create-nextblock 0.16.3 → 0.17.0

package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx

@@ -1,21 +1,21 @@
-'use client';
-
-import dynamic from 'next/dynamic';
-
-// Defer the visual-editing toolbar (and its heavy editor graph: BlockEditorModal,
-// the per-block editors, and editor.css) out of the public bundle. The layout only
-// renders this in draft/visual-editing mode, but a *static* import would still ship
-// the entire editor graph to every public page. Loading it via next/dynamic with
-// ssr:false keeps it out of the public homepage's render-blocking CSS and JS, and
-// pulls it in client-side only when visual editing is actually active.
-const NextblockVisualEditing = dynamic(
-  () =>
-    import('./NextblockVisualEditing').then(
-      (module) => module.NextblockVisualEditing
-    ),
-  { ssr: false }
-);
-
-export function DeferredVisualEditing() {
-  return <NextblockVisualEditing />;
-}
+'use client';
+
+import dynamic from 'next/dynamic';
+
+// Defer the visual-editing toolbar (and its heavy editor graph: BlockEditorModal,
+// the per-block editors, and editor.css) out of the public bundle. The layout only
+// renders this in draft/visual-editing mode, but a *static* import would still ship
+// the entire editor graph to every public page. Loading it via next/dynamic with
+// ssr:false keeps it out of the public homepage's render-blocking CSS and JS, and
+// pulls it in client-side only when visual editing is actually active.
+const NextblockVisualEditing = dynamic(
+  () =>
+    import('./NextblockVisualEditing').then(
+      (module) => module.NextblockVisualEditing
+    ),
+  { ssr: false }
+);
+
+export function DeferredVisualEditing() {
+  return <NextblockVisualEditing />;
+}

package/templates/nextblock-template/context/language-rest-client.ts

@@ -1,32 +1,32 @@
-import type { Database } from '@nextblock-cms/db';
-import { resolveSupabaseAnonKey, resolveSupabaseUrl } from '../lib/setup/env-status';
-
-type Language = Database['public']['Tables']['languages']['Row'];
-
-export async function fetchActiveLanguagesFromRest(): Promise<Language[]> {
-  const supabaseUrl = resolveSupabaseUrl();
-  const supabaseAnonKey = resolveSupabaseAnonKey();
-
-  if (!supabaseUrl || !supabaseAnonKey) {
-    return [];
-  }
-
-  const url = new URL('/rest/v1/languages', supabaseUrl);
-  url.searchParams.set('select', 'id, code, name, is_default, is_active, created_at, updated_at');
-  url.searchParams.set('is_active', 'eq.true');
-  url.searchParams.set('order', 'name.asc');
-
-  const response = await fetch(url.toString(), {
-    headers: {
-      apikey: supabaseAnonKey,
-      Authorization: `Bearer ${supabaseAnonKey}`,
-    },
-  });
-
-  if (!response.ok) {
-    return [];
-  }
-
-  const data = await response.json();
-  return Array.isArray(data) ? data : [];
-}
+import type { Database } from '@nextblock-cms/db';
+import { resolveSupabaseAnonKey, resolveSupabaseUrl } from '../lib/setup/env-status';
+
+type Language = Database['public']['Tables']['languages']['Row'];
+
+export async function fetchActiveLanguagesFromRest(): Promise<Language[]> {
+  const supabaseUrl = resolveSupabaseUrl();
+  const supabaseAnonKey = resolveSupabaseAnonKey();
+
+  if (!supabaseUrl || !supabaseAnonKey) {
+    return [];
+  }
+
+  const url = new URL('/rest/v1/languages', supabaseUrl);
+  url.searchParams.set('select', 'id, code, name, is_default, is_active, created_at, updated_at');
+  url.searchParams.set('is_active', 'eq.true');
+  url.searchParams.set('order', 'name.asc');
+
+  const response = await fetch(url.toString(), {
+    headers: {
+      apikey: supabaseAnonKey,
+      Authorization: `Bearer ${supabaseAnonKey}`,
+    },
+  });
+
+  if (!response.ok) {
+    return [];
+  }
+
+  const data = await response.json();
+  return Array.isArray(data) ? data : [];
+}

