mirror of
https://github.com/narrrl/narl-workspace.git
synced 2026-11-03 16:41:27 +01:00
nvrl
49b2056215
The diary grows into a workspace: a flat list of dated entries becomes a tree of spaces, and the app is renamed to match what it now is. Spaces and nodes One recursive `nodes` table replaces `entries`: a space is a root node, and folders and documents nest under it without limit. Entries keep their ids through the migration, so share tokens, media links and the drafts in localStorage all still resolve. Folder import A folder or a zip is uploaded as a document tree. Markdown becomes documents titled from their first heading, everything else becomes media, and relative links between the imported files are rewritten to the paths they landed at, so a set of cross-linked notes stays navigable after the upload. Boards A kanban board per space, with the space as the board: lists, cards, due dates and an optional link to a document. `diary` has none. Mail SMTP notifications through an outbox. A mail is enqueued under a key naming the occurrence it belongs to, so a restart cannot resend and a relay that refuses is retried with a widening backoff. Four kinds: the diary reminder, cards due and overdue, a weekly digest, and logins from a browser that has not been seen before or a burst of failures. All of it is dormant until WORKSPACE_SMTP_URL is set. Rename Everything user-visible says workspace; everything that already exists outside this repo keeps its name, because renaming it would break a running deployment for tidiness alone: the database file, the docker volume, the session cookie, the Proton device, the keyring entry and the localStorage keys. Configuration reads WORKSPACE_* first and falls back to DIARY_*, so the deployed .env keeps working untouched.
43 lines
1.5 KiB
Docker
43 lines
1.5 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# 1. Frontend. Built first so a Rust-only change does not re-run bun.
|
|
FROM oven/bun:1-alpine AS web
|
|
WORKDIR /web
|
|
COPY web/package.json web/bun.lock ./
|
|
RUN bun install --frozen-lockfile
|
|
COPY web/ ./
|
|
RUN bun run build
|
|
|
|
# 2. Backend. rust-embed bakes web/dist into the binary in release mode,
|
|
# so the result is a single self-contained executable.
|
|
FROM rust:1-slim-trixie AS build
|
|
WORKDIR /app
|
|
COPY Cargo.toml Cargo.lock ./
|
|
COPY src/ ./src/
|
|
COPY migrations/ ./migrations/
|
|
COPY --from=web /web/dist/ ./web/dist/
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,target=/app/target \
|
|
cargo build --release --locked \
|
|
&& cp target/release/narl-workspace /usr/local/bin/narl-workspace
|
|
|
|
# 3. Runtime. SQLite is compiled into the binary; the only thing the image has
|
|
# to supply is a trust store. The Proton Drive client verifies TLS against
|
|
# the system CAs, and debian-slim ships none — without this, every request
|
|
# to Proton fails with "No CA certificates were loaded from the system".
|
|
FROM debian:trixie-slim
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& useradd --system --uid 10001 --create-home --home-dir /home/diary diary \
|
|
&& mkdir -p /data \
|
|
&& chown diary:diary /data
|
|
COPY --from=build /usr/local/bin/narl-workspace /usr/local/bin/narl-workspace
|
|
USER diary
|
|
WORKDIR /home/diary
|
|
VOLUME ["/data"]
|
|
ENV WORKSPACE_BIND=0.0.0.0:4242 \
|
|
WORKSPACE_DATA_DIR=/data
|
|
EXPOSE 4242
|
|
ENTRYPOINT ["/usr/local/bin/narl-workspace"]
|