Merge from devs for reverse proxy via caddyfle

.env.example

@@ -0,0 +1,19 @@
+# ==========================================
+# payNEXT Environment Variables Template
+# ==========================================
+# COPY THIS FILE AND RENAME IT TO .env
+# Command: cp .env.example .env
+
+# Remote Shared Database
+DATABASE_URL=postgresql://USER:PASSWORD@HOST:5432/paynext_db?sslmode=require
+
+# Optional split variables if your backend uses them
+DB_HOST=your-db-host.supabase.com
+DB_PORT=5432
+DB_USER=postgres
+DB_PASSWORD=change_me
+DB_NAME=postgres
+DB_SSL=true
+
+# API Secrets
+JWT_SECRET=choose_your_own_local_jwt_secret

.github/workflows/deploy.yml

@@ -2,14 +2,9 @@ name: payNEXT CI/CD
 
 on:
   push:
-    branches:
-      - devs
-      - release
-      - main
+    branches: [devs, release, main]
   pull_request:
-    branches:
-      - release
-      - main
+    branches: [release, main]
   workflow_dispatch:
 
 concurrency:
@@ -20,43 +15,38 @@ jobs:
   validate:
     name: Validate Project
     runs-on: ubuntu-latest
-
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
       - name: Check required files
         run: |
-          echo "Checking required payNEXT files..."
           test -f docker-compose.yml
           test -f web/Dockerfile
           test -f web/nginx.conf
           test -f web/public/index.html
-          echo "All required files exist."
+          test -f db/init.sql
 
       - name: Validate Docker Compose file
-        run: |
-          docker compose -f docker-compose.yml config > /dev/null
-          echo "Docker Compose file is valid."
+        run: docker compose -f docker-compose.yml config > /dev/null
+
   deploy-production:
     name: Deploy to Production
     runs-on: ubuntu-latest
-
     needs: validate
-
     if: github.ref == 'refs/heads/main'
-
     environment:
       name: production
-
-    env:
+      env:
       SERVER_IP: ${{ secrets.SERVER_IP }}
       SSH_USER: ${{ secrets.SSH_USER }}
       SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
-
+      DB_HOST: ${{ secrets.DB_HOST }}
+      DB_USER: ${{ secrets.DB_USER }}
+      DB_NAME: ${{ secrets.DB_NAME }}
+      DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+      JWT_SECRET: ${{ secrets.JWT_SECRET }}
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
       - name: Setup SSH
         run: |
@@ -67,33 +57,36 @@ jobs:
           ssh-keyscan -H "$SERVER_IP" >> ~/.ssh/known_hosts
 
       - name: Create deployment folder on server
-        run: |
-          ssh "$SSH_USER@$SERVER_IP" "mkdir -p /opt/paynext"
+        run: ssh "$SSH_USER@$SERVER_IP" "mkdir -p /opt/paynext"
 
-      - name: Package application files
+      - name: Build server .env on the runner
         run: |
-          tar --exclude='./.git' --exclude='./.github' -czf paynext.tgz docker-compose.yml web
-
-      - name: Copy package to server
+          {
+            echo "DB_HOST=$DB_HOST"
+            echo "DB_PORT=5432"
+            echo "DB_USER=$DB_USER"
+            echo "DB_PASSWORD=$DB_PASSWORD"
+            echo "DB_NAME=$DB_NAME"
+            echo "DB_SSL=true"
+            echo "JWT_SECRET=$JWT_SECRET"
+          } > server.env
+
+      - name: Copy app and .env to server
         run: |
+          tar --exclude='./.git' --exclude='./.github' -czf paynext.tgz docker-compose.yml web db
           scp paynext.tgz "$SSH_USER@$SERVER_IP":/tmp/paynext.tgz
+          scp server.env "$SSH_USER@$SERVER_IP":/opt/paynext/.env
+          rm -f server.env paynext.tgz
 
