Merge pull request #394 from SheetMetalConnect/claude/one-click-setup-VQDOc

Author: SheetMetalConnect

.env.example

@@ -26,12 +26,13 @@ VITE_SUPABASE_PROJECT_ID="your-project-id"
 # VITE_DEFAULT_LANGUAGE="en"
 
 # =============================================================================
-# CAPTCHA CONFIGURATION (Required for auth)
+# CAPTCHA CONFIGURATION (Optional - recommended for production)
 # =============================================================================
 # Cloudflare Turnstile site key - get from Cloudflare dashboard
 # https://dash.cloudflare.com/?to=/:account/turnstile
+# If not set, auth will work without captcha protection
 
-VITE_TURNSTILE_SITE_KEY="your-turnstile-site-key"
+# VITE_TURNSTILE_SITE_KEY="your-turnstile-site-key"
 
 # =============================================================================
 # DOCUMENTATION URL (Optional - for self-hosters)

.gitignore

@@ -42,8 +42,7 @@ __pycache__/
 
 # === Security: Sensitive Files ===
 
-# Supabase configuration (contains project ID)
-supabase/config.toml
+# Supabase temp files
 supabase/.temp/
 
 # Environment files (contains credentials)

DEPLOY.md

@@ -1,53 +1,120 @@
-# Deploy Eryxon Flow
+# Deployment Guide
+
+## Quick Start (Automated)
+
+The fastest way to deploy Eryxon MES:
+
+```bash
+chmod +x scripts/setup.sh
+./scripts/setup.sh
+```
+
+This interactive script handles all setup steps. For manual setup, continue reading.
 
 ## Prerequisites
 
-- Supabase account
-- Cloudflare account (free tier)
+- Node.js 20+
+- [Supabase CLI](https://supabase.com/docs/guides/cli)
+- A [Supabase](https://supabase.com) project
 
-## Step 1: Create Supabase Project
+## Step 1: Supabase Setup
 
+### Create Project
+1. Go to [supabase.com](https://supabase.com) and create a new project
+2. Note your **Project URL**, **anon key**, and **service role key** from Settings > API
+
+### Apply Database Schema
 ```bash
-# 1. Go to supabase.com → Create project
-# 2. Get credentials from Settings → API:
-#    - Project URL
-#    - anon key
-#    - Project Ref
+cp .env.example .env
+# Fill in VITE_SUPABASE_URL and VITE_SUPABASE_PUBLISHABLE_KEY
 
-# 3. Apply schema
-supabase link --project-ref YOUR_REF
+supabase link --project-ref <your-project-ref>
 supabase db push
+```
 
-# 4. Create storage
-supabase storage create parts-images
-supabase storage create issues
+### Set Up Storage & Cron Jobs
+```bash
+# Apply via SQL Editor in Supabase Dashboard, or:
+supabase db execute < supabase/seed.sql
+```
 
-# 5. Deploy functions
+This creates storage buckets (`parts-images`, `issues`, `parts-cad`) and schedules cron jobs.
+
+### Deploy Edge Functions
+```bash
 supabase functions deploy
 ```
 
-## Step 2: Deploy to Cloudflare Pages
+### Set Edge Function Secrets
+```bash
+supabase secrets set \
+  SUPABASE_URL=<your-project-url> \
+  SUPABASE_SERVICE_ROLE_KEY=<your-service-role-key>
+```
+
+Optional secrets:
+| Secret | Purpose |
+|--------|---------|
+| RESEND_API_KEY | Email invitations via Resend |
+| APP_URL | Base URL for invitation links |
+| EMAIL_FROM | Sender email for invitations |
+| CRON_SECRET | Auth for monthly-reset-cron |
+| SELF_HOSTED_MODE | Set to "true" for self-hosted mode |
 
+## Step 2: Deploy Frontend
+
+### Option A: Local Development
 ```bash
-# 1. Go to dash.cloudflare.com
-# 2. Pages → Create → Connect Git
-# 3. Select repo
-# 4. Build: npm run build
-# 5. Output: dist
+npm ci
+npm run dev
 ```
 
