feat: initialize watchdocs project with core UI components and automation workspace layout

Author: dynamicdev-official

.dockerignore

@@ -0,0 +1,47 @@
+# Node dependencies - reinstalled inside the build stage
+node_modules
+npm-debug.log
+yarn-debug.log
+yarn-error.log
+pnpm-debug.log
+
+# Next.js build artifacts
+.next
+out
+
+# Version control
+.git
+.gitignore
+.github
+
+# Environments and local config
+.env
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# IDE and OS metadata
+.vscode
+.idea
+.DS_Store
+Thumbs.db
+
+# Test and coverage output
+coverage
+.nyc_output
+
+# Documentation and misc files not needed at runtime
+README.md
+DEPLOYMENT.md
+LICENSE
+*.md
+!app/**/*.md
+
+# Docker artifacts
+Dockerfile
+docker-compose.yml
+.dockerignore
+
+# Vercel local dev artifacts
+.vercel

Dockerfile

@@ -0,0 +1,81 @@
+# syntax=docker/dockerfile:1.7
+
+# ---------------------------------------------------------------
+# WatchDocs - Multi-stage production image
+# Image:  watchdocs:1.0.0
+# Port:   3355
+# Output: Next.js standalone server
+# ---------------------------------------------------------------
+
+# ----- Stage 1: dependencies ---------------------------------------
+FROM node:20-alpine AS deps
+WORKDIR /app
+
+# Enable corepack so pnpm is available without an extra install step
+RUN corepack enable
+
+# Copy only lockfiles to maximize Docker layer cache hits
+COPY package.json pnpm-lock.yaml* package-lock.json* yarn.lock* ./
+
+# Install dependencies using whichever lockfile is present
+RUN \
+  if [ -f pnpm-lock.yaml ]; then pnpm install --frozen-lockfile; \
+  elif [ -f package-lock.json ]; then npm ci; \
+  elif [ -f yarn.lock ]; then yarn install --frozen-lockfile; \
+  else pnpm install; \
+  fi
+
+
+# ----- Stage 2: build ----------------------------------------------
+FROM node:20-alpine AS builder
+WORKDIR /app
+RUN corepack enable
+
+# Bring in installed modules and source
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Disable Next.js telemetry at build time
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Build the Next.js app (produces .next/standalone when output: 'standalone')
+RUN \
+  if [ -f pnpm-lock.yaml ]; then pnpm build; \
+  elif [ -f package-lock.json ]; then npm run build; \
+  elif [ -f yarn.lock ]; then yarn build; \
+  else pnpm build; \
+  fi
+
+
+# ----- Stage 3: runner (slim production image) --------------------
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+# Production defaults
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV PORT=3355
+ENV HOSTNAME=0.0.0.0
+
+# Create a non-root user so the app does not run as root
+RUN addgroup --system --gid 1001 nodejs \
+ && adduser  --system --uid 1001 nextjs
+
+# Copy the public directory (static assets served directly)
+COPY --from=builder /app/public ./public
+
+# Copy the standalone server and its required static chunks
+# Ownership is assigned to the nextjs user for tighter permissions
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3355
+
+# Lightweight healthcheck - Next.js standalone answers on the root path
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:3355/ || exit 1
+
+# server.js is generated by Next.js standalone output
+CMD ["node", "server.js"]

docker-compose.yml

@@ -0,0 +1,79 @@
+# ---------------------------------------------------------------
+# WatchDocs - docker compose stack
+# Service : watchdocs
+# Image   : watchdocs:1.0.0
+# Host    : watchdocs.dynamicdev.asia
+# Port    : 3355:3355
+# Network : dynamicdev-net (external - shared across the ecosystem)
+# ---------------------------------------------------------------
+
+services:
+  watchdocs:
+    # Build the image locally from the Dockerfile in this repo
+    build:
+      context: .
+      dockerfile: Dockerfile
+    # Tag the built image so it can be re-used, pushed, or pulled by name
+    image: watchdocs:1.0.0
+    container_name: watchdocs
+    hostname: watchdocs
+    restart: unless-stopped
+
+    # Host-to-container port mapping (left side = host, right side = container)
+    ports:
+      - "3355:3355"
+
+    environment:
+      NODE_ENV: production
+      PORT: 3355
+      HOSTNAME: 0.0.0.0
+      NEXT_TELEMETRY_DISABLED: "1"
+      # Public URL used for share links, metadata, and absolute URLs
+      NEXT_PUBLIC_APP_URL: https://watchdocs.dynamicdev.asia
+      # Reference an existing Postgres container on the same docker network.
+      # Override these in a local .env file when deploying.
+      DATABASE_URL: ${DATABASE_URL:-}
+      TZ: Asia/Bangkok
+
+    # Attach to the shared ecosystem network so it can be routed by the
+    # reverse proxy (Traefik / Nginx Proxy Manager / Caddy) and reach other
+    # services such as postgres by container name.
+    networks:
+      - dynamicdev-net
+
+    # Reverse-proxy hints - enable if Traefik is the active edge router
+    labels:
+      - "com.dynamicdev.project=watchdocs"
+      - "com.dynamicdev.version=1.0.0"
+      - "traefik.enable=true"
+      - "traefik.http.routers.watchdocs.rule=Host(`watchdocs.dynamicdev.asia`)"
+      - "traefik.http.routers.watchdocs.entrypoints=websecure"
+      - "traefik.http.routers.watchdocs.tls.certresolver=letsencrypt"
+      - "traefik.http.services.watchdocs.loadbalancer.server.port=3355"
+      - "traefik.docker.network=dynamicdev-net"
+
+    # Container-level healthcheck mirrors the one in the Dockerfile so that
+    # docker compose can flag the service as unhealthy without touching the
+    # image layer.
+    healthcheck:
+      test:
+        - CMD-SHELL
+        - "wget --no-verbose --tries=1 --spider http://127.0.0.1:3355/ || exit 1"
+      interval: 30s
+      timeout: 5s
+      start_period: 20s
+      retries: 3
+
+    # Keep logs bounded to avoid filling up the host disk
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "5"
+
+networks:
+  # External means the network must already exist on the host.
+  # Create it once with: docker network create dynamicdev-net
+  dynamicdev-net:
+    external: true
+    name: dynamicdev-net