nibula 1.0.0

package/src/backend/_core/modules/RateLimiter.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+class RateLimiter {
+    public static function check(string $ip, int $maxRequests = 60, int $windowSeconds = 60): void {
+        $cacheDir = __DIR__ . '/../../cache';
+        
+        if (!is_dir($cacheDir)) {
+            mkdir($cacheDir, 0755, true);
+        }
+
+        $cacheFile = $cacheDir . '/rl_' . md5($ip) . '.json';
+        $now = time();
+        $data = [];
+
+        if (file_exists($cacheFile)) {
+            $data = json_decode(file_get_contents($cacheFile), true) ?: [];
+        }
+
+        $data = array_filter($data, fn($ts) => $ts > ($now - $windowSeconds));
+        $data[] = $now;
+
+        file_put_contents($cacheFile, json_encode(array_values($data)), LOCK_EX);
+
+        if (count($data) > $maxRequests) {
+            header('Retry-After: ' . $windowSeconds);
+            Response::error('Too Many Requests', 429);
+        }
+    }
+}

package/src/backend/_core/modules/Response.php

@@ -0,0 +1,49 @@
+<?php
+
+declare(strict_types=1);
+
+if (!defined('CORE_ACCESS')) {
+    $errorPage = $_SERVER['DOCUMENT_ROOT'] . '/404.html';
+    http_response_code(404);
+    if (file_exists($errorPage)) {
+        header('Content-Type: text/html; charset=UTF-8');
+        echo file_get_contents($errorPage);
+    } else {
+        echo "404 Not Found";
+    }
+    exit;
+}
+
+class Response
+{
+    public static function success(mixed $data = null, int $code = 200): never
+    {
+        http_response_code($code);
+        echo json_encode([
+            'status' => 'success',
+            'data'   => $data,
+        ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function error(string $message, int $code = 400, mixed $details = null): never
+    {
+        http_response_code($code);
+        $body = [
+            'status'  => 'error',
+            'message' => $message,
+            'code'    => $code,
+        ];
+        if ($details !== null) {
+            $body['details'] = $details;
+        }
+        echo json_encode($body, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function noContent(): never
+    {
+        http_response_code(204);
+        exit;
+    }
+}

package/src/backend/api/protected/example-protected.php

@@ -0,0 +1,17 @@
+<?php
+declare(strict_types=1);
+
+require_once CORE_PATH . '/modules/Response.php';
+
+if ($method !== 'GET') {
+    Response::error('Method not allowed', 405);
+}
+
+//
+// Your endpoint logic here. You can access route parameters in $requestParams array
+//
+
+Response::success([
+    'message'    => 'Protected endpoint is working',
+    'params'     => $requestParams,
+]);

package/src/backend/api/public/example-public.php

@@ -0,0 +1,17 @@
+<?php
+declare(strict_types=1);
+
+require_once CORE_PATH . '/modules/Response.php';
+
+if ($method !== 'GET') {
+    Response::error('Method not allowed', 405);
+}
+
+//
+// Your endpoint logic here. You can access route parameters in $requestParams array
+//
+
+Response::success([
+    'message'    => 'Public endpoint is working',
+    'params'     => $requestParams,
+]);

package/src/backend/database/Database.php

@@ -0,0 +1,24 @@
+<?php
+declare(strict_types=1);
+
+class Database {
+    private static ?PDO $instance = null;
+
+    private function __construct() {}
+
+    public static function getInstance(): PDO {
+        if (self::$instance === null) {
+            $config = require __DIR__ . '/../config.php';
+            
+            $dsn = "mysql:host={$config['DB_HOST']};dbname={$config['DB_NAME']};charset=utf8mb4";
+            $options = [
+                PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
+                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+                PDO::ATTR_EMULATE_PREPARES   => false,
+            ];
+
+            self::$instance = new PDO($dsn, $config['DB_USER'], $config['DB_PASS'], $options);
+        }
+        return self::$instance;
+    }
+}

package/src/backend/database/migrations/create_example_db.sql

@@ -0,0 +1 @@
+CREATE DATABASE example_db;

