requirements update & fix

Author: paoloronco

.dockerignore

@@ -0,0 +1,55 @@
+# Dependencies
+node_modules
+npm-debug.log
+yarn-error.log
+
+# Build files
+/dist
+/build
+.serverless/
+
+# Environment variables
+.env
+.env.*
+!.env.example
+
+# IDE and editor files
+.vscode/
+.idea/
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+# OS generated files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Debug logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Local development
+coverage/
+.nyc_output/
+
+# Server specific
+server/lynx.db
+server/lynx.db-journal
+
+# Test files
+**/__tests__/**
+**/*.test.*
+**/*.spec.*
+
+# Local development
+.cache/
+.temp/
+.tmp/

.env.example

@@ -0,0 +1,30 @@
+# Required Environment Variables
+NODE_ENV=production
+PORT=8080
+
+# Security
+COOKIE_SECRET=your-secure-cookie-secret-here
+JWT_SECRET=your-jwt-secret-here
+
+# Frontend Configuration
+FRONTEND_URL=http://localhost:3000
+
+# Database Configuration (SQLite is used by default)
+# DATABASE_URL=sqlite:./lynx.db
+
+# Optional: Enable detailed logging
+# DEBUG=app:*,server:*
+
+# Optional: Rate limiting configuration
+# RATE_LIMIT_WINDOW_MS=900000  # 15 minutes
+# RATE_LIMIT_MAX=300           # Max requests per window
+
+# Optional: CORS configuration
+# CORS_ORIGIN=http://localhost:3000
+
+# Optional: Session configuration
+# SESSION_SECURE=true
+# SAME_SITE=strict
+
+# Note: Never commit actual secrets to version control!
+# Create a .env file with your actual values and add it to .gitignore

Dockerfile

@@ -2,31 +2,44 @@
 FROM node:18-slim AS builder
 WORKDIR /app
 
-# Dev deps incluse per poter fare vite build
+# Install frontend dependencies and build
 COPY package*.json ./
 RUN npm ci
 
-# Copia sorgenti e builda il frontend (Vite)
+# Copy source and build frontend (Vite)
 COPY . .
 RUN npm run build
 
-# Installa solo le prod deps del server
+# Set up server dependencies
 WORKDIR /app/server
+COPY server/package*.json ./
 RUN npm ci --omit=dev
 
+# Copy built frontend to server's public directory
+RUN mkdir -p public
+RUN cp -r ../dist/* public/
+
 # ---------- STAGE 2: runtime ----------
 FROM node:18-slim
 WORKDIR /app
+
+# Set production environment
 ENV NODE_ENV=production
 ENV PORT=8080
 
-# porta solo ciò che serve
-COPY --from=builder /app/dist    /app/dist
-COPY --from=builder /app/server  /app/server
+# Install production dependencies
+COPY --from=builder /app/server/package*.json ./
+COPY --from=builder /app/server/node_modules ./node_modules
+
+# Copy built application
+COPY --from=builder /app/server .
 
-# Il server ha già le sue dipendenze in /app/server/node_modules
+# Expose port
 EXPOSE 8080
 
-# Avvia direttamente il server (che ascolta su 8080)
-WORKDIR /app/server
-CMD ["npm","start"]
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD curl -f http://localhost:8080/ || exit 1
+
+# Start the server
+CMD ["node", "server.js"]

server/package-lock.json

@@ -18,6 +18,7 @@
     "express-rate-limit": "^7.2.0",
     "helmet": "^7.1.0",
     "jsonwebtoken": "^9.0.2",
+    "lusca": "^1.7.0",
     "multer": "^1.4.5-lts.1",
     "sqlite3": "^5.1.6",
     "zod": "^3.23.8"