[codex] migrate ElinksNet to Next.js and HeroUI

.dockerignore

@@ -5,10 +5,20 @@
 .vscode
 
 node_modules
+.next
 dist
 logs
 localtest
-package-lock.json
+frontend
+server
+common
+backend-server.js
+frontend-server.js
+server.js
+vite.config.js
+index.html
+tests
+local-homepage.png
 
 .DS_Store
 .env

.env.example

@@ -4,22 +4,20 @@ FRONTEND_PORT="18966"
 ALLOWED_DOMAINS=""
 # APIs
 BING_MAP_API_KEY=""
-GOOGLE_MAP_API_KEY=""
 IPINFO_API_TOKEN=""
 CLOUDFLARE_API=""
 IPAPIIS_API_KEY=""
 IP2LOCATION_API_KEY=""
-IPCHECKING_API_KEY=""
+PROXYCHECK_API_KEY=""
+ELINKSNET_API_KEY=""
 MAC_LOOKUP_API_KEY=""
-IPCHECKING_API_ENDPOINT=""
+ELINKSNET_API_ENDPOINT=""
+GROQ_API_KEY=""
+ELINKS_AI_MODEL="llama-3.3-70b-versatile"
 # Security related
 SECURITY_BLACKLIST_LOG_FILE_PATH=""
 SECURITY_RATE_LIMIT=""
 SECURITY_DELAY_AFTER=""
-# CURL API
-VITE_CURL_IPV4_DOMAIN=""
-VITE_CURL_IPV6_DOMAIN=""
-VITE_CURL_IPV64_DOMAIN=""
 # Google Analytics
 VITE_GOOGLE_ANALYTICS_ID=""
 # MaxMind

.github/workflows/docker-image.yml

@@ -57,9 +57,10 @@ jobs:
         tags: |
           elinksteam/elinksnet:latest
           elinksteam/elinksnet:${{ env.RELEASE_VERSION }}
-          ghcr.io/${{ github.repository_owner }}/elinksnet:latest
-          ghcr.io/${{ github.repository_owner }}/elinksnet:${{ env.RELEASE_VERSION }}
+          ghcr.io/elinksteam/elinksnet:latest
+          ghcr.io/elinksteam/elinksnet:${{ env.RELEASE_VERSION }}
         labels: |
           org.opencontainers.image.version=${{ env.RELEASE_VERSION }}
           org.opencontainers.image.description=${{ env.RELEASE_NOTES }}
+          org.opencontainers.image.source=https://github.com/ElinksTeam/ElinksNet
         platforms: linux/amd64,linux/arm64

.github/workflows/dockerhub-readme.yml

@@ -33,5 +33,5 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
-          repository: jason5ng32/myip
+          repository: elinksteam/elinksnet
           readme-filepath: ./README.md

.gitignore

@@ -9,6 +9,7 @@ lerna-debug.log*
 .claude
 
 node_modules
+.next
 dist
 dist-ssr
 *.local
@@ -26,7 +27,6 @@ dist-ssr
 .env
 .vscode/extensions.json
 
-package-lock.json
 localtest
 
 .VSCodeCounter
@@ -37,3 +37,5 @@ common/maxmind-db/*.bak
 common/maxmind-db/*.next
 common/maxmind-db/*.mmdb
 .learnings/
+.vercel
+.env*

AGENTS.md

@@ -1,15 +1,15 @@
 # AGENTS.md
 
-Single source of truth for anyone — human or AI — contributing to MyIP.
+Single source of truth for anyone — human or AI — contributing to ElinksNet.
 
 For area-specific details, see:
 
 - Frontend (Vue 3 SPA): @frontend/AGENTS.md
-- Backend API (Express): @api/AGENTS.md
+- Backend API (Express): @server/handlers/AGENTS.md
 
 ## Overview
 
-**MyIP** (IPCheck.ing) is an open-source IP toolbox: IP lookup, connectivity tests, WebRTC / DNS-leak detection, speed test, MTR, Whois, security checklist, browser fingerprint, anonymity checks, and more.
+**ElinksNet** is an open-source IP toolbox maintained by Elinks: IP lookup, connectivity tests, WebRTC / DNS-leak detection, speed test, MTR, Whois, security checklist, browser fingerprint, anonymity checks, and more.
 
 Single repo, two halves: a Vue 3 SPA front-end and an Express 5 back-end API, served side by side.
 
