feat!: rewrite everything

Author: ibiixie

.github/workflows/deploy.yml

@@ -2,30 +2,90 @@ name: CI
 
 on:
   push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
+    branches: ["main"]
 
-  workflow_dispatch: 
+jobs:
+  build-frontend:
+    name: Build & Push Frontend Image
+    runs-on: ubuntu-latest
+    environment: production
+
+    steps:
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build Docker image
+        uses: docker/bake-action@v6
+        env:
+          CF_SITEKEY: ${{ vars.CF_SITEKEY }}
+          GRAPHQL_GITHUB_API_TOKEN: ${{ secrets.GRAPHQL_GITHUB_API_TOKEN }}
+        with:
+          files: |
+            docker-bake.hcl
+            docker-bake.prod.hcl
+          push: true
+          no-cache: true
+          targets: frontend
+
+  build-backend:
+    name: Build & Push Backend Image
+    runs-on: ubuntu-latest
+    environment: production
+
+    steps:
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build Docker image
+        uses: docker/bake-action@v6
+        env:
+          GRAPHQL_GITHUB_API_TOKEN: ${{ secrets.GRAPHQL_GITHUB_API_TOKEN }}
+        with:
+          files: |
+            docker-bake.hcl
+            docker-bake.prod.hcl
+          push: true
+          no-cache: true
+          targets: backend
 
-jobs:          
   deploy:
-    name: Deploy
+    name: Deploy Stack
     runs-on: ubuntu-latest
     environment: production
-    
+    needs: [build-frontend, build-backend]
+
     steps:
-      - name: Deploy to Oracle Cloud server via SSH
-        uses: appleboy/ssh-action@v0.1.10
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Deploy stack
+        uses: ibiixie/stack-deploy-action@feature/multiple-compose-inputs
         with:
           host: ${{ secrets.REMOTE_HOST }}
-          username: ${{ secrets.REMOTE_USERNAME }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          port: ${{ secrets.REMOTE_PORT }}
-          script: |
-            cd ${{ secrets.REMOTE_WORKING_DIRECTORY }}
-            echo "Pulling changes..."
-            git pull
-            echo "Running deployment script..."
-            sh deploy.sh
-            echo "Deployment complete!"
+          user: ${{ vars.REMOTE_USER }}
+          ssh_key: ${{ secrets.SSH_PRIVATE_KEY }}
+          file: ./compose.yaml;./compose.prod.yaml
+          name: biixie-website
+          mode: compose
+        env:
+          CF_TURNSTILE_SECRET: ${{ secrets.CF_TURNSTILE_SECRET }}
+          KVP_REDACTED_TERMS: ${{ secrets.REDACTED_TERMS }}
+
+  purge-cache:
+    name: Purge Cloudflare Cache
+    runs-on: ubuntu-latest
+    environment: production
+    needs: ["deploy"]
+
+    steps:
+      - name: Purge cache
+        uses: nathanvaughn/actions-cloudflare-purge@v3.1.0
+        with:
+          cf_zone: ${{ secrets.CLOUDFLARE_ZONE }}
+          cf_auth: ${{ secrets.CLOUDFLARE_AUTH_KEY }}

.gitignore

@@ -0,0 +1,4 @@
+.vscode
+**/secrets/**
+.env
+env.hcl

.vscode/launch.json

@@ -0,0 +1,24 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "type": "lldb",
+      "request": "launch",
+      "name": "Debug backend",
+      "program": "${workspaceFolder}/backend/target/debug/backend.exe",
+      "args": [],
+      "cwd": "${workspaceFolder}",
+      "env": {
+        "DEBUG": "true",
+        "MAILJET_API_KEY": "a501f1868ef147dcdb574468b6adc04a",
+        "MAILJET_API_SECRET": "07f351e44ed65942b51ca1df485e4681",
+      }
+    },
+    {
+      "command": "./node_modules/.bin/astro dev",
+      "name": "Debug frontend",
+      "request": "launch",
+      "type": "node-terminal"
+    }
+  ]
+}

backend/.gitignore

@@ -0,0 +1,9 @@
+debug/
+target/
+
+Cargo.lock
+
+**/*.rs.bk
+*.pdb
+
+kvp_secrets/

backend/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "backend"
+version = "0.1.0"
+edition = "2021"
+
+[dependencies]
+serde = { version = "1.0.215", features = ["derive"] }
+serde_json = "1.0.133"
+tokio = { version = "1.41.1", features = ["rt-multi-thread", "signal"] }
+axum = { version = "0.7.9", features = ["macros"] }
+tower = { version = "0.5.2", features = ["limit", "buffer"] }
+tower-http = { version = "0.6.2", features = ["cors", "limit", "timeout"] }
+reqwest = { version = "0.12.9", features = ["json"] }
+chrono = { version = "0.4.38", features = ["serde"] }
+log = "0.4.22"
+simplelog = "0.12.2"
+graphql_client = "0.14.0"

