Compare commits
No commits in common. "main" and "technical-design" have entirely different histories.
main
...
technical-
18+ Privacy Policy for cellar.social.docxArabica and Robusta Coffee Varietals.xlsxCoffee Colours - Crema and Body.xlsxCoffee Tasting Flow.xlsxColours for Drinks WIne, Sake and Spirits..xlsxFlavour spectrum - AW.xlsGrape Growing Regions.xlsxLiquor Quality - aggregate scoring with shades.odsLiquor Quality - aggregate scoring with shades.xlsxRice Wine Producing Regions.xlsxSake - Rice, Koji and Yeast.xlsxSake Characteristics.xlsTasting Flow V2.xlsxTasting Flow V4.xlsxTasting Menu and Flow.xlsxVisual Assessment - Nature.xlsxcellar.social Terms and Conditions of Use.docxgrape varieties - white and red tabs.xlsx
meetings
server-configuration
spirit characteristics - v3.xlsxtechnical-design-assets
technical-design.mdvenice_ai colour palette- extended green.pngwine colour hue.xlsx
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
BIN
Liquor Quality - aggregate scoring with shades.ods
Normal file
BIN
Liquor Quality - aggregate scoring with shades.ods
Normal file
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@ -1,5 +0,0 @@
|
||||
[design]
|
||||
|
||||
- To change up the colors / test it out with black purple white and see how that goes
|
||||
- On user login, checks if it's a new user or not, if yes, popup appears to to ask user if this npub is a normal user/consumer or producer (this would affect how their profile page works, and a product cannot review any other product / they can just publish product)
|
||||
- There's two profiles, one user and one producer
|
@ -1,3 +0,0 @@
|
||||
- Use MongoDB instead of Cassandra.
|
||||
- Add precommit hook checking licenses of the third-party libraries.
|
||||
- Add CI/CD step to double-check licenses of the third-party libraries.
|
@ -1,11 +0,0 @@
|
||||
[design]
|
||||
|
||||
- Edit the design of of initial search in hero section in the landing page (remove search bard, and all selections: product, type, style, characteristic, location (this one specifically has filter checkboxes in its popup) [search button]), popups remain.
|
||||
- don't change navigation bar
|
||||
- round corners where seemed appropriate, like buttons and maybe tags
|
||||
- add / change review submission to include a lengthy selection process, and present it
|
||||
- - to also have a summary design of total reviews (excluding text reviews of course)
|
||||
- reply system/style is similar to deg mods (popup depth system)
|
||||
- remove "Seller Name's Latest Products" section
|
||||
- Add "Product Details" or "Details" tab (last tab) after reviews/comments
|
||||
- Publishing a review costs money, replying (normal commenting/replying) to review doesn't (free), and commenting is also free
|
@ -1,8 +0,0 @@
|
||||
# Product
|
||||
|
||||
- `Producer` can modify product only during 24 hours after submition.
|
||||
- `Producer` can delete product at any time.
|
||||
|
||||
# Review
|
||||
|
||||
- `Reviwer` can modify review only during 24 hours after submition.
|
@ -1,236 +0,0 @@
|
||||
# Server configuration of the staging server
|
||||
|
||||
Staging server has `51.161.134.20` IP address and `staging.cellar.social` DNS record associated with it.
|
||||
|
||||
`otto` user has sudo rights at staging server, all operations that require sudo rights will be performed under this user.
|
||||
|
||||
## Fail2ban
|
||||
|
||||
Install `fail2ban` to scan the log files for too many failed login attempts and block the IP address which is showing malicious signs.
|
||||
|
||||
```bash
|
||||
sudo apt-get install fail2ban
|
||||
```
|
||||
|
||||
## Nginx
|
||||
|
||||
Under `otto` user:
|
||||
|
||||
```bash
|
||||
# Update packages
|
||||
sudo apt update
|
||||
|
||||
# Install Nginx
|
||||
sudo apt install nginx
|
||||
|
||||
# List the application configurations that ufw knows how to work with
|
||||
sudo ufw app list
|
||||
|
||||
# Activate firewall
|
||||
sudo ufw enable
|
||||
|
||||
# Allow ssh connections
|
||||
sudo ufw allow 'OpenSSH'
|
||||
|
||||
# Allow HTTPS traffic
|
||||
sudo ufw allow 'Nginx HTTPS'
|
||||
|
||||
# Allow HTTP traffic (HTTP traffic should be allowed to equire SSL certificate and will be disabled later)
|
||||
sudo ufw allow 'Nginx HTTP'
|
||||
|
||||
# Check ufw status
|
||||
sudo ufw status
|
||||
|
||||
# Check Nginx status
|
||||
systemctl status nginx
|
||||
|
||||
# Create the directory for `api` domain
|
||||
sudo mkdir -p /var/www/api/html
|
||||
|
||||
# Assign ownership of the directory to the `api` user
|
||||
sudo chown -R api:api /var/www/api/html
|
||||
|
||||
# Adjust permissions
|
||||
sudo chmod -R 755 /var/www/api
|
||||
|
||||
# Install certbot
|
||||
sudo apt install certbot python3-certbot-nginx
|
||||
|
||||
# Fetch a certificate from Let's Encrypt and follow the prompts
|
||||
sudo certbot --nginx -d staging.cellar.social
|
||||
|
||||
# Verify that certificate renewal is on
|
||||
sudo systemctl status certbot.timer
|
||||
|
||||
# Create a configuration file for api subdomain
|
