Merge pull request #63 from UniBuc-DITC/deploy

.env

@@ -0,0 +1,10 @@
+## This file should be used for credentials shared between development and production which are not sensitive. For shared sensitive credentials, write them in the ignored .env.local file.
+
+# Microsoft 365 credentials
+AZURE_AD_TENANT_ID=08a1a72f-fecd-4dae-8cec-471a2fb7c2f1
+AZURE_AD_CLIENT_ID=76adfa07-a614-4575-a6a1-e9b59d74920a
+#AZURE_AD_CLIENT_SECRET=<sensitive>
+
+# reCaptcha credentials
+NEXT_PUBLIC_RECAPTCHA=6Ld5tlYpAAAAAGp_3Y5Zp7idrOCLvPqdT2mOalfm
+#RECAPTCHA_SERVER=<sensitive>

.env.development

@@ -1,8 +1,16 @@
-# Tell NextAuth what is our app's canonical URL
-NEXTAUTH_URL=http://localhost:3000
+## This file should be used for development credentials which are not sensitive. For sensitive development credentials, write them in the ignored .env.development.local file.
+
+NEXT_PUBLIC_BASE_URL=http://localhost:3000
 
-# Configure a secret key for encrypting session tokens
+# NextAuth configuration
+NEXTAUTH_URL=http://localhost:3000
 NEXTAUTH_SECRET=dev
 
 # Connection string for Prisma
 DATABASE_URL="postgresql://taxes_app:dev_pwd@localhost:5432/taxes?schema=public"
+
+# EuPlatesc credentials
+EUPLATESC_MERCHANT_ID=44841002813
+#EUPLATESC_KEY=<sensitive>
+EUPLATESC_TEST_MODE=true
+

.env.production

@@ -0,0 +1,12 @@
+## This file should be used for production credentials which are not sensitive. For sensitive production credentials, write them in the ignored .env.production.local file.
+
+NEXT_PUBLIC_BASE_URL=https://ponou.unibuc.ro/
+
+# NextAuth configuration
+NEXTAUTH_URL=https://ponou.unibuc.ro/
+
+# EuPlatesc credentials
+EUPLATESC_MERCHANT_ID=44841002813
+#EUPLATESC_KEY=<sensitive>
+EUPLATESC_TEST_MODE=true
+

Dockerfile

@@ -0,0 +1,19 @@
+FROM node:22
+
+WORKDIR /app
+
+# Install dependencies
+COPY package*.json ./
+RUN npm install
+
+# Copy the source code
+COPY . .
+
+RUN npx prisma generate
+
+# Build the production version of the app
+RUN npm run build
+
+EXPOSE 3000
+
+CMD ["npm", "start"]

README.md

@@ -66,8 +66,6 @@ docker compose up
 The app uses [NextAuth.js](https://next-auth.js.org/) to provide support for authentication using [Microsoft Entra ID (formerly Azure AD)](https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id). In development, you have to create a `.env.local` file in the root directory and define the following environment variables:
 
 ```
-AZURE_AD_TENANT_ID=<ID of tenant in which app resides>
-AZURE_AD_CLIENT_ID=<client ID of app registration>
 AZURE_AD_CLIENT_SECRET=<client secret created for app>
 ```
 

compose.production.yml

@@ -0,0 +1,75 @@
+services:
+  # Container for web app
+  web:
+    build: .
+    depends_on:
+      - postgres
+      - nginx-proxy-acme
+    restart: unless-stopped
+    networks:
+      - nginx-proxy
+      - database
+    environment:
+      DATABASE_URL: postgresql://taxes_app:dev_pwd@postgres:5432/taxes?schema=public
+      VIRTUAL_HOST: ponou.unibuc.ro
+      LETSENCRYPT_HOST: ponou.unibuc.ro
+
+  # Container for NGINX reverse proxy
+  nginx-proxy:
+    image: nginxproxy/nginx-proxy:latest
+    restart: unless-stopped
+    ports:
+      - 80:80
+      - 443:443
+    volumes:
+      - nginx-certs:/etc/nginx/certs
+      - nginx-vhost:/etc/nginx/vhost.d
+      - nginx-html:/usr/share/nginx/html
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+    networks:
+      - nginx-proxy
+    labels:
+      - com.github.nginx-proxy.nginx
+    environment:
+      TRUST_DOWNSTREAM_PROXY: false
+
+  # ACME companion for NGINX, for automatical TLS certificate generation
+  nginx-proxy-acme:
+    image: nginxproxy/acme-companion:latest
+    restart: unless-stopped
+    depends_on:
+      - nginx-proxy
+    volumes:
+      - nginx-certs:/etc/nginx/certs
+      - nginx-vhost:/etc/nginx/vhost.d
+      - nginx-html:/usr/share/nginx/html
+      - /etc/acme.sh
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    networks:
+      - nginx-proxy
+    environment:
+      DEFAULT_EMAIL: [email protected]
+
+  # Database container
+  postgres:
+    image: postgres:16.1
+    expose:
+      - 5432
+    environment:
+      POSTGRES_USER: taxes_app
+      POSTGRES_PASSWORD: dev_pwd
+      POSTGRES_DB: taxes
+    volumes:
+      - db-data:/var/lib/postgresql/data
+    networks:
+      - database
+
+volumes:
+  nginx-certs:
+  nginx-vhost:
+  nginx-html:
+  db-data:
+
+networks:
+  nginx-proxy:
+  database:

compose.yaml → compose.yml

@@ -1,9 +1,14 @@
 services:
   postgres:
-    image: "postgres:16.1"
+    image: postgres:16.1
     ports:
-      - "5432:5432"
+      - 5432:5432
     environment:
       POSTGRES_USER: taxes_app
       POSTGRES_PASSWORD: dev_pwd
       POSTGRES_DB: taxes
+    volumes:
+      - db-data:/var/lib/postgresql/data
+
+volumes:
+  db-data:

next.config.js

@@ -1,6 +1,8 @@
-const withNextIntl = require("next-intl/plugin")();
+import createNextIntlPlugin from "next-intl/plugin";
+
+const withNextIntl = createNextIntlPlugin();
 
 /** @type {import('next').NextConfig} */
 const nextConfig = {};
 
-module.exports = withNextIntl(nextConfig);
+export default withNextIntl(nextConfig);