postbase 0.1.0

package/nginx/README.md

@@ -0,0 +1,84 @@
+# Nginx (Web Server)
+
+## Install
+
+### Homebrew (Mac)
+
+```
+brew install nginx
+```
+
+## apt (Linux)
+
+Installation instructions https://nginx.org/en/linux_packages.html#Ubuntu
+
+## Map hosts to localhost
+
+This is needed so locally when you visit your website, it will use your nginx.
+
+```
+sudo echo "127.0.0.1 your_website.com" >> /etc/hosts
+sudo echo "127.0.0.1 www.your_website.com" >> /etc/hosts
+```
+
+## Let's Encrypt for HTTPS
+
+### Homebrew (Mac)
+
+Installation instructions https://certbot.eff.org/instructions?ws=other&os=osx
+
+### apt (Linux)
+
+Installation instructions https://certbot.eff.org/instructions?ws=other&os=pip
+
+After installing the certbot, generate the certificates and private keys.
+
+```
+cd nginx && rm -rf letsencrypt
+sudo certbot certonly --manual --preferred-challenges dns-01 -d your_website.com -d www.your_website.com
+```
+
+## Enable Nginx
+
+Configuring nginx varies based on whether you are using apt (Linux) or homebrew (Mac) package manager.
+
+### Homebrew (Mac)
+
+First, you must edit this file /Users/your_username/your_website/nginx/www.your_website.com.conf and fix names, paths, etc
+
+```
+cp /Users/your_username/your_website/nginx/www.your_website.com.conf /opt/homebrew/etc/nginx/services/
+
+brew services restart nginx
+brew services info nginx
+
+tail /opt/homebrew/var/log/nginx/error.log
+tail /opt/homebrew/var/log/nginx/access.log
+```
+
+## apt (Linux)
+
+This is different because when nginx is installed using apt, it runs with sudo.
+
+```
+sudo mkdir /etc/ssl/certs/your_website
+sudo cp nginx/letsencrypt/fullchain.pem /etc/ssl/certs/your_website
+
+sudo mkdir /etc/ssl/private/your_website
+sudo cp nginx/letsencrypt/privkey.pem /etc/ssl/private/your_website
+
+mkdir /var/www/html/your_website
+sudo cp -a frontend/dist/. /var/www/html/your_website
+
+sudo cp nginx/apt/www.your_website.com.conf /etc/nginx/sites-available/
+sudo ln -s /etc/nginx/sites-available/www.your_website.com.conf /etc/nginx/sites-enabled
+
+nginx -t
+
+sudo systemctl restart nginx
+
+tail /var/log/nginx/error.log
+tail /var/log/nginx/access.log
+```
+
+Note you can skip running frontend server if you are using nginx.

package/nginx/apt/www.your_website.com.conf

@@ -0,0 +1,80 @@
+# Redirect all requests from http to https
+server {
+    listen 80;
+    server_name your_website.com www.your_website.com;
+    return 301 https://www.your_website.com$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name admin.your_website.com;
+
+    ssl_certificate /etc/ssl/certs/your_website/fullchain.pem;
+    ssl_certificate_key /etc/ssl/private/your_website/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    root /var/www/html/your_website/admin;
+    index index.html;
+}
+
+# Redirect https domain without www to https with www
+server {
+    listen 443;
+    server_name your_website.com;
+
+    ssl_certificate /etc/ssl/certs/your_website/fullchain.pem;
+    ssl_certificate_key /etc/ssl/private/your_website/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    return 301 https://www.your_website.com$request_uri;
+}
+
+# Serve only https requests
+server {
+    listen 443 ssl;
+    server_name www.your_website.com;
+
+    ssl_certificate /etc/ssl/certs/your_website/fullchain.pem;
+    ssl_certificate_key /etc/ssl/private/your_website/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    root /var/www/html/your_website;
+    index index.html;
+
+    # Only enable if you want to serve an API from another process running on different port
+    # location /api/ {
+    #   proxy_pass https://127.0.0.1:4431;
+    #   proxy_set_header Host $host;
+    #   proxy_set_header X-Real-IP $remote_addr;
+    #   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    #   proxy_set_header X-Forwarded-Proto $scheme;
+    # 	proxy_read_timeout 900s;
+    #
+    #   # Needed for websockets
+    #   proxy_http_version 1.1;
+    #   proxy_set_header Upgrade $http_upgrade;
+    #   proxy_set_header Connection "Upgrade";
+    # }
+
+    location /uploads/ {
+        alias /var/www/html/your_website/uploads/;
+        expires 90d;
+    }
+
+    location / {
+        # Redirect all requests to index.html
+        #try_files $uri $uri/ /index.html;
+    }
+}