package/src/backend/example.config.php

@@ -0,0 +1,28 @@
+<?php
+declare(strict_types=1);
+
+return [
+    // Default key for protected endpoints that don't have a specific key in CUSTOM_ENDPOINT_KEYS
+    'GENERAL_API_KEY' => 'DEFAULT_KEY',
+
+    // If you want restrict access to protected endpoints to specific clients, you can define custom keys for each endpoint
+    // For subfolder endpoints, use the relative path ('subfolder/endpoint')
+    'CUSTOM_ENDPOINT_KEYS' => [
+        'subfolder/example-protected'    => 'custom-key',
+    ],
+
+    'GENERAL_ALLOWED_ORIGINS' => [
+        '*',
+        // 'https://example.com',
+    ],
+
+    'CUSTOM_ENDPOINT_ORIGINS' => [
+        'subfolder/example-protected'    => ['https://app.example.com'],
+    ],
+
+    // Database configuration
+    'DB_HOST' => '127.0.0.1',
+    'DB_NAME' => 'example_db',
+    'DB_USER' => 'root',
+    'DB_PASS' => '',
+];

package/src/backend/web.config

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <rewrite>
+            <rules>
+                <rule name="PassThroughCoreIndex" stopProcessing="true">
+                    <match url="^_core/index\.php$" ignoreCase="true" />
+                    <action type="None" />
+                </rule>
+                <rule name="RewriteToFrontController" stopProcessing="true">
+                    <match url="^(.*)$" ignoreCase="true" />
+                    <action type="Rewrite" url="_core/index.php" appendQueryString="true" />
+                </rule>
+            </rules>
+        </rewrite>
+    </system.webServer>
+</configuration>

package/src/frontend/.htaccess

@@ -0,0 +1,16 @@
+Options -Indexes
+ErrorDocument 404 /404.html
+ErrorDocument 403 /404.html
+
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    RewriteBase /
+
+    RewriteRule ^(web\.config|\..*)$ /404.html [L,NC]
+
+    RewriteRule ^api/(.*)$ backend/_core/index.php [QSA,L]
+
+    RewriteCond %{REQUEST_FILENAME} -f [OR]
+    RewriteCond %{REQUEST_FILENAME} -d
+    RewriteRule ^ - [L]
+</IfModule>

package/src/frontend/404.njk

@@ -0,0 +1,17 @@
+---
+title: "404"
+permalink: 404.html
+layout: base.njk
+---
+
+<!-- !IMPORTANT -->
+<!-- This is the only page that you need to modify statically -->
+
+<div class="fade-in not-found">
+  <h1>Oops! Page not found</h1>
+  <a href="/">Return to homepage</a>
+</div>
+
+
+{# You can also add the includes you need here below
+{% include "component.njk" %} #}