@@ -53,13 +53,14 @@ Single repo, two halves: a Vue 3 SPA front-end and an Express 5 back-end API, se
 ├── CLAUDE.md                    ← Claude-specific pointer to AGENTS.md
 │
 ├── frontend/                    ← Vue 3 SPA (see frontend/AGENTS.md)
-├── api/                         ← Express handlers (see api/AGENTS.md)
+├── server/handlers/             ← Express handlers (see server/handlers/AGENTS.md)
 ├── common/                      ← code shared between front- and back-end
 │                                  (valid-ip / fetch-with-timeout / guards /
 │                                   referer-check / maxmind-service / …)
 ├── tests/                       ← Node test runner specs
 │
-├── backend-server.js            ← Express app (default port 11966)
+├── server.js                    ← shared Express app and Vercel entrypoint
+├── backend-server.js            ← local Express listener (default port 11966)
 ├── frontend-server.js           ← static file server for `npm start`
 ├── index.html                   ← Vite entry; #app mounts vaul-drawer-wrapper
 ├── vite.config.js
@@ -94,11 +95,11 @@ Single repo, two halves: a Vue 3 SPA front-end and an Express 5 back-end API, se
 
 ## Security & Boundaries
 
-The backend enforces access control and timeouts through shared middleware rather than per-handler code. Full details live in @api/AGENTS.md; the rules that matter at the project level:
+The backend enforces access control and timeouts through shared middleware rather than per-handler code. Full details live in @server/handlers/AGENTS.md; the rules that matter at the project level:
 
 - `requireReferer` is mounted globally on `/api/*` — handlers must not repeat the referer check.
 - `requireValidIP()` is attached per-route where `?ip` is a required param — handlers must not repeat the IP check.
-- Every upstream HTTP call goes through `fetchUpstream` (`common/fetch-with-timeout.js`) with an 8s timeout. Never add a bare `fetch()` to an `api/` handler.
+- Every upstream HTTP call goes through `fetchUpstream` (`common/fetch-with-timeout.js`) with an 8s timeout. Never add a bare `fetch()` to a `server/handlers/` module.
 
 ## Workflow
 

CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## 8.0.0 — 2026-07-03
+
+- Rebuilt the production frontend on Next.js 16, React 19, Tailwind CSS, HeroUI, and shadcn/ui.
+- Added multi-source IP intelligence with up to 26 keyless providers and field-level source transparency.
+- Added IP quality scoring, residential/mobile/datacenter classification, proxy risk, and network safety guidance.
+- Added localized geographic names and complete English, Simplified Chinese, Japanese, and Thai product copy.
+- Added deep DNS leak, WebRTC exposure, IPv4/IPv6, connectivity, speed, Globalping, RDAP, WHOIS, MAC, and browser diagnostics.
+- Added ElinksAI conversational analysis with three performance modes.
+- Added shareable report images with timestamps and SHA-256 integrity fingerprints.
+- Rebuilt the Docker image around the Next.js standalone runtime.
+- Fixed stable mobile sizing for WebRTC result cards.

Dockerfile

@@ -1,23 +1,33 @@
-# Build stage
-FROM node:24-alpine AS build-stage
+FROM node:24-alpine AS dependencies
 WORKDIR /app
-COPY package*.json ./
-RUN npm install
+COPY package.json package-lock.json ./
+RUN npm ci
+
+FROM node:24-alpine AS builder
+WORKDIR /app
+ENV NEXT_TELEMETRY_DISABLED=1
+COPY --from=dependencies /app/node_modules ./node_modules
 COPY . .
 RUN npm run build
 
-# Production stage
-FROM node:24-alpine AS production-stage
+FROM node:24-alpine AS runner
 WORKDIR /app
-COPY --from=build-stage /app/node_modules ./node_modules
-COPY --from=build-stage /app/package.json ./
-COPY --from=build-stage /app/dist ./dist
-COPY --from=build-stage /app/backend-server.js ./
-COPY --from=build-stage /app/frontend-server.js ./
-COPY --from=build-stage /app/api ./api
-COPY --from=build-stage /app/common ./common
+ENV NODE_ENV=production \
+    NEXT_TELEMETRY_DISABLED=1 \
+    HOSTNAME=0.0.0.0 \
+    PORT=18966
+
+RUN addgroup --system --gid 1001 nodejs \
+    && adduser --system --uid 1001 nextjs
+
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
 
 EXPOSE 18966
+USER nextjs
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
+  CMD node -e "fetch('http://127.0.0.1:18966/api/tools/status').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"
 
-# Start application
-CMD ["npm", "start"]
+CMD ["node", "server.js"]

LICENSE

@@ -1,6 +1,7 @@
 MIT License
 
 Copyright (c) 2024 Jason Ng
+Copyright (c) 2026 Elinks
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal