karim
51a94b85d3
kgva can now be edited through openbureau-core instead of Decap: a small Node CMS (git subtree at cms/core) with a schema-driven editor at /admin, file-based login (no Supabase/Postgres), Markdown on disk. cms/kgva.config.js models the content (portfolio/pages/sections); docker-compose builds the core image (Hugo 0.163.3, no VITE_SUPABASE_URL → local-auth admin) and mounts the repo as the site. seed an admin via cms/seed-admin.mjs; deploy/provision-lxc.sh + ADMIN.md updated. Verified DB-less end-to-end on real content (staged): local login → schema-driven editor → 42 entries (de/en) → stats → create/preview/cleanup; unknown frontmatter (image galleries) preserved on save. The LIVE static site (CT130 timer→hugo→nginx) is unaffected — hugo ignores cms/; the CMS is dormant until provisioned. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
37 lines
1.6 KiB
Markdown
37 lines
1.6 KiB
Markdown
# Admin (openbureau-core CMS)
|
|
|
|
The site is edited through **openbureau-core** — a small Node CMS (vendored at
|
|
`cms/core`) that builds the Hugo site and serves it together with an editor at
|
|
`/admin`. It is **DB-less**: file-based login (`auth: 'local'`) and Markdown on
|
|
disk. No Supabase, no Postgres.
|
|
|
|
## What's where
|
|
|
|
- `cms/kgva.config.js` — the content model (collections + fields) the editor renders.
|
|
- `cms/core/` — the engine (git subtree of `git.openbureau.ch/karim/openbureau-core`).
|
|
Update it with:
|
|
`git subtree pull --prefix=cms/core https://git.openbureau.ch/karim/openbureau-core.git main --squash`
|
|
- `cms/.env` — `JWT_SECRET` (sign-in secret) + `ADMIN_EMAILS`. Copy from `.env.example`.
|
|
- `cms/users.json` — the user store (bcrypt hashes). Git-ignored. Seed with:
|
|
`docker compose run --rm cms node /site/cms/seed-admin.mjs you@mail yourpass`
|
|
|
|
## Run
|
|
|
|
```
|
|
cp cms/.env.example cms/.env # set JWT_SECRET (openssl rand -hex 32)
|
|
docker compose build
|
|
docker compose run --rm cms node /site/cms/seed-admin.mjs karim@gabrielevarano.ch <pw> # once
|
|
docker compose up -d
|
|
```
|
|
|
|
Open `http://<host>:8080/admin/`, log in, edit. *Speichern* writes the Markdown,
|
|
*Vorschau* builds a draft preview, *Publizieren* rebuilds the public site.
|
|
|
|
## Deploy
|
|
|
|
A single container (Hugo build + Node serve). See `deploy/` —
|
|
`provision-lxc.sh` stands up an LXC and does all of the above (incl. a seeded
|
|
admin whose password lands in `cms/ADMIN_PASSWORD.txt`); `Caddyfile` terminates
|
|
TLS and reverse-proxies the domain. Safe cutover: provision a NEW container on a
|
|
temporary IP, verify, point Caddy at it, then retire the old one.
|