Merge pull request #93 from AshGw/dev-1

CHANGELOG.md

@@ -0,0 +1,35 @@
+### Changelog
+
+All notable changes to this project will be documented in this file. Dates are displayed in UTC.
+
+Generated by [`auto-changelog`](https://github.com/CookPete/auto-changelog).
+
+#### 0.8.0
+
+- ci: run all in one check [`#88`](https://github.com/AshGw/mysite/pull/88)
+- build: containerize the app (#85) & separate workflow runs (#86) closes [`#87`](https://github.com/AshGw/mysite/pull/87)
+- refactor: organize the layout [`#84`](https://github.com/AshGw/mysite/pull/84)
+- purge vs code extensions [`#80`](https://github.com/AshGw/mysite/pull/80)
+- Some dynamic animations [`#73`](https://github.com/AshGw/mysite/pull/73)
+- update build [`#70`](https://github.com/AshGw/mysite/pull/70)
+- make nav [`#64`](https://github.com/AshGw/mysite/pull/64)
+- feat: make `AnimatedCopyButton` for code blocks [`#63`](https://github.com/AshGw/mysite/pull/63)
+- fix: blogs not showing [`#60`](https://github.com/AshGw/mysite/pull/60)
+- add load more [`#59`](https://github.com/AshGw/mysite/pull/59)
+- Have blogs load more [`#58`](https://github.com/AshGw/mysite/pull/58)
+- use actions [`#57`](https://github.com/AshGw/mysite/pull/57)
+- overall UI is all set [`#52`](https://github.com/AshGw/mysite/pull/52)
+- finish blogs setup [`#50`](https://github.com/AshGw/mysite/pull/50)
+- Whole lotta gang shit [`#46`](https://github.com/AshGw/mysite/pull/46)
+- ci: fix issue templates typo [`#32`](https://github.com/AshGw/mysite/pull/32)
+- Dev pipeline [`#18`](https://github.com/AshGw/mysite/pull/18)
+- feat: `NotFound` set [`#14`](https://github.com/AshGw/mysite/pull/14)
+- Dev pipeline [`#13`](https://github.com/AshGw/mysite/pull/13)
+- Prod preview [`#12`](https://github.com/AshGw/mysite/pull/12)
+- Dev pipeline [`#10`](https://github.com/AshGw/mysite/pull/10)
+- refactor: project cleanup [`#7`](https://github.com/AshGw/mysite/pull/7)
+- Dev pipeline [`#6`](https://github.com/AshGw/mysite/pull/6)
+- Dev pipeline [`#5`](https://github.com/AshGw/mysite/pull/5)
+- ci: add auto-changelog [`527d904`](https://github.com/AshGw/mysite/commit/527d904d1e1595d6436bbdfdeabdd0aa9bcf25f1)
+- ci: add auto-changelog [`e257b08`](https://github.com/AshGw/mysite/commit/e257b08ecc3268cc4ee61efa7b2ac5dbaa33bceb)
+- feat: make bg blurry when min nav is active [`241c949`](https://github.com/AshGw/mysite/commit/241c949bdc0ae17b183489862cc73b107829057f)

Dockerfile

@@ -1,4 +1,7 @@
-FROM node:20-slim AS base
+ARG NODE_VERSION=18
+ARG PORT=3000
+
+FROM node:${NODE_VERSION}-alpine AS base 
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
 RUN corepack enable
@@ -15,5 +18,5 @@ RUN pnpm run build
 FROM base
 COPY --from=prod-deps /app/node_modules /app/node_modules
 COPY --from=build /app/.next /app/.next
-EXPOSE 3000
+EXPOSE ${PORT}
 CMD [ "pnpm", "start" ]

README.md

@@ -1,3 +1,3 @@
 ```shell
-g cl [email protected]:AshGw/mysite.git && mysite && g branch -M dev && j s && e .
+g cl [email protected]:AshGw/mysite.git && mysite && g ck -b dev && j s && e .
 ```

justfile

@@ -43,6 +43,10 @@ alias rn := reincarnate
 @deploy:
     echo 'this command is not set yet'
 
+@u:
+    docker-compose up
+@d:
+    docker-compose down
 
 @reincarnate:
     rm -rf node_modules

next.config.js

@@ -1,6 +1,14 @@
 /** @type {import('next').NextConfig} */
 
 const nextConfig = {
+  headers() {
+    return [
+      {
+        source: '/(.*)',
+        headers: securityHeaders,
+      },
+    ];
+  },
   images: {
     remotePatterns: [
       {
@@ -16,3 +24,65 @@ const nextConfig = {
 };
 
 module.exports = nextConfig;
+
+const securityHeaders = [
+  {
+    key: 'Content-Security-Policy',
+    value: `
+      frame-ancestors 'none';
+      default-src 'self';
+      img-src 'self' blob: data: avatars.githubusercontent.com;
+      script-src 'self';
+      font-src 'self';
+      style-src 'self';
+      media-src 'none';
+      connect-src 'self';
+      base-uri 'self';
+			form-action 'self';
+      frame-src 'self' *.codesandbox.io *.x.com;
+      block-all-mixed-content;
+			upgrade-insecure-requests;
+      object-src 'none';
+  `,
+  },
+  {
+    key: 'Referrer-Policy',
+    value: 'no-referrer, strict-origin-when-cross-origin',
+  },
+  {
+    key: 'X-Frame-Options', // for older browsers
+    value: 'DENY',
+  },
+  {
+    key: 'X-Content-Type-Options',
+    value: 'nosniff',
+  },
+  {
+    key: 'X-DNS-Prefetch-Control',
+    value: 'on',
+  },
+  {
+    key: 'Strict-Transport-Security',
+    value: 'max-age=63072000; includeSubDomains; preload',
+  },
+  {
+    key: 'Permissions-Policy', // even tho I won't need em, prolly
+    value: 'camera=(), speaker=(), microphone=(), geolocation=()',
+  },
+  {
+    key: 'Server',
+    value: 'deez nuts v69.0.1',
+  },
+  {
+    key: 'X-Powered-By',
+    value: 'deez nuts v69.0.1',
+  },
+  {
+    key: 'Cross-Origin-Opener-Polic',
+    value: 'same-origin',
+  },
+  {
+    key: 'Cross-Origin-Resource-Policy',
+    value: 'require-corp',
+  },
+];

package.json

@@ -1,6 +1,6 @@
 {
   "name": "mysite",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -13,7 +13,8 @@
     "lint:knip": "knip --production --strict --exclude exports,nsExports,types,nsTypes",
     "hooks": "husky install",
     "format-check": "prettier --check .",
-    "format": "prettier . --write"
+    "format": "prettier . --write",
+    "version": "auto-changelog -p && git add CHANGELOG.md"
   },
   "keywords": [],
   "author": "",
@@ -30,6 +31,7 @@
     "@types/react": "^18",
     "@types/react-dom": "^18",
     "@typescript-eslint/eslint-plugin": "^6.21.0",
+    "auto-changelog": "^2.4.0",
     "autoprefixer": "^10.0.1",
     "eslint": "^8",
     "eslint-config-next": "14.0.4",