Here is dummy ai explanation for you my friend
Stack
- Backend: Node + Fastify + Prisma (Postgres)
- Frontend: React + Vite
- Scheduler: separate worker container (cron tasks)
- Reverse proxy (prod)
- Default: Nginx (skymoneybudget.com.conf)
- Alternative: Caddy (Caddyfile.prod)
- API is under /api path
- Web is static from /var/www/skymoney/dist
- HTTPS + HSTS already configured in the prod config
Required env vars (production)
- DATABASE_URL
- JWT_SECRET (32+ chars)
- COOKIE_SECRET (32+ chars)
- CORS_ORIGIN (set to https://skymoneybudget.com)
- Optional: COOKIE_DOMAIN=skymoneybudget.com
- Cookies + Security
- HttpOnly + Secure in prod
- CSRF protection required for non‑GET
Other Features
- /auth/logout requires CSRF now
- Mutation endpoints rate‑limited
- Cron jobs
- rollover worker (6 AM user time)
- auto‑payment worker (9 AM user time)
- Jobs run every 15 minutes and only process users whose local time has reached the threshold
- DB / Prisma
- Postgres required
- Prisma migrations must be applied before running
- The app blocks default secrets in prod
- Build + deploy
- web/ builds to web/dist
- API runs on port 8080 internally (exposed as 8081 in compose)
- Nginx proxies /api to 127.0.0.1:8081
- Logs
- Prod logs are limited (PII reduced)
- Key logging: job success/failure counts
- Backups
- Scripts exist: backup.sh, restore.sh
- Restore requires admin DB privileges (created DB)
- Optional but recommended to test once (tested, backup worked restore failed)