package/src/frontend/assets/brand/favicon.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="512.000000pt" height="512.000000pt" viewBox="0 0 512.000000 512.000000"
+ preserveAspectRatio="xMidYMid meet">
+
+<g transform="translate(0.000000,512.000000) scale(0.100000,-0.100000)"
+fill="#000000" stroke="none">
+<path d="M4115 4094 c-89 -20 -232 -88 -312 -148 -181 -137 -273 -342 -273
+-604 0 -219 128 -459 353 -664 263 -240 347 -334 403 -451 109 -228 39 -489
+-159 -585 -79 -38 -146 -52 -256 -52 -97 0 -138 10 -192 49 -84 59 -111 136
+-111 311 1 105 6 145 32 250 33 131 47 249 36 295 -16 63 -169 74 -276 20
+-134 -68 -289 -290 -347 -495 -27 -99 -25 -318 6 -425 25 -89 86 -210 133
+-264 94 -107 240 -195 380 -231 421 -105 942 41 1226 345 148 158 218 306 242
+512 25 217 -30 446 -151 624 -54 80 -191 222 -303 314 -47 39 -85 73 -86 78 0
+4 8 7 18 7 9 0 54 13 99 29 174 60 304 196 349 366 31 113 9 324 -44 435 -58
+120 -206 234 -360 276 -84 23 -318 28 -407 8z m348 -407 c82 -41 102 -74 101
+-167 -1 -126 -55 -253 -163 -384 -30 -36 -58 -66 -62 -66 -10 0 -150 149 -200
+215 -51 67 -102 161 -131 245 l-19 55 51 47 c71 66 143 89 270 85 81 -2 104
+-7 153 -30z"/>
+<path d="M1272 4089 c-123 -17 -291 -64 -406 -115 -240 -105 -461 -289 -527
+-439 -24 -53 -18 -82 17 -91 52 -13 121 8 279 82 280 134 441 180 664 191 275
+13 500 -56 597 -184 63 -82 78 -142 78 -293 0 -173 -27 -273 -98 -357 -25 -30
+-27 -30 -78 -21 -73 14 -281 4 -347 -17 -136 -42 -183 -165 -100 -259 17 -20
+54 -45 87 -58 52 -21 74 -23 236 -24 l179 0 29 -35 c16 -19 47 -70 68 -114 50
+-101 71 -217 71 -390 1 -197 -28 -282 -133 -392 -72 -74 -205 -146 -313 -168
+-113 -24 -286 -19 -434 11 -69 14 -130 29 -135 34 -10 10 17 511 35 655 6 44
+35 192 65 329 116 528 158 835 136 981 -13 79 -24 95 -66 95 -73 0 -183 -92
+-268 -224 -194 -302 -402 -1027 -423 -1473 -3 -65 -8 -136 -11 -159 l-5 -40
+-102 23 c-127 29 -207 30 -230 5 -23 -25 -21 -87 4 -139 39 -80 189 -197 352
+-273 158 -74 446 -163 629 -194 386 -67 797 -21 1081 120 163 81 273 175 363
+311 103 155 135 295 116 518 -13 158 -40 248 -104 355 -52 87 -182 216 -290
+286 l-78 51 63 41 c292 190 399 490 296 829 -84 276 -354 466 -751 528 -124
+20 -444 28 -546 14z"/>
+</g>
+</svg>

package/src/frontend/assets/brand/logo.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="512.000000pt" height="512.000000pt" viewBox="0 0 512.000000 512.000000"
+ preserveAspectRatio="xMidYMid meet">
+
+<g transform="translate(0.000000,512.000000) scale(0.100000,-0.100000)"
+fill="#000000" stroke="none">
+<path d="M4115 4094 c-89 -20 -232 -88 -312 -148 -181 -137 -273 -342 -273
+-604 0 -219 128 -459 353 -664 263 -240 347 -334 403 -451 109 -228 39 -489
+-159 -585 -79 -38 -146 -52 -256 -52 -97 0 -138 10 -192 49 -84 59 -111 136
+-111 311 1 105 6 145 32 250 33 131 47 249 36 295 -16 63 -169 74 -276 20
+-134 -68 -289 -290 -347 -495 -27 -99 -25 -318 6 -425 25 -89 86 -210 133
+-264 94 -107 240 -195 380 -231 421 -105 942 41 1226 345 148 158 218 306 242
+512 25 217 -30 446 -151 624 -54 80 -191 222 -303 314 -47 39 -85 73 -86 78 0
+4 8 7 18 7 9 0 54 13 99 29 174 60 304 196 349 366 31 113 9 324 -44 435 -58
+120 -206 234 -360 276 -84 23 -318 28 -407 8z m348 -407 c82 -41 102 -74 101
+-167 -1 -126 -55 -253 -163 -384 -30 -36 -58 -66 -62 -66 -10 0 -150 149 -200
+215 -51 67 -102 161 -131 245 l-19 55 51 47 c71 66 143 89 270 85 81 -2 104
+-7 153 -30z"/>
+<path d="M1272 4089 c-123 -17 -291 -64 -406 -115 -240 -105 -461 -289 -527
+-439 -24 -53 -18 -82 17 -91 52 -13 121 8 279 82 280 134 441 180 664 191 275
+13 500 -56 597 -184 63 -82 78 -142 78 -293 0 -173 -27 -273 -98 -357 -25 -30
+-27 -30 -78 -21 -73 14 -281 4 -347 -17 -136 -42 -183 -165 -100 -259 17 -20
+54 -45 87 -58 52 -21 74 -23 236 -24 l179 0 29 -35 c16 -19 47 -70 68 -114 50
+-101 71 -217 71 -390 1 -197 -28 -282 -133 -392 -72 -74 -205 -146 -313 -168
+-113 -24 -286 -19 -434 11 -69 14 -130 29 -135 34 -10 10 17 511 35 655 6 44
+35 192 65 329 116 528 158 835 136 981 -13 79 -24 95 -66 95 -73 0 -183 -92
+-268 -224 -194 -302 -402 -1027 -423 -1473 -3 -65 -8 -136 -11 -159 l-5 -40
+-102 23 c-127 29 -207 30 -230 5 -23 -25 -21 -87 4 -139 39 -80 189 -197 352
+-273 158 -74 446 -163 629 -194 386 -67 797 -21 1081 120 163 81 273 175 363
+311 103 155 135 295 116 518 -13 158 -40 248 -104 355 -52 87 -182 216 -290
+286 l-78 51 63 41 c292 190 399 490 296 829 -84 276 -354 466 -751 528 -124
+20 -444 28 -546 14z"/>
+</g>
+</svg>

