Feat/migrate to digitalocean

.env.example

@@ -60,3 +60,11 @@ GOOGLE_SHEETS_CLIENT_SECRET=""
 GOOGLE_DRIVE_CLIENT_ID=""
 GOOGLE_DRIVE_CLIENT_SECRET=""
 
+# DigitalOcean Spaces (S3-compatible Object Storage)
+DO_SPACES_KEY=""
+DO_SPACES_SECRET=""
+DO_SPACES_ENDPOINT="https://blr1.digitaloceanspaces.com"
+DO_SPACES_BUCKET="nodebase-media"
+DO_SPACES_REGION="blr1"
+DO_SPACES_CDN_URL=""
+DO_SPACES_SAS_EXPIRY_HOURS="48"

.github/workflows/deploy-digitalocean.yml

@@ -0,0 +1,135 @@
+name: Build and Deploy to DigitalOcean
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+env:
+  REGISTRY: registry.digitalocean.com/nodebase
+  IMAGE_NAME: nodebase
+
+jobs:
+  # ─── Build & Push Docker image to DigitalOcean Container Registry ───
+  build-and-push:
+    name: Build & Push to DOCR
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install doctl
+        uses: digitalocean/action-doctl@v2
+        with:
+          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
+
+      - name: Log in to DigitalOcean Container Registry
+        run: doctl registry login --expiry-seconds 1200
+
+      - name: Build Docker image
+        run: |
+          docker build \
+            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ github.sha }} \
+            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest \
+            .
+
+      - name: Push Docker image
+        run: |
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ github.sha }}
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+
+  # ─── Deploy to DigitalOcean App Platform ────────────────────────────
+  deploy:
+    name: Deploy to App Platform
+    runs-on: ubuntu-latest
+    needs: build-and-push
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+
+    steps:
+      - name: Install doctl
+        uses: digitalocean/action-doctl@v2
+        with:
+          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
+
+      - name: Deploy to App Platform
+        env:
+          APP_ID: ${{ secrets.APP_ID }}
+          APP_NAME: nodebase
+        run: |
+          if [ -z "$APP_ID" ]; then
+            for candidate_id in $(doctl apps list --format ID --no-header); do
+              candidate_name=$(doctl apps get "$candidate_id" --format Spec.Name --no-header)
+              if [ "$candidate_name" = "$APP_NAME" ]; then
+                APP_ID="$candidate_id"
+                break
+              fi
+            done
+          fi
+          if [ -z "$APP_ID" ]; then
+            echo "❌ No App Platform app found. Create one first in DigitalOcean console."
+            exit 1
+          fi
+          echo "🚀 Triggering deployment for App: $APP_ID"
+          doctl apps create-deployment "$APP_ID" --wait
+          echo "✅ Deployment complete!"
+
+  # ─── PR Build Validation ────────────────────────────────────────────
+  build-check:
+    name: Validate build (PR only)
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Generate Prisma client
+        run: npx prisma generate
+
+      - name: Type check
+        run: npx tsc --noEmit
+
+      - name: Build
+        run: npm run build
+        env:
+          NODE_OPTIONS: "--max-old-space-size=4096"
+          DATABASE_URL: "postgresql://dummy:dummy@dummy:5432/dummy"
+          DIRECT_DATABASE_URL: "postgresql://dummy:dummy@dummy:5432/dummy"
+          BETTER_AUTH_SECRET: "dummy-secret-for-build-only"
+          BETTER_AUTH_URL: "https://nodebase.tech"
+          NEXT_PUBLIC_BETTER_AUTH_URL: "https://nodebase.tech"
+          NEXT_PUBLIC_APP_URL: "https://nodebase.tech"
+          INNGEST_SIGNING_KEY: "signkey-prod-dummy"
+          INNGEST_EVENT_KEY: "dummy-event-key"
+          ENCRYPTION_KEY: "dummy-encryption-key-32-characters"
+          GOOGLE_CLIENT_ID: "dummy"
+          GOOGLE_CLIENT_SECRET: "dummy"
+          GOOGLE_GMAIL_CLIENT_ID: "dummy"
+          GOOGLE_GMAIL_CLIENT_SECRET: "dummy"
+          GOOGLE_SHEETS_CLIENT_ID: "dummy"
+          GOOGLE_SHEETS_CLIENT_SECRET: "dummy"
+          GOOGLE_DRIVE_CLIENT_ID: "dummy"
+          GOOGLE_DRIVE_CLIENT_SECRET: "dummy"
+          GITHUB_CLIENT_ID: "dummy"
+          GITHUB_CLIENT_SECRET: "dummy"
+          GROQ_API_KEY: "dummy"
+          GOOGLE_GENERATIVE_AI_API_KEY: "dummy"
+          POLAR_ACCESS_TOKEN: "dummy"
+          POLAR_WEBHOOK_SECRET: "dummy"
+          SENTRY_AUTH_TOKEN: "dummy"

Dockerfile

@@ -19,7 +19,7 @@ COPY . .
 RUN npx prisma generate
 
 # Dummy env vars so Next.js can build without real credentials
-# Real values are injected at runtime by Azure Container Apps
+# Real values are injected at runtime by DigitalOcean App Platform
 ENV NEXT_TELEMETRY_DISABLED=1
 ENV DATABASE_URL="postgresql://dummy:dummy@dummy:5432/dummy"
 ENV DIRECT_DATABASE_URL="postgresql://dummy:dummy@dummy:5432/dummy"

next-sitemap.config.js

@@ -0,0 +1,40 @@
+/** @type {import('next-sitemap').IConfig} */
+module.exports = {
+  siteUrl: "https://nodebase.tech",
+  generateRobotsTxt: true,
+  generateIndexSitemap: false,
+  changefreq: "weekly",
+  priority: 0.7,
+  sitemapSize: 5000,
+  exclude: [
+    "/workflows/*",
+    "/editor/*",
+    "/settings/*",
+    "/api/*",
+    "/verify-email",
+    "/check-email",
+    "/resend-verification",
+  ],
+  additionalPaths: async (config) => [
+    await config.transform(config, "/"),
+    await config.transform(config, "/pricing"),
+    await config.transform(config, "/blog"),
+    await config.transform(config, "/integrations"),
+    await config.transform(config, "/login"),
+    await config.transform(config, "/signup"),
+  ],
+  robotsTxtOptions: {
+    policies: [
+      {
+        userAgent: "*",
+        allow: "/",
+        disallow: ["/workflows/", "/editor/", "/settings/", "/api/"],
+      },
+      {
+        userAgent: "Googlebot",
+        allow: "/",
+        disallow: ["/workflows/", "/editor/", "/settings/"],
+      },
+    ],
+  },
+}

next.config.ts

@@ -4,6 +4,15 @@ import type { NextConfig } from "next";
 const nextConfig: NextConfig = {
   output: "standalone",
   devIndicators: false,
+  // AWS SDK v3 uses deep subpath exports that Turbopack can't resolve —
+  // mark them as external so Node.js handles module resolution natively
+  serverExternalPackages: [
+    "@aws-sdk/client-s3",
+    "@aws-sdk/s3-request-presigner",
+    "@aws-sdk/core",
+    "@aws-sdk/signature-v4-multi-region",
+    "@smithy/core",
+  ],
   async redirects() {
 
     return [];