Merge branch 'main' into gs/gdrive-create-discussion-relations

core/prisma/create-admin-user.cts

@@ -0,0 +1,94 @@
+/* eslint-disable no-console */
+
+import { createEnv } from "@t3-oss/env-nextjs";
+import { Kysely, PostgresDialect } from "kysely";
+import * as pg from "pg";
+import { z } from "zod";
+
+import { Database } from "db/Database";
+
+import { isUniqueConstraintError } from "../kysely/errors";
+import { createPasswordHash } from "../lib/authentication/password";
+
+const env = createEnv({
+	server: {
+		ADMIN_EMAIL: z.string().email(),
+		ADMIN_PASSWORD: z.string().min(8),
+		ADMIN_FIRSTNAME: z.string(),
+		ADMIN_LASTNAME: z.string(),
+		DATABASE_URL: z.string(),
+	},
+	client: {},
+	experimental__runtimeEnv: {},
+});
+
+const dialect = new PostgresDialect({
+	pool: new pg.Pool({
+		connectionString: env.DATABASE_URL,
+	}),
+});
+
+const db = new Kysely<Database>({
+	dialect,
+});
+
+async function createAdminUser({
+	email,
+	password,
+	firstName,
+	lastName,
+}: {
+	email: string;
+	password: string;
+	firstName: string;
+	lastName: string;
+}) {
+	const values = {
+		slug: email.split("@")[0],
+		email,
+		firstName,
+		lastName,
+		passwordHash: await createPasswordHash(password),
+		isSuperAdmin: true,
+	};
+
+	return db.insertInto("users").values(values).returningAll().executeTakeFirstOrThrow();
+}
+
+async function main() {
+	const adminEmail = env.ADMIN_EMAIL;
+	const adminPassword = env.ADMIN_PASSWORD;
+	const adminFirstName = env.ADMIN_FIRSTNAME;
+	const adminLastName = env.ADMIN_LASTNAME;
+
+	if (!adminEmail || !adminPassword) {
+		throw new Error("ADMIN_EMAIL and ADMIN_PASSWORD must be set for admin initialization");
+	}
+
+	try {
+		await createAdminUser({
+			email: adminEmail,
+			password: adminPassword,
+			firstName: adminFirstName,
+			lastName: adminLastName,
+		});
+		console.log("✨ Admin user created successfully!");
+		console.log(`You can now log in with:`);
+		console.log(`${adminEmail}`);
+	} catch (e) {
+		if (isUniqueConstraintError(e)) {
+			console.log("⚠️ Admin user already exists, skipping initialization");
+			return;
+		}
+		throw e;
+	}
+}
+
+if (require.main === module) {
+	main()
+		.then(() => process.exit(0))
+		.catch((e) => {
+			console.error(e);
+			process.exit(1);
+		});
+}

self-host/.env.example

@@ -0,0 +1,44 @@
+# the default url of the platform
+PUBPUB_URL=http://localhost:3000 # the url of the platform
+# change this to eg
+# PUBPUB_URL=https://platform.example.com
+# for a production environment
+
+
+# configure these things with safe values
+# or the values of a remote postgres database
+POSTGRES_USER=my-postgres-user # change this!
+POSTGRES_PASSWORD=my-postgres-password # change this!
+POSTGRES_DB=my-postgres-db # change this! this is hard to change after the database has been created
+POSTGRES_HOST=db # change this to the name of the service in docker-compose.yml, or the domain of a remote postgres database if you're using that instead
+POSTGRES_PORT=5432 # don't forget to update the port in docker-compose.yml if you change this
+
+# not needed if you're using a remote file server like AWS S3
+MINIO_ROOT_USER= # change this! this is the username for your file server!
+MINIO_ROOT_PASSWORD= # change this! this is the password for your file server!
+
+ASSETS_BUCKET_NAME=assets
+ASSETS_UPLOAD_KEY= # change this! example: asset-user
+ASSETS_UPLOAD_SECRET_KEY= # change this! 
+ASSETS_REGION=us-east-1 # leave this unchanged, unless you are hosting files on a different region on actual AWS
+
+# this is the default value but you ideally should set this up more nicely using our caddy service
+ASSETS_STORAGE_ENDPOINT="http://localhost:9000"
+# you could also set this to the secured endpoint of your file server
+# ASSETS_STORAGE_ENDPOINT="https://example.com/assets"
+
+MAILGUN_SMTP_HOST=localhost
+MAILGUN_SMTP_PORT=54325
+MAILGUN_SMTP_PASSWORD="xxx"
+MAILGUN_SMTP_USERNAME="xxx"
+
+API_KEY="super_secret_key"
+
+OTEL_SERVICE_NAME="pubpub-v7-dev" # should be shared across components but not environments
+HONEYCOMB_API_KEY="xxx"
+
+# KYSELY_DEBUG="true"
+
+GCLOUD_KEY_FILE='xxx'
+
+SELF_HOST="true"

self-host/.gitignore

@@ -0,0 +1,2 @@
+.env
+minio/.minio.sys