       - name: Deploy using Docker
         run: |
           ssh "$SSH_USER@$SERVER_IP" << 'EOF'
           set -e
-
           cd /opt/paynext
-
           docker compose down --remove-orphans || true
-
-          rm -rf web docker-compose.yml
-
+          rm -rf web db docker-compose.yml
           tar -xzf /tmp/paynext.tgz
-
-          rm /tmp/paynext.tgz
-
+          rm -f /tmp/paynext.tgz
           docker compose up -d --build
-
           docker image prune -f
           EOF

.gitignore

@@ -5,4 +5,10 @@ node_modules/
 *.log
 .DS_Store
 dist/
-build/
+build/get-docker.sh
+
+# Block all .env files everywhere
+**/.env
+.env
+.agents
+skills-lock.json

7.View History_8.Request Money_9.Payment Gateway.json

@@ -0,0 +1,191 @@
+{
+  "info": {
+    "name": "PayNEXT - Assignment 3 (Shihab)",
+    "_postman_id": "60b57ecf-2ff8-4463-ac9d-ff5e4765d135",
+    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+  },
+  "variable": [
+    {
+      "key": "token",
+      "value": ""
+    }
+  ],
+  "item": [
+    {
+      "name": "0. Authentication",
+      "item": [
+        {
+          "name": "REGISTER User (POST)",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "var jsonData = pm.response.json();",
+                  "if(jsonData.data && jsonData.data.token) {",
+                  "    pm.collectionVariables.set(\"token\", jsonData.data.token);",
+                  "}"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n    \"email\": \"test1@example.com\",\n    \"password\": \"123456\",\n    \"fullName\": \"Test User\",\n    \"phone\": \"01712345678\"\n}"
+            },
+            "url": {
+              "raw": "http://localhost/api/v1/auth/register",
+              "host": [
+                "localhost"
+              ],
+              "path": [
+                "api",
+                "v1",
+                "auth",
+                "register"
+              ]
+            }
+          }
+        },
+        {
+          "name": "LOGIN User (POST)",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "var jsonData = pm.response.json();",
+                  "if(jsonData.data && jsonData.data.token) {",
+                  "    pm.collectionVariables.set(\"token\", jsonData.data.token);",
+                  "}"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n    \"email\": \"test1@example.com\",\n    \"password\": \"123456\"\n}"
+            },
+            "url": {
+              "raw": "http://localhost/api/v1/auth/login",
+              "host": [
+                "localhost"
+              ],
+              "path": [
+                "api",
+                "v1",
+                "auth",
+                "login"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "1. Transaction History",
+      "item": [
+        {
+          "name": "GET History",
+          "request": {
+            "method": "GET",
+            "header": [
+              {
+                "key": "Authorization",
+                "value": "Bearer {{token}}"
+              }
+            ],
+            "url": {
+              "raw": "http://localhost/api/v1/history",
+              "host": [
+                "localhost"
+              ],
+              "path": [
+                "api",
+                "v1",
+                "history"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "2. Merchant Payment Gateway (CRUD)",
+      "item": [
+        {
+          "name": "CREATE Merchant (POST)",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              },
+              {
+                "key": "Authorization",
+                "value": "Bearer {{token}}"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n    \"name\": \"Daraz Online\"\n}"
+            },
+            "url": {
+              "raw": "http://localhost/api/v1/merchants",
+              "host": [
+                "localhost"
+              ],
+              "path": [
+                "api",
+                "v1",
+                "merchants"
+              ]
+            }
+          }
+        },
+        {
+          "name": "READ All Merchants (GET)",
+          "request": {
+            "method": "GET",
+            "header": [
+              {
+                "key": "Authorization",
+                "value": "Bearer {{token}}"
+              }
+            ],
+            "url": {
+              "raw": "http://localhost/api/v1/merchants",
+              "host": [
+                "localhost"
+              ],
+              "path": [
+                "api",
+                "v1",
+                "merchants"
+              ]
+            }
+          }
+        }
+      ]
+    }
+  ]
+}

Caddyfile

@@ -0,0 +1,13 @@
+paynextt.me, www.paynextt.me {
+
+    encode zstd gzip
+
+    handle /api/* {
+    	reverse_proxy api:3000
+    }
+
+    handle {
+    	reverse_proxy web:80
+    }
+
+}