package/nginx/homebrew/www.your_website.com.conf

@@ -0,0 +1,80 @@
+# Redirect all requests from http to https
+server {
+    listen 80;
+    server_name your_website.com www.your_website.com;
+    return 301 https://www.your_website.com$request_uri;
+}
+
+server {
+    listen 443;
+    server_name admin.your_website.com;
+
+    ssl_certificate /Users/your_username/your_website/nginx/letsencrypt/fullchain.pem;
+    ssl_certificate_key /Users/your_username/your_website/nginx/letsencrypt/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    root /Users/your_username/your_website/admin;
+    index index.html;
+}
+
+# Redirect https domain without www to https with www
+server {
+    listen 443;
+    server_name your_website.com;
+
+    ssl_certificate /Users/your_username/your_website/nginx/letsencrypt/fullchain.pem;
+    ssl_certificate_key /Users/your_username/your_website/nginx/letsencrypt/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    return 301 https://www.your_website.com$request_uri;
+}
+
+# Serve only https requests
+server {
+    listen 443 ssl;
+    server_name www.your_website.com;
+
+    ssl_certificate /Users/your_username/your_website/nginx/letsencrypt/fullchain.pem;
+    ssl_certificate_key /Users/your_username/your_website/nginx/letsencrypt/privkey.pem;
+
+    # Other SSL configurations (e.g., ciphers, protocols)
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+
+    root /Users/your_username/your_website/dist;
+    index index.html;
+
+    # Only enable if you want to serve an API from another process running on different port
+    # location /api/ {
+    #   proxy_pass https://127.0.0.1:4431;
+    #   proxy_set_header Host $host;
+    #   proxy_set_header X-Real-IP $remote_addr;
+    #   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    #   proxy_set_header X-Forwarded-Proto $scheme;
+    # 	proxy_read_timeout 900s;
+    #
+    #   # Needed for websockets
+    #   proxy_http_version 1.1;
+    #   proxy_set_header Upgrade $http_upgrade;
+    #   proxy_set_header Connection "Upgrade";
+    # }
+
+    location /uploads/ {
+        alias /Users/your_username/your_website/public/uploads/;
+        expires 90d;
+    }
+
+    location / {
+        # Redirect all requests to index.html
+        #try_files $uri $uri/ /index.html;
+    }
+}

package/nginx/letsencrypt/README

@@ -0,0 +1,14 @@
+This directory contains your keys and certificates.
+
+`privkey.pem`  : the private key for your certificate.
+`fullchain.pem`: the certificate file used in most server software.
+`chain.pem`    : used for OCSP stapling in Nginx >=1.3.7.
+`cert.pem`     : will break many server configurations, and should not be used
+                 without reading further documentation (see link below).
+
+WARNING: DO NOT MOVE OR RENAME THESE FILES!
+         Certbot expects these files to remain in this location in order
+         to function properly!
+
+We recommend not moving these files. For more information, see the Certbot
+User Guide at https://certbot.eff.org/docs/using.html#where-are-my-certificates.

package/package.json

@@ -0,0 +1,8 @@
+{
+    "name": "postbase",
+    "version": "0.1.0",
+    "dependencies": {
+        "@postbase/backend": "^0.1.0",
+        "@postbase/frontend": "^0.1.0"
+    }
+}