package/src/frontend/components/global/footer.njk

@@ -0,0 +1,25 @@
+<footer>
+  <div>
+    <h6>{{ site.title }}</h6>
+    <p>{{ site.description }}</p>
+  </div>
+  <div>
+    <h6>Legal</h6>
+    <small>
+      <ul>
+        <li><a href="{{ site.legal.privacy }}">Privacy Policy</a></li>
+        <li><a href="{{ site.legal.cookie }}">Cookie Policy</a></li>
+        <li><a href="{{ site.legal.terms }}">Terms and conditions</a></li>
+      </ul>
+    </small>
+  </div>
+  <div>
+    <h6>
+      &copy; {{ site.legal.copyright.year }}
+      {{ site.site_name }}
+    </h6>
+    <h6>
+      {{ site.legal.copyright.text }}
+    </h6>
+  </div>
+</footer>

package/src/frontend/components/global/header.njk

@@ -0,0 +1,7 @@
+<header>
+  <nav>
+      <a class="logo" href="/">
+        <img src="{{ site.logo }}" alt="{{ site.title }}" height="40">
+      </a>
+  </nav>
+</header>

package/src/frontend/components/welcome.njk

@@ -0,0 +1,116 @@
+<div class="layout-container layout-my-3">
+  <h1>Welcome to <span class="boilerplate-name">Nibula</span></h1>
+  <div class="slogan">The boilerplate you need, simplified</div>
+
+    <div id="content-welcome" class="tab-content active">
+      <div style="display: flex; gap: 1rem; flex-wrap: wrap;">
+        <a href="https://github.com/rhaastrake/nibula" class="card" target="_blank" rel="noopener noreferrer" style="flex: 1; min-width: 250px;">
+          <svg class="card-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+            <path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 0 0-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0 0 20 4.77 5.07 5.07 0 0 0 19.91 1S18.73.65 16 2.48a13.38 13.38 0 0 0-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07 0 0 0 5 4.77a5.44 5.44 0 0 0-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 0 0 9 18.13V22"></path>
+          </svg>
+          <h3>GitHub repository</h3>
+          <p>Explore the project and suggest improvements</p>
+          <span class="card-link">Open the repository
+            <svg width="16" height="16" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" style="margin-left:4px;">
+              <path stroke-linecap="round" stroke-linejoin="round" d="M14 5l7 7m0 0l-7 7m7-7H3"></path>
+            </svg>
+          </span>
+        </a>
+        <a href="https://github.com/rhaastrake/nibula/tree/main/docs" class="card" target="_blank" rel="noopener noreferrer" style="flex: 1; min-width: 250px;">
+          <svg class="card-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+            <path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"></path>
+            <path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"></path>
+          </svg>
+          <h3>Documentation</h3>
+          <p>Everything you need to get started</p>
+          <span class="card-link">Go to documentation
+            <svg width="16" height="16" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" style="margin-left:4px;">
+              <path stroke-linecap="round" stroke-linejoin="round" d="M14 5l7 7m0 0l-7 7m7-7H3"></path>
+            </svg>
+          </span>
+        </a>
+      </div>
+    </div>
+
+<style>
+  .layout-container {
+    width: 100%;
+    max-width: 1140px;
+    margin-right: auto;
+    margin-left: auto;
+    padding-right: 15px;
+    padding-left: 15px;
+  }
+  .layout-my-3 {
+    margin-top: 1rem;
+    margin-bottom: 1rem;
+  }
+
+  h1 {
+    text-align: center;
+    font-weight: 400;
+      .boilerplate-name {
+      color: #42b883;
+      font-weight: 600;
+    }
+  }
+
+  .slogan {
+    text-align: center;
+    color: #4b71a0;
+    font-size: 1.5rem;
+    margin-bottom: 1rem;
+  }
+
+  .card {
+    background: #11474b;
+    border: 0.8px solid #1e2d4a;
+    border-radius: 10px;
+    padding: 18px;
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+    margin-top: 1rem;
+    margin-bottom: 1rem;
+    transition: border-color 0.2s, transform 0.15s;
+    text-decoration: none;
+    h3 {
+      font-size: 1.5rem;
+      font-weight: 600;
+      color: #cbd5e1;
+      letter-spacing: 0.01em;
+      margin: 0;
+    }
+    p {
+      font-size: 1rem;
+      color: #5d8dc7;
+      line-height: 1.6;
+      margin: 0;
+    }
+  }
+
+  .card:hover {
+    border-color: #42b883;
+    transform: translateY(-2px);
+    .card-link {
+      opacity: 1;
+    }
+  }
+
+  .card-icon {
+    width: 2rem;
+    height: 2rem;
+    color: #42b883;
+  }
+
+  .card-link {
+    display: flex;
+    align-items: center;
+    gap: 4px;
+    font-size: 1rem;
+    color: #42b883;
+    opacity: 0.8;
+    transition: opacity 0.15s;
+    margin-top: auto;
+  }
+</style>