backend/Dockerfile

@@ -0,0 +1,8 @@
+FROM rust:1 AS builder
+COPY ./backend /app
+WORKDIR /app
+RUN cargo build --release
+
+FROM gcr.io/distroless/cc-debian12
+COPY --from=builder /app/target/release/backend /
+CMD ["./backend"]

backend/redacted/redacted_terms.kvp

@@ -0,0 +1,4 @@
+
+email=hi@biixie.com
+discord_handle=ibiixie
+discord_id=197846420080951296

backend/src/config.rs

@@ -0,0 +1,36 @@
+#[derive(Debug, Clone)]
+pub struct Config {
+    pub debug_mode: bool,
+    pub backend_port: u32,
+    pub state_mutex_timeout: u64,
+    pub request_body_limit: usize,
+    pub rate_limit_count: u64,
+    pub rate_limit_duration: u64,
+    pub request_timeout: u64,
+}
+
+impl Config {
+    pub fn from_env() -> Self {
+        Self {
+            debug_mode: Self::env("DEBUG").unwrap_or(false),
+            backend_port: Self::env("BACKEND_PORT").unwrap_or(3000),
+            state_mutex_timeout: Self::env("STATE_MUTEX_TIMEOUT").unwrap_or(30),
+            request_body_limit: Self::env("REQUEST_BODY_LIMIT").unwrap_or(3072),
+            rate_limit_count: Self::env("RATE_LIMIT_COUNT").unwrap_or(100),
+            rate_limit_duration: Self::env("RATE_LIMIT_DURATION").unwrap_or(10 * 60),
+            request_timeout: Self::env("REQUEST_TIMEOUT").unwrap_or(30),
+        }
+    }
+
+    fn env<T: std::str::FromStr>(key: &str) -> Option<T> {
+        let Ok(value) = std::env::var(key) else {
+            return None;
+        };
+
+        let Ok(parsed) = value.parse::<T>() else {
+            return None;
+        };
+
+        Some(parsed)
+    }
+}

backend/src/main.rs

@@ -0,0 +1,69 @@
+#![allow(clippy::cargo_common_metadata)]
+#![allow(clippy::multiple_crate_versions)]
+
+mod config;
+mod middleware;
+mod routes;
+mod secrets;
+mod shared_state;
+
+#[macro_use]
+extern crate log;
+
+use std::str::FromStr;
+
+#[tokio::main]
+async fn main() {
+    let log_level = std::env::var("BACKEND_LOG_LEVEL").unwrap_or("Info".into());
+
+    simplelog::TermLogger::init(
+        log::LevelFilter::from_str(&log_level)
+            .expect("BACKEND_LOG_LEVEL exists in environment but is malformed"),
+        simplelog::Config::default(),
+        simplelog::TerminalMode::Mixed,
+        simplelog::ColorChoice::Auto,
+    )
+    .unwrap();
+
+    info!("Starting backend server");
+    info!("Log level set to {}", log::max_level());
+
+    let state: shared_state::SharedState = shared_state::SharedState::new();
+    let port = state.config.backend_port;
+    let router = routes::setup_routes(state);
+    let listener = tokio::net::TcpListener::bind(format!("0.0.0.0:{port}"))
+        .await
+        .unwrap();
+
+    axum::serve(listener, router)
+        .with_graceful_shutdown(shutdown_signal())
+        .await
+        .unwrap();
+
+    info!("Stopped backend server");
+}
+
+async fn shutdown_signal() {
+    let ctrl_c = async {
+        tokio::signal::ctrl_c()
+            .await
+            .expect("failed to install CTRL+C shutdown handler");
+    };
+
+    #[cfg(unix)]
+    let terminate = async {
+        tokio::signal::unix::signal(tokio::signal::unix::SignalKind::terminate())
+            .expect("failed to install termination signal handler")
+            .recv()
+            .await;
+    };
+
+    #[cfg(not(unix))]
+    let terminate = std::future::pending::<()>();
+
+    tokio::select! {
+        () = ctrl_c => {},
+        () = terminate => {},
+    };
+}
+ 

backend/src/middleware.rs

@@ -0,0 +1,4 @@
+pub mod error;
+pub mod turnstile;
+
+pub use turnstile::turnstile;