package/templates/nextblock-template/docker/db/init/99-jwt.sql

@@ -1,6 +1,6 @@
--- Expose the JWT secret to Postgres as a database GUC, matching Supabase's setup. Runs once.
-\set jwt_secret `echo "$JWT_SECRET"`
-\set jwt_exp `echo "$JWT_EXP"`
-
-alter database postgres set "app.settings.jwt_secret" to :'jwt_secret';
-alter database postgres set "app.settings.jwt_exp" to :'jwt_exp';
+-- Expose the JWT secret to Postgres as a database GUC, matching Supabase's setup. Runs once.
+\set jwt_secret `echo "$JWT_SECRET"`
+\set jwt_exp `echo "$JWT_EXP"`
+
+alter database postgres set "app.settings.jwt_secret" to :'jwt_secret';
+alter database postgres set "app.settings.jwt_exp" to :'jwt_exp';

package/templates/nextblock-template/docker/db/init/99-roles.sql

@@ -1,25 +1,25 @@
--- Self-hosted Supabase role passwords. The supabase/postgres image creates the platform roles;
--- GoTrue logs in as supabase_auth_admin and PostgREST as authenticator. Give the roles that exist
--- the generated POSTGRES_PASSWORD (the set varies by image tag, so each is guarded; the password
--- is passed via a session GUC because psql variables aren't interpolated inside a dollar block).
--- Runs once on first init.
-\set pgpass `echo "$POSTGRES_PASSWORD"`
-select set_config('nextblock.pgpass', :'pgpass', false);
-
-do $$
-declare
-  role_name text;
-begin
-  foreach role_name in array array[
-    'authenticator',
-    'pgbouncer',
-    'supabase_auth_admin',
-    'supabase_storage_admin',
-    'supabase_functions_admin',
-    'supabase_read_only_user'
-  ] loop
-    if exists (select 1 from pg_roles where rolname = role_name) then
-      execute format('alter role %I with password %L', role_name, current_setting('nextblock.pgpass'));
-    end if;
-  end loop;
-end $$;
+-- Self-hosted Supabase role passwords. The supabase/postgres image creates the platform roles;
+-- GoTrue logs in as supabase_auth_admin and PostgREST as authenticator. Give the roles that exist
+-- the generated POSTGRES_PASSWORD (the set varies by image tag, so each is guarded; the password
+-- is passed via a session GUC because psql variables aren't interpolated inside a dollar block).
+-- Runs once on first init.
+\set pgpass `echo "$POSTGRES_PASSWORD"`
+select set_config('nextblock.pgpass', :'pgpass', false);
+
+do $$
+declare
+  role_name text;
+begin
+  foreach role_name in array array[
+    'authenticator',
+    'pgbouncer',
+    'supabase_auth_admin',
+    'supabase_storage_admin',
+    'supabase_functions_admin',
+    'supabase_read_only_user'
+  ] loop
+    if exists (select 1 from pg_roles where rolname = role_name) then
+      execute format('alter role %I with password %L', role_name, current_setting('nextblock.pgpass'));
+    end if;
+  end loop;
+end $$;

package/templates/nextblock-template/docker/kong/kong.yml

@@ -1,112 +1,112 @@
-# Kong declarative (DB-less) gateway config for the NextBlock self-hosted stack.
-#
-# $SUPABASE_ANON_KEY and $SUPABASE_SERVICE_KEY are substituted at container start by the kong
-# service entrypoint (docker-compose.yml) from the generated ANON_KEY / SERVICE_ROLE_KEY env.
-# Trimmed to just the Auth (GoTrue) and PostgREST routes the app uses.
-_format_version: '2.1'
-_transform: true
-
-consumers:
-  - username: anon
-    keyauth_credentials:
-      - key: $SUPABASE_ANON_KEY
-  - username: service_role
-    keyauth_credentials:
-      - key: $SUPABASE_SERVICE_KEY
-
-acls:
-  - consumer: anon
-    group: anon
-  - consumer: service_role
-    group: admin
-
-services:
-  - name: auth-v1-open
-    url: http://auth:9999/verify
-    routes:
-      - name: auth-v1-open
-        strip_path: true
-        paths:
-          - /auth/v1/verify
-    plugins:
-      - name: cors
-  - name: auth-v1-open-callback
-    url: http://auth:9999/callback
-    routes:
-      - name: auth-v1-open-callback
-        strip_path: true
-        paths:
-          - /auth/v1/callback
-    plugins:
-      - name: cors
-  - name: auth-v1-open-authorize
-    url: http://auth:9999/authorize
-    routes:
-      - name: auth-v1-open-authorize
-        strip_path: true
-        paths:
-          - /auth/v1/authorize
-    plugins:
-      - name: cors
-
-  - name: auth-v1
-    url: http://auth:9999/
-    routes:
-      - name: auth-v1-all
-        strip_path: true
-        paths:
-          - /auth/v1/
-    plugins:
-      - name: cors
-      - name: key-auth
-        config:
-          hide_credentials: false
-      - name: acl
-        config:
-          hide_groups_header: true
-          allow:
-            - admin
-            - anon
-
-  - name: rest-v1
-    url: http://rest:3000/
-    routes:
-      - name: rest-v1-all
-        strip_path: true
-        paths:
-          - /rest/v1/
-    plugins:
-      - name: cors
-      - name: key-auth
-        config:
-          hide_credentials: true
-      - name: acl
-        config:
-          hide_groups_header: true
-          allow:
-            - admin
-            - anon
-
-  - name: graphql-v1
-    url: http://rest:3000/rpc/graphql
-    routes:
-      - name: graphql-v1-all
-        strip_path: true
-        paths:
-          - /graphql/v1
-    plugins:
-      - name: cors
-      - name: key-auth
-        config:
-          hide_credentials: false
-      - name: request-transformer
-        config:
-          add:
-            headers:
-              - 'Content-Profile: graphql_public'
-      - name: acl
-        config:
-          hide_groups_header: true
-          allow:
-            - admin
-            - anon
+# Kong declarative (DB-less) gateway config for the NextBlock self-hosted stack.
+#
+# $SUPABASE_ANON_KEY and $SUPABASE_SERVICE_KEY are substituted at container start by the kong
+# service entrypoint (docker-compose.yml) from the generated ANON_KEY / SERVICE_ROLE_KEY env.
+# Trimmed to just the Auth (GoTrue) and PostgREST routes the app uses.
+_format_version: '2.1'
+_transform: true
+
+consumers:
+  - username: anon
+    keyauth_credentials:
+      - key: $SUPABASE_ANON_KEY
+  - username: service_role
+    keyauth_credentials:
+      - key: $SUPABASE_SERVICE_KEY
+
+acls:
+  - consumer: anon
+    group: anon
+  - consumer: service_role
+    group: admin
+
+services:
+  - name: auth-v1-open
+    url: http://auth:9999/verify
+    routes:
+      - name: auth-v1-open
+        strip_path: true
+        paths:
+          - /auth/v1/verify
+    plugins:
+      - name: cors
+  - name: auth-v1-open-callback
+    url: http://auth:9999/callback
+    routes:
+      - name: auth-v1-open-callback
+        strip_path: true
+        paths:
+          - /auth/v1/callback
+    plugins:
+      - name: cors
+  - name: auth-v1-open-authorize
+    url: http://auth:9999/authorize
+    routes:
+      - name: auth-v1-open-authorize
+        strip_path: true
+        paths:
+          - /auth/v1/authorize
+    plugins:
+      - name: cors
+
+  - name: auth-v1
+    url: http://auth:9999/
+    routes:
+      - name: auth-v1-all
+        strip_path: true
+        paths:
+          - /auth/v1/
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: false
+      - name: acl
+        config:
+          hide_groups_header: true
+          allow:
+            - admin
+            - anon
+
+  - name: rest-v1
+    url: http://rest:3000/
+    routes:
+      - name: rest-v1-all
+        strip_path: true
+        paths:
+          - /rest/v1/
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: true
+      - name: acl
+        config:
+          hide_groups_header: true
+          allow:
+            - admin
+            - anon
+
+  - name: graphql-v1
+    url: http://rest:3000/rpc/graphql
+    routes:
+      - name: graphql-v1-all
+        strip_path: true
+        paths:
+          - /graphql/v1
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: false
+      - name: request-transformer
+        config:
+          add:
+            headers:
+              - 'Content-Profile: graphql_public'
+      - name: acl
+        config:
+          hide_groups_header: true
+          allow:
+            - admin
+            - anon