package/src/frontend/data/site.json

@@ -0,0 +1,54 @@
+{
+  "site_name": "Site name",
+  "title": "Site title",
+  "description": "Site description",
+  "keywords": "keyword1, keyword2, keyword3",
+  "domain": "yoursite.com",
+  "url": "https://yoursite.com",
+  "lang": "en",
+  "author": "Name and surname",
+  "data_bs_theme": "dark",
+  "theme_color": {
+    "light": "#ffffff",
+    "dark": "#0d1117"
+  },
+  "favicon": "/assets/brand/favicon.svg",
+  "logo": "/assets/brand/logo.svg",
+  "legal": {
+    "privacy": "",
+    "cookie": "",
+    "cookieControls": "",
+    "terms": "",
+    "copyright": {
+      "year": "2026",
+      "text": "All rights reserved."
+    }
+  },
+  "pages": {
+    "404": {
+      "seo": {
+        "title": "404 - Not found",
+        "keywords": "",
+        "noindex": true,
+        "canonical": ""
+      },
+      "cdn": {
+        "css": [],
+        "js": []
+      }
+    },
+    "homepage": {
+      "seo": {
+        "title": "Homepage",
+        "description": "Description",
+        "keywords": "",
+        "noindex": false,
+        "canonical": ""
+      },
+      "cdn": {
+        "css": [],
+        "js": []
+      }
+    }
+  }
+}

package/src/frontend/index.njk

@@ -0,0 +1,9 @@
+---
+title: homepage
+permalink: /
+layout: page-components.njk
+---
+
+<!-- !IMPORTANT -->
+<!-- DO NOT ADD ANYTHING HERE -->
+<!-- You should create a new component.njk into src/components and include that in layouts/page-components.njk -->

package/src/frontend/js/modules/exampleModule.js

@@ -0,0 +1,3 @@
+export function initExampleModule() {
+    // Module logic here
+}

package/src/frontend/js/pages/404.js

@@ -0,0 +1,7 @@
+// import { initExampleModule } from '../modules/exampleModule.js';
+
+document.addEventListener("DOMContentLoaded", () => {
+    // initExampleModule();
+});
+
+// Page logic here

package/src/frontend/js/pages/homepage.js

@@ -0,0 +1,7 @@
+// import { initExampleModule } from '../modules/exampleModule.js';
+
+document.addEventListener("DOMContentLoaded", () => {
+    // initExampleModule();
+});
+
+// Page logic here