nibula 1.1.3 → 1.2.0

package/nginx.conf

@@ -1,75 +1,75 @@
-# Example nginx directives for a Nibula site — covers BOTH backends.
-#
-# /api is served by Node (index.js) if it is running on 127.0.0.1:3000; if Node
-# is unreachable, nginx falls back to the PHP front controller automatically.
-# So the same config works whether you deployed the Node backend or the PHP one:
-#   - Node backend running  -> Node answers /api
-#   - only PHP deployed      -> Node is down -> falls back to PHP-FPM
-#
-# This is NOT a ready-to-use file: paste these directives inside your own
-# server { } block (the one with server_name, listen and SSL) and set `root`
-# to your `out` folder.
-
-# Hide the nginx version from response headers
-server_tokens off;
-
-# Force HTTPS on future requests (applies site-wide, including /api)
-add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-
-root /var/www/your-site/out;
-index index.html;
-
-# Disable directory listing
-autoindex off;
-
-error_page 403 404 /404.html;
-location = /404.html {
-    internal;
-}
-
-# Never expose the backend source directory over HTTP.
-location ^~ /backend/ {
-    return 404;
-}
-
-# Block server config files anywhere in the tree (.htaccess, web.config).
-location ~* (^|/)(\.htaccess|web\.config)$ {
-    return 404;
-}
-
-# --- /api: Node primary, PHP fallback ---------------------------------------
-# Try the Node backend first. If it is down (502/504), retry through the PHP
-# front controller. Security headers for API responses are set by the backend.
-location ^~ /api/ {
-    proxy_pass http://127.0.0.1:3000;
-    proxy_http_version 1.1;
-    proxy_set_header Host              $host;
-    proxy_set_header X-Real-IP         $remote_addr;
-    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-
-    proxy_intercept_errors on;
-    error_page 502 504 = @php_backend;
-}
-
-location @php_backend {
-    include fastcgi_params;
-    fastcgi_param SCRIPT_FILENAME $document_root/backend/_core/index.php;
-
-    # Adjust the PHP-FPM socket to your distro:
-    #   Debian / Ubuntu : unix:/run/php/php8.3-fpm.sock
-    #   RHEL / Fedora   : unix:/run/php-fpm/php-fpm.sock
-    #   TCP fallback    : 127.0.0.1:9000
-    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
-}
-
-# Serve static files, fall back to the 404 page.
-# A location with add_header does not inherit server-level headers,
-# so Strict-Transport-Security is repeated here.
-location / {
-    add_header X-Content-Type-Options "nosniff" always;
-    add_header X-Frame-Options "SAMEORIGIN" always;
-    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
-    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-    try_files $uri $uri/ /404.html;
-}
+# Example nginx directives for a Nibula site — covers BOTH backends.
+#
+# /api is served by Node (index.js) if it is running on 127.0.0.1:3000; if Node
+# is unreachable, nginx falls back to the PHP front controller automatically.
+# So the same config works whether you deployed the Node backend or the PHP one:
+#   - Node backend running  -> Node answers /api
+#   - only PHP deployed      -> Node is down -> falls back to PHP-FPM
+#
+# This is NOT a ready-to-use file: paste these directives inside your own
+# server { } block (the one with server_name, listen and SSL) and set `root`
+# to your `out` folder.
+
+# Hide the nginx version from response headers
+server_tokens off;
+
+# Force HTTPS on future requests (applies site-wide, including /api)
+add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+
+root /var/www/your-site/out;
+index index.html;
+
+# Disable directory listing
+autoindex off;
+
+error_page 403 404 /404.html;
+location = /404.html {
+    internal;
+}
+
+# Never expose the backend source directory over HTTP.
+location ^~ /backend/ {
+    return 404;
+}
+
+# Block server config files anywhere in the tree (.htaccess, web.config).
+location ~* (^|/)(\.htaccess|web\.config)$ {
+    return 404;
+}
+
+# --- /api: Node primary, PHP fallback ---------------------------------------
+# Try the Node backend first. If it is down (502/504), retry through the PHP
+# front controller. Security headers for API responses are set by the backend.
+location ^~ /api/ {
+    proxy_pass http://127.0.0.1:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Host              $host;
+    proxy_set_header X-Real-IP         $remote_addr;
+    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+
+    proxy_intercept_errors on;
+    error_page 502 504 = @php_backend;
+}
+
+location @php_backend {
+    include fastcgi_params;
+    fastcgi_param SCRIPT_FILENAME $document_root/backend/_core/index.php;
+
+    # Adjust the PHP-FPM socket to your distro:
+    #   Debian / Ubuntu : unix:/run/php/php8.3-fpm.sock
+    #   RHEL / Fedora   : unix:/run/php-fpm/php-fpm.sock
+    #   TCP fallback    : 127.0.0.1:9000
+    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
+}
+
+# Serve static files, fall back to the 404 page.
+# A location with add_header does not inherit server-level headers,
+# so Strict-Transport-Security is repeated here.
+location / {
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    try_files $uri $uri/ /404.html;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nibula",
-  "version": "1.1.3",
+  "version": "1.2.0",
   "description": "A beginner-friendly static site generator built on Eleventy that stays close to vanilla HTML, CSS and JS — with a page-management CLI, an optional PHP backend, and SEO files generated for you.",
   "keywords": [
     "static-site-generator",
@@ -47,16 +47,16 @@
     "nibula": "bin/nibula.js"
   },
   "scripts": {
-    "build:css": "sass src/frontend/scss:out/css --no-source-map --style=compressed --quiet --load-path=node_modules",
+    "build:css": "sass src/frontend/scss:out/css --no-source-map --style=compressed --quiet",
     "build:js": "esbuild \"src/frontend/ts/pages/*.ts\" --bundle --outdir=out/js/pages --minify",
     "build:11ty": "eleventy",
     "build": "npm run clean && npm run build:css && npm run build:js && npm run build:11ty",
-    "serve:css": "sass --watch src/frontend/scss:out/css --no-source-map --quiet --load-path=node_modules",
+    "serve:css": "sass --watch src/frontend/scss:out/css --no-source-map --quiet",
     "serve:js": "esbuild \"src/frontend/ts/pages/*.ts\" --bundle --outdir=out/js/pages --watch",
     "serve:11ty": "eleventy --serve --quiet",
-    "clean": "node _tools/cleanOutput.js",
+    "clean": "node tools/cleanOutput.js",
     "serve": "npm run clean && concurrently \"npm run serve:11ty\" \"npm run serve:css\" \"npm run serve:js\"",
-    "assistant": "node _tools/assistant.js"
+    "assistant": "node tools/assistant.js"
   },
   "devDependencies": {
     "@11ty/eleventy": "^3.1.2",