||||
sudo nano /etc/nginx/sites-available/api
|
||||
```
|
||||
|
||||
Paste into `/etc/nginx/sites-available/api`:
|
||||
|
||||
```bash
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
|
||||
root /var/www/html;
|
||||
index index.html index.htm index.nginx-debian.html;
|
||||
|
||||
# Put your domain name here
|
||||
server_name staging.cellar.social;
|
||||
|
||||
# Needed for Let's Encrypt verification
|
||||
location ~ /.well-known/acme-challenge {
|
||||
allow all;
|
||||
}
|
||||
|
||||
# Force HTTP to HTTPS
|
||||
location / {
|
||||
return 301 https://$http_host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
|
||||
ssl on;
|
||||
|
||||
# SSL certificate by Let's Encrypt in this Nginx
|
||||
ssl_certificate /etc/letsencrypt/live/staging.cellar.social/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/staging.cellar.social/privkey.pem;
|
||||
|
||||
# root /var/www/html;
|
||||
# index index.html index.htm index.nginx-debian.html;
|
||||
|
||||
# domain name here
|
||||
server_name staging.cellar.social;
|
||||
|
||||
location /api/ {
|
||||
proxy_pass http://127.0.0.1:3000/;
|
||||
|
||||
proxy_set_header Host $http_host;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
}
|
||||
|
||||
# Needed for Let's Encrypt verification
|
||||
location ~ /.well-known/acme-challenge {
|
||||
allow all;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
Next:
|
||||
|
||||
```bash
|
||||
# Enable the file by creating a link from it to the sites-enabled directory, which Nginx reads from during startup
|
||||
sudo ln -s /etc/nginx/sites-available/api /etc/nginx/sites-enabled/
|
||||
|
||||
# Restart Nginx
|
||||
sudo systemctl restart nginx
|
||||
|
||||
# Check Nginx status
|
||||
systemctl status nginx
|
||||
|
||||
# Check firewall status
|
||||
sudo ufw status
|
||||
|
||||
# Deny HTTP traffic
|
||||
sudo ufw deny 'Nginx HTTP'
|
||||
|
||||
# Check firewall status
|
||||
sudo ufw status
|
||||
```
|
||||
|
||||
## Install Node and NPM
|
||||
|
||||
```bash
|
||||
# Update packages
|
||||
sudo apt update
|
||||
|
||||
# Install nvm (node version manager)
|
||||
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.35.3/install.sh | bash
|
||||
|
||||
# Install Node v20
|
||||
nvm install 20.12.2
|
||||
|
||||
# Set 20.12.2 as a default version of Node
|
||||
nvm alias default 20.12.2
|
||||
|
||||
# Use default Node version
|
||||
nvm use default
|
||||
```
|
||||
|
||||
## API user
|
||||
|
||||
`api` user doesn't have sudo rights and will be used to run `cellar-api` and all related processes.
|
||||
|
||||
Under `otto` user:
|
||||
|
||||
```bash
|
||||
# Create api user
|
||||
sudo adduser api
|
||||
|
||||
# Switch to api user
|
||||
su api
|
||||
```
|
||||
|
||||
Under `api` user:
|
||||
|
||||
```bash
|
||||
# Generate SSH keys.
|
||||
# These keys will be used by CI/CD pipeline.
|
||||
ssh-keygen
|
||||
|
||||
# Change to ssh directory
|
||||
cd .ssh/
|
||||
|
||||
# Create authorized_keys file
|
||||
touch authorized_keys
|
||||
|
||||
# Copy public key from `id_ed25519.pub` and paste into `authorized_keys` file
|
||||
# Private key is stored in SSH_STAGING_PRIVATE_KEY variable of the CI/CD pipeline.
|
||||
|
||||
# Install PM2 package globally
|
||||
npm i -g pm2
|
||||
|
||||
# Clone cellar/cs-backend repository
|
||||
git clone ssh://git@git.nostrdev.com:29418/cellar/cs-backend.git
|
||||
|
||||
# Change to cs-backend directory
|
||||
cd cs-backend
|
||||
|
||||
# Install dependencies
|
||||
npm ci
|
||||
|
||||
# Build API app
|
||||
npm run build
|
||||
|
||||
# Start API app
|
||||
npm run start
|
||||
|
||||
# Verify that cellar-api process is running
|
||||
pm2 list
|
||||
```
|
||||
|
||||
## Docker
|
||||
|
||||
Under `otto` user:
|
||||
|
||||
```bash
|
||||
# Install docker
|
||||
curl -fsSL https://get.docker.com | sudo sh
|
||||
|
||||
# Add api user to the docker group so it can run docker without sudo rights
|
||||
sudo usermod -aG docker api
|
||||
```
|
||||
|
||||
Under `api` user:
|
||||
|
||||
```bash
|
||||
# Log in to docker group to avoid to log out and log in again
|
||||
newgrp docker
|
||||
```
|
Binary file not shown.
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Before (image error) Size: 3.3 MiB After (image error) Size: 3.5 MiB |
@ -87,7 +87,7 @@ The backend app will also manage Npub whitelisting that `APP Relay` will use.
|
||||
|
||||
#### Database
|
||||
|
||||
[MongoDB Community Edition](https://www.mongodb.com/products/self-managed/community-edition) will be used as a NoSQL database (`DB`) to persist business data. Only the backend app will have access to the database.
|
||||
[Cassandra](https://cassandra.apache.org/_/index.html) will be used as a NoSQL database (`DB`) to persist business data. Only the backend app will have access to the database.
|
||||
|
||||
The following tables are planned in the database:
|
||||
|
||||
|
Binary file not shown.
Before ![]() (image error) Size: 1.7 KiB |
Binary file not shown.
Loading…
x
Reference in New Issue
Block a user