-**Environment Variables** (set in Cloudflare):
+### Option B: Cloudflare Pages
+1. Connect your Git repository to Cloudflare Pages
+2. Build command: `npm run build`
+3. Output directory: `dist`
+4. Add environment variables in Cloudflare Pages settings
+
+### Option C: Docker
+```bash
+docker build \
+  --build-arg VITE_SUPABASE_URL=<url> \
+  --build-arg VITE_SUPABASE_PUBLISHABLE_KEY=<key> \
+  -t eryxon-flow .
+
+docker run -p 80:80 eryxon-flow
 ```
-VITE_SUPABASE_URL = https://YOUR_REF.supabase.co
-VITE_SUPABASE_PUBLISHABLE_KEY = your-anon-key
-VITE_SUPABASE_PROJECT_ID = YOUR_REF
+
+### Option D: Docker Compose (Production with SSL)
+```bash
+# Edit Caddyfile - replace domain with yours
+# Edit docker-compose.prod.yml if needed
+docker compose -f docker-compose.prod.yml up -d
 ```
 
-## Step 3: Custom Domain
+## Step 3: First Login
+
+1. Navigate to your deployment URL
+2. Click "Sign Up" to create the first admin account
+3. The first user automatically becomes admin with their own tenant
+
+## Optional: Cloudflare Turnstile (CAPTCHA)
+
+Turnstile is optional. Without it, auth works but without bot protection.
+
+To enable:
+1. Create a Turnstile widget at [Cloudflare Dashboard](https://dash.cloudflare.com/?to=/:account/turnstile)
+2. Set `VITE_TURNSTILE_SITE_KEY` in your environment
+3. Configure the Turnstile secret key in Supabase Dashboard > Auth > Captcha
+
+## Verification
+
+Run the verification script to check your setup:
+```bash
+chmod +x scripts/verify-setup.sh
+./scripts/verify-setup.sh
+```
 
-In Cloudflare Pages:
-- Custom domains → Add domain
-- Enter: app.eryxon.eu
-- DNS: CNAME app → eryxon-flow.pages.dev
+## Full Documentation
 
-Done.
+See [docs/SELF_HOSTING_GUIDE.md](docs/SELF_HOSTING_GUIDE.md) for the complete self-hosting guide including Docker, Cloudflare Pages, and troubleshooting.

Dockerfile

@@ -12,13 +12,27 @@ RUN npm ci
 # Copy source code
 COPY . .
 
-# Build arguments for Supabase config (passed at build time)
+# Build arguments for all VITE env vars (passed at build time)
 ARG VITE_SUPABASE_URL
 ARG VITE_SUPABASE_PUBLISHABLE_KEY
+ARG VITE_SUPABASE_PROJECT_ID
+ARG VITE_TURNSTILE_SITE_KEY
+ARG VITE_APP_TITLE
+ARG VITE_DEFAULT_LANGUAGE
+ARG VITE_DOCS_URL
+ARG VITE_CAD_SERVICE_URL
+ARG VITE_CAD_SERVICE_API_KEY
 
 # Set as environment variables for Vite build
 ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL
 ENV VITE_SUPABASE_PUBLISHABLE_KEY=$VITE_SUPABASE_PUBLISHABLE_KEY
+ENV VITE_SUPABASE_PROJECT_ID=$VITE_SUPABASE_PROJECT_ID
+ENV VITE_TURNSTILE_SITE_KEY=$VITE_TURNSTILE_SITE_KEY
+ENV VITE_APP_TITLE=$VITE_APP_TITLE
+ENV VITE_DEFAULT_LANGUAGE=$VITE_DEFAULT_LANGUAGE
+ENV VITE_DOCS_URL=$VITE_DOCS_URL
+ENV VITE_CAD_SERVICE_URL=$VITE_CAD_SERVICE_URL
+ENV VITE_CAD_SERVICE_API_KEY=$VITE_CAD_SERVICE_API_KEY
 
 # Build the app
 RUN npm run build
@@ -37,6 +51,6 @@ EXPOSE 80
 
 # Health check
 HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
-  CMD wget --quiet --tries=1 --spider http://localhost/ || exit 1
+  CMD wget --quiet --tries=1 --spider http://localhost/health || exit 1
 
 CMD ["nginx", "-g", "daemon off;"]