    <table class="meta-table">
+      <% @public_config.each do |key, value| %>
+        <tr>
+          <th><%= h(key.to_s) %></th>
+          <td><%= h(value.to_s) %></td>
+        </tr>
+      <% end %>
+    </table>
+  <% end %>
+</div>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: markdownr
 version: !ruby/object:Gem::Version
-  version: 0.5.9
+  version: 0.5.11
 platform: ruby
 authors:
 - Brian Dunn
@@ -100,15 +100,19 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- bin/Dockerfile.markdownr
+- bin/build-and-push-to-docker
 - bin/markdownr
 - lib/markdown_server.rb
 - lib/markdown_server/app.rb
 - lib/markdown_server/version.rb
+- views/admin_login.erb
 - views/directory.erb
 - views/layout.erb
 - views/markdown.erb
 - views/raw.erb
 - views/search.erb
+- views/setup_info.erb
 homepage: https://github.com/brianmd/markdown-server
 licenses:
 - MIT