Akshay Kolli
014b1836c0
Some checks failed
Deploy Website / build-and-deploy (push) Has been cancelled
48 lines
1.2 KiB
Markdown
48 lines
1.2 KiB
Markdown
# Akshay Kolli Personal Site
|
|
|
|
Next.js personal site with MDX writing, a resume page, and local-first visit analytics for a Raspberry Pi deployment.
|
|
|
|
## Development
|
|
|
|
```bash
|
|
npm install
|
|
npm run dev
|
|
```
|
|
|
|
Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
|
|
|
|
## Environment
|
|
|
|
```bash
|
|
ANALYTICS_SALT=replace-with-a-long-random-secret
|
|
VISIT_DB_PATH=/server_storage/visitors.db
|
|
ADMIN_DASH_URL=
|
|
ADMIN_DASH_KEY=
|
|
REQUEST_LOGS=false
|
|
```
|
|
|
|
Analytics does not use a browser-visible secret. The endpoint accepts same-origin JSON only, validates the path, rate-limits requests, and stores a daily HMAC visitor ID instead of raw IP addresses. Set `ANALYTICS_SALT` in production so visitor IDs remain stable across restarts without storing raw addresses.
|
|
|
|
## Docker
|
|
|
|
```bash
|
|
docker build -t personal-site:latest .
|
|
docker run -d \
|
|
--name website-container \
|
|
--restart unless-stopped \
|
|
-p 8080:3000 \
|
|
-e ANALYTICS_SALT="$(openssl rand -hex 32)" \
|
|
-v /server_storage:/server_storage \
|
|
personal-site:latest
|
|
```
|
|
|
|
`/server_storage` should be owned by the container user and should not be world-readable because it contains analytics data.
|
|
|
|
## Checks
|
|
|
|
```bash
|
|
npm run lint
|
|
npm run build
|
|
npm audit --omit=dev
|
|
```
|