website-xp-phone 1.5.0

package/README.md

@@ -0,0 +1,63 @@
+# kine's website
+
+This is the source code for my personal website. I built it as a landing page for myself, and as a point-of-interest for those that stumble upon it.
+
+This code shows who I am, what I am building, and the things I care about in software.
+
+The design is very human. The code is built with modern tooling so I can keep iterating quickly.
+
+## Why this exists
+
+This repo is where I experiment with:
+
+- Personal storytelling through UI
+- JSON-driven content that is easy to edit
+- Small interactive features (windows, modals, media embeds)
+- A workflow that is simple enough to maintain long-term
+
+## Tech stack
+
+- React + TypeScript
+- ~~Astro~~
+- Vite for development and builds
+- xp.css for the nostalgia
+
+## Local development
+
+Start the dev server:
+
+```
+npm run dev
+```
+
+Build for production:
+
+```
+npm run build
+```
+
+Run linting:
+
+```
+npm run lint
+```
+
+Dependency audit:
+
+```
+npm run check:audit
+```
+
+## Notes
+
+Most content is managed through JSON, rendered into components in the browser.
+
+This keeps content updates straightforward while still allowing rich UI behavior.
+
+Some pages rely on raw github user content to serve the json so that a full website-rebuild is not necessary for updating content on those pages, such as blog.
+
+## Contact
+
+If you are here to learn more about me professionally, the website includes my resume and contact details.
+
+Thanks for visiting.

package/SECURITY.md

@@ -0,0 +1,11 @@
+# Security Policy
+
+## Supported Versions
+
+This website is live updated from this repository through continuous deployment.
+
+Please consult the version history, or any markdown files in the root of the project for support!
+
+## Reporting a Vulnerability
+
+Please report vulnerabilities directly through Github issues.

package/admin/Admin.csproj

@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net9.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+  </PropertyGroup>
+</Project>

package/admin/Dockerfile

@@ -0,0 +1,14 @@
+FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS base
+WORKDIR /app
+EXPOSE 8080
+ENV ASPNETCORE_URLS=http://+:8080
+
+FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
+WORKDIR /src
+COPY . .
+RUN dotnet publish -c Release -o /app/publish
+
+FROM base AS final
+WORKDIR /app
+COPY --from=build /app/publish .
+ENTRYPOINT ["dotnet", "Admin.dll"]

package/admin/Program.cs

@@ -0,0 +1,8 @@
+var builder = WebApplication.CreateBuilder(args);
+
+var app = builder.Build();
+
+app.MapGet("/", () => Results.Text("nothing to see here", "text/plain"));
+app.MapGet("/status", () => TypedResults.Ok(new { ok = true, service = "admin", timestamp = DateTimeOffset.UtcNow }));
+
+app.Run();

