first commit

Author: DrizzleTime

.dockerignore

@@ -0,0 +1,42 @@
+# 依赖
+node_modules
+
+# 构建产物
+.next
+out
+dist
+
+# 开发文件
+*.log
+npm-debug.log*
+
+# 环境变量
+.env
+.env.*
+!.env.example
+
+# Git
+.git
+.gitignore
+
+# IDE
+.idea
+.vscode
+*.swp
+*.swo
+
+# Docker
+Dockerfile*
+docker-compose*
+.dockerignore
+
+# 其他
+README.md
+AGENTS.md
+.github
+
+# uploads
+data/uploads
+
+# prisma generated
+src/generated/prisma

.env.example

@@ -0,0 +1,14 @@
+# 正常 Docker 安装不需要预先配置 DATABASE_URL/JWT_SECRET/SITE_URL。
+# 首次访问 /install 后会把数据库连接和应用密钥写入 data/config.json。
+#
+# 下面三个变量只用于开发调试：
+# DATABASE_URL="postgresql://user:password@localhost:5432/memoir"
+# JWT_SECRET="replace-with-a-long-random-secret"
+# SITE_URL="http://localhost:3000"
+
+# 可选：开发环境把本地 /uploads 代理到已有站点，便于复用线上图片。
+# DEV_UPLOADS_ORIGIN="https://example.com"
+
+# 可选：MaxMind GeoLite2 City 数据库路径，用于访问统计的国家/省份/城市占比。
+# 需要手动下载 .mmdb 文件并放到对应位置；未配置或文件不存在时地区会记录为未知。
+# GEOIP_DATABASE_PATH="data/GeoLite2-City.mmdb"

.github/workflows/docker.yml

@@ -0,0 +1,62 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=sha,prefix=
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64

.gitignore

@@ -0,0 +1,50 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+!.env.example
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts
+
+# uploads
+/data/uploads
+*.mmdb
+/src/generated/prisma
+
+.codex
+AGENTS.MD

AGENTS.md

@@ -0,0 +1,19 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+`src/app` holds App Router pages, layouts, and `/api` route handlers. `src/components` contains reusable feature and UI components, with base primitives under `src/components/ui`. `src/lib` stores shared helpers such as auth, Prisma access, markdown rendering, and validation. `prisma/schema.prisma` defines the data model, while `src/generated/prisma` is generated output and should not be edited manually. Static assets live in `public/`, and one-off migration utilities live in `scripts/`.
+
+## Build, Test, and Development Commands
+`bun install` installs dependencies. `bun dev` starts the local server on `http://localhost:3000`. `bun run build` creates a production build and catches many App Router or environment issues early. `bun run lint` runs the repository ESLint rules. `bunx prisma db push` syncs schema changes to the local database, and `bunx prisma generate` regenerates the Prisma client after model updates.
+
+## Coding Style & Naming Conventions
+Use TypeScript with strict mode and follow the formatting already present in the touched file; `bun run lint` is the final check. Use `PascalCase` for React components such as `CommentForm.tsx`, `camelCase` for functions and variables, and lowercase route segment names under `src/app`. Prefer the `@/` path alias over deep relative imports. Keep generated Prisma files unchanged unless the source schema changes.
+
+## Testing Guidelines
+There is no dedicated automated test suite yet. Treat `bun run lint` as the minimum quality gate and manually verify affected flows before merging. Changes touching articles, comments, admin pages, uploads, or Prisma schema should include a short regression checklist in the pull request. If automated tests are introduced later, place them near the feature or in a local `__tests__/` directory and use `*.test.ts` or `*.test.tsx`.
+
+## Commit & Pull Request Guidelines
+Recent history mostly follows short Conventional Commit messages, commonly `feat: 中文描述`. Keep that pattern for new commits, for example `fix: 修复评论筛选`. Pull requests should summarize scope, list schema or `.env` changes, link related issues, and include screenshots for UI changes. This repository builds Docker images through `.github/workflows/docker.yml`, so ensure the branch still builds before requesting review.
+
+## Configuration & Deployment Notes
+Required environment variables include `DATABASE_URL`, `JWT_SECRET`, and `SITE_URL`. `SITE_URL` must be valid in production because it is used for canonical URLs, Open Graph metadata, sitemap generation, `robots.txt`, and feed output.

Dockerfile

@@ -0,0 +1,46 @@
+FROM oven/bun:1 AS base
+WORKDIR /app
+
+FROM base AS deps
+COPY package.json bun.lock* ./
+COPY prisma ./prisma/
+RUN bun install --frozen-lockfile
+
+FROM base AS builder
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+RUN bunx prisma generate
+
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV DATABASE_URL="postgresql://placeholder:placeholder@localhost:5432/placeholder"
+RUN bun run build
+
+FROM oven/bun:1-slim AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN groupadd --system --gid 1001 nodejs && \
+    useradd --system --uid 1001 --gid nodejs nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/prisma ./prisma
+COPY --from=builder /app/prisma.config.ts ./prisma.config.ts
+
+RUN mkdir .next && chown nextjs:nodejs .next
+
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+RUN mkdir -p data/uploads && chown -R nextjs:nodejs data
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["bun", "server.js"]

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shiyu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.