package/deploy-admin-cloud-run.md

@@ -0,0 +1,229 @@
+# ASP.NET Minimal API → Cloud Run via GitHub Actions
+
+Deploy a single-file ASP.NET endpoint to Google Cloud Run, accessible at `admin.akinevz.com`. Everything triggered on `git push main`.
+
+**Flow:** push → Actions → docker build → Artifact Registry → Cloud Run → Cloudflare DNS → `admin.akinevz.com`
+
+Cloud Run free tier: 2 million requests/month, 360,000 GB-seconds. Sufficient for a personal site.  
+Nearest region to Hove, UK: **europe-west1** (Belgium).
+
+---
+
+## Step 1 — GCP Setup
+
+Firebase already lives in a GCP project. Enable two additional APIs in GCP Console:
+
+- Artifact Registry API
+- Cloud Run Admin API
+
+Create a Service Account for GitHub Actions:
+
+- Name: `github-actions-deploy`
+- Roles: `roles/run.admin`, `roles/artifactregistry.writer`, `roles/iam.serviceAccountUser`
+- Download JSON key → add to GitHub repo secrets as `GCP_SA_KEY`
+- Also add secret `GCP_PROJECT_ID` = your GCP project ID
+
+---
+
+## Step 2 — Create Artifact Registry Repository
+
+GCP Console → Artifact Registry → Create Repository:
+
+- Name: `admin`
+- Format: Docker
+- Region: `europe-west1`
+
+---
+
+## Step 3 — ASP.NET Minimal API
+
+Create folder `admin/` in the repo root.
+
+**admin/Admin.csproj**
+```xml
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net9.0</TargetFramework>
+  </PropertyGroup>
+</Project>
+```
+
+**admin/Program.cs**
+```csharp
+var app = WebApplication.Create(args);
+
+app.MapGet("/", () => "nothing to see here");
+app.MapGet("/status", () => Results.Ok(new { ok = true }));
+
+app.Run();
+```
+
+**admin/Dockerfile**
+```dockerfile
+FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS base
+WORKDIR /app
+EXPOSE 8080
+ENV ASPNETCORE_URLS=http://+:8080
+
+FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
+WORKDIR /src
+COPY . .
+RUN dotnet publish -c Release -o /app/publish
+
+FROM base AS final
+WORKDIR /app
+COPY --from=build /app/publish .
+ENTRYPOINT ["dotnet", "Admin.dll"]
+```
+
+---
+
+## Step 4 — GitHub Actions Workflow
+
+Create `.github/workflows/deploy-admin.yml`:
+
+```yaml
+name: Deploy Admin to Cloud Run
+
+on:
+  push:
+    branches: [main]
+    paths: ['admin/**', '.github/workflows/deploy-admin.yml']
+
+env:
+  REGION: europe-west1
+  SERVICE: admin
+  IMAGE: europe-west1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/admin/app
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - uses: google-github-actions/setup-gcloud@v2
+
+      - run: gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev
+
+      - run: |
+          docker build -t ${{ env.IMAGE }}:${{ github.sha }} ./admin
+          docker push ${{ env.IMAGE }}:${{ github.sha }}
+
+      - run: |
+          gcloud run deploy ${{ env.SERVICE }} \
+            --image ${{ env.IMAGE }}:${{ github.sha }} \
+            --region ${{ env.REGION }} \
+            --platform managed \
+            --allow-unauthenticated \
+            --port 8080
+```
+
+---
+
+## Step 5 — Custom Domain: admin.akinevz.com
+
+Cloud Run supports custom domains directly — no Firebase rewrite needed for a subdomain.
+
+### 5a — Map domain in Cloud Run
+
+```bash
+gcloud beta run domain-mappings create \
+  --service admin \
+  --domain admin.akinevz.com \
+  --region europe-west1
+```
+
+This outputs DNS records to add. They will look something like:
+
+```
+Type    Name     Value
+CNAME   admin    ghs.googlehosted.com
+```
+
+### 5b — Add DNS record in Cloudflare
+
+1. Cloudflare Dashboard → akinevz.com → DNS
+2. Add record:
+   - Type: `CNAME`
+   - Name: `admin`
+   - Target: `ghs.googlehosted.com`
+   - **Proxy status: DNS only (grey cloud)** ← required, Cloud Run handles TLS itself
+3. Save
+
+> ⚠️ **Reminder:** Cloudflare proxy (orange cloud) must be OFF for Cloud Run custom domains. Cloud Run provisions its own TLS certificate via Google-managed SSL. Orange cloud will break certificate verification.
+
+SSL certificate provisioning takes ~15 minutes after DNS propagates.
+
+### 5c — Verify
+
+```bash
+gcloud beta run domain-mappings describe \
+  --domain admin.akinevz.com \
+  --region europe-west1
+```
+
+Status should show `CertificateProvisioned`.
+
+---
+
+## Step 6 — Firebase Hosting (main site, unchanged)
+
+`firebase.json` stays as-is for the React SPA. The `/admin` path on the main domain is now unused — subdomain handles it instead.
+
+```json
+{
+  "hosting": {
+    "public": "dist",
+    "rewrites": [
+      {
+        "source": "**",
+        "destination": "/index.html"
+      }
+    ]
+  }
+}
+```
+
+---
+
+## Step 7 — First Deploy
+
+Push `admin/` and the workflow file. Actions will:
+
+- Build the Docker image
+- Push to Artifact Registry
+- Deploy to Cloud Run as service `admin`
+
+Then run domain mapping command from Step 5a, add Cloudflare DNS, wait for cert.
+
+---
+
+## Repo Structure
+
+```
+frontend/
+├── admin/
+│   ├── Admin.csproj
+│   ├── Program.cs
+│   └── Dockerfile
+├── .github/
+│   └── workflows/
+│       ├── deploy-firebase.yml   ← existing
+│       └── deploy-admin.yml      ← new
+├── firebase.json
+└── src/                          ← React frontend
+```
+
+---
+
+## Notes
+
+- Cloud Run scales to zero when idle — no cost when unused.
+- `ASPNETCORE_URLS` must be `http://+:8080` — Cloud Run routes to port 8080 by default.
+- `--allow-unauthenticated` exposes the endpoint publicly. Add auth middleware in `Program.cs` if needed.
+- Artifact Registry storage billed after 500 MB free. Prune old image tags periodically.
+- Cloudflare proxy must stay grey (DNS only) on the `admin` CNAME — never orange.

package/eslint.config.js

@@ -0,0 +1,28 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import tseslint from 'typescript-eslint'
+
+export default tseslint.config(
+  { ignores: ['dist', '.astro'] },
+  {
+    extends: [js.configs.recommended, ...tseslint.configs.recommended],
+    files: ['**/*.{ts,tsx}'],
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+    },
+    plugins: {
+      'react-hooks': reactHooks,
+      'react-refresh': reactRefresh,
+    },
+    rules: {
+      ...reactHooks.configs.recommended.rules,
+      'react-refresh/only-export-components': [
+        'warn',
+        { allowConstantExport: true },
+      ],
+    },
+  },
+)

package/firebase.json

@@ -0,0 +1,5 @@
+{
+  "firestore": {
+    "rules": "firestore.rules"
+  }
+}

package/firestore.rules

@@ -0,0 +1,29 @@
+rules_version = '2';
+service cloud.firestore {
+  match /databases/{database}/documents {
+    match /resume_interest/{docId} {
+      allow create: if
+        request.resource.data.keys().hasOnly([
+          'email',
+          'source',
+          'userAgent',
+          'createdAt'
+        ])
+        && request.resource.data.email is string
+        && request.resource.data.email.size() > 5
+        && request.resource.data.email.size() <= 254
+        && request.resource.data.email.matches('^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$')
+        && request.resource.data.source == 'resume_page'
+        && request.resource.data.userAgent is string
+        && request.resource.data.userAgent.size() > 0
+        && request.resource.data.userAgent.size() <= 1024
+        && request.resource.data.createdAt == request.time;
+
+      allow read, update, delete: if false;
+    }
+
+    match /{document=**} {
+      allow read, write: if false;
+    }
+  }
+}

package/index.html

@@ -0,0 +1,52 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta
+      name="viewport"
+      content="width=device-width, initial-scale=1.0, maximum-scale=10.0, user-scalable=yes"
+    />
+    <meta
+      name="description"
+      content="my cozy little personal website"
+      data-route-meta="description"
+    />
+    <link
+      rel="canonical"
+      href="https://akinevz.com/"
+      data-route-meta="canonical"
+    />
+    <meta property="og:type" content="website" />
+    <meta property="og:title" content="home of kine" data-route-meta="og:title" />
+    <meta
+      property="og:description"
+      content="my cozy little personal website"
+      data-route-meta="og:description"
+    />
+    <meta property="og:url" content="https://akinevz.com/" data-route-meta="og:url" />
+    <meta property="og:image" content="https://akinevz.com/avatar.png" data-route-meta="og:image" />
+    <meta name="twitter:card" content="summary" data-route-meta="twitter:card" />
+    <meta
+      name="twitter:image"
+      content="https://akinevz.com/avatar.png"
+      data-route-meta="twitter:image"
+    />
+    <meta name="twitter:title" content="home of kine" data-route-meta="twitter:title" />
+    <meta
+      name="twitter:description"
+      content="my cozy little personal website"
+      data-route-meta="twitter:description"
+    />
+    <title data-route-meta="title">home of kine</title>
+    <link
+      rel="stylesheet"
+      href="https://unpkg.com/xp.css@0.2.3/dist/98.css"
+      id="theme-css"
+    />
+    <noscript><link rel="stylesheet" href="/loading.css" /></noscript>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "website-xp-phone",
+  "version": "1.5.0",
+  "author": "Kirill <kine> Nevzorov <akinevz@outlook.com>",
+  "type": "module",
+  "scripts": {
+    "dev": "npx -y node@20 ./scripts/hoist-dev-blog-local.mjs",
+    "build": "npm run generate:music && vite build",
+    "build:local": "npm run generate:music && npm run publish:music && vite build",
+    "preview": "vite preview --host 127.0.0.1 --port 8086",
+    "lint": "eslint ./src --ext .ts,.tsx",
+    "test": "node --test",
+    "test:watch": "node --test --watch",
+    "check:audit": "npm audit --audit-level=low",
+    "security:check": "npm run lint && npm run test && npm run check:audit",
+    "pagerts": "NPM_CONFIG_LOGLEVEL=error npx --yes pagerts@latest",
+    "generate:music": "node ./scripts/generate-soundcloud-json.mjs",
+    "publish:music": "node ./scripts/publish-soundcloud-json.mjs"
+  },
+  "dependencies": {
+    "firebase": "^12.14.0",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-markdown": "^10.1.0",
+    "react-toastify": "^11.0.5",
+    "rehype-raw": "^7.0.0",
+    "rehype-sanitize": "^6.0.0",
+    "xp.css": "^0.2.6"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.4",
+    "@types/node": "^24.9.1",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^9.39.4",
+    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.4.0",
+    "pagerts": "^1.5.4",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.58.0",
+    "vite": "^8.0.10"
+  },
+  "overrides": {
+    "lodash": "^4.17.